last executing test programs: 4.997030642s ago: executing program 0 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x7, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000001c0)={'dvmrp1\x00', {0x2, 0x4e23, @remote}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2d, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r5) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x0, 0xed, &(0x7f0000000780)="0cfacd07eff4cfe3e52f2853d9e5317a181f31d25199fbca00f91e3f6b6e3501d7f7ebc33b88ffbab72795bf7733175732b37b8fa361117dc9c8bf3a12045ae6db6f444750a649b4faf1da353c2abd4d6c83722a5690d45618bbfe3fcc2addf4f8d6e7ee8e74c00b2ddaade26a17c27b6e8d450d15e356f601df9a34f7b6ca3d10bbdbe8aee333c3755bd9c8a11f359be0a65960cb0a188095ce45d0e2d7fa778b9142e1fa67a7c5a511aa1aeb165be264f4f41edf401839690340f4dd1b7342b65640063567f02563ed5062b4a12880d0012496e0d8ab984ec1598f877d4fc3a032e1d10e24a3f6eef0609dc9"}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r10, &(0x7f0000000200)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) r11 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigqueueinfo(r11, 0x1d, &(0x7f00000002c0)={0x1e, 0x0, 0x1}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00002000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 4.657003433s ago: executing program 1 (id=1035): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x234, 0x11, 0x148, 0x0, 0x0, 0x334, 0x2a8, 0x2a8, 0x334, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1ec, 0x234, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x28000000000000, 0x2, 0x28, 0xe9d8, 0x3, 0x9231, 0x8, 0x84e2, 0x20, 0x8}, {0xfffffffa}}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'nicvf0\x00', {0xfffffff4}}}}, {{@uncond, 0x0, 0x94, 0x100, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xf}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xa, 0x7, 0x8, 0x1, 0x0, "d9ce35186a6005e2b3329ceb32ae346ca6abe78afe2eb41382c84d090f232bc7bc32ed8450c86e5ecb51735d677ca696a440accab7aab45a7d64c118bce3810e"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x424) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) (async, rerun: 64) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x44000, 0x0) (rerun: 64) 4.468097952s ago: executing program 1 (id=1037): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00129b8067dffa33e37af38d27374d0e44c7aaadf6fe8e3cd45979b29efe4389d1182ea05286af8d78f22b5e5bf4afcce86a955cf0b3f5b219d13e649865a992bc64475c893947538663f078c707acca5bb570d04b63b080416389c9980e18b4c41ed0458bc4ab4880d1d51888cab607b79d922ccd39db9bd6be823888ace083fe599c089131"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000300)={0xf2, 0x7, 0x2, 0x6, 0x9, 0x800, 0x0, 0x3}, &(0x7f0000000340)={0x654, 0x3ff, 0x53, 0x1, 0x9, 0xfffffffffffffffb, 0x8, 0x1a4}, &(0x7f0000000380)={0x62, 0x8000000000000001, 0x10000, 0x40, 0x40, 0x8, 0x0, 0x9}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x96af, 0x100]}, 0x8}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xa8c05c84}}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24040c90}, 0x0) r10 = socket$inet(0x2, 0x802, 0x1) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r10, &(0x7f0000000080)="08008edf773c8000", 0xfd) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100) syz_fuse_handle_req(r2, &(0x7f000000c400)="607c424c161248e6b3982c332e5a53f7e1f5674a681b84ca12631a064bd55c491cf009355206951a2bd7448408d17847529a281feb61c58986bfdeca33e6bfb043de23fd616e61626a986afdb65ca23952aa3dd0e592c417ba1fda15c1ff28f4bea097cf92fa58e28cdefe0c716f8068ae774fdc28b8e9e89839d65da279b671a1feeb5619df322a26c6f240bbd2954ea7020fe33312348dce2481d0bca2511b36dba71a83a9cccce465a5a2062a1e69a0fad759d6e5075f9c264bf5dc640b0d7f967a93a489d3158df6cf1f96ef4dbaca47e0b39d59e08def305f695600159dd5c693bf9626badfb15b1a37f668a1c0d2132aefdb6a279135b9f29a8f55a35d66f0ebc18292ba4037ece499b30b585b6d85b61b20ef2d01b85552b5bdf1f96480f1b956c5bc8e95cf6f7ad7d15b87ea864c440dbf571165d117ce49c8c60087509b5376d8fb571bf7bcae5a355fd7cb1cd41106bb4582b0b4bfcf06fecd57d778c7faaf29a9c226d0aa5b5a607b3b33103bf5008e0f3d7c319014a7d5d5a6c91d33965605bcc453bc66962ec1d87f70f839fe01c80e3ae6a07ee6439548c1b19e9885cfe29d60246daf2ebab9805daafad6f60aafffec1249834cacd53e31b7e4b13ef2b3715b37376d211eba089829c9eaf9ca902f0c9e0e14b64962cee19f5e02e69fe9048adbea1bad2dc347f5c2aac4cba17e69e030259f8d3d9390ecef238ffb9562134d1b3cf86e81112bd007fe431a0a480f23262e933f4349af5918315cc8cf483720fdf44d5ac2c5e422b49576ea4e9b07a0cc368fac9fcf57de0721fb3b4c554c84f7898da75690393bb0a53a141432622db4a61efd0c9d633338485e212818042c3549e1f3fe6152c439ccdf1162cbae74d489eab1a730bdc558241a704807242a695376151c784d1df963455381b7cb454a129b30ca158088c34e1b3660702970a47f0a7b9da03782135cdc696b61a7b51b4348c4f0b9e2751b4b92a5890408e179f04790be1b56a7df2e348d66aa9d5af4700ecac39771793a28b54112a9c25a33640054721cf71c89a26de519b11d9159006cec6acf15622c9e52df4f4b4a35c495ca419467b2f98deafbe9d27a6972e94187ee4ae51d39509d79d6bf931b25b01dfdb2d533966a23601110652828c5102d53b6b1c2da81f77a2835817555e7522850c7a3077118b11a4bea17b67cddb9b07b2837ac3396a1a090fc97a7eca264a18bb8b117f6bfa1bdfe7a42174605e48a9c96b0f05bb6452a8636d61e5943444404c28202b8a74ca46927309f188afb8122c0dee378d56d95b7bc2c7d0ee63d06c1f5662aed4ca5976021f2a5f2da25644e117a6af80ffbda568c931424cd85c59fa3256bf5158657419234994284130905ee6694c21fc413c58a93226ef0175a073d8c9c17e1717326b70920e4a9fbb14a44e9badda9bb22283cc8b61242ff082e26a6eb2dc05d02945d8f4e385d7e47e27717d39869de3e28ed9c43d6a0a95662a6a9527e46023a974367efa0b933c4d34714a31436c82647b1f969b204af2cdb817af8b89d2cbb46cab4ea55860df1b58e5b33f4603b4015e14c2a039819b21efc39627c3b95e4bb9b44a7ca13d0f8e0ce0161710ff0fe85cdc3793843fa31e55e5c95120f4bbb15d4d1debf267ad3f0a391dae1bfc847e0b57d7c230f1389297950171f287aa8aaccee8eabc38d5b04cd93ca5e259404b9883af7d2282406574d73cc2f31dbdbecb8574189f957707646d4e2304d3aa0c7899a58c3acd88a1f2267b3b1bb830a6646415e68b903b28bd2520d25da308caa872733918828052ce7e5203df005988b939e6f6c2d8647cc1fe08861490bf0a81e629730b14ec5d8a1926d7a789812cc8f983a9ecb11b821253d1acbb86fb87baaed2a4ad31d341845630cc09dd8360b606317fb0b051c1946518f5be53b7f9b9516ff20191cd8334af50d2d814a372ae75cb69cecd9a0a169e2569bccd80fbb7a2f5fcc7b30ceabb60198cc9470020eebf5ec3f49704ee897213716098974f19b94aa03f292d91431f76bfa5addc08fb2602584aec1c90ba44173db300f641814b6e58989ffe3937ffba080fdb7b2c09d083dce82745b6212c3d7b185cd3d5b32f8498c8a7cf2a3c8f828b2e2bf2dfa4afd06df891e513bc692c44f45a5c0c4a8f1fc405acb7291ae9c2d1a0eb6ed7717a752dd2f38cb5b241fa8c23df1f225eaf28ad59ee7a04c83dcb7a51c44bb53b43e35548c3f8b5d9c5fb2072ab52519f5adc255fb3c2b966f85cbd1d345846878020041b57bbf0072d317755afa133342bf317e4fb9e8cfdc2ae44e5c9f61fe4f4a1d8e760cc07324c72a325746433c464abb619d9e076f532369cf18003f0416c05916ce94bab7b40855a8f0ef754ccf638fd9d443c5cf3fa6819faed3030359f6c79f632ed3eef57d216e927390de8cecc3a2bf44a585a6e8e93eef010845e7161756987afe68604275d8c4f7e9981ef99d4fdece307136e3a297d700a12ecf80d32a4b52c3d25945754cc1f64956749b14250804c7fb07b5206f12d201c4913bbb5a65efcf2b1ae893ff4232bc44c48a73810e0b13b8147b6131bc9461696cbfd5bb23d88768d51d357b51f5cfda761bf2e6101049f1a4ddbd1ac02e68b1eb47bbe72f2cc9d61d97b85c5afc4bb1505d233d31ba134b93104383a3e042e052224792c75aa990ee3fc21500aa643aa0e2b798060e1e8d02bc01c9fd69fe6462846487190c578319404db3a2363458497acc19b4a7cac617172050b4f50b8e9220f2ebbe0fc2606555a5a1b9caab364e4f03f521ae65fdd55134be5b6c1431476e435f6f975361ffd547b6b91fcfb3fbe9aee3eb087d0d53562eb4223546d12f4031b45968422208800b68a825cc3cc2a9c7c5bd2566f5cac43fcf298185fbb7991fc2e6d2106b3d7b90517f77eb157a76c4455a48824e26ba6991b6f5f3594d0159f6f66a6e257bec2ce7fef9ef9461b64b5f37157b4f61fecf173b7ef019d87cfb7c05614b1084682d03bf80f210a2e78715b2a2bd77724ab1c71347736258a23a5376fd16386b3cd3807595062dd3ddf8e57968a72d6ca6e4df5abbfd1978d53644d7926cbaecb4c42c7f2382f41224d960c445a2c609e41220f9279fad5a4abb819573a73d9a2f8c7a4bc7294e4ec39f42a4a7df9f8b49a401401bc9fb816bdd7a01e1218ac400848b059fa85b7b03d0e1fd7607a68469a560b6f924e67354ff7d78a5bf3115a8fe1fa397811635be1905f71e3782c98a20b93bac2925338a482bf490135c73ec33d243b96011e87a3bdf078c57b75427b97f5287bcd22c92cd5dc058b1e2919b932d889f8d1253ea5137c427dca5091d8304e79f27ee5935e197b2fbe7d495d64a910d85d564b4eca20480cd5d52c5a5d83fd5c145844b5e41ed0482cdd860064af4f9d08c37edcb23495f8ab62bb3cc6d8f15d7fe72eca8981bbd01d07d4ba12235d4299674346bbc475521841098aace845ae7d46d3bce0b098d8d1bc05dc1416c1c44d8ef0b7d87ed3ca9bf3b4edeb3305a8ea87c709556679c4e37cdde4d5fa4aba55569dd3804e389206e2447c5ca81f404040be0e08aeaed54fa21e6d21d4897eb516e60406eb324436cd74936f9b214ae26133627aad815ba7f9dd76e2cd984e7e2777437806ad95a8ee9aea7ab8f3f58eba8802bd9aa775aee578d9cdd739f223bb8bcda76b8653d650539bf4fb562cf71bc52849faa9f0749e42515852c29b4dcea9821fa9ebc19f0b299d5a6741393808cfed4af89d790389bce56f757b7c1d6c0fa10a39c3686d0f492ca9701e9ed2ad93947c21ab3cdaf3117e0b46c89046b60293808d0303951317b1bb95db3c5426ef130e7c2a8a0310879c6ad8e054df77655c3e3beab4b058e0a0f8955b490a7319245d1feeb52e12a77215e28c560bb7b59697bd0cf447ca474c22db960a9bece3f147ddb76f5db5bd80bf249a476f8172fba414e30901b0306f9f2176f3698acb81bc20327cc800707d6b0457a3efc74d7d6694e7ff5590ae67b6f6df54de264e351b1824bfbe452e93232b02ee8b367ab500cd7217e0073c132fc936cc309af0cbc57ee5d256f7bae38def34de4e5a77b6c8a97c8d789136f46cec1d852d90f74e04def2fd076639ecda7ea2d74a5690639b3b6152f488dc287d64adf73930253c76d63f4e869628f26f720a176ff7dc48a7f86418f72b90800000000000000950acfbbcc180ee608c6acc7e2892af75b9334688f06f3f7ae5106834f4ad143d497b1e840792365955503822540c895fdb68f3088a17d94f7e5b173ffc4d3a724f28438d2a0c1c74696f702e2f61ef33afb5bd2fdfa067406a7904c3179e434e53bc3cedc4c5178c548650f5b4826a32a4008feace708cee5ba060bd322ba6d0a2e3d069db7c3385845201b124ab7bf9de7353ba2ba1f2c18b3b427b532f39447363bfa2b1ca0e745de7a947ebe3169ef7b707c31cafdb8b1a8ebf3a274f81cce25449f51477461819b2053a8bbca4e46f44b2749bdb9240b495ce742181c2594dfe42a110486d5299ffa766d1b2c50ddc980d3a15aeea321dfdc5aef1333510264351f8e8b7498ced5c70e50e79b8be690a98bd4bccaa8bbae3ac05b631528cc0b1d0bf9c8a1c14da5a9bd44260bcc537833e86e106db62f2c56ec70501a01ddbfd042fd37d39575ab513a786b25fcdf2cc2b57223d13de2fff3abc725650f2321be03732f027f3ab436959928f03af8c9f96f19e1da5c884e9d199f0379b8e9fb3ef3518e117ff044e2cc6b8e9e14d685ff0c4b195b37fa85ff80c5d119f6d31ac3ab307e16f8380afd599eae4a224e89856b8b471fa6e038f5eaca166bea85b27e9748b2d2048f62ed65319fe9d0f23874c494ab525bddf10815a08b1fada0f87796222e10a3563efa8bcff67fc876a1b706a9117747072532673976cb390c35b8ddf911d59cdb00d22a3ed4baafbd8cfbfdf6179ee3de9d969f6029f70f6c3480d85c4a2068756398683400cc1c6280c2333a4155634924ef8831d8295e94c1db27d0d873fddc274cf8636fcedf8c5c4511d26ff1223059485deb6b30bb07afe78fcd800ada038fc7d634f11cc1a3588a4e0a6626b0d0403785e06a6cc4d1aab139e83c476fb18bd1c35a6899776e782bc695cf230965a2b8e2913f36c2065bbed1ad0ce0a1cdf287e177e3c553f22eedc1a537f21ca0c8572ed283e32f5d115761b7dcc0e5ee46485132f1ba962a8eb02b7e5081b8be956dc088eb0cf3fe2f3f117b57e3aaa1fd0d1b60574abc95d6331951425b29560a65afbdc28ac7feb19ce32249f9bd2682bab1266be0bbb47cb1eaa8f6ca8745c6f3749f37f188d4022c4d456b781f7ffef13f5b2b783d04b75bc996156e2bb1d24adb81512661fc46aad337c1167f02449a5ca45d28062814947d81be7b94dcb9823c0b97c1d043c17bd39c4607c0f8f767984486f7174cb03bbc4c9829c5893e50223a4919e9ccc0648317ab28745679fd7babeb36c03d0592204a56f3769c08784114746976363ebb29fe686598b5b6dd314db63b16eec91030f47e49c3a1c19d4e06ddf2e975b03260f0a8b62cd0d65df057c2bddcf856817142913848338c60e855aca9a391688202b990d072fca161d94f2600e378fd3c8a2bd78ede2fa07ed2ed7a4e1ed758816497673b93345363045e07e4d850841d272a41f0daf61c6c84c79155656d3313fa9c7bfa59e9322c25138807e3c149c6c0f898c75511871491ca7ad918357b4e7df8a6b8c569ab5d19d100199c03b34c54e4af091ea534abd4d36f96343ce0f28e8f575b5695afe4c011c5467e5d3ebf72eb3a2ae55e8f97c8c23c96634bcc8897066c019e2922a6842206667b698ef39ec46d0e729845022e54d54acb81192c62f8bd53d09ee800dcb1e253f6d27c508d98ef8b95f2fd13c89d7e7242c5d658deb1fe594d536997d240239e964100ff3cc71659866d085b3d5bc3878f86a9906aae8a01ead30550bb50ee23181cbd2f17d2dd993614b584f21886e8063f37cee9970c795cd0b782f6b5b2cd404dc419279b8a84db5b8b823587413742eaa8e5d404ea27df203e6e9f75822780f41e5f924b1e33b9ee57f3b511207c0612015b4218dc4269531ea374e915376eee68959fc053d00fd0cf5b1bdc5bc8184e9f966e9dde6c30a05fe5d13fb32a4ab0eeca9a8459dea01d892483f8024e1b818a8b05de645aa9e44fcef2f43a799a1aa6961eac7598b27074fd27d6496862c214612b60daec10b632a2a68b7cdc72df1696ae217452308920250b7372b397b84e50ecd4a0b0838d5a96584f9496bef30092a476dac4e28ba38bd11c590c6b57a58316e8f08aafff6a8307299284c49418c9dac0a1009df24b47642fba655a57d7e72d7f37754fecf2e7d1a9549cd7d04f67c368e0cf1a1d6e0588d3a89b43f180250ad051b755b1b87cd9f8441d2f996b1928663c325a6b8126c34c1f25b9e9762019231c90305b503043db1104f5034f8b861aa7bb720ad1f090ee37340fc770cd2d07fbe6046333d3ba23c033189c6bc6c0b08db8634c0de4ad639518977dc4e867167fb2c8d34aae380bffe51064484a849da5b96b31f8e0996dcd53af1668248fc5653b025ecd8ece28efe66b150e6846db69f991456206751522b01852d1a425067dcbe7df6ee136d1baf111d578c03c27fe850e1224235894e5f7e28b7b9899117779ee043228aed882d576f94b444783f66222f50199d8dd735d06ddc17bc29714719f86f228f84783b137d6a7647f1d0acc674c00ba84501b9762ad282e18c2c12e2384b44145ac723fdd44f0bdec2029d7245d0df6d79c7fd3a4d929d6c8b267260660bc3c76b26f374177188df2f6bd52a5e6df4249c9c418432cd238229293038c298cc7a643bc7781d4e19868b78cd6428fe5695bfc5a031ec18240caabd76cd9a1bbad5a308a150cb5dc5734854939a11fc7ffc0588806f811c08b6360e00e0d89d46dcaaea53b4218ab08e4e295740bd2bae86a29f008340aab7d062547999af02b3446283f6c61061c6c297fe51ee87103f1d93820d5729b617d9ea081a76a5de01717930e801289219a450eaa2ae9620259fef840e4978a5b76a4226f07185598a82554b9e53d1c74709d36ea44fbbfabfe9b6afa1a69852793381fcd8d5ac2e2590a18e7da8a633fcda5f386a4bac610865d9fb9dd9682c707a5ddabd9d78fe115206a214467bca3039669b3041952a7206c3117c98f195e450d2a6b0c3f97cdb1ec9e669ce8939396a00362ae20fa2f159b4fde006902f9eb68ba6ee188fb0cbe629f198a9c8adaaba607dd32d85ac77ef9795644fe83d5f67a50167994f1500bdbd15d7d09479c46a50a1b5218de7a645b01e2b503b2e5d810dfc99ad83fa5740b2b5d09a5a0d16c2e93ddabe6a7d4d997db41d6ea25ef8482a832aef1321f3bfdd91e303abae6e51a445aecd9623e7985e4e7bd967aaeb05faa4aac89b7f0d081eedeacfaa6f3a2510d1b014c7a5c0dbd4705d1380ec19a761a02d22369a0e1d0555b0cf0e14663ba37a5dba07ee53bedf010c96506fbd9de1d6c74a9ecefbe5ee0742fd7e1c70f8a9b3fcecfd928b9f293c827212838669baadb528b0b7a9f68efe24fa0367edd6217f6d3583f5251020735c84910c2ac5862328532d53c75c10d8ebc4459bfe60c9292923e96f1e35be173bd64c560a25e0d2ee39294963e3169b198bb1610c8ec37a2bb5f743499d4a0e9a1a9dc80bfd9380da77ca5a620a718796489e44b4e8f9cb60b29bda90070662e7bca27e09c170500b64ca1552e0922f14e8cc77c2309cce2d3ceb932e09485df1641fa454945fb536776adcf08282b2029d541839293f51f557f44a05bfa72f612b7a623f9c799a6b6f178afa236fcb466d8547beb195c38ea43275b7a1af02bcea7515ee5033cdf0f398196fccffc70225387a040e8884756d7ab45edb69fc50cba32586b32faa3572367814e0dab7905449698d59d86eed611360a1509620a4bd5c7cab6fd30a550953b985d6ae9e2c02b89de679fdf06ec4c425b99157beb243f0b6065c3b76c692120ab124e7c25db7a07c9f60c111247363ab50270493340b1195c1ef25743e1532c2620373a3cd2343c7321c33be62ea2acba426f8618e26783d0b408fe7d3e06357b0ba08af0ca05a5d386a3f538d810141f4ea85f66f0d162bdf7741f4577c51ec40eb1f202e95ede41eb53614d6b46f0122b0a0be023dcbb1a93725d8ff79425b9ac86577b9bb38813528da4448c5dc552467e78d39e8cc7d8fd934b0a2a1d63635853382066898d3679295d29b87278fb1ce0b6b9069d013700eb3235d10dc77bc7dc954cbfb2aed4a9794efbefd280753f96127db11306310fef9f581240b218db6b656ffa2d1b2a84eea30c45cf7a77864d7ab347c62662bc840b53afd83b01ba798aabc206061beb0102863c434ad99ea616a44704b26e65a1e7649d53b0d91df25298d3772ff7bf35e92b9c21a67e28286d0286e3f6e8cb83f5c11903de217c50fe435d3c276adc479a90bcd5f819d7ec1448549065473194d1d9cb6da75351b859f82207e22aa92e16dba5ebf9b899ae9b93abc6de9e1a236109ca11ed11b943847069082709a92f2968b9b53d262912b5d345c394242a578d5b902eb3f45b696fc75f6509ebe2c9761fd8e45043f8de324f6260cfd77c747cc49f654281234701df8f482094cbf50b87b415ad227539d3a80366d6a79c432004ed688122ac3c4a7955068ef14a6b288a9b3a9b2c33cb9734164b8c012ec1cdb345c666774682bd9d06ce66674a45cc612a5b1e28b85a3e9665f45e724de6a45aaaa4c599e74a1f1be8de9d880beb90be76d45dc6e380fc9e6e9b41e6f5efdb3ac1d7b903e8120a2d2e0fc15e87aa8ae10d5c5f7837f73b2382699d8c2e94b304b2dc800a685412f0c35c5a5c5442a7180f0522aac39aeb9aa93c64001d0172f82ed21219f0d4ea6dc7e839ff61550a8fab76cb2f81405c67d7edd8db11a8ad686fef3048c6b4037fd9ea961bc81f90666ca54d019cbbd06098c123005f020fede4f7a95ef4eae01cad40a1ba2addc2e80a90776e8b2f2725bb4a62b3062885021cdace5aa9cdb56f5b8b7928344187ad61b3bac8a0240fe8051cdf8c85967653a7fe9df37f6becfdbda482062a8bea8525bdc28257fc3cc43a080667527c7b9d6ff2d6e6054da6fe4913c907eb9be1942c2a1a042ff9c7d12fee0fad78aa43a3fe28ec393249eff7cb8ac6c6d498fb210a3b4f405063c652f454727ee293fe3aba485d19f1c1a2fe298884888d301af047fdb61fb17ef85af476cabffe3ca7446bbfde409c1633bf11d9332336072d0e1ad4503a415ed77050bed00483561723938a98477f7f83b9a3fe57b522ab386a3d68090835dbfd58103e32c7af99f85bd413f89fb9f6b3f2687beccc2f76ddb5d8ddb0420c907d8ce28cdebcdd8ce78df9f8a231b2109f912de2530ce32f913eb75900f86d5ea1fb32f0b0a380c29c18db15a7163110eb6f4e0e07c156fbb64e37f84195d1b2bb4e5d8c7bfe7ba6508aeb683fe5ca59dccb0d5b9cd25c5d0430b31d154c20d8f5a9641fbb664b0b9fcefcae4cc64079731cd8bedf5a18a034dfdd99552004c97d0543588bf487a24b41e870b295c20d00cd205bbcbdc3aff52995d8711674305807f287