last executing test programs: 14m32.541842577s ago: executing program 2 (id=161): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5, 0x6]}, 0x8, 0x800) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f0000000140)={0x1, 0x40, 0x40, 0x3ff, 0x80, 0x9, 0x40, 0x81, 0x4, 0x88, 0x40, 0x7, &(0x7f0000000040)=[0x4, 0x9e5e, 0x8, 0xffff], 0x4, &(0x7f0000000080)="7d882db7dc79fce4d67426e59365336d50e826ebbd5451d3c8d236588da1aac923b0a132a1179ed9cffd7ab7a0790b6cd977a252d74f5d92aa03686545161fa78897e6529fd61048b99ca416aa36da9b367f1bd05325f860977d6488c23269c1f020d55678ed94f55895dfe334b897a23bc225791c8c94514cf853f33767c318f22616dd4a13", 0x86}) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x121000, 0xc0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000001c0)={0x10002006}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x282}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x20, 0x7f67, 0xfffff793, 0x3, {{0x23, 0x4, 0x0, 0x9, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x14, 0x5e, 0x0, 0xa, [0x800, 0x8, 0x10000, 0x5]}, @generic={0x82, 0xf, "5bfe5755bef8d45aeb88e48bb2"}, @noop, @cipso={0x86, 0x35, 0x0, [{0x2, 0x2}, {0x5, 0xd, "1b65bde13a138929eae2ab"}, {0x0, 0x5, "948710"}, {0x1, 0x12, "dfcc317628b45ecbdaad81fde6c8ec9a"}, {0x2, 0x9, "103ec9c6dce50e"}]}, @ssrr={0x89, 0xf, 0xa5, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}, @rr={0x7, 0xf, 0x88, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0xbf, 0x10, 0x8, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x7800, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xdf, 0x6, 0xfffffffe, 0x40, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1ff, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@mpls_getnetconf={0x54, 0x52, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x1) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/11, 0xb}], 0x1, &(0x7f0000000780)=""/107, 0x6b}, 0x3}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/78, 0x4e}, {&(0x7f0000001880)=""/21, 0x15}, {&(0x7f00000018c0)=""/130, 0x82}], 0x4, &(0x7f00000019c0)=""/249, 0xf9}, 0x3}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/214, 0xd6}], 0x2}, 0x1}], 0x3, 0x0, &(0x7f0000001cc0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() prlimit64(r7, 0x0, &(0x7f0000001d00)={0xe, 0xb}, &(0x7f0000001d40)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000001d80)={0x2, 0x2, 'client1\x00', 0x1, "900b7c0dedfd1e14", "87d960ceea41bed8db16d268e74d9b34e9d5a87671761406e875322dce957caa", 0x400, 0x3}) openat$kvm(0xffffff9c, &(0x7f0000001e40), 0x200200, 0x0) r8 = add_key$keyring(&(0x7f0000001f40), &(0x7f0000001f80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000001e80)='trusted\x00', &(0x7f0000001ec0)={'syz', 0x1}, &(0x7f0000001f00)='^$\xc7\x00', r8) r9 = syz_open_pts(r1, 0x100) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x1a) syz_open_dev$usbmon(&(0x7f0000001fc0), 0x200, 0x6000) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000002000)) sendmsg$nl_generic(r1, &(0x7f0000002240)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002200)={&(0x7f0000002080)={0x17c, 0x25, 0x1, 0x70bd28, 0x25dfdbfc, {0x16}, [@nested={0xc6, 0x168, 0x0, 0x1, [@generic="948ae14e5489b029f606a0a800c858545bb3c28f335be47ac61f1476f13c0e5c44385c04f0d6d490a9c068c560bd656b8b74a686e2e78c7fe6e308ac25c521901704b8de7da489b88d2c7df42ac691cb2baa9e508d61383301bd319cdfa4d8a1b05d6628590a45fc9f7347aca80866a20aae92372dcb2f2d0bd020efa49c1c045d0c560461ef4d76e61a29f115ba2ab5161e2492c9ed5bcc4e19a1db8fd90865eb4066d7bae4ff31ae91a00960f4d8591507bf177de39d7fc7612d4a13725dd38743"]}, @typed={0x9d, 0xc, 0x0, 0x0, @binary="924459fa16b81ee8c41118996a09fc2dfff075c934fb681f03a470b3a5ccd5eaad9d62a9e90534d29ba2b4bd523e78a74086c25f70dce1483466f5d0f6074d4ac3f02f12599f2e9c7889719bfa108a13d8301867ed5f0ea116f67494adeae7a3be6186bd58fd2ccc5a32d5488981f95fd3bf6b2f904040402ba8e6686eb6f84e070f55a0366b2d539d41ae0b15b848260f9dd40d0bd3ac3559"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000002400)={'\x00', 0x23, 0x8, 0x9, 0x9, 0x0, r7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000002440)={0x7, 0x7ff, {r7}, {0xffffffffffffffff}, 0x1, 0x2e6}) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000004500)={0x80200, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300), {0x38}, &(0x7f0000002340)=""/122, 0x7a, &(0x7f00000023c0)=""/53, &(0x7f00000044c0)=[r7, r10, r7, r11, r7, r12, r7, r7], 0x8, {r1}}, 0x58) fsopen(&(0x7f0000004580)='ocfs2_dlmfs\x00', 0x1) ioctl$TIOCGPKT(r9, 0x80045438, &(0x7f00000045c0)) recvmmsg(r6, &(0x7f0000004a40)=[{{&(0x7f0000004600)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004680)=""/110, 0x6e}, {&(0x7f0000004700)=""/98, 0x62}, {&(0x7f0000004780)=""/95, 0x5f}], 0x3, &(0x7f0000004840)=""/137, 0x89}, 0x3}, {{&(0x7f0000004900)=@phonet, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/108, 0x6c}], 0x1}, 0x8a6}], 0x2, 0x1, 0x0) 14m31.552736436s ago: executing program 2 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) unshare(0x22020400) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000140)=[{0x9, 0x1, 0xb1, 0x6}, {0x7fff, 0xc, 0x8, 0x40}, {0xdf28, 0x6, 0x6f, 0x401}, {0x5, 0xfd, 0x9, 0x9a9}]}, 0x8) r3 = fsmount(r2, 0x0, 0x83) r4 = openat(r3, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf7, 0x0, 0x41c}}}, 0x7) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/97) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe3b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) open_by_handle_at(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="00f6ffff0d000000521c85e9af110680ca240e27612ebfabac92aad79b0128cd7975a272f74235b42b8f56a8406a23aa2409870ef7793e7b3b08fc43985c2d43bb87dd2bb0d5eb69c94f83c692b8d2ff925acbb68079e284971f93690019e14fff35544c248b04e610a01375d3ad7dd1326a8b1e8d8486b70cf145148fd393e04240116f481d9fcf2d5161a471c07543"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14m28.890320036s ago: executing program 2 (id=165): setns(0xc9, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) fcntl$setpipe(r0, 0x407, 0x5) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x3, 0x3, 0x100, &(0x7f0000001100)="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"}) sched_setscheduler(r3, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') prlimit64(r3, 0x9, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="e8ab7740f5b48cfe7cc3276c3f34fb000a604b3e2c74f6d232f3a4651f0c3065a952544d06c93aa5aa8a49665c8bc04e7ca088c38ac60312fbff105e3da0365bf4225de0beda", &(0x7f0000000480)="4a441f3836560a655e66cc56f3b1f248c4f4f8c0fe031a38333e34f6f658b8fcc56dae92"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r2, 0x101) getpid() sendmmsg(r1, &(0x7f0000000440), 0x0, 0x0) 14m26.48951211s ago: executing program 2 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0xffff7171}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 14m25.452734944s ago: executing program 2 