fbd16e328bc5940d969d69d199e03892fed5ab8efa1d19c986c2c099b4a15a52bf29121241eee6d4d7394d4c8c0580121c58af0e382480f202d03ebba20622408b8549d6afeb47be73715c48cbc0b46a9b870a56b20860f7bebb39a5905d2ecc7c0acea16f0b87eaf7a016f7fe45741b8b4012e81c9204c42723720e77767f06be65b59198012de8a2c7ad70de7ae6c90b78c3102908be281744d202718431710f67c365e89a46e056367fb2ce698eff46a6dc3d8e5b1b62d7ca14f27e9716700fa3fbe160200a8277bf1ad5475135dd48f0a7d2b80182b677edeb50627839b74a64f18ef3dcdd7a8dd48cf0c63aaac55eb580722771ffaaf30a91ffd23ad527c20f3a3f4c641c6cbe76631a2fa11bbc8fe66d50c6b8efae11c59731a2c9cf473f7780ef32f8460602b80bb091802b211894c10e334b293514279c139e805af390ffecae49f26cdd0bf492e0b9cc8fa7c919b664c6f7e9fddd24ef55a2c0367f2a9ac3b29b1dc73f375bd26c64a23662efb311fbb089e0d82539ffed684e0345200f96290caf1d9d0ca7a3f6c81b75d6bbe011edfcd56937f1d8a2aac8eeb91891bb12bc6cfd1cb6c8d13a86f4d9001e3e3edda11bc178f62262c7fc3eb0f56dbc2332c3cb8853bd9489dbb484ab7a697df2d28c20187a0a7ae41dbbd07a41e681c8b343eb931629cda8fed7c0b0874179a160a7dd2bd41f0f5e87473e24c625c4d95cd1fc12da3e8fbd646ecadf9571f91f6c3e6f008131b9de4e59c493c1d722daf10c1fc2673c75523f0a4e7a87afa25818b4ce0f929b26078189b6d4d9b616a0360d501bbcdccbd7359ce1bfdc16b054aee1d7dfcbddf38025eae8ac538a78374b412a5a047f9a47f58936db523554d529becfb5e74d02f8f5860dbff4f68b02c553e9975db71173858bf3e861209ecf1dcf4d8ca1206d4a6346fcea5c015b05b6c0d94393dca84d206e6a7d5955a09c12c4c4cdf4db720176cbe323a57c280ce04caca2ab6f97395ac541b3cc80adce0c4e56d04c7be10797532b03b239cf32846b8e4d001dd12755fc36b7434c5e44d9dc4ca9bc2d6e9fab6f5cf12296a83d074842230b2a568f1155b0cd240dcba017eb2c1775b109a4b0e205e04fa514f500cd5f7a82f8f1d4b496aafa710ac8c9ada90da179de2a60a3a1838732d21493e70c91ac891f70b2f747c3609a376b97125e7f50c5b0e75cd608d7b6e69f25eb93fb45f34b8a53579a548c0469e270e58811fa1909164531799752052292acd4c45bb716bbe9060da8860739e00d8a4d11f89e13cd71dfad87230c4ddcf1208a7e66c2b969ad14ff2b1c128c91251a12697db8c240710198a3c32ea1fc84ef634eade28c0c2c36446eda6d1a8594303a0791d58c7bd1a99627c21445f8ec9044f718fe736d582284fd5f6ea0d96d19e0208040f885f1f574d11debefcfd408700146da696084fea8259f485c1060d485de2209bb1a2e8d1e8c5006a53ae031fe64e27380d50a3ae558348e804acc98e78120e5da84fddd0e8f8510ece0f2d27b0d983c24cb4687283863520ac9ab73743bc53765cc997ef7f9366c8a855f10c8680e70598f556d4bcba0e76d28e0be922a02fbc7250569a2b15fe84edc8cbc61f2a7d461567f68853bc712dab4c5eac489936a49b1e1f187965e5be0eff6adc15a61135bf09848154a68e2e8638c45cf6c56458e965d2d3aea14c966160a5d665493d8bc42dbb9f621d99e81d7515918221e63c9da0f242bcb7c9962101097f58df02832448c442e221aab756696bcae1444a49f93dba385cbfa4acaa23572d0a1f9c3d4d52d3f16e23c9b444470711a35c513ce44d286757408c2edd9396cb5d18bc5b52a00", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 4.048498067s ago: executing program 0 (id=1040): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x1007, 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 2.860838378s ago: executing program 0 (id=1044): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.787865649s ago: executing program 0 (id=1046): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) poll(&(0x7f00000001c0)=[{}, {0xffffffffffffffff, 0x26}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x112}, {r0, 0x210}, {0xffffffffffffffff, 0x12205}], 0x7, 0x2) 2.398559485s ago: executing program 3 (id=1049): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) poll(0x0, 0x0, 0x2) 1.59125072s ago: executing program 0 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) ioctl$sock_proto_private(r3, 0x8b01, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 1.591064005s ago: executing program 2 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000040)={0x0, 0x0, @pic={0x5, 0x1, 0xd, 0xc0, 0xd, 0x2, 0x2, 0x5, 0x1, 0x5, 0xd0, 0x2, 0x7, 0x8, 0xf0, 0x40}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0xfc, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@generic="3fbb8bc55c6d07a8dcb878460b7cca89e0e156b41c7931a84542fd391b6f7a464b39453b0be3d681309bc61e4545b74351332a5a2be82bb58ab85c494ffc64a25a9973c3d5bd91ec0a0af0973db143bc2436445d1838ae25058ff911dfb1a0da1e6e63bfda5d36a0d092f03d851dfcf637e12a95e322e9fc949972254722aa6b294d4f57bad33f9be3eff718732c1be141809a3101049551249e9182d6753f2349f1b5eeb3127a", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @typed={0x8, 0xa7, 0x0, 0x0, @uid=r5}, @generic="3381669dc466b953f842577c9faff4fc043c7cbfffb715d80efab4a78db512f683b894"]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9c}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 1.44843608s ago: executing program 2 (id=1052): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.254866247s ago: executing program 2 (id=1053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0xffffbfff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) 1.254245664s ago: executing program 2 (id=1054): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = shmget$private(0x0, 0x3000, 0x200, &(0x7f000006d000/0x3000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000080)=""/17) shmctl$SHM_UNLOCK(r5, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = fcntl$dupfd(r2, 0x406, r4) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x8, [@typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x0, 0x0, 0x3}, {0x7, 0x0, 0x4}, {0x6, 0x0, 0x8}]}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @datasec={0xe, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x7, 0x3}, {0x2, 0xffff, 0xe}, {0x3, 0x4, 0x8001}, {0x4, 0x9, 0x8}, {0x3, 0x6, 0xafe9}, {0x4, 0xffff70db, 0x2a}], "31ab70"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x30, 0x5f]}}, &(0x7f0000000280)=""/121, 0xc0, 0x79, 0x0, 0xc}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r11 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fsconfig$FSCONFIG_SET_PATH(r11, 0x3, &(0x7f0000000bc0)='.\x11\xd2\xd5\x80\f\xe3\x04\xff\xa0\x85\x1b\x88\xe1Kx\x9b\x86C\xd3\a\x9f\xff\xae~O?\xaf\x89\xa5\xae\xc8\xf1C\x8b=\x84^\xeeU\x8a\x8c\x88\xa8v=p\xc87k\xbe-n0\xce\xeb\xa73\xfe-\x05\xf54j\x9e7\xf6Ji\xb5I\x88\x16\xb9\x17\xaeA\x9c\xa3^\\,\xaf\x1e(\xf6~\xea\x1a}\xd9\xcfw\t\tb\x10CC\xb7\xee\x18(Y\xc5r\xd1Hr\xf7\xd2\x9f\xbf\xdd\xef\x14\x95\x03\x00\x02\x00\x00Q\xd3cKos\x96W\xe1\x02w;\x04\x00\x00@\x00\x00\x00\x00A#\xba]\xa2\xa1)p\x02\x00\x00\x00\x19H\f\x88\xf3\xfd\xc50S\x9e\xf5\xd6\xe7d\x97\x1d\v\xff\x84~\x05\'\xb3\x1f\v\xc9\r\xf2\xae\x16\xf8\x80\n\x04o\xf6E\xa4\xd5!\xe8', 0x0, r11) copy_file_range(r7, &(0x7f0000000b40)=0x9, r0, &(0x7f0000000b80)=0x1, 0x1ff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3fac}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x35}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xd1, &(0x7f00000003c0)=""/209, 0x41100, 0x16, '\x00', r8, @fallback=0x1a, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0xbf82, 0x8, 0x100}, 0x10, r10, r11, 0x8, &(0x7f00000009c0)=[r12], &(0x7f0000000a00)=[{0x1, 0x5, 0xb, 0x2}, {0x0, 0x1, 0xe, 0x4}, {0x1, 0x5, 0xe, 0x5}, {0x3, 0x3, 0xf, 0x4}, {0x4, 0x5, 0xf, 0x2}, {0x1, 0x2, 0x9, 0xa}, {0x1, 0x5, 0x7, 0xc}, {0x3, 0x1, 0xb, 0x7}], 0x10, 0xbda4}, 0x94) 1.254038215s ago: executing program 1 (id=1055): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.197343495s ago: executing program 2 (id=1056): socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mount$tmpfs(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x40800, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x4}}]}) 1.196663971s ago: executing program 1 (id=1057): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0x12}, {0x6c, 0xc9, "10b3fb24a8abd0eb"}}}, 0xfffffffffffffdc1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x9) 1.196293464s ago: executing program 2 (id=1058): openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r5, 0x2}], 0x1, 0x7f) fstat(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000280)='./file0\x00', 0x2000, 0x41, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {r6, r7}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 1.148684166s ago: executing program 1 (id=1059): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) poll(&(0x7f00000001c0)=[{}, {0xffffffffffffffff, 0x26}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x112}, {r0, 0x210}, {0xffffffffffffffff, 0x12205}], 0x7, 0x2) 1.026054639s ago: executing program 3 (id=1060): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x79a6, 0xe, &(0x7f00000000c0)=""/14, 0x40f00, 0x3a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0x3323, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0x1, 0xb}], 0x10, 0x80000000}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000003c0)=r2) 798.361598ms ago: executing program 3 (id=1061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}}, 0x800) (fail_nth: 2) 798.192674ms ago: executing program 3 (id=1062): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) setreuid(0xee00, 0xee01) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) 728.229488ms ago: executing program 3 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0xffffbfff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) 617.979272ms ago: executing program 3 (id=1064): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = gettid() r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r2, &(0x7f0000000080)=""/201, 0xc9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x800, 0x100102, 0x36, "b0bf00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xa) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000080000001bbbbbbbb86dd60cb800000383aff00000000000000000000ffffac1e0001ff0200000000000000000000000000010401907809000000602eed6308003aff00000000000000000000000000000001ff010000000000000000000000000001af34000000000000"], 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x110, 0x3, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x2, "e3b0505c0a75ccda50cf82f6fc9c9ceb1a9afd2da8901aad1dcfbe2ec47e9317", 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01042000000000000000010000000000000008410000004c001800006e9dd1906f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004e40)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000020101080000000000000000020000050c001980000002002808000010000280"], 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x20048000) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045005400240000000000119e560000b7bc6200200000002f209d999f6b9ce789aa00000000a07ec4a58b36ed7040baa263b232c5e7dd87e5f4ccd51fa6cc9c66203464170fa51956645605b1c9df97dd57f2041494dae4fa0d04dd0383e1db60c7ea9e19194a6a30ada4965fc0cfee668940aa0f6fa0947ff32aef00ee90a08b0d145103d2c6d87715b92295aa5a76980d4df579c37cbe4f08ec6691b79b9dd6bb55a2f61e434359760f1da822239caab66b2f5f013584f786fa8c992b1e2e83fc0d2bb609e918701f965cbbfce2a15d5f5785453a0638dcdad7907fad1b1331"], 0x0) pselect6(0x40, &(0x7f0000000100)={0x5, 0x7, 0x585e80000000000, 0x8, 0x9, 0x3ff, 0x0, 0x20000000101}, &(0x7f0000000140)={0x4, 0xb5, 0x81, 0x7, 0xff, 0x4, 0x6, 0x5fa5}, &(0x7f0000000180)={0x4, 0x81, 0x50000000, 0x3, 0x8, 0xfff, 0xfffffffffffffffb}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 9.20241ms ago: executing program 1 (id=1065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 0s ago: executing program 0 (id=1066): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) kernel console output (not intermixed with test programs): [ T5445] usblp0: removed [ 199.670089][ T40] audit: type=1804 audit(1773914468.530:33): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.503" name="/newroot/117/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 199.949316][ T5445] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 200.109304][ T5445] usb 8-1: Using ep0 maxpacket: 32 [ 200.112249][ T5445] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.115022][ T5445] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.117867][ T5445] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.129505][ T5445] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.132661][ T5445] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.135717][ T5445] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.159211][ T5445] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 200.162185][ T5445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.167181][ T5445] usb 8-1: config 0 descriptor?? [ 200.383610][ T5445] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.864422][ T5976] usb 8-1: USB disconnect, device number 10 [ 201.874786][ T5976] usblp0: removed [ 201.952432][ T40] audit: type=1804 audit(1773914470.810:34): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.512" name="/newroot/122/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 202.119287][ T60] usb 42-1: device descriptor read/8, error -110 [ 202.529765][ T60] usb usb42-port1: attempt power cycle [ 203.110310][ T60] usb usb42-port1: unable to enumerate USB device [ 203.243279][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 204.934657][ T40] audit: type=1804 audit(1773914473.790:35): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.521" name="/newroot/124/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 204.984549][ T7898] FAULT_INJECTION: forcing a failure. [ 204.984549][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 204.988743][ T7898] CPU: 3 UID: 0 PID: 7898 Comm: syz.1.518 Not tainted syzkaller #0 PREEMPT(full) [ 204.988757][ T7898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.988763][ T7898] Call Trace: [ 204.988767][ T7898] [ 204.988772][ T7898] dump_stack_lvl+0x100/0x190 [ 204.988792][ T7898] should_fail_ex.cold+0x5/0xa [ 204.988805][ T7898] should_failslab+0xc2/0x120 [ 204.988817][ T7898] __kmalloc_cache_noprof+0x7a/0x6f0 [ 204.988832][ T7898] ? io_wq_create+0x6a/0x9a0 [ 204.988845][ T7898] ? lockdep_hardirqs_on+0x78/0x100 [ 204.988862][ T7898] io_wq_create+0x6a/0x9a0 [ 204.988877][ T7898] io_uring_alloc_task_context+0x2db/0x54b [ 204.988895][ T7898] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 204.988916][ T7898] __io_uring_add_tctx_node.cold+0x10/0x195 [ 204.988932][ T7898] ? __fget_files+0x215/0x3d0 [ 204.988943][ T7898] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 204.988956][ T7898] ? __fget_files+0x21f/0x3d0 [ 204.988967][ T7898] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 204.988979][ T7898] __do_sys_io_uring_enter+0x1492/0x1a20 [ 204.988995][ T7898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.989013][ T7898] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 204.989030][ T7898] ? fput+0x79/0x100 [ 204.989045][ T7898] ? ksys_write+0x1ac/0x250 [ 204.989055][ T7898] ? __pfx_ksys_write+0x10/0x10 [ 204.989067][ T7898] __do_fast_syscall_32+0xe3/0x8c0 [ 204.989085][ T7898] do_fast_syscall_32+0x32/0x70 [ 204.989101][ T7898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.989115][ T7898] RIP: 0023:0xf6feef6c [ 204.989125][ T7898] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 204.989156][ T7898] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 204.989167][ T7898] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000003516 [ 204.989173][ T7898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.989179][ T7898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.989185][ T7898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.989191][ T7898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.989204][ T7898] [ 205.173576][ T7903] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.179745][ T7903] bond2: (slave lo): Enslaving as an active interface with an up link [ 205.183640][ T7903] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 205.739299][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 205.901256][ T5976] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.905928][ T5976] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.910278][ T5976] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.914002][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.924870][ T7914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.929031][ T5976] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.039225][ T60] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 206.129849][ T5976] usb 6-1: USB disconnect, device number 5 [ 206.212789][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 206.218833][ T60] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 206.222719][ T60] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 206.226509][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 206.230665][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.234083][ T60] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.237348][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.242439][ T60] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 206.246077][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.250716][ T60] usb 8-1: config 0 descriptor?? [ 206.472672][ T60] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 206.488772][ T60] usb 8-1: USB disconnect, device number 11 [ 206.493430][ T60] usblp0: removed [ 206.688589][ T7921] dummy0: entered promiscuous mode [ 206.692637][ T7921] bond0: entered promiscuous mode [ 206.695021][ T7921] bond_slave_0: entered promiscuous mode [ 206.697930][ T7921] bond_slave_1: entered promiscuous mode [ 206.702757][ T7921] hsr1: entered allmulticast mode [ 206.705029][ T7921] dummy0: entered allmulticast mode [ 206.707393][ T7921] bond0: entered allmulticast mode [ 206.710280][ T7921] bond_slave_0: entered allmulticast mode [ 206.712920][ T7921] bond_slave_1: entered allmulticast mode [ 207.824274][ T7930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 207.989443][ T829] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 208.247126][ T829] usb 8-1: device descriptor read/64, error -71 [ 208.272522][ T40] audit: type=1804 audit(1773914477.130:36): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.531" name="/newroot/148/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 210.989908][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 211.949200][ T3558] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.120534][ T3558] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.206196][ T3558] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.209571][ T3558] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.219274][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.228068][ T7982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.233825][ T3558] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.440861][ T6058] usb 5-1: USB disconnect, device number 10 [ 212.540284][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 216.215338][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'. [ 216.282215][ T40] audit: type=1326 audit(1773914485.140:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.299636][ T40] audit: type=1326 audit(1773914485.140:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.306755][ T40] audit: type=1326 audit(1773914485.140:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.353265][ T40] audit: type=1326 audit(1773914485.140:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.365550][ T40] audit: type=1326 audit(1773914485.140:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.373051][ T40] audit: type=1326 audit(1773914485.140:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 216.380397][ T40] audit: type=1326 audit(1773914485.140:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 216.387505][ T40] audit: type=1326 audit(1773914485.140:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 216.396491][ T40] audit: type=1326 audit(1773914485.140:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 216.403565][ T40] audit: type=1326 audit(1773914485.140:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.559" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 216.644607][ T8060] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 216.714547][ T8060] bond3: entered promiscuous mode [ 216.716486][ T8060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.784271][ T8060] bond3: (slave bridge1): making interface the new active one [ 216.786757][ T8060] bridge1: entered promiscuous mode [ 216.789053][ T8060] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 219.772431][ T8093] can0: slcan on ttyS3. [ 220.100050][ T8093] can0 (unregistered): slcan off ttyS3. [ 221.539803][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 221.800454][ T8125] 9pnet_fd: p9_fd_create_unix (8125): problem connecting socket: ./file0/file0: -2 [ 221.860247][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 223.319611][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 223.722233][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 223.722249][ T40] audit: type=1804 audit(1773914492.580:53): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.577" name="/newroot/161/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 223.756454][ T8153] FAULT_INJECTION: forcing a failure. [ 223.756454][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 223.760431][ T5445] hid-generic FFFF:0008:0003.000A: item fetching failed at offset 0/1 [ 223.760678][ T8153] CPU: 3 UID: 0 PID: 8153 Comm: syz.2.578 Not tainted syzkaller #0 PREEMPT(full) [ 223.760692][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.760699][ T8153] Call Trace: [ 223.760703][ T8153] [ 223.760707][ T8153] dump_stack_lvl+0x100/0x190 [ 223.760728][ T8153] should_fail_ex.cold+0x5/0xa [ 223.760741][ T8153] ? tomoyo_encode2+0xfb/0x3c0 [ 223.760754][ T8153] should_failslab+0xc2/0x120 [ 223.760765][ T8153] __kmalloc_noprof+0xe0/0x850 [ 223.760785][ T8153] tomoyo_encode2+0xfb/0x3c0 [ 223.760800][ T8153] tomoyo_encode+0x29/0x50 [ 223.760813][ T8153] tomoyo_mount_acl+0x14c/0x8b0 [ 223.760825][ T8153] ? is_bpf_text_address+0x8a/0x1a0 [ 223.760843][ T8153] ? bpf_ksym_find+0x124/0x1c0 [ 223.760855][ T8153] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.760868][ T8153] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 223.760880][ T8153] ? kernel_text_address+0x8d/0x100 [ 223.760896][ T8153] ? unwind_get_return_address+0x59/0xa0 [ 223.760921][ T8153] ? tomoyo_domain+0xb2/0x150 [ 223.760936][ T8153] ? tomoyo_profile+0x47/0x60 [ 223.760952][ T8153] tomoyo_mount_permission+0x214/0x460 [ 223.760965][ T8153] ? tomoyo_mount_permission+0x1f6/0x460 [ 223.760979][ T8153] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 223.760999][ T8153] security_sb_mount+0xdd/0x270 [ 223.761011][ T8153] path_mount+0x158/0x23d0 [ 223.761025][ T8153] ? __pfx_path_mount+0x10/0x10 [ 223.761037][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 223.761053][ T8153] ? putname+0xb1/0x110 [ 223.761064][ T8153] ? kmem_cache_free+0x124/0x6a0 [ 223.761083][ T8153] ? __ia32_sys_mount+0x292/0x310 [ 223.761095][ T8153] __ia32_sys_mount+0x292/0x310 [ 223.761108][ T8153] ? __pfx___ia32_sys_mount+0x10/0x10 [ 223.761124][ T8153] __do_fast_syscall_32+0xe3/0x8c0 [ 223.761142][ T8153] do_fast_syscall_32+0x32/0x70 [ 223.761158][ T8153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.761171][ T8153] RIP: 0023:0xf704ef6c [ 223.761180][ T8153] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.761191][ T8153] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 223.761201][ T8153] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 223.761208][ T8153] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100 [ 223.761214][ T8153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.761219][ T8153] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.761225][ T8153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.761238][ T8153] [ 223.850263][ T5445] hid-generic FFFF:0008:0003.000A: probe with driver hid-generic failed with error -22 [ 224.144714][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 224.169266][ T3558] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 224.202797][ T8174] netlink: 52 bytes leftover after parsing attributes in process `syz.1.586'. [ 224.319974][ T3558] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 224.324826][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.328684][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.347699][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.352639][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.359781][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.363550][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.373165][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.377858][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.383150][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.388909][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.392837][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.396765][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.401569][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.404486][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.408311][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.408375][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 224.413205][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.417004][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.420640][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.424545][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.427550][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.432219][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.437180][ T3558] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.440952][ T3558] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.445566][ T3558] usb 8-1: config 0 interface 0 has no altsetting 0 [ 224.452970][ T3558] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 224.457439][ T3558] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 224.460990][ T3558] usb 8-1: Product: syz [ 224.462801][ T3558] usb 8-1: Manufacturer: syz [ 224.464929][ T3558] usb 8-1: SerialNumber: syz [ 224.473374][ T3558] usb 8-1: config 0 descriptor?? [ 224.486446][ T3558] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.102755][ T40] audit: type=1804 audit(1773914493.960:54): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.588" name="/newroot/140/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 225.181090][ T3558] usb 8-1: USB disconnect, device number 14 [ 225.186894][ T3558] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 225.950635][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 225.954355][ T8192] FAULT_INJECTION: forcing a failure. [ 225.954355][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 225.959519][ T8192] CPU: 2 UID: 0 PID: 8192 Comm: syz.0.589 Not tainted syzkaller #0 PREEMPT(full) [ 225.959533][ T8192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.959540][ T8192] Call Trace: [ 225.959544][ T8192] [ 225.959548][ T8192] dump_stack_lvl+0x100/0x190 [ 225.959567][ T8192] should_fail_ex.cold+0x5/0xa [ 225.959580][ T8192] should_failslab+0xc2/0x120 [ 225.959592][ T8192] __kmalloc_node_noprof+0xe6/0x850 [ 225.959608][ T8192] ? qdisc_alloc+0xbb/0xb30 [ 225.959621][ T8192] ? do_raw_spin_lock+0x128/0x260 [ 225.959637][ T8192] ? find_held_lock+0x2b/0x80 [ 225.959648][ T8192] qdisc_alloc+0xbb/0xb30 [ 225.959664][ T8192] qdisc_create_dflt+0x93/0x4c0 [ 225.959679][ T8192] dev_activate+0x64f/0xce0 [ 225.959695][ T8192] ? __pfx_dev_activate+0x10/0x10 [ 225.959710][ T8192] ? __local_bh_enable_ip+0x9e/0x120 [ 225.959724][ T8192] __dev_open+0x4f1/0x960 [ 225.959738][ T8192] ? __pfx___dev_open+0x10/0x10 [ 225.959752][ T8192] ? __local_bh_enable_ip+0x9e/0x120 [ 225.959765][ T8192] __dev_change_flags+0x558/0x6f0 [ 225.959780][ T8192] ? __pfx___dev_change_flags+0x10/0x10 [ 225.959795][ T8192] ? validate_linkmsg+0x57c/0xba0 [ 225.959810][ T8192] ? __pfx_validate_linkmsg+0x10/0x10 [ 225.959827][ T8192] netif_change_flags+0x8d/0x160 [ 225.959844][ T8192] do_setlink.isra.0+0x1abb/0x3e50 [ 225.959864][ T8192] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 225.959881][ T8192] ? __lock_acquire+0x4a5/0x2630 [ 225.959894][ T8192] ? __pfx_vprintk_emit+0x10/0x10 [ 225.959908][ T8192] ? find_held_lock+0x2b/0x80 [ 225.959918][ T8192] ? ___ratelimit+0x77b/0xad0 [ 225.959933][ T8192] ? lock_acquire+0x1cf/0x380 [ 225.959949][ T8192] ? rcu_is_watching+0x12/0xc0 [ 225.959965][ T8192] ? trace_contention_end+0x140/0x180 [ 225.959980][ T8192] ? __mutex_lock+0x26a/0x1b90 [ 225.959995][ T8192] ? do_trace_netlink_extack+0x72/0x210 [ 225.960009][ T8192] ? rtnl_newlink+0x8bb/0x2380 [ 225.960023][ T8192] ? __nla_validate_parse+0x1e7/0x28b0 [ 225.960055][ T8192] ? __pfx___mutex_lock+0x10/0x10 [ 225.960071][ T8192] ? rcu_is_watching+0x12/0xc0 [ 225.960087][ T8192] ? apparmor_capable+0x1d7/0x4d0 [ 225.960100][ T8192] ? full_name_hash+0xbc/0x100 [ 225.960113][ T8192] ? netdev_name_node_lookup+0x107/0x150 [ 225.960128][ T8192] rtnl_newlink+0x11bd/0x2380 [ 225.960148][ T8192] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.960163][ T8192] ? rcu_is_watching+0x12/0xc0 [ 225.960179][ T8192] ? kasan_quarantine_put+0x104/0x240 [ 225.960195][ T8192] ? lockdep_hardirqs_on+0x78/0x100 [ 225.960211][ T8192] ? kfree_skbmem+0x19a/0x210 [ 225.960221][ T8192] ? kmem_cache_free+0x124/0x6a0 [ 225.960239][ T8192] ? __lock_acquire+0x4a5/0x2630 [ 225.960253][ T8192] ? find_held_lock+0x2b/0x80 [ 225.960268][ T8192] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 225.960282][ T8192] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 225.960299][ T8192] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.960314][ T8192] rtnetlink_rcv_msg+0x95e/0xe90 [ 225.960331][ T8192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.960354][ T8192] ? ref_tracker_free+0x37e/0x6c0 [ 225.960369][ T8192] netlink_rcv_skb+0x159/0x420 [ 225.960386][ T8192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.960402][ T8192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.960424][ T8192] ? netlink_deliver_tap+0x1ae/0xcc0 [ 225.960442][ T8192] netlink_unicast+0x5aa/0x870 [ 225.960460][ T8192] ? __pfx_netlink_unicast+0x10/0x10 [ 225.960482][ T8192] netlink_sendmsg+0x8b0/0xda0 [ 225.960500][ T8192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.960519][ T8192] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 225.960537][ T8192] ____sys_sendmsg+0x9e1/0xb70 [ 225.960548][ T8192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.960566][ T8192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.960583][ T8192] ___sys_sendmsg+0x190/0x1e0 [ 225.960595][ T8192] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.960623][ T8192] __sys_sendmsg+0x170/0x220 [ 225.960638][ T8192] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.960658][ T8192] ? __pfx_ksys_write+0x10/0x10 [ 225.960672][ T8192] __do_fast_syscall_32+0xe3/0x8c0 [ 225.960689][ T8192] do_fast_syscall_32+0x32/0x70 [ 225.960705][ T8192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.960719][ T8192] RIP: 0023:0xf700ef6c [ 225.960729][ T8192] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.960739][ T8192] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 225.960749][ T8192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 225.960756][ T8192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.960762][ T8192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.960768][ T8192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.960774][ T8192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.960787][ T8192] [ 225.960915][ T8192] ipvlan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.151660][ T8194] veth1_virt_wifi: entered promiscuous mode [ 226.155933][ T8193] veth1_virt_wifi: left promiscuous mode [ 226.518897][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 226.667267][ T8187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.843040][ T60] hid-generic FFFF:0008:0003.000B: item fetching failed at offset 0/1 [ 226.847083][ T60] hid-generic FFFF:0008:0003.000B: probe with driver hid-generic failed with error -22 [ 227.083402][ T829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 227.241930][ T829] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 227.247917][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.255237][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.264141][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.268629][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.283259][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.293715][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.298207][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.302366][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.306739][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.310505][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.314329][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.318683][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.322655][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.326314][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.330718][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.333575][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.336601][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.340204][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.342982][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.345722][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.349399][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.352405][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.355098][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.358427][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.362186][ T829] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.365029][ T829] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.367673][ T829] usb 7-1: Product: syz [ 227.369041][ T829] usb 7-1: Manufacturer: syz [ 227.370815][ T829] usb 7-1: SerialNumber: syz [ 227.374261][ T829] usb 7-1: config 0 descriptor?? [ 227.378822][ T829] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 227.514639][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 227.939734][ T829] usb 7-1: USB disconnect, device number 4 [ 227.952092][ T829] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 228.242559][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 228.481161][ T8235] /dev/sr0: Can't open