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xa4, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0xfd94, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x10}}, 0x12c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x22}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x17, 0x34, @random="56975c5cee3837c86c22d98961a46c7b2564f0"}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x80088) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 14m24.282462824s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x40) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002380)=ANY=[@ANYBLOB="96e68692871ee9c640c1eb5fea290ab8203ea9ea9df0c03d15bfc4bbc96052753de9445c51673d1c2b9aa4234aa00ef9000034c9af4d5e3934ebd3d02299a8f9f9ceb1e67eb4d7b18f622eaf0f1c5d77c7e6c15e0a3deac11baf8a27fa790a311b4045a1d7f286ae9e4a7ccdacfaec6304dfe22da53a2c789145d02787", @ANYRESHEX, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x800) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) (async) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000100)=[{&(0x7f00000022c0)="e47ab324659c322fa6a093aee1eb4db8d5d198fe1a5469918d0784a03d6a10f66eaff493885d3bc9392d179b6686a76807ac8606c461b1a636e55914cc0362d26c4045de8537566385657478fba569f90f445bcc1a9455d51c9c03f91173c0bd9c8478aed56ad2627d132bf26495e78108ea70bb8745d33dd5927e5479e7852352f3c4f1c02fe768000000000000000000", 0xfffffdef}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) 14m8.870653013s ago: executing program 32 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x40) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002380)=ANY=[@ANYBLOB="96e68692871ee9c640c1eb5fea290ab8203ea9ea9df0c03d15bfc4bbc96052753de9445c51673d1c2b9aa4234aa00ef9000034c9af4d5e3934ebd3d02299a8f9f9ceb1e67eb4d7b18f622eaf0f1c5d77c7e6c15e0a3deac11baf8a27fa790a311b4045a1d7f286ae9e4a7ccdacfaec6304dfe22da53a2c789145d02787", @ANYRESHEX, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x800) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) (async) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000100)=[{&(0x7f00000022c0)="e47ab324659c322fa6a093aee1eb4db8d5d198fe1a5469918d0784a03d6a10f66eaff493885d3bc9392d179b6686a76807ac8606c461b1a636e55914cc0362d26c4045de8537566385657478fba569f90f445bcc1a9455d51c9c03f91173c0bd9c8478aed56ad2627d132bf26495e78108ea70bb8745d33dd5927e5479e7852352f3c4f1c02fe768000000000000000000", 0xfffffdef}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) 11.727858868s ago: executing program 0 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 10.893329839s ago: executing program 0 (id=1874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f00000000c0)='./bus\x00', 0x1, 0xd02) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) acct(0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 9.576964128s ago: executing program 0 (id=1879): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x82, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x21, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfbfffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl(r1, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a0000000300000020000000200000000100000001") (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xf9) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x18) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000009c0), 0x5b0, r3}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x5}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r5, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0xfffffffe}]}) (async) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x14, 0x35, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x318, 0x4b7b5}}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000002) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003005018ae71080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 7.674480412s ago: executing program 4 (id=1884): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0xffff7171}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, r1}]) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdfef25712500", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x404c800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.210849963s ago: executing program 1 (id=1889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r2 = getpgid(0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) r4 = syz_pidfd_open(r2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040)) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x1, 0x200}, 0x90) 5.482132882s ago: executing program 4 (id=1891): chdir(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x80101) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002b", @ANYRES16=r1], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f00000002c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x1e5, 0x80, @buffer={0x310, 0x1003, &(0x7f00000014c0)=""/4099}, &(0x7f00000001c0)="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", 0x0, 0x1, 0x1, 0xfffffffc, 0x0}) 5.199489297s ago: executing program 3 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) 4.878543203s ago: executing program 1 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 4.46654742s ago: executing program 3 (id=1894): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$kcm(0x11, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x112}, {&(0x7f0000000640)="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", 0x179}, {&(0x7f0000001640)="ba50ab9d06a0c1e23b345868662c1fd1cf06650aa127c4b8b08b0464bbe33c75836eb752e511150aeb1e14374faf4c77522e482f85169dd0f71ba969662244d65fac198936e258894e100119989524934493ccffaafd564b6a34180f57cab50087004d9b127a40a44e289969cd8db1f40231d32f74f10ac6770b1dfc16d609a763df67b06bb5fd00f69c96029d46e19b60efd78094fa01dae06c9843e7365258c222df0fa2644e287983deb427505f9ea1c9e05c4310329f55f71e3e80f5ef1128cee3148d1270bf8872ce8d2a73a23ce6482c12375e885212885bd840bd60f04282a28025150e206cec8eae46cdf7da10125116c0356a9464c0e55131412c2357b8802c4fa984f5b9040407b6903622f61475561935f496c2d26e8238cf5f1451d7d35a3ce041d904e79ad19da583cb0144acc86b5be1c461d5affc934f760b9fdbc2bfd881cafb1fcc20d6994f619b76da4fa5a23264292ed1162443c01b244b639bb1161bd12c98f562b888a93a41c057c04a11efd23e1bb9241e55f3ba5820d88a27e94508886740369c69da4239cc02edfaf14984139b3ecc1828beaf9e6b840f2ade342378916c44de9315a5cf7090cc2b99be7837d80a9a8a0f07baeb20848e15d59af097dde05bb0660290951fbd79b1eb4bd1e5c3307d35c7662dc602f2c4f6a0c099d603fd80a1ecb51b01263e0b13492a5d83702d77fdbc432d2dd96427fa550bec939ceb0ffbc15a41b828ff4602a9ea27564b875d3521003c564fd38ecfdfe349f2f92e45911334883a025559839980165f870ba0a676a2615ccd0437d1b8432e4d7398d01fca695081db3853068b1f443b63b966a627b41c1cec227755466314a05e863a7d516292eb2ab06d3dd9dbd481b79d5a1d9cc41fbdaf77aaa55c27fabd5d2ff073cea26a0d876907103e8716ffa410a99cbfaeb1a1e6e68c23dd4ad2d3239c5865cf4c52f3323784ba28357f8eaca97b9ba948162cd0be2cdfa6d962c66072746817c1fbbd1df3b30206e06068a2fadc718770aaf374876de467e94bc78159321a7ca9018db6d97259f1a29a79429c4068d73e0ddd