blockdev [ 228.596556][ T8238] comedi comedi0: Minor 255 is invalid! [ 229.583955][ T6024] hid-generic FFFF:0008:0003.000C: item fetching failed at offset 0/1 [ 229.594297][ T6024] hid-generic FFFF:0008:0003.000C: probe with driver hid-generic failed with error -22 [ 229.809332][ T1331] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 229.972772][ T1331] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 229.976119][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.979093][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.983514][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.986731][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.995733][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.014375][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.017788][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.027209][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.032091][ T8252] sp0: Synchronizing with TNC [ 230.039791][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.045289][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.048245][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.052264][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.055165][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.058127][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.061823][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.064940][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.068355][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.072522][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.075832][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.079354][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.083374][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.086460][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.089748][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.093699][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.098150][ T1331] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.101892][ T1331] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.104948][ T1331] usb 5-1: Product: syz [ 230.106534][ T1331] usb 5-1: Manufacturer: syz [ 230.108347][ T1331] usb 5-1: SerialNumber: syz [ 230.116832][ T1331] usb 5-1: config 0 descriptor?? [ 230.124353][ T1331] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.263511][ T40] audit: type=1804 audit(1773914499.120:55): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.610" name="/newroot/148/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 230.328356][ T6024] usb 5-1: USB disconnect, device number 11 [ 230.332454][ T6024] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 231.646092][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 231.959211][ T829] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 232.109290][ T829] usb 8-1: Using ep0 maxpacket: 16 [ 232.113279][ T829] usb 8-1: config 5 has an invalid interface number: 166 but max is 0 [ 232.116253][ T829] usb 8-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 232.119808][ T829] usb 8-1: config 5 has no interface number 0 [ 232.122504][ T829] usb 8-1: config 5 interface 166 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 232.127092][ T829] usb 8-1: config 5 interface 166 altsetting 2 endpoint 0x9 has invalid maxpacket 16664, setting to 64 [ 232.132114][ T829] usb 8-1: config 5 interface 166 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 232.136544][ T829] usb 8-1: config 5 interface 166 has no altsetting 0 [ 232.141541][ T829] usb 8-1: New USB device found, idVendor=0c45, idProduct=602e, bcdDevice=fb.7b [ 232.144494][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.147069][ T829] usb 8-1: Product: 췴䦰ો㮩廴ﲇ㻥 [ 232.149112][ T829] usb 8-1: Manufacturer: ï“¢ [ 232.151001][ T829] usb 8-1: SerialNumber: 氚컬Ҽ曤⶯黾훒엟ᯭ啾㚽⢳웗駋龠婲ꖇ知ꦂ뿩ᓨ䧊槧픆퉢셪둺㧭ྗჱ˖扤Ӕٿ꣟떻볾ᖒï‘å³¾í‰à§¾ê¥”뉙êšç²œì«¹ìŽ¦ã„‘î©’î¢¾é ä»“ーë˜í‰ï˜ë á§Šè€¶á¨¿æŸ“ê©‰è±æ‘㰗݈Ꟁ뿦뙃ﯽ벋˳鶊ί슞㯖缕꜔먎䉃뮵笎áŒì†½ [ 232.880950][ T829] gspca_main: sonixb-2.14.0 probing 0c45:602e [ 232.883635][ T829] sonixb 8-1:5.166: Error reading register 00: -71 [ 232.891106][ T829] usb 8-1: USB disconnect, device number 15 [ 233.301382][ T6058] hid-generic FFFF:0008:0003.000D: item fetching failed at offset 0/1 [ 233.311205][ T6058] hid-generic FFFF:0008:0003.000D: probe with driver hid-generic failed with error -22 [ 233.549398][ T5976] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 233.641356][ T8282] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 233.656847][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 233.699743][ T5976] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 233.704015][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.707576][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.719869][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.734215][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.737964][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.757675][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.770651][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.774359][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.778834][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.788326][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.792227][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.796712][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.800465][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.804138][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.808609][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.812653][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.816338][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.821400][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.825101][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.828778][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.836816][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.840496][ T5976] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.844158][ T5976] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.848812][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.853739][ T5976] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.857493][ T5976] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.860878][ T5976] usb 8-1: Product: syz [ 233.862273][ T5976] usb 8-1: Manufacturer: syz [ 233.863811][ T5976] usb 8-1: SerialNumber: syz [ 233.867049][ T5976] usb 8-1: config 0 descriptor?? [ 233.872331][ T5976] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 234.073588][ T5976] usb 8-1: USB disconnect, device number 16 [ 234.080640][ T5976] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 234.924119][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'. [ 234.926201][ T3558] libceph: connect (1)[c::]:6789 error -101 [ 234.933506][ T3558] libceph: mon0 (1)[c::]:6789 connect error [ 235.063174][ T8304] ceph: No mds server is up or the cluster is laggy [ 235.262044][ T8323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 235.264311][ T8323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.268009][ T8323] vhci_hcd vhci_hcd.0: Device attached [ 235.449294][ T6021] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 235.509754][ T6021] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 235.646578][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 236.081157][ T8324] vhci_hcd: connection reset by peer [ 236.084070][ T7894] vhci_hcd vhci_hcd.2: stop threads [ 236.090309][ T7894] vhci_hcd vhci_hcd.2: release socket [ 236.097845][ T7894] vhci_hcd vhci_hcd.2: disconnect device [ 236.712403][ T8353] autofs: Unknown parameter '[š' [ 236.790799][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.872502][ T829] IPVS: starting estimator thread 0... [ 236.874983][ T8354] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.959268][ T8360] IPVS: using max 46 ests per chain, 110400 per kthread [ 238.079990][ T1331] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.229320][ T1331] usb 6-1: Using ep0 maxpacket: 32 [ 238.295948][ T1331] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.326862][ T1331] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.370084][ T1331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.397109][ T1331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.475105][ T1331] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.502217][ T1331] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.557473][ T1331] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.594422][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.815066][ T1331] usb 6-1: config 0 descriptor?? [ 239.191245][ T1331] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.253737][ T1331] usb 6-1: USB disconnect, device number 6 [ 239.271099][ T1331] usblp0: removed [ 239.407690][ T8366] dummy0: entered promiscuous mode [ 239.415290][ T8366] bond0: entered promiscuous mode [ 239.417179][ T8366] bond_slave_0: entered promiscuous mode [ 239.426821][ T8366] bond_slave_1: entered promiscuous mode [ 239.461622][ T8366] debugfs: 'hsr1' already exists in 'hsr' [ 239.465796][ T8366] Cannot create hsr debugfs directory [ 239.468480][ T8366] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 239.473921][ T8366] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 239.483702][ T8366] hsr1: entered allmulticast mode [ 239.485546][ T8366] dummy0: entered allmulticast mode [ 239.487436][ T8366] bond0: entered allmulticast mode [ 239.493676][ T8366] bond_slave_0: entered allmulticast mode [ 239.498999][ T8366] bond_slave_1: entered allmulticast mode [ 240.306008][ T6024] hid-generic FFFF:0008:0003.000E: item fetching failed at offset 0/1 [ 240.317066][ T6024] hid-generic FFFF:0008:0003.000E: probe with driver hid-generic failed with error -22 [ 240.504722][ T8400] overlay: Unknown parameter '/' [ 240.559232][ T829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 240.609399][ T6021] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 240.729677][ T829] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 240.733104][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.736061][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.739990][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.743733][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.747112][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.751005][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.753954][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.756645][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.760472][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.763482][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.766037][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.769778][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.772766][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.775663][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.779098][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.782317][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.785178][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.788674][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.791832][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.794705][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.798213][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.801338][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.804386][ T829] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.807914][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.811780][ T829] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 240.814865][ T829] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 240.817607][ T829] usb 7-1: Product: syz [ 240.818994][ T829] usb 7-1: Manufacturer: syz [ 240.820800][ T829] usb 7-1: SerialNumber: syz [ 240.823973][ T829] usb 7-1: config 0 descriptor?? [ 240.831431][ T829] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 240.879256][ T1331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 241.009270][ T1331] usb 5-1: device descriptor read/64, error -71 [ 241.034072][ T829] usb 7-1: USB disconnect, device number 5 [ 241.039721][ T829] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 241.269331][ T1331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.529853][ T1331] usb 5-1: device descriptor read/64, error -71 [ 241.639409][ T1331] usb usb5-port1: attempt power cycle [ 241.979367][ T1331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 242.000124][ T1331] usb 5-1: device descriptor read/8, error -71 [ 242.239323][ T1331] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 242.259912][ T1331] usb 5-1: device descriptor read/8, error -71 [ 242.369606][ T1331] usb usb5-port1: unable to enumerate USB device [ 243.479414][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 243.482167][ T8413] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 244.111740][ T8413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.120355][ T8413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.123774][ T8413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.125799][ T8413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.129538][ T8413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.131590][ T8413] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.176397][ T8432] netlink: 'syz.0.661': attribute type 16 has an invalid length. [ 244.178980][ T8432] netlink: 'syz.0.661': attribute type 17 has an invalid length. [ 244.188276][ T8432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.198545][ T8434] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 244.248611][ T8437] overlay: Unknown parameter '/' [ 245.292604][ T6021] hid-generic FFFF:0008:0003.000F: item fetching failed at offset 0/1 [ 245.296163][ T6021] hid-generic FFFF:0008:0003.000F: probe with driver hid-generic failed with error -22 [ 245.332092][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 245.539260][ T3558] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 245.559423][ T6058] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 245.560401][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 245.619252][ T5445] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 245.709214][ T6058] usb 6-1: device descriptor read/64, error -71 [ 245.711738][ T3558] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 245.714947][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.717983][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.721631][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.724480][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.727350][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.731012][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.733862][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.736731][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.740312][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.743265][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.746119][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.749744][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.752651][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.755506][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.759009][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.762000][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.764991][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.768452][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.769260][ T5445] usb 5-1: device descriptor read/64, error -71 [ 245.771492][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.775776][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.779359][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.782221][ T3558] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.785099][ T3558] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.788800][ T3558] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.792660][ T3558] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 245.795563][ T3558] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 245.798275][ T3558] usb 7-1: Product: syz [ 245.799824][ T3558] usb 7-1: Manufacturer: syz [ 245.801339][ T3558] usb 7-1: SerialNumber: syz [ 245.804563][ T3558] usb 7-1: config 0 descriptor?? [ 245.809405][ T3558] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 245.949338][ T6058] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 246.009367][ T5445] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 246.010214][ T60] usb 7-1: USB disconnect, device number 6 [ 246.016932][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 246.079619][ T6058] usb 6-1: device descriptor read/64, error -71 [ 246.139384][ T5445] usb 5-1: device descriptor read/64, error -71 [ 246.199419][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 246.199498][ T5296] Bluetooth: hci2: command 0x0406 tx timeout [ 246.199966][ T6058] usb usb6-port1: attempt power cycle [ 246.259519][ T5445] usb usb5-port1: attempt power cycle [ 