24054eae779853d7074fe19e4e1ce2cef7b9c16a0a87aa428abb2a8ff0b16b69870c14d31519a9b0c91a1487a9c316239e7be6c62d68365c7b5507864f7325cbbca4d67e98a8a01db915b9e6746d7d726e1e1bf80722d7920e59ea0160f78da7395b64a3af1015fd3f68c01d365ed613316178918b3af9d773cc09724db077e3c2fe0baa1e1ab4d869516ff7c21f9020015c4015013deb5b930d2b84c345ae0ae84a28e092098336cbc5e643ec2049277c358b2f56417300a43ac19b25ca719d57cde99bd5fa6118830f610445e38ad68390093dcf78187e808491c95bd21a1c96a71b9d480f68c7a8d996464cc9a977f661825f2decfc12c504518d151a2ce6877ad37e7d0e7e6ef030e76cefcf2ce1a1daf1a50807025385ce9705fb1f8722e56b909281468b2700be001ee6fe6de0474fdcedd68a181663728786c73e3959fcf7f33b6a754b0ac8b820a8f62b11b0c3137529a19b56d796197103f3b5747e1e54ab5ba1b0e1f773b425e7c0305775d52df31c17752406b85d1ca6d6eb7a391c81a42b34793be309f8e59a247b5d25392df8592f8b5ef4632cf6ee13c689433c50b4ffd744e6ef326b0ef7093d3549f48bd2926ae2d187deb813feb8b59b4ec50bc276aa7b18b6dd2dfdc864a0394e2e366564c93576ad71f7606bc6dfa1859eb85a255f0e0cd8527556f4fd6b905d83855fa900bf20835eb320a82b1f7aa596802c860da3c7d56122231c94a9de3c9ad0d7c1cfb62f9e5509f2b2a1c624f60788d5776664c282fe57f2003d75bb1295e425e96aad80c61361cb85ef6440f288bc6329214081d69964cf324848995058762fb8fbcd3361926161920b70920f980024f9ae363f2fa8ae455dc70b37c1bb5372283787307a9a2547a40d9653a1ce865ebfab31a8480d3ead90cca1a71f109a194cccb8c5519df06c521796ea7c4031341b30c299b7de658ced7bbb00e4a8df00c414d5844faf4fa16cce1c6e97c185160c8c42559d905005c3759b7899596f29dd2a82e46a25d4f01d5885a2958e4338a35025c883d8f6bba51ad1c8ebae7e4b63a895d9d1be9562763e25e7c5e9b2dba11d00635a44f9d9ea19c976488e315526e82626d636656706a66b2d6e45d89f4fda4d37b3301f65c5ccbd5ccc11a4d1e4e02e0c9b1944a3bcaab46b1d94f51211e550b4ce386e3bf7cd5d7606f6da4a78444d2708506de24c40c6b68a8140e31f8827afd43b83076a990ec418de30051f183658259b3940c6a452323780bb715927a46777c976121e2e26acb613550d25fee58aa5400079170517ab70d730430f78dd688864131a0eee6d6d8095b23528d1a541b70c8ac12e9e31628042b66cd72b755a22ed91461520f4042fc819faeb3980480efbacf7dbafefd5941bfd9b5e566666ee620a6e1499b6aadcc3879c672fae192cb0cfe4cf6ca314043c637e22a88f850c3dcc8d6bb4746fdb50bb444683ee87421257f791a0b5173b5350a800a200dc0303342ecca7e0b95ba5ab3c698450faa8ab908b2ca56e43fa856bc931f3ec065f116f39a1273a12eea2f49e12d105d412815817661647020c862361571b0b22882a748a77f61e03505a5801b2d5b8c605de2e36a830be04cba1b3a76c84dbb8577c8e3a7d3b5f64c81ca5a4dc06a76b7bd995fb02826e193573767f2f6669bb2409fec67efb865d5d0f33c25f9f6804e606e93fddac3ffaeac5a5267e817c0681b9abe35e11d4ea6551e78839d5f31dd4b4dea45e5beff41a353554ab7495d2b626d9a51ce2c8554da83dc47d570ee52e344a67161cb703dfcf5d85ab8332eb0ef8a3cd2ac966f8923cbd608a6c88bce33c2892f72dde345bde395b88230b306167c8d188d98c1892181b6d2c184e70ab7d2dd282876b01d8f35187524a76489fdd4f8c8e4dd4d39e6636a5fd6d5af279d0cf71c7cdbec4f473e677c70e00fba07e95bb133460190c5b43302f8c8f900600000000000000ee927b31e2238d4928faa8dc000d6cf62444f303668d8a166f7298889a9076d19c204ae532a77df9bd2eb78a2dba76a3e9148cc85ff8750f10bdeec37d8d880c92ec5b73891629ea44ca2572678c817a7df1303e3443995b3687d9c319b7366f23a6188cdb6c0c73d9460d0549c6d3b96a5a54647b582aa827c34cd78aa6870956c6bf43dc29c7e6167144c3457fa51b16f9dd4bf21904c79d432174726b807282546b5b91ecedca7350145307514fccc5a2f45a508c52d34a5c520251d0e887c58af3cb5d02ac6a6d47dc8439e976ce0b4708eb3efd263ad03c457e3ba87a84a28336a24912729656f7f277014cd9fb9182de9aeb36ea50b7e5c419aa9b76737104ece3e546c8e3e1e6dcec4a5946e68e1d5f23119c7f32f565632d2dfab51887b0709871aa880f8139a38b74a0f08840d5c2711f44961fed5c41889001cdf8fc017aa20f6205fb3371150acfa016b3801c6351928c678443467cfb2a2d915fa8b49960fc390e3a0fdef35d9ed20eb3fd5e2454eb3f3429187e2214adb441ac4f655cd7d3948e9e1fa6f3b35746cb91188a891fe2442daeecffb0216f84798fe1bc1f5ccc6f208581492780854755e6c46adca430850ac17e51f573aef7469702fbf79fcee55e08fa23026ee41a26352f024e70226ce7db9fb8aef2a1f0ed559d69ccb36f70e83432730a7048a1a00cc160e3c00fd1ce56d37e8ae9a5df8135dacbde66bdf7674cb77fb74cf336b3098b8d7119fb34b774600fb95f74b55b1edae0a5b16d87e41f1044f2f17a01ce547fbd566d06cc9c01df51ab6a593365e5fb264d89801f40379d831855bcf01ad9533f32aa2f9ff344d77dba934cb1f90545fc4d46751fd6907eeb227c089724b6a39cb700ee874f7dada7668dee15a3aad3484357fb6839f258d0084fcf23572bc0db2dbcd048a49e5c0e6a7040df525d7d74fd13350c2f7178127117aef1fff78111fb549f66cb570c5a0c4137bbb7798ddcf6b7113df8e4078c573e3a82b0b0f1565f72f8f88e86cc46fb8d156c237dfcef462a99e952fd4de37cf372470b034e7ab4bfcd7338867854e77ddbc91423602dbb75adfd9b42a7e8d1923bf5ac46d7ce252ef20fcab1a90a81081ddbbe78947e58cf1ba89f24bb3c94f248ea846665e3cbe3af94c1b55c56c32e99f58671d7b5609f807863f2f9d2c9acb7322ff767dac038c06b70f71d629cc2f033648cdd3f2218f1f882d42ab36a05ed92988823a51f5ee2f552cbf5e1185077beafab66143428aa7697d0b75133db2ede9ee37f96b9639b9288264e995898509c1c532c3b7e3d1ed543d70f711839105793d279e1c6909f9c9072b8f50d9c453f50a8ab1a72f88dada1da35ffb7ab13466fb4d7b230e2f7466611622aa105f27b2eff164d2e32068697ae2cbff953d3e0fd3b07850f286fc7973efcfe05eb78ebd7ecc06ed7812fedf8b9cfa0d56dc431afd88d3dd2ecfab8bf1a949c5b8089828cae42ce6ef3145117c4d5ab7966224410ed7be3ef7a3b02843edd692f35e2353f21d032963a5498c9f42866c60bd03a0148", 0xccf}], 0x3}, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 4.110417881s ago: executing program 1 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) 3.967206769s ago: executing program 4 (id=1896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) 3.672359981s ago: executing program 0 (id=1897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.5934505s ago: executing program 3 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4b, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000150640fe8007000000000000000000"], 0x0) 3.592746862s ago: executing program 1 (id=1899): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0xffff7171}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, r1}]) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdfef25712500", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x404c800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.268883876s ago: executing program 4 (id=1900): chdir(0x0) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x80101) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002bbd700005", @ANYRES16=r0], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f00000002c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$vga_arbiter(r2, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) 3.134451394s ago: executing program 0 (id=1901): chdir(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x80101) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000", @ANYRES16=r1], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f00000002c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x1e5, 0x80, @buffer={0x310, 0x1003, &(0x7f00000014c0)=""/4099}, &(0x7f00000001c0)="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", 0x0, 0x1, 0x1, 0xfffffffc, 0x0}) 3.009032418s ago: executing program 3 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) 1.92240559s ago: executing program 4 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 1.830079447s ago: executing program 3 (id=1904): chdir(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x80101) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002bbd70", @ANYRES16=r1], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f00000002c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x1e5, 0x80, @buffer={0x310, 0x1003, &(0x7f00000014c0)=""/4099}, &(0x7f00000001c0)="a7013d8bc6a47b07282009fe4e7d0900760cc8d74bdcc4ebd80aaa503d63a757ac359e7f9cc9858d8daf43fff436c705bc7e656458475b9ef8867bd850057f52264f00822f4b9d111413a7066e48f72d99802f00a8cfbb286a6ef7cf536b56481ca7a81fd26170728bb05607578f8feebc92e60ebf7d7ae3987b233e5d794fd55012ada4a5680bec56ff06a45d955b4ec514dd062bdf713a2b6421a9e164a1f686b39a81706f02000000a53110f9641e1e9f63719b6568409496a128dd27d7a1a471d9614bca00000000000072d0cedbbd909263fc834e43b3fdc8e8af48c5a70059abfe0e318cd0a6d4d19508014eb56a174d95e4014927ff7b34bb7f5668beb810c024c22bc73784d3a9175616b19603ad633358f0f8ad344abd98821c326f08cc04335c130a867e055d70de7fc52e2a454f2cc644a34c32b4df10d6fb05d1fe0825ea9965af40c79e76b761e3be9026a815dd82bd87e1ed1103ebb2295d10049e3cd97b0e1367ca10bedf146d1648110238b71e6b6980fdcb461c90a5ff1c3fa07d9f00363211d6ea2b8116232db675722b9b817e997f58ec465ca798a96c5b2a060eb9650b39ba0cf822d4b34974e94ede354b1aad29620a55fa64982ae7988c356683b5c96d0f7870529fbbeea8f4ebf2b4dbe0a599faf19205c87d73f4f40c6412b7", 0x0, 0x1, 0x1, 0xfffffffc, 0x0}) 853.2302ms ago: executing program 0 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) 852.515795ms ago: executing program 1 (id=1906): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$kcm(0x11, 0x3, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x37) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x112}, {&(0x7f0000000640)="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", 0x179}, {&(0x7f0000001640)="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", 0xccf}], 0x3}, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 777.334592ms ago: executing program 4 (id=1907): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000024c0)='./file0/../file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="34ce01b5", @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000f0076f0ffff"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) getsockopt(r0, 0x4, 0x81, &(0x7f0000000340)=""/226, &(0x7f0000000440)=0xe2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) io_setup(0x6, &(0x7f00000003c0)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r6], &(0x7f00000003c0), 0x0, 0x2}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x2a, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f00000001c0)) 81.915757ms ago: executing program 3 (id=1908): prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b58026bd7000fedbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="05001e0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket(0x29, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000002400005c0000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000000000000000000783397d5fde59019fbf03b00197b93fc406cf57024ba291b823a18fb7239b5d368a9e51515e0a16903dbb8ab2949fc3265260ca99846ff8da5fefc7de8f7923afa3cfe81e6b723620c0f84fa81db5fe896b6b6276b65df72acf3cba1f35d4cd322174da9208b604932fdd77fa679e93e326eccc59f6b2bcd36286f43af39e5e1f67dc7354a6e05ad9063668cbe6122947f95a23b513fce"], 0x50) 0s ago: executing program 1 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) kernel console output (not intermixed with test programs): 039] rc_core: IR keymap rc-hauppauge not found [ 424.116591][ T1039] Registered IR keymap rc-empty [ 424.152247][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 424.304076][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 424.796146][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 425.206422][ T2644] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 425.898168][ T8879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 425.898189][ T8879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.899319][ T8879] vhci_hcd vhci_hcd.0: Device attached [ 426.006074][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 426.201282][ T2644] usb 37-1: device descriptor read/64, error -110 [ 426.334364][ T8880] vhci_hcd: connection closed [ 426.342246][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 426.342329][ T5590] vhci_hcd vhci_hcd.0: release socket [ 426.344054][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 426.388710][ T2644] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 428.374548][ T8168] usb 6-1: USB disconnect, device number 19 [ 430.263389][ T8905] netlink: 'syz.1.887': attribute type 13 has an invalid length. [ 431.201688][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 431.634809][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 431.864730][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 431.917181][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 431.917203][ T9] usb 9-1: Manufacturer: syz [ 431.988683][ T9] usb 9-1: config 0 descriptor?? [ 432.499066][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.530769][ T9] rc_core: IR keymap rc-hauppauge not found [ 432.530787][ T9] Registered IR keymap rc-empty [ 432.557465][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.591921][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 432.700525][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 433.201510][ T8921] netlink: 468 bytes leftover after parsing attributes in process `syz.0.889'. [ 435.450045][ T9] usb 9-1: USB disconnect, device number 9 [ 435.760648][ T8936] netlink: 468 bytes leftover after parsing attributes in process `syz.1.896'. [ 436.793474][ T8945] netlink: 468 bytes leftover after parsing attributes in process `syz.4.901'. [ 437.161516][ T8949] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 437.161539][ T8949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.164402][ T8949] vhci_hcd vhci_hcd.0: Device attached [ 437.173945][ T8950] vhci_hcd: connection closed [ 437.178687][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 437.178724][ T5590] vhci_hcd vhci_hcd.0: release socket [ 437.178777][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 439.552329][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.552603][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.986365][ T8969] netlink: 'syz.3.909': attribute type 13 has an invalid length. [ 441.250802][ T8979] netlink: 468 bytes leftover after parsing attributes in process `syz.4.913'. [ 441.539649][ T8983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 441.539690][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.540093][ T8983] vhci_hcd vhci_hcd.0: Device attached [ 441.572563][ T8984] vhci_hcd: connection closed [ 441.573415][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 441.573449][ T5590] vhci_hcd vhci_hcd.0: release socket [ 