246.569263][ T6058] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 246.590365][ T6058] usb 6-1: device descriptor read/8, error -71 [ 246.599412][ T5445] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.619677][ T5445] usb 5-1: device descriptor read/8, error -71 [ 246.829350][ T6058] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.850527][ T6058] usb 6-1: device descriptor read/8, error -71 [ 246.869240][ T5445] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 246.889599][ T5445] usb 5-1: device descriptor read/8, error -71 [ 246.959786][ T6058] usb usb6-port1: unable to enumerate USB device [ 246.999349][ T5445] usb usb5-port1: unable to enumerate USB device [ 247.639242][ T5296] Bluetooth: hci1: command 0x0406 tx timeout [ 248.279301][ T5296] Bluetooth: hci2: command 0x0406 tx timeout [ 248.279378][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 248.422333][ T8465] overlay: Unknown parameter '/' [ 248.879223][ T60] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 249.029350][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 249.032820][ T60] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 249.036076][ T60] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 249.038953][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 249.042526][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.046011][ T60] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.049350][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.053902][ T60] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.056815][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.063573][ T60] usb 5-1: config 0 descriptor?? [ 249.275426][ T60] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.289287][ T60] usb 5-1: USB disconnect, device number 20 [ 249.295699][ T60] usblp0: removed [ 249.367743][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 249.490942][ T8470] dummy0: entered promiscuous mode [ 249.492915][ T8470] dummy0: left promiscuous mode [ 250.189325][ T6021] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 250.339570][ T6021] usb 7-1: device descriptor read/64, error -71 [ 250.589222][ T6021] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 250.719217][ T6021] usb 7-1: device descriptor read/64, error -71 [ 250.829354][ T6021] usb usb7-port1: attempt power cycle [ 250.929229][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 251.000460][ T8498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 251.002884][ T8498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.005594][ T8498] vhci_hcd vhci_hcd.0: Device attached [ 251.069298][ T9] usb 8-1: device descriptor read/64, error -71 [ 251.131130][ T8502] syzkaller0: entered promiscuous mode [ 251.133045][ T8502] syzkaller0: entered allmulticast mode [ 251.169351][ T6021] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 251.199599][ T6021] usb 7-1: device descriptor read/8, error -71 [ 251.269289][ T5445] usb 40-1: SetAddress Request (10) to port 0 [ 251.272059][ T5445] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 251.300223][ T8499] vhci_hcd: connection reset by peer [ 251.302142][ T88] vhci_hcd vhci_hcd.1: stop threads [ 251.303960][ T88] vhci_hcd vhci_hcd.1: release socket [ 251.305784][ T88] vhci_hcd vhci_hcd.1: disconnect device [ 251.309303][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 251.449275][ T6021] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 251.451895][ T9] usb 8-1: device descriptor read/64, error -71 [ 251.469587][ T6021] usb 7-1: device descriptor read/8, error -71 [ 251.559436][ T9] usb usb8-port1: attempt power cycle [ 251.579368][ T6021] usb usb7-port1: unable to enumerate USB device [ 251.889499][ T40] audit: type=1804 audit(1773914520.750:56): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.694" name="/newroot/173/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 251.899206][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 251.919846][ T9] usb 8-1: device descriptor read/8, error -71 [ 252.179197][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 252.199782][ T9] usb 8-1: device descriptor read/8, error -71 [ 252.309292][ T9] usb usb8-port1: unable to enumerate USB device [ 252.414988][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 253.073911][ T8524] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 253.077914][ T8524] File: /dev/nullb0 PID: 8524 Comm: syz.2.692 [ 253.731230][ T8531] overlay: Unknown parameter '/' [ 254.066152][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 254.068937][ T5296] Bluetooth: hci1: hardware error 0x48 [ 254.085974][ T40] audit: type=1804 audit(1773914522.940:57): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.697" name="/newroot/169/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 254.096624][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 254.106018][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.699'. [ 254.789424][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 255.044126][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 255.049837][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 255.052964][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.058953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.459415][ T9] usb 5-1: USB disconnect, device number 21 [ 256.119581][ T5296] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 256.159288][ T8565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.161342][ T8565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.359345][ T5445] usb 40-1: device descriptor read/8, error -110 [ 256.750405][ T5445] usb usb40-port1: attempt power cycle [ 256.814742][ T5948] block nbd0: Receive control failed (result -32) [ 256.814845][ T5296] block nbd0: Receive control failed (result -32) [ 256.815072][ T63] block nbd0: Receive control failed (result -32) [ 256.817908][ T5943] block nbd0: Receive control failed (result -32) [ 256.999259][ T8563] nbd0: detected capacity change from 0 to 63 [ 257.005208][ T6276] block nbd0: Dead connection, failed to find a fallback [ 257.008284][ T6276] block nbd0: shutting down sockets [ 257.011430][ T6276] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.015629][ T6276] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.018771][ T6276] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.023346][ T6276] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.026449][ T6276] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.039209][ T6276] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.042283][ T6276] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.045259][ T6276] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.047642][ T6276] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.052966][ T6276] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.055340][ T6276] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.058150][ T6276] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.061103][ T6276] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.064047][ T6276] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.072885][ T6276] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.076147][ T6276] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.086643][ T6276] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.090348][ T6276] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.093215][ T6276] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.099491][ T6276] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.102353][ T6276] ldm_validate_partition_table(): Disk read failed. [ 257.105035][ T6276] Dev nbd0: unable to read RDB block 0 [ 257.107167][ T6276] nbd0: unable to read partition table [ 257.112248][ T6276] ldm_validate_partition_table(): Disk read failed. [ 257.114616][ T6276] Dev nbd0: unable to read RDB block 0 [ 257.117348][ T6276] nbd0: unable to read partition table [ 257.153112][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'. [ 257.321477][ T5445] usb usb40-port1: unable to enumerate USB device [ 257.332304][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 257.483414][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 257.486768][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50209, setting to 1024 [ 257.490931][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.495834][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.498518][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.512193][ T9] usb 7-1: config 0 descriptor?? [ 257.516098][ T8579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.943990][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 258.123494][ T9] usb 7-1: USB disconnect, device number 11 [ 258.199376][ T5296] Bluetooth: hci3: command 0x0406 tx timeout [ 258.199392][ T5943] Bluetooth: hci2: command 0x0406 tx timeout [ 258.669300][ T5445] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 258.830748][ T5445] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 258.834957][ T5445] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 258.838837][ T5445] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.842463][ T5445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.050813][ T5445] usb 6-1: USB disconnect, device number 11 [ 260.282527][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.284871][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.889295][ T6024] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 261.039286][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 261.042443][ T6024] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 261.045156][ T6024] usb 6-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 261.049582][ T6024] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 261.053224][ T6024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.056489][ T6024] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.061282][ T6024] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.064308][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.073181][ T6024] usbtmc 6-1:16.0: bulk endpoints not found [ 261.443554][ T6021] usb 6-1: USB disconnect, device number 12 [ 262.064608][ T60] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 262.199314][ T60] usb 8-1: device descriptor read/64, error -71 [ 262.379881][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 262.921158][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 262.924407][ T8667] overlayfs: invalid origin (0000) [ 262.940671][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 263.009267][ T60] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 263.139246][ T60] usb 8-1: device descriptor read/64, error -71 [ 263.249932][ T60] usb usb8-port1: attempt power cycle [ 263.589266][ T60] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 263.610007][ T60] usb 8-1: device descriptor read/8, error -71 [ 263.752644][ T8684] FAULT_INJECTION: forcing a failure. [ 263.752644][ T8684] name failslab, interval 1, probability 0, space 0, times 0 [ 263.757129][ T8684] CPU: 1 UID: 0 PID: 8684 Comm: syz.0.737 Not tainted syzkaller #0 PREEMPT(full) [ 263.757158][ T8684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.757164][ T8684] Call Trace: [ 263.757169][ T8684] [ 263.757173][ T8684] dump_stack_lvl+0x100/0x190 [ 263.757193][ T8684] should_fail_ex.cold+0x5/0xa [ 263.757206][ T8684] should_failslab+0xc2/0x120 [ 263.757217][ T8684] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 263.757234][ T8684] ? __alloc_skb+0x140/0x710 [ 263.757251][ T8684] __alloc_skb+0x140/0x710 [ 263.757264][ T8684] ? __alloc_skb+0x5b7/0x710 [ 263.757278][ T8684] ? __pfx___alloc_skb+0x10/0x10 [ 263.757295][ T8684] netlink_alloc_large_skb+0x69/0x150 [ 263.757314][ T8684] netlink_sendmsg+0x680/0xda0 [ 263.757333][ T8684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.757351][ T8684] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 263.757370][ T8684] ____sys_sendmsg+0x9e1/0xb70 [ 263.757381][ T8684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.757398][ T8684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.757415][ T8684] ___sys_sendmsg+0x190/0x1e0 [ 263.757428][ T8684] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.757455][ T8684] __sys_sendmsg+0x170/0x220 [ 263.757471][ T8684] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.757490][ T8684] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 263.757519][ T8684] __do_fast_syscall_32+0xe3/0x8c0 [ 263.757539][ T8684] do_fast_syscall_32+0x32/0x70 [ 263.757555][ T8684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.757569][ T8684] RIP: 0023:0xf700ef6c [ 263.757578][ T8684] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 263.757589][ T8684] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 263.757599][ T8684] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 263.757605][ T8684] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.757611][ T8684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.757617][ T8684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 263.757623][ T8684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.757636][ T8684] [ 263.869274][ T60] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 263.890044][ T60] usb 8-1: device descriptor read/8, error -71 [ 263.947288][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 263.978579][ T5943] Bluetooth: hci4: sending frame failed (-49) [ 263.983487][ T5296] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 264.009509][ T60] usb usb8-port1: unable to enumerate USB device [ 264.060235][ T6058] hid-generic FFFF:0008:0003.0011: item fetching failed at offset 0/1 [ 264.071273][ T6058] hid-generic FFFF:0008:0003.0011: probe with driver hid-generic failed with error -22 [ 264.109282][ T5445] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 264.261026][ T5445] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 264.265478][ T5445] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.270444][ T5445] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.276077][ T5445] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.284055][ T5445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.289651][ T1331] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 264.298848][ T5445] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.317924][ T5445] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 264.329984][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.440295][ T1331] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 264.444308][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.447488][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.451064][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.454220][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.458047][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.462547][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.466543][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.470308][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.474680][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.478324][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.481554][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.485161][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.488362][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.491595][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.495084][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.498202][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.501407][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.505077][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.508475][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.508567][ T6021] usb 5-1: USB disconnect, device number 22 [ 264.511657][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.517153][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.520590][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.524236][ T1331] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.527799][ T1331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.532546][ T1331] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 264.535469][ T1331] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 264.538153][ T1331] usb 7-1: Product: syz [ 264.539837][ T1331] usb 7-1: Manufacturer: syz [ 264.541404][ T1331] usb 7-1: SerialNumber: syz [ 264.545358][ T1331] usb 7-1: config 0 descriptor?? [ 264.554113][ T1331] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 264.758407][ T1331] usb 7-1: USB disconnect, device number 12 [ 264.762080][ T1331] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 264.934996][ T8704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.955129][ T8704] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.601573][ T8711] overlayfs: invalid origin (0000) [ 268.104539][ T8737] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 268.108587][ T8737] syzkaller0: entered promiscuous mode [ 268.111707][ T8737] syzkaller0: entered allmulticast mode [ 268.115316][ T8737] tipc: Started in network mode [ 268.117349][ T8737] tipc: Node identity 16d92998c717, cluster identity 4711 [ 268.120310][ T8737] tipc: Enabled bearer , priority 0 [ 268.127242][ T8736] tipc: Resetting bearer [ 268.136196][ T8736] tipc: Disabling bearer [ 268.822536][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 269.243656][ T8749] overlayfs: invalid origin (0000) [ 269.829980][ T8782] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.833384][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 269.906335][ T8786] overlay: Unknown parameter '/' [ 269.995230][ T8791] FAULT_INJECTION: forcing a failure. [ 269.995230][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 269.999372][ T8791] CPU: 2 UID: 0 PID: 8791 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 269.999386][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.999393][ T8791] Call Trace: [ 269.999396][ T8791] [ 269.999400][ T8791] dump_stack_lvl+0x100/0x190 [ 269.999420][ T8791] should_fail_ex.cold+0x5/0xa [ 269.999432][ T8791] should_failslab+0xc2/0x120 [ 269.999444][ T8791] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 269.999460][ T8791] ? alloc_empty_file+0x55/0x1c0 [ 269.999472][ T8791] ? stack_trace_save+0x8e/0xc0 [ 269.999485][ T8791] alloc_empty_file+0x55/0x1c0 [ 269.999499][ T8791] path_openat+0xe8/0x31a0 [ 269.999509][ T8791] ? kasan_save_stack+0x3f/0x50 [ 269.999525][ T8791] ? kasan_save_stack+0x30/0x50 [ 269.999541][ T8791] ? kasan_save_track+0x14/0x30 [ 269.999556][ T8791] ? __kasan_slab_alloc+0x89/0x90 [ 269.999565][ T8791] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 269.999580][ T8791] ? do_getname+0x35/0x390 [ 269.999593][ T8791] ? do_int80_emulation+0x141/0x6b0 [ 269.999608][ T8791] ? asm_int80_emulation+0x1a/0x20 [ 269.999620][ T8791] ? __pfx_path_openat+0x10/0x10 [ 269.999635][ T8791] do_file_open+0x20e/0x430 [ 269.999647][ T8791] ? __pfx_do_file_open+0x10/0x10 [ 269.999667][ T8791] ? _raw_spin_unlock+0x28/0x50 [ 269.999680][ T8791] ? alloc_fd+0x476/0x790 [ 269.999694][ T8791] do_sys_openat2+0x10d/0x1e0 [ 269.999708][ T8791] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.999721][ T8791] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 269.999744][ T8791] __ia32_compat_sys_openat+0x12d/0x210 [ 269.999759][ T8791] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 269.999776][ T8791] ? do_user_addr_fault+0x8d6/0x12f0 [ 269.999796][ T8791] do_int80_emulation+0x141/0x6b0 [ 269.999813][ T8791] asm_int80_emulation+0x1a/0x20 [ 269.999823][ T8791] RIP: 0023:0xf7145cab [ 269.999832][ T8791] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 269.999843][ T8791] RSP: 002b:00000000f53fb38c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 269.999853][ T8791] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f720f19f [ 269.999860][ T8791] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.999866][ T8791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.999872][ T8791] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 269.999878][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.999890][ T8791] [ 270.779210][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 270.836608][ T8814] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 270.839237][ T8814] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 270.930675][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 270.933894][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 270.939667][ T9] usb 6-1: string descriptor 0 read error: -22 [ 270.941841][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.944863][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.012066][ T8816] overlay: Unknown parameter '/' [ 271.151949][ T9] cdc_ncm 6-1:1.0: bind() failure [ 271.160315][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 271.162559][ T9] cdc_ncm 6-1:1.1: bind() failure [ 271.165897][ T9] usb 6-1: USB disconnect, device number 13 [ 271.675198][ T40] audit: type=1326 audit(1773914540.530:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.686550][ T40] audit: type=1326 audit(1773914540.540:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.696949][ T40] audit: type=1326 audit(1773914540.550:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.706056][ T8823] syz.2.782 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 271.710945][ T40] audit: type=1326 audit(1773914540.550:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.758594][ T40] audit: type=1326 audit(1773914540.610:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.773055][ T40] audit: type=1326 audit(1773914540.630:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.859228][ T40] audit: type=1326 audit(1773914540.570:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.859280][ T40] audit: type=1326 audit(1773914540.670:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.859319][ T40] audit: type=1326 audit(1773914540.670:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 271.859356][ T40] audit: type=1326 audit(1773914540.670:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 272.076229][ T8838] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 272.262020][ T8845] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 272.363701][ T8845] bond3: entered promiscuous mode [ 272.365899][ T8845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.376984][ T8846] bond3: (slave bridge1): making interface the new active one [ 272.381269][ T8846] bridge1: entered promiscuous mode [ 272.384212][ T8846] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 272.398772][ T8849] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 272.454150][ T8845] macvlan2: entered promiscuous mode [ 272.456677][ T8845] macvlan2: entered allmulticast mode [ 272.460360][ T8845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.031686][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 274.035199][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 274.038106][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 274.062036][ T8879] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.107940][ T8887] netlink: 'syz.0.795': attribute type 4 has an invalid length. [ 274.110632][ T8887] netlink: 17 bytes leftover after parsing attributes in process `syz.0.795'. [ 274.176854][ T8890] netlink: 'syz.1.796': attribute type 7 has an invalid length. [ 274.183167][ T8890] netlink: 'syz.1.796': attribute type 8 has an invalid length. [ 274.784339][ T8916] FAULT_INJECTION: forcing a failure. [ 274.784339][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.789182][ T8916] CPU: 2 UID: 0 PID: 8916 Comm: syz.3.804 Not tainted syzkaller #0 PREEMPT(full) [ 274.789197][ T8916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.789203][ T8916] Call Trace: [ 274.789207][ T8916] [ 274.789212][ T8916] dump_stack_lvl+0x100/0x190 [ 274.789231][ T8916] should_fail_ex.cold+0x5/0xa [ 274.789244][ T8916] _copy_to_user+0x32/0xd0 [ 274.789258][ T8916] simple_read_from_buffer+0xcb/0x170 [ 274.789277][ T8916] proc_fail_nth_read+0x1af/0x230 [ 274.789294][ T8916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.789307][ T8916] ? rw_verify_area+0xce/0x6d0 [ 274.789323][ T8916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.789335][ T8916] vfs_read+0x1e4/0xb30 [ 274.789354][ T8916] ? __pfx_vfs_read+0x10/0x10 [ 274.789369][ T8916] ? find_held_lock+0x2b/0x80 [ 274.789380][ T8916] ? __fget_files+0x215/0x3d0 [ 274.789392][ T8916] ? __fget_files+0x21f/0x3d0 [ 274.789406][ T8916] ksys_read+0x12a/0x250 [ 274.789415][ T8916] ? __pfx_ksys_read+0x10/0x10 [ 274.789428][ T8916] do_int80_emulation+0x141/0x6b0 [ 274.789446][ T8916] asm_int80_emulation+0x1a/0x20 [ 274.789457][ T8916] RIP: 0023:0xf7165cab [ 274.789465][ T8916] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 274.789476][ T8916] RSP: 002b:00000000f53fc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 274.789486][ T8916] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fc5d0 [ 274.789493][ T8916] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 274.789499][ T8916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.789504][ T8916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 274.789510][ T8916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.789523][ T8916] [ 275.089876][ T8918] netlink: 228 bytes leftover after parsing attributes in process `syz.2.805'. [ 275.462733][ T8927] 9pnet_virtio: no channels available for device syz [ 275.643215][ T8931] 9pnet_virtio: no channels available for device syz [ 275.679330][ T5445] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 275.719380][ T5976] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 275.739619][ T8933] kvm: pic: non byte read [ 275.849270][ T5445] usb 8-1: Using ep0 maxpacket: 8 [ 275.853332][ T5445] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 275.856628][ T5445] usb 8-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 275.861184][ T5445] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 275.865698][ T5445] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.870034][ T5445] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.875587][ T5445] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.879501][ T5445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.887553][ T5445] usbtmc 8-1:16.0: bulk endpoints not found [ 275.889338][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 275.893617][ T5976] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 275.897009][ T5976] usb 6-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 275.909234][ T5976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 275.913860][ T5976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.917317][ T5976] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.922862][ T5976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.925749][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.931908][ T5976] usbtmc 6-1:16.0: bulk endpoints not found [ 276.056159][ T8946] tmpfs: Unknown parameter '18446744073709551615' [ 276.103419][ T1331] usb 8-1: USB disconnect, device number 25 [ 276.120072][ T5296] Bluetooth: hci3: command 0x0406 tx timeout [ 276.135770][ T5976] usb 6-1: USB disconnect, device number 14 [ 277.127176][ T40] kauditd_printk_skb: 360 callbacks suppressed [ 277.127188][ T40] audit: type=1804 audit(1773914545.980:428): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.819" name="/newroot/182/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 278.123498][ T8981] comedi comedi3: comedi_config --init_data is deprecated [ 278.443250][ T8985] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 280.499372][ T9008] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 280.619242][ T9012] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 280.651698][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 283.491600][ T9058] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 283.950178][ T9074] bridge0: port 3(erspan0) entered blocking state [ 283.953359][ T9074] bridge0: port 3(erspan0) entered disabled state [ 283.956372][ T9074] erspan0: entered allmulticast mode [ 283.967084][ T9074] erspan0: entered promiscuous mode [ 283.975453][ T9074] erspan0: left allmulticast mode [ 283.977179][ T9074] erspan0: left promiscuous mode [ 283.979931][ T9074] bridge0: port 3(erspan0) entered disabled state [ 284.416671][ T40] audit: type=1326 audit(1773914553.270:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.430201][ T40] audit: type=1326 audit(1773914553.280:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.446155][ T40] audit: type=1326 audit(1773914553.280:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.455790][ T40] audit: type=1326 audit(1773914553.280:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.459386][ T6058] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 284.464818][ T40] audit: type=1326 audit(1773914553.280:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.550016][ T9084] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 284.577100][ T40] audit: type=1326 audit(1773914553.290:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.586275][ T40] audit: type=1326 audit(1773914553.290:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.594958][ T40] audit: type=1326 audit(1773914553.300:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.608402][ T40] audit: type=1326 audit(1773914553.300:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.622150][ T40] audit: type=1326 audit(1773914553.300:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 284.639228][ T6058] usb 8-1: Using ep0 maxpacket: 8 [ 284.642283][ T6058] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 284.644904][ T6058] usb 8-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 284.648118][ T6058] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 284.660373][ T6058] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.663603][ T6058] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.667636][ T6058] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.676457][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.684449][ T6058] usbtmc 8-1:16.0: bulk endpoints not found [ 284.734878][ T9088] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 284.746396][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.857'. [ 284.884746][ T9095] capability: warning: `syz.1.859' uses 32-bit capabilities (legacy support in use) [ 284.932205][ T9] usb 8-1: USB disconnect, device number 26 [ 285.282961][ T9109] comedi comedi3: bad chanlist[0]=0x00000025 chan=37 range length=9 [ 285.438878][ T9113] netlink: 228 bytes leftover after parsing attributes in process `syz.1.863'. [ 285.609240][ T1331] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 285.772315][ T1331] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 285.775131][ T1331] usb 5-1: can't read configurations, error -22 [ 285.909270][ T1331] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 286.064224][ T1331] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 286.067144][ T1331] usb 5-1: can't read configurations, error -22 [ 286.070294][ T1331] usb usb5-port1: attempt power cycle [ 286.419475][ T1331] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 286.443947][ T1331] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 286.446732][ T1331] usb 5-1: can't read configurations, error -22 [ 286.589489][ T1331] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 286.615745][ T1331] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 286.618500][ T1331] usb 5-1: can't read configurations, error -22 [ 286.625614][ T1331] usb usb5-port1: unable to enumerate USB device [ 286.962566][ T9140] gretap1: entered promiscuous mode [ 287.254734][ T9145] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 287.266260][ T9145] CIFS mount error: No usable UNC path provided in device string! [ 287.266260][ T9145] [ 287.271151][ T9145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.981094][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 290.028143][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'. [ 290.270636][ T9202] /dev/sr0: Can't open blockdev [ 292.446769][ T9276] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 292.736476][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 292.750394][ T829] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 292.929630][ T829] usb 7-1: Using ep0 maxpacket: 32 [ 292.940685][ T829] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.943418][ T829] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.946222][ T829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.951107][ T829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.954190][ T829] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.957290][ T829] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.962248][ T829] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.965199][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.972771][ T829] usb 7-1: config 0 descriptor?? [ 293.210147][ T829] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.379260][ T39] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 293.387514][ T829] usb 7-1: USB disconnect, device number 13 [ 293.394690][ T829] usblp0: removed [ 293.539209][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 293.542058][ T39] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 293.544675][ T39] usb 6-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 293.547967][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 293.551738][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.554926][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.559084][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.562654][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.569851][ T39] usbtmc 6-1:16.0: bulk endpoints not found [ 293.787482][ T829] usb 6-1: USB disconnect, device number 15 [ 294.091560][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.908'. [ 294.198144][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 294.411690][ T9333] mmap: syz.2.913 (9333) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 294.699998][ T40] kauditd_printk_skb: 631 callbacks suppressed [ 294.700012][ T40] audit: type=1804 audit(1773914563.490:1070): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.916" name="/newroot/207/bus/bus" dev="tmpfs" ino=1133 res=1 errno=0 [ 294.739349][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 295.242966][ T9342] overlayfs: statfs failed on './file0' [ 295.499989][ T9371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 295.717727][ T9378] overlay: Unknown parameter '/' [ 296.240720][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 296.390815][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.395323][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 296.398984][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 296.403356][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.406819][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.410292][ T829] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 296.428648][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.507833][ T9] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 296.542776][ T9391] ubi0: attaching mtd0 [ 296.547118][ T9391] ubi0: scanning is finished [ 296.549112][ T9391] ubi0: empty MTD device detected [ 296.570824][ T829] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 296.574955][ T829] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.578935][ T829] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.584178][ T829] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.587559][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.596305][ T829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.600523][ T9393] sit1: entered allmulticast mode [ 296.637090][ T9] usb 8-1: USB disconnect, device number 27 [ 296.649057][ T829] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 296.801762][ T5976] usb 6-1: USB disconnect, device number 16 [ 296.849194][ T9391] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 296.852023][ T9391] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 296.854774][ T9391] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 296.857382][ T9391] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 296.860701][ T9391] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 296.863244][ T9391] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 296.866199][ T9391] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4129666465 [ 296.870292][ T9391] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 296.875634][ T9397] ubi0: background thread "ubi_bgt0d" started, PID 9397 [ 297.622709][ T9407] overlay: Unknown parameter '/' [ 298.489226][ T3558] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 298.609238][ T6058] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 298.619539][ T5445] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 298.669211][ T3558] usb 7-1: Using ep0 maxpacket: 8 [ 298.672507][ T3558] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 298.675113][ T3558] usb 7-1: config 0 has no interface number 0 [ 298.677117][ T3558] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.680882][ T3558] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 298.685010][ T3558] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.690384][ T3558] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.695866][ T3558] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 298.699818][ T3558] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.705347][ T3558] usb 7-1: config 0 descriptor?? [ 298.715008][ T3558] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 298.779243][ T5445] usb 6-1: Using ep0 maxpacket: 8 [ 298.780498][ T6058] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.784487][ T6058] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.787766][ T6058] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.791000][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.792417][ T5445] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.795538][ T9424] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.796847][ T5445] usb 6-1: config 0 has no interface number 0 [ 298.802071][ T5445] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.802340][ T6058] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.805591][ T5445] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.812192][ T5445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.817288][ T5445] usb 6-1: config 0 descriptor?? [ 298.841171][ T5445] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 298.976830][ T6058] usb 7-1: USB disconnect, device number 14 [ 298.981156][ T6058] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 299.005349][ T5445] usb 8-1: USB disconnect, device number 28 [ 299.041164][ T5976] usb 6-1: USB disconnect, device number 17 [ 299.200057][ T9434] syzkaller0: entered promiscuous mode [ 299.201840][ T9434] syzkaller0: entered allmulticast mode [ 299.245957][ T9423] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 299.499248][ T60] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 299.649248][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 299.652962][ T60] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 299.656055][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 299.661005][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.665397][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 299.669983][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 299.673705][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.679375][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.683310][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.894771][ T60] usb 6-1: GET_CAPABILITIES returned 0 [ 299.896726][ T60] usbtmc 6-1:16.0: can't read capabilities [ 299.999273][ T5445] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 300.170390][ T5445] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 300.174611][ T5445] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.178221][ T5445] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.182639][ T5445] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.185825][ T5445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.193423][ T5445] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.196181][ T5445] usb 8-1: invalid MIDI out EP 0 [ 300.239107][ T5445] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 300.257941][ T9450] random: crng reseeded on system resumption [ 300.372100][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 300.397856][ T6058] usb 8-1: USB disconnect, device number 29 [ 301.189448][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 301.266002][ T9472] syzkaller0: entered promiscuous mode [ 301.267835][ T9472] syzkaller0: entered allmulticast mode [ 301.272245][ T9472] TC_ACT_REPEAT abuse ? [ 301.299400][ C3] TC_ACT_REPEAT abuse ? [ 301.333025][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.336046][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.350873][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.356073][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.360821][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.364890][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.372803][ T9470] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 301.392388][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.482086][ T60] usb 6-1: USB disconnect, device number 18 [ 301.580082][ T829] usb 8-1: USB disconnect, device number 30 [ 301.959325][ C3] TC_ACT_REPEAT abuse ? [ 302.398861][ T40] audit: type=1804 audit(1773914571.250:1071): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.963" name="/newroot/218/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 302.571270][ T60] libceph: connect (1)[c::]:6789 error -101 [ 302.574047][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 302.580074][ T9501] ceph: No mds server is up or the cluster is laggy [ 302.605116][ T829] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 302.771291][ T829] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.775844][ T829] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.780759][ T829] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.786309][ T829] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.790604][ T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.802532][ T829] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.806211][ T829] usb 5-1: invalid MIDI out EP 0 [ 302.901515][ T829] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 303.004965][ T39] usb 5-1: USB disconnect, device number 27 [ 303.769189][ T40] audit: type=1804 audit(1773914572.620:1072): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.970" name="/newroot/246/bus/bus" dev="tmpfs" ino=1345 res=1 errno=0 [ 303.868832][ T6058] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 304.006576][ T40] audit: type=1804 audit(1773914572.860:1073): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.973" name="/newroot/245/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 304.045629][ T6058] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.050722][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 304.051590][ T6058] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 304.056963][ T6058] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.059636][ T6058] usb 8-1: Product: syz [ 304.061015][ T6058] usb 8-1: Manufacturer: syz [ 304.062572][ T6058] usb 8-1: SerialNumber: syz [ 304.065815][ T6058] usb 8-1: config 0 descriptor?? [ 304.070123][ T6058] hub 8-1:0.0: bad descriptor, ignoring hub [ 304.072096][ T6058] hub 8-1:0.0: probe with driver hub failed with error -5 [ 304.685160][ T9525] overlayfs: statfs failed on './file0' [ 304.709694][ T829] usb 8-1: USB disconnect, device number 31 [ 304.929487][ T40] audit: type=1326 audit(1773914573.790:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.1.977" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef6c code=0x0 [ 304.981262][ T9553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.459531][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 305.593431][ T9569] program syz.3.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.610970][ T60] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.615010][ T60] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.618788][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.621944][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.631889][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.637135][ T60] usb 7-1: invalid MIDI out EP 0 [ 305.688705][ T60] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 305.716081][ T40] audit: type=1804 audit(1773914574.570:1075): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.984" name="/newroot/248/file0/file0" dev="9p" ino=78643869 res=1 errno=0 [ 305.758118][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 305.840635][ T829] usb 7-1: USB disconnect, device number 15 [ 306.339972][ T9599] netlink: 'syz.0.991': attribute type 4 has an invalid length. [ 306.342560][ T9599] netlink: 17 bytes leftover after parsing attributes in process `syz.0.991'. [ 306.573310][ T9607] netlink: 'syz.2.994': attribute type 21 has an invalid length. [ 306.575874][ T9607] netlink: 128 bytes leftover after parsing attributes in process `syz.2.994'. [ 306.578844][ T9607] netlink: 3 bytes leftover after parsing attributes in process `syz.2.994'. [ 306.584192][ T9607] netlink: 'syz.2.994': attribute type 12 has an invalid length. [ 306.586827][ T9607] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 306.589817][ T9607] netlink: 148 bytes leftover after parsing attributes in process `syz.2.994'. [ 306.592729][ T9607] netlink: 59 bytes leftover after parsing attributes in process `syz.2.994'. [ 306.778538][ T9621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 306.843545][ T9621] netlink: 14 bytes leftover after parsing attributes in process `syz.3.998'. [ 306.953566][ T9621] bond0 (unregistering): left promiscuous mode [ 306.955685][ T9621] bond_slave_0: left promiscuous mode [ 306.957760][ T9621] bond_slave_1: left promiscuous mode [ 306.971113][ T9621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.974918][ T9621] bond_slave_0: left allmulticast mode [ 306.981756][ T9621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.985222][ T9621] bond_slave_1: left allmulticast mode [ 306.990239][ T9621] bond0 (unregistering): Released all slaves [ 308.139246][ T5445] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 308.175561][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'. [ 308.291231][ T5445] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.296210][ T5445] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.301232][ T5445] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.305167][ T5445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.321509][ T5445] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.329302][ T5445] usb 5-1: invalid MIDI out EP 0 [ 308.459674][ T9648] tipc: Started in network mode [ 308.461870][ T9648] tipc: Node identity 2af6a18b0b8e, cluster identity 4711 [ 308.465430][ T9648] tipc: Enabled bearer , priority 0 [ 308.498594][ T5445] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 308.538722][ T60] usb 5-1: USB disconnect, device number 28 [ 308.827735][ T9647] tipc: Disabling bearer [ 308.921557][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 308.933005][ T9654] warning: `syz.2.1007' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.979916][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1006'. [ 309.213529][ T9664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.403917][ T9664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.564652][ T9664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.673373][ T9664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.755249][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.763878][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.771849][ T7894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.780189][ T7894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.267629][ T60] libceph: connect (1)[c::]:6789 error -101 [ 310.271349][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 310.529394][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 310.531394][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 310.599267][ T39] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 310.759445][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 310.765740][ T39] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.768961][ T39] usb 8-1: config 0 has no interface number 0 [ 310.771018][ T39] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.774695][ T39] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 310.778039][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.782210][ T39] usb 8-1: config 0 descriptor?? [ 310.802717][ T39] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.005335][ T39] usb 8-1: USB disconnect, device number 32 [ 311.007325][ C2] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 311.049624][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 311.052128][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 311.092194][ T9685] ceph: No mds server is up or the cluster is laggy [ 311.283143][ T9708] Cache volume key already in use (9p,syz,) [ 311.309287][ T829] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 311.479574][ T829] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.483013][ T829] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.486426][ T829] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.489658][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.500576][ T829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.503150][ T829] usb 7-1: invalid MIDI out EP 0 [ 311.509246][ T39] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 311.545553][ T829] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 311.547133][ T9712] __nla_validate_parse: 3 callbacks suppressed [ 311.547147][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 311.647466][ T9713] netlink: 'syz.0.1022': attribute type 3 has an invalid length. [ 311.659244][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 311.662112][ T39] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 311.664720][ T39] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 311.668214][ T39] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 311.671590][ T39] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 311.675124][ T39] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.678318][ T39] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.682593][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.685483][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.711175][ T3558] usb 7-1: USB disconnect, device number 16 [ 311.739348][ T5976] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 311.894064][ T5976] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.900236][ T5976] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.900523][ T39] usb 8-1: GET_CAPABILITIES returned 0 [ 311.904458][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.906376][ T39] usbtmc 8-1:16.0: can't read capabilities [ 311.909201][ T5976] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 311.914907][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.918506][ T5976] usb 6-1: config 0 descriptor?? [ 312.124818][ T5976] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 312.127258][ T5976] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 312.138108][ T5976] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 312.141935][ T5976] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 312.144243][ T5976] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 312.146821][ T5976] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 312.234602][ T5976] usb 6-1: USB disconnect, device number 19 [ 312.304793][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 312.365113][ T9731] cgroup2: Unknown parameter 'obj_type' [ 313.049338][ T829] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 313.200448][ T829] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.203981][ T829] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.207140][ T829] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 313.210652][ T829] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.213701][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.221324][ T829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.254801][ T829] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 313.423917][ T6058] usb 7-1: USB disconnect, device number 17 [ 313.488986][ T9755] overlay: Unknown parameter '/' [ 313.491496][ T9755] overlay: Unknown parameter '/' [ 313.493459][ T9755] overlay: Unknown parameter '/' [ 313.495530][ T9755] overlay: Unknown parameter '/' [ 313.498172][ T9755] overlay: Unknown parameter '/' [ 313.500834][ T9755] overlay: Unknown parameter '/' [ 313.502816][ T9755] overlay: Unknown parameter '/' [ 313.504767][ T9755] overlay: Unknown parameter '/' [ 313.506358][ T5976] usb 8-1: USB disconnect, device number 33 [ 313.510003][ T9755] overlay: Unknown parameter '/' [ 313.516931][ T9755] overlay: Unknown parameter '/' [ 313.518994][ T9755] overlay: Unknown parameter '/' [ 313.524365][ T9755] overlay: Unknown parameter '/' [ 313.526956][ T9755] overlay: Unknown parameter '/' [ 313.535594][ T9755] overlay: Unknown parameter '/' [ 313.537582][ T9755] overlay: Unknown parameter '/' [ 313.540288][ T9755] overlay: Unknown parameter '/' [ 313.542479][ T9755] overlay: Unknown parameter '/' [ 313.544507][ T9755] overlay: Unknown parameter '/' [ 313.546639][ T9755] overlay: Unknown parameter '/' [ 313.550631][ T9755] overlay: Unknown parameter '/' [ 313.552689][ T9755] overlay: Unknown parameter '/' [ 313.554920][ T9755] overlay: Unknown parameter '/' [ 313.557054][ T9755] overlay: Unknown parameter '/' [ 313.560325][ T9755] overlay: Unknown parameter '/' [ 313.562984][ T9755] overlay: Unknown parameter '/' [ 313.565076][ T9755] overlay: Unknown parameter '/' [ 313.567513][ T9755] overlay: Unknown parameter '/' [ 313.570622][ T9755] overlay: Unknown parameter '/' [ 313.573134][ T9755] overlay: Unknown parameter '/' [ 313.575441][ T9755] overlay: Unknown parameter '/' [ 313.577360][ T9755] overlay: Unknown parameter '/' [ 313.579313][ T9755] overlay: Unknown parameter '/' [ 313.581493][ T9755] overlay: Unknown parameter '/' [ 313.583463][ T9755] overlay: Unknown parameter '/' [ 313.585380][ T9755] overlay: Unknown parameter '/' [ 313.587312][ T9755] overlay: Unknown parameter '/' [ 313.589334][ T9755] overlay: Unknown parameter '/' [ 313.591840][ T9755] overlay: Unknown parameter '/' [ 313.594747][ T9755] overlay: Unknown parameter '/' [ 313.596703][ T9755] overlay: Unknown parameter '/' [ 313.598608][ T9755] overlay: Unknown parameter '/' [ 313.600724][ T9755] overlay: Unknown parameter '/' [ 313.603170][ T9755] overlay: Unknown parameter '/' [ 313.605222][ T9755] overlay: Unknown parameter '/' [ 313.607133][ T9755] overlay: Unknown parameter '/' [ 313.609006][ T9755] overlay: Unknown parameter '/' [ 313.611468][ T9755] overlay: Unknown parameter '/' [ 313.613463][ T9755] overlay: Unknown parameter '/' [ 313.615436][ T9755] overlay: Unknown parameter '/' [ 313.617387][ T9755] overlay: Unknown parameter '/' [ 313.620000][ T9755] overlay: Unknown parameter '/' [ 313.621844][ T9755] overlay: Unknown parameter '/' [ 313.623846][ T9755] overlay: Unknown parameter '/' [ 313.625797][ T9755] overlay: Unknown parameter '/' [ 313.627734][ T9755] overlay: Unknown parameter '/' [ 313.629882][ T9755] overlay: Unknown parameter '/' [ 313.631712][ T9755] overlay: Unknown parameter '/' [ 313.633484][ T9755] overlay: Unknown parameter '/' [ 313.635378][ T9755] overlay: Unknown parameter '/' [ 313.637160][ T9755] overlay: Unknown parameter '/' [ 313.638902][ T9755] overlay: Unknown parameter '/' [ 313.641373][ T9755] overlay: Unknown parameter '/' [ 313.643536][ T9755] overlay: Unknown parameter '/' [ 313.645461][ T9755] overlay: Unknown parameter '/' [ 313.647321][ T9755] overlay: Unknown parameter '/' [ 313.682775][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 313.889273][ T5976] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 314.039348][ T5976] usb 8-1: Using ep0 maxpacket: 8 [ 314.042288][ T5976] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.045324][ T5976] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.048420][ T5976] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.052270][ T5976] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.056469][ T5976] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.059774][ T5976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.200176][ T9768] syzkaller0: entered promiscuous mode [ 314.202630][ T9768] syzkaller0: entered allmulticast mode [ 314.290035][ T5976] usb 8-1: GET_CAPABILITIES returned 0 [ 314.292419][ T5976] usbtmc 8-1:16.0: can't read capabilities [ 314.343825][ T9770] ref_ctr_offset mismatch. inode: 0x596 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 314.486868][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 314.828549][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.833983][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.844265][ T39] usb 8-1: USB disconnect, device number 34 [ 315.611019][ T40] audit: type=1326 audit(1773914584.460:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.618101][ T40] audit: type=1326 audit(1773914584.460:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.625326][ T40] audit: type=1326 audit(1773914584.460:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.633924][ T40] audit: type=1326 audit(1773914584.460:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.648673][ T40] audit: type=1326 audit(1773914584.460:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.662808][ T40] audit: type=1326 audit(1773914584.460:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.674315][ T40] audit: type=1326 audit(1773914584.460:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.679215][ T6058] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 315.688368][ T40] audit: type=1326 audit(1773914584.460:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.699269][ T40] audit: type=1326 audit(1773914584.460:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.707931][ T40] audit: type=1326 audit(1773914584.460:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 315.850471][ T6058] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.854271][ T6058] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.857685][ T6058] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 315.861503][ T6058] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.864720][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.875035][ T6058] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.931123][ T6058] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 316.009240][ T39] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 316.076176][ T5976] usb 5-1: USB disconnect, device number 29 [ 316.161001][ T39] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.165760][ T39] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.170094][ T39] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.173886][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.180662][ T9797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 316.186524][ T39] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.391646][ T39] usb 8-1: USB disconnect, device number 35 [ 317.239405][ T39] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 317.410555][ T39] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.414076][ T39] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 317.417202][ T39] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 317.420984][ T39] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.423869][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.430357][ T39] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.480137][ T39] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 317.503838][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.609240][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 317.635514][ T39] usb 6-1: USB disconnect, device number 20 [ 318.190361][ T9840] BUG: unable to handle page fault for address: ffff888097449000 [ 318.193848][ T9840] #PF: supervisor write access in kernel mode [ 318.197084][ T9840] #PF: error_code(0x0002) - not-present page [ 318.200691][ T9840] PGD 1b691067 P4D 1b691067 PUD 0 [ 318.203016][ T9840] Oops: Oops: 0002 [#1] SMP KASAN NOPTI [ 318.205514][ T9840] CPU: 3 UID: 0 PID: 9840 Comm: syz.1.1065 Not tainted syzkaller #0 PREEMPT(full) [ 318.209633][ T9840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.214091][ T9840] RIP: 0010:bond_rr_gen_slave_id+0x92/0x250 [ 318.216164][ T9840] Code: 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bd 01 00 00 49 8b 84 24 f0 00 00 00 bb 01 00 00 00 <65> 0f c1 18 e8 35 fd 74 fb 83 c3 01 89 d8 5b 5d 41 5c 41 5d 41 5e [ 318.222372][ T9840] RSP: 0018:ffffc900318f7598 EFLAGS: 00010246 [ 318.224366][ T9840] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000d225000 [ 318.226931][ T9840] RDX: 1ffff1100a4511d6 RSI: ffffffff86931af2 RDI: ffff888052288eb0 [ 318.229500][ T9840] RBP: ffff888023b3f170 R08: 0000000000000005 R09: 0000000000000001 [ 318.232044][ T9840] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888052288dc0 [ 318.234841][ T9840] R13: 0000000000002b2b R14: ffff888052288dc0 R15: dffffc0000000000 [ 318.238061][ T9840] FS: 0000000000000000(0000) GS:ffff888097449000(0063) knlGS:00000000f53ddb40 [ 318.241353][ T9840] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 318.243612][ T9840] CR2: ffff888097449000 CR3: 0000000028eec000 CR4: 0000000000352ef0 [ 318.246882][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.250120][ T9840] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 318.253376][ T9840] Call Trace: [ 318.254768][ T9840] [ 318.256035][ T9840] bond_xdp_get_xmit_slave+0x296/0x660 [ 318.258282][ T9840] xdp_master_redirect+0x161/0x330 [ 318.260415][ T9840] xdp_test_run_batch.constprop.0+0xc60/0x1ca0 [ 318.262967][ T9840] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 318.265671][ T9840] ? find_held_lock+0x2b/0x80 [ 318.267622][ T9840] ? ktime_get+0x1a7/0x300 [ 318.269496][ T9840] bpf_test_run_xdp_live+0x367/0x760 [ 318.271691][ T9840] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 318.274096][ T9840] ? __mutex_unlock_slowpath+0x15c/0x790 [ 318.276401][ T9840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.278855][ T9840] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 318.280816][ T9840] ? bpf_dispatcher_change_prog+0x2d7/0xa60 [ 318.283285][ T9840] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 318.285464][ T9840] ? bpf_dispatcher_xdp+0x800/0x1000 [ 318.287648][ T9840] ? bpf_dispatcher_xdp+0x800/0x1000 [ 318.289826][ T9840] ? bpf_dispatcher_xdp+0x800/0x1000 [ 318.292014][ T9840] ? bpf_dispatcher_change_prog+0x2dc/0xa60 [ 318.294458][ T9840] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 318.296701][ T9840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.299127][ T9840] ? fput+0x79/0x100 [ 318.300758][ T9840] ? __bpf_prog_get+0x97/0x2a0 [ 318.302762][ T9840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.305127][ T9840] __sys_bpf+0x1725/0x4b90 [ 318.307005][ T9840] ? __pfx___sys_bpf+0x10/0x10 [ 318.308999][ T9840] ? __pfx_futex_wait+0x10/0x10 [ 318.311025][ T9840] ? __lock_acquire+0x4a5/0x2630 [ 318.313033][ T9840] ? do_futex+0x192/0x350 [ 318.314801][ T9840] ? xfd_validate_state+0x129/0x190 [ 318.316932][ T9840] __ia32_sys_bpf+0x79/0xf0 [ 318.318828][ T9840] ? lockdep_hardirqs_on+0x78/0x100 [ 318.320974][ T9840] __do_fast_syscall_32+0xe3/0x8c0 [ 318.323032][ T9840] do_fast_syscall_32+0x32/0x70 [ 318.325050][ T9840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.327676][ T9840] RIP: 0023:0xf6feef6c [ 318.329386][ T9840] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 318.337196][ T9840] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 318.340566][ T9840] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 318.343742][ T9840] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.346994][ T9840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.350235][ T9840] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.353392][ T9840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.356544][ T9840] [ 318.357816][ T9840] Modules linked in: [ 318.359456][ T9840] CR2: ffff888097449000 [ 318.361168][ T9840] ---[ end trace 0000000000000000 ]--- [ 318.363431][ T9840] RIP: 0010:bond_rr_gen_slave_id+0x92/0x250 [ 318.365897][ T9840] Code: 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bd 01 00 00 49 8b 84 24 f0 00 00 00 bb 01 00 00 00 <65> 0f c1 18 e8 35 fd 74 fb 83 c3 01 89 d8 5b 5d 41 5c 41 5d 41 5e [ 318.373736][ T9840] RSP: 0018:ffffc900318f7598 EFLAGS: 00010246 [ 318.376222][ T9840] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000d225000 [ 318.379466][ T9840] RDX: 1ffff1100a4511d6 RSI: ffffffff86931af2 RDI: ffff888052288eb0 [ 318.382709][ T9840] RBP: ffff888023b3f170 R08: 0000000000000005 R09: 0000000000000001 [ 318.385947][ T9840] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888052288dc0 [ 318.389224][ T9840] R13: 0000000000002b2b R14: ffff888052288dc0 R15: dffffc0000000000 [ 318.392448][ T9840] FS: 0000000000000000(0000) GS:ffff888097449000(0063) knlGS:00000000f53ddb40 [ 318.396020][ T9840] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 318.398756][ T9840] CR2: ffff888097449000 CR3: 0000000028eec000 CR4: 0000000000352ef0 [ 318.401994][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.405231][ T9840] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 318.408478][ T9840] Kernel panic - not syncing: Fatal exception in interrupt [ 318.411984][ T9840] Kernel Offset: disabled [ 318.413757][ T9840] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:03:07 Registers: info registers vcpu 0 CPU#0 RAX=00000000005d0833 RBX=ffffffff8e4975c0 RCX=ffffffff8b8d7c75 RDX=0000000000000000 RSI=ffffffff8de7fa43 RDI=ffffffff8c1b0aa0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed1005646795 R10=ffff88802b233cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d9c010 R15=0000000000000000 RIP=ffffffff8b8d65df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097149000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c32b16f CR3=0000000028eec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008b06fc RBX=ffff88801c3124c0 RCX=ffffffff8b8d7c75 RDX=0000000000000001 RSI=ffffffff8c1b0a20 RDI=ffffffff81ddfdaa RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000000 R9 =ffffed1005666795 R10=ffff88802b333cab R11=0000000000000001 R12=ffffed1003862498 R13=0000000000000001 R14=ffffffff90d9c010 R15=0000000000000000 RIP=ffffffff8b8d65df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097249000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7406288 CR3=0000000073546000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000050df8c RBX=ffff88801c3c4980 RCX=ffffffff8b8d7c75 RDX=0000000000000001 RSI=ffffffff8c1b0a20 RDI=ffffffff81ddfdaa RBP=0000000000000002 RSP=ffffc9000047fdf0 R8 =0000000000000000 R9 =ffffed1005686795 R10=ffff88802b433cab R11=0000000000000002 R12=ffffed1003878930 R13=0000000000000002 R14=ffffffff90d9c010 R15=0000000000000000 RIP=ffffffff8b8d65df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097349000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000000 CR3=0000000050e7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85779595 RDI=ffffffff9b48f180 RBP=ffffffff9b48f140 RSP=ffffc900318f6de8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000072 R14=0000000000000010 R15=ffffffff85779530 RIP=ffffffff857795bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097449000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffff888097449000 CR3=0000000028eec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000