441.573504][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 442.626383][ T8992] netlink: 468 bytes leftover after parsing attributes in process `syz.4.916'. [ 442.849776][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 443.094850][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 443.140692][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 443.199583][ T8998] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 443.199606][ T8998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.200125][ T8998] vhci_hcd vhci_hcd.0: Device attached [ 443.353922][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 443.353958][ T9] usb 6-1: Manufacturer: syz [ 443.450929][ T9] usb 6-1: config 0 descriptor?? [ 443.647112][ T2644] usb 37-1: new low-speed USB device number 16 using vhci_hcd [ 443.733951][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 444.151659][ T8999] vhci_hcd: connection reset by peer [ 444.153247][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 444.153276][ T5590] vhci_hcd vhci_hcd.0: release socket [ 444.153686][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 444.610442][ T9] rc_core: IR keymap rc-hauppauge not found [ 444.610470][ T9] Registered IR keymap rc-empty [ 444.694993][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 444.880997][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 444.969256][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.052236][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.276215][ T9024] netlink: 468 bytes leftover after parsing attributes in process `syz.0.925'. [ 448.514593][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 448.726975][ T2644] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 448.771400][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 448.796427][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 448.851912][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 448.851933][ T9] usb 8-1: Manufacturer: syz [ 448.937284][ T9] usb 8-1: config 0 descriptor?? [ 449.426447][ T855] usb 6-1: USB disconnect, device number 20 [ 450.082655][ T9] rc_core: IR keymap rc-hauppauge not found [ 450.082677][ T9] Registered IR keymap rc-empty [ 450.142343][ T9] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 450.247406][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input22 [ 450.690824][ T9033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 450.690857][ T9033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.692972][ T9033] vhci_hcd vhci_hcd.0: Device attached [ 450.739957][ T9034] vhci_hcd: connection closed [ 450.742166][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 450.742231][ T5590] vhci_hcd vhci_hcd.1: release socket [ 450.742351][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 452.143413][ T30] usb 8-1: USB disconnect, device number 19 [ 452.996133][ T9041] netlink: 'syz.4.929': attribute type 13 has an invalid length. [ 454.058812][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 454.241235][ T25] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 454.292463][ T25] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 454.387484][ T25] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 454.387509][ T25] usb 5-1: Manufacturer: syz [ 454.428947][ T25] usb 5-1: config 0 descriptor?? [ 455.007324][ T25] rc_core: IR keymap rc-hauppauge not found [ 455.007349][ T25] Registered IR keymap rc-empty [ 455.058543][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 455.244213][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 455.430424][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.500604][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.975307][ T9067] netlink: 468 bytes leftover after parsing attributes in process `syz.3.935'. [ 459.565430][ T30] usb 5-1: USB disconnect, device number 14 [ 460.963594][ T30] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 462.195243][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 462.195268][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.195532][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 462.507917][ T2102] usb 45-1: new low-speed USB device number 9 using vhci_hcd [ 462.784702][ T9107] netlink: 468 bytes leftover after parsing attributes in process `syz.1.945'. [ 462.920841][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 463.322316][ T9103] vhci_hcd: connection reset by peer [ 463.347573][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 463.347608][ T5590] vhci_hcd vhci_hcd.4: release socket [ 463.347829][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 466.120088][ T9132] netlink: 468 bytes leftover after parsing attributes in process `syz.1.951'. [ 466.274494][ T9137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 466.274541][ T9137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.275377][ T9137] vhci_hcd vhci_hcd.0: Device attached [ 466.578904][ T9138] vhci_hcd: connection closed [ 466.581786][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 466.581821][ T5590] vhci_hcd vhci_hcd.3: release socket [ 466.583124][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 466.651480][ T5812] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 466.696888][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 466.740367][ T9141] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 466.740393][ T9141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.740662][ T9141] vhci_hcd vhci_hcd.0: Device attached [ 466.888759][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 466.911456][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 466.930213][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 466.930233][ T9] usb 9-1: Manufacturer: syz [ 466.972754][ T9] usb 9-1: config 0 descriptor?? [ 467.057766][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 467.373887][ T6046] usb 37-1: new low-speed USB device number 17 using vhci_hcd [ 467.475197][ T9144] vhci_hcd: connection reset by peer [ 467.485535][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 467.485578][ T5590] vhci_hcd vhci_hcd.0: release socket [ 467.490631][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 467.606815][ T2102] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 467.842306][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.957895][ T9] rc_core: IR keymap rc-hauppauge not found [ 467.957936][ T9] Registered IR keymap rc-empty [ 467.978406][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.126363][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 468.262124][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 471.774131][ T8168] usb 9-1: USB disconnect, device number 10 [ 472.137796][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 472.509894][ T6046] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 472.945867][ T9183] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 472.945901][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.946598][ T9183] vhci_hcd vhci_hcd.0: Device attached [ 473.336693][ T9] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 473.485254][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 473.900268][ T9184] vhci_hcd: connection reset by peer [ 473.910620][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 473.911680][ T5590] vhci_hcd vhci_hcd.1: release socket [ 473.914015][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 474.386136][ T9189] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 474.386163][ T9189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 474.386378][ T9189] vhci_hcd vhci_hcd.0: Device attached [ 474.419458][ T9190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 474.419482][ T9190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 474.419719][ T9190] vhci_hcd vhci_hcd.0: Device attached [ 474.699448][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 474.944331][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 475.163312][ T9194] vhci_hcd: connection closed [ 475.168896][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 475.168989][ T5590] vhci_hcd vhci_hcd.0: release socket [ 475.169825][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 475.301405][ T6046] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 475.519432][ T25] usb 43-1: new low-speed USB device number 10 using vhci_hcd [ 475.612313][ T9192] vhci_hcd: connection reset by peer [ 475.618909][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 475.618938][ T5590] vhci_hcd vhci_hcd.3: release socket [ 475.619298][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 475.833353][ T9199] netlink: 468 bytes leftover after parsing attributes in process `syz.1.966'. [ 477.948556][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 478.281519][ T9214] netlink: 'syz.3.971': attribute type 13 has an invalid length. [ 478.507010][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 478.904011][ T9222] netlink: 468 bytes leftover after parsing attributes in process `syz.0.975'. [ 479.126525][ T1039] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 479.334132][ T1039] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 479.369847][ T1039] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 479.550497][ T1039] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 479.550526][ T1039] usb 6-1: Manufacturer: syz [ 479.668964][ T1039] usb 6-1: config 0 descriptor?? [ 480.596553][ T1039] rc_core: IR keymap rc-hauppauge not found [ 480.596591][ T1039] Registered IR keymap rc-empty [ 480.651730][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 480.656188][ T25] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 480.751277][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.787419][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.791566][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 481.190231][ T9237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 481.190269][ T9237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 481.190845][ T9237] vhci_hcd vhci_hcd.0: Device attached [ 481.719854][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 481.897176][ T50] usb 45-1: new low-speed USB device number 10 using vhci_hcd [ 482.269416][ T9239] vhci_hcd: connection reset by peer [ 482.273462][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 482.273542][ T5590] vhci_hcd vhci_hcd.4: release socket [ 482.310498][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 482.540391][ T1039] usb 6-1: USB disconnect, device number 21 [ 483.932109][ T9247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 483.932129][ T9247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.932882][ T9247] vhci_hcd vhci_hcd.0: Device attached [ 484.385037][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 484.797852][ T9256] netlink: 'syz.1.981': attribute type 13 has an invalid length. [ 484.926268][ T9251] vhci_hcd: connection closed [ 484.939443][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 484.939715][ T5590] vhci_hcd vhci_hcd.4: release socket [ 484.940725][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 486.448158][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 487.076433][ T50] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 488.029475][ T1039] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 488.355313][ T1039] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 488.599129][ T9285] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 488.599148][ T9285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.599749][ T9285] vhci_hcd vhci_hcd.0: Device attached [ 489.062244][ T1039] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 489.156675][ T30] usb 37-1: new low-speed USB device number 19 using vhci_hcd [ 489.285355][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 489.873080][ T9290] netlink: 468 bytes leftover after parsing attributes in process `syz.4.993'. [ 489.891574][ T1039] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 489.949135][ T9286] vhci_hcd: connection reset by peer [ 489.951597][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 489.951623][ T5590] vhci_hcd vhci_hcd.0: release socket [ 489.951842][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 490.189126][ T1039] usb 6-1: Manufacturer: syz [ 490.821547][ T1039] usb 6-1: config 0 descriptor?? [ 491.595551][ T9296] netlink: 'syz.4.995': attribute type 13 has an invalid length. [ 492.265915][ T1039] usb 6-1: can't set config #0, error -71 [ 492.334848][ T1039] usb 6-1: USB disconnect, device number 22 [ 492.659938][ T9307] netlink: 468 bytes leftover after parsing attributes in process `syz.0.998'. [ 493.974815][ T9317] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1003'. [ 494.269545][ T30] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 494.291884][ T9319] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1004'. [ 494.873475][ T9329] netlink: 'syz.1.1007': attribute type 13 has an invalid length. [ 496.363326][ T1039] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 496.563971][ T9339] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1010'. [ 496.783386][ T1039] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 496.917912][ T1039] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 497.024259][ T1039] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 497.024283][ T1039] usb 9-1: Manufacturer: syz [ 497.132009][ T1039] usb 9-1: config 0 descriptor?? [ 497.646241][ T1039] rc_core: IR keymap rc-hauppauge not found [ 497.646286][ T1039] Registered IR keymap rc-empty [ 497.674344][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.745410][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 497.749012][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.939119][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 498.604289][ T9353] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1013'. [ 499.006628][ T9358] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1015'. [ 499.886392][ T855] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 501.011089][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.011371][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.802798][ T9381] netlink: 'syz.3.1019': attribute type 13 has an invalid length. [ 502.833397][ T9380] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1018'. [ 502.903356][ T30] usb 9-1: USB disconnect, device number 11 [ 505.639801][ T9404] netlink: 'syz.0.1027': attribute type 13 has an invalid length. [ 506.326372][ T8871] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 506.825868][ T50] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 507.030782][ T50] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 507.054515][ T50] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 507.116720][ T50] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 507.116746][ T50] usb 9-1: Manufacturer: syz [ 507.208535][ T50] usb 9-1: config 0 descriptor?? [ 507.384301][ T9416] netlink: 'syz.0.1031': attribute type 13 has an invalid length. [ 507.683161][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.737570][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.216388][ T50] rc_core: IR keymap rc-hauppauge not found [ 508.216406][ T50] Registered IR keymap rc-empty [ 508.253866][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 508.342225][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 508.758551][ T9423] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1032'. [ 510.862183][ T50] usb 9-1: USB disconnect, device number 12 [ 511.171688][ T9437] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1035'. [ 512.857838][ T9451] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 512.857870][ T9451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 512.858433][ T9451] vhci_hcd vhci_hcd.0: Device attached [ 513.546437][ T2102] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 513.776358][ T9452] vhci_hcd: connection closed [ 513.842617][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 513.842651][ T5590] vhci_hcd vhci_hcd.4: release socket [ 514.047786][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 515.346535][ T9464] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1042'. [ 516.464080][ T9466] netlink: 'syz.4.1043': attribute type 13 has an invalid length. [ 517.390436][ T1039] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 517.567072][ T1039] usb 6-1: device descriptor read/64, error -71 [ 517.866098][ T1039] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 518.086309][ T1039] usb 6-1: device descriptor read/64, error -71 [ 518.212642][ T1039] usb usb6-port1: attempt power cycle [ 518.615948][ T1039] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 518.676321][ T1039] usb 6-1: device descriptor read/8, error -71 [ 518.842845][ T9484] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1049'. [ 518.968696][ T1039] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 519.029059][ T1039] usb 6-1: device descriptor read/8, error -71 [ 519.150648][ T1039] usb usb6-port1: unable to enumerate USB device [ 520.365906][ T9495] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1059'. [ 521.256320][ T1039] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 523.709046][ T9525] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 523.709073][ T9525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.709748][ T9525] vhci_hcd vhci_hcd.0: Device attached [ 524.137235][ T855] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 524.822291][ T9526] vhci_hcd: connection reset by peer [ 524.826704][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 524.826758][ T5590] vhci_hcd vhci_hcd.1: release socket [ 524.828002][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 526.796324][ T2102] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 526.956381][ T9201] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 527.088110][ T9201] usb 5-1: device descriptor read/64, error -71 [ 527.281047][ T9549] netlink: 'syz.3.1062': attribute type 13 has an invalid length. [ 527.336381][ T9201] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 527.496917][ T9201] usb 5-1: device descriptor read/64, error -71 [ 527.608887][ T9201] usb usb5-port1: attempt power cycle [ 527.965857][ T9201] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 527.995139][ T9201] usb 5-1: device descriptor read/8, error -71 [ 528.226970][ T9201] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 528.268070][ T9201] usb 5-1: device descriptor read/8, error -71 [ 528.391723][ T9201] usb usb5-port1: unable to enumerate USB device [ 529.296518][ T855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 530.620122][ T9573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 530.620147][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.620556][ T9573] vhci_hcd vhci_hcd.0: Device attached [ 530.979811][ T9575] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1072'. [ 531.311109][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 531.349820][ T2102] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 531.665401][ T9582] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1073'. [ 532.400949][ T9577] vhci_hcd: connection reset by peer [ 532.403659][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 532.403704][ T5590] vhci_hcd vhci_hcd.1: release socket [ 532.403911][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 534.755838][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 536.507077][ T2102] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 536.520639][ T9620] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1081'. [ 537.088284][ T1041] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 537.328368][ T1041] usb 8-1: device descriptor read/64, error -71 [ 537.577150][ T1041] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 537.770995][ T1041] usb 8-1: device descriptor read/64, error -71 [ 537.887714][ T1041] usb usb8-port1: attempt power cycle [ 538.286104][ T1041] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 538.320544][ T1041] usb 8-1: device descriptor read/8, error -71 [ 538.566079][ T1041] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 538.665002][ T1041] usb 8-1: device descriptor read/8, error -71 [ 538.775804][ T1041] usb usb8-port1: unable to enumerate USB device [ 538.958985][ T9634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 538.959009][ T9634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 538.959911][ T9634] vhci_hcd vhci_hcd.0: Device attached [ 539.386843][ T25] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 540.181253][ T9635] vhci_hcd: connection reset by peer [ 540.183899][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 540.183964][ T5590] vhci_hcd vhci_hcd.1: release socket [ 540.184333][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 542.356937][ T9655] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1090'. [ 542.608626][ T9662] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1092'. [ 542.665960][ T50] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 543.328167][ T9670] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1093'. [ 544.506199][ T25] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 545.033085][ T9684] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 545.033106][ T9684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.034214][ T9684] vhci_hcd vhci_hcd.0: Device attached [ 545.468398][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 545.551021][ T8871] usb 45-1: new low-speed USB device number 12 using vhci_hcd [ 546.069688][ T9686] vhci_hcd: connection reset by peer [ 546.071931][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 546.071957][ T5590] vhci_hcd vhci_hcd.4: release socket [ 546.072176][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 547.509500][ T1041] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 547.781513][ T1041] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 547.829972][ T1041] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 547.870066][ T1041] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 547.870088][ T1041] usb 5-1: Manufacturer: syz [ 547.967790][ T1041] usb 5-1: config 0 descriptor?? [ 548.477792][ T9704] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1104'. [ 548.777517][ T1041] rc_core: IR keymap rc-hauppauge not found [ 548.777547][ T1041] Registered IR keymap rc-empty [ 548.792231][ T9707] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1105'. [ 548.853806][ T1041] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 548.944332][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 549.067757][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.100472][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.646399][ T8871] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 552.655255][ T9732] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1110'. [ 552.687591][ T30] usb 5-1: USB disconnect, device number 20 [ 554.693679][ T9745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 554.693717][ T9745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 554.698332][ T9745] vhci_hcd vhci_hcd.0: Device attached [ 554.881867][ T9747] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1116'. [ 555.000040][ T2102] usb 39-1: new low-speed USB device number 15 using vhci_hcd [ 555.043598][ T9753] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1115'. [ 555.077647][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 555.610023][ T9748] vhci_hcd: connection reset by peer [ 555.623172][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 555.623224][ T5590] vhci_hcd vhci_hcd.1: release socket [ 555.623636][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 557.472967][ T9775] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1121'. [ 557.572607][ T9774] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1122'. [ 557.680994][ T9771] netlink: 'syz.4.1120': attribute type 13 has an invalid length. [ 558.434084][ T9787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 558.434122][ T9787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.436613][ T9787] vhci_hcd vhci_hcd.0: Device attached [ 559.126809][ T8871] usb 37-1: new low-speed USB device number 20 using vhci_hcd [ 559.151510][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 559.743132][ T9792] vhci_hcd: connection reset by peer [ 559.745323][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 559.745376][ T5590] vhci_hcd vhci_hcd.0: release socket [ 559.745568][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 560.107456][ T2102] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 561.590002][ T50] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 561.782154][ T9811] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1129'. [ 561.797403][ T9812] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1128'. [ 561.820297][ T50] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 561.904818][ T50] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 561.947431][ T50] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 561.947459][ T50] usb 5-1: Manufacturer: syz [ 562.144207][ T50] usb 5-1: config 0 descriptor?? [ 562.431715][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.431989][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.504065][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.532348][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.746158][ T50] rc_core: IR keymap rc-hauppauge not found [ 563.746194][ T50] Registered IR keymap rc-empty [ 563.967875][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 564.051102][ T9832] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 564.051138][ T9832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.051515][ T9832] vhci_hcd vhci_hcd.0: Device attached [ 564.203313][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 564.259339][ T8871] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 564.540174][ T855] usb 45-1: new low-speed USB device number 13 using vhci_hcd [ 565.629232][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 565.920635][ T9834] vhci_hcd: connection reset by peer [ 565.923726][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 565.923787][ T5590] vhci_hcd vhci_hcd.4: release socket [ 565.924158][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 566.176013][ T9201] usb 5-1: USB disconnect, device number 21 [ 566.341383][ T9841] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1131'. [ 568.532688][ T9858] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1139'. [ 568.909507][ T9864] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1140'. [ 569.688293][ T855] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 570.215983][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 570.448020][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 570.670507][ T9881] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1144'. [ 570.734410][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 571.110298][ T9882] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 571.110321][ T9882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.112868][ T9882] vhci_hcd vhci_hcd.0: Device attached [ 571.420857][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 571.440826][ T3379] usb 45-1: new low-speed USB device number 14 using vhci_hcd [ 571.722377][ T9883] vhci_hcd: connection reset by peer [ 571.723899][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 571.724004][ T5590] vhci_hcd vhci_hcd.4: release socket [ 571.732844][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 572.071812][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 572.071842][ T9] usb 8-1: Manufacturer: syz [ 572.155220][ T9] usb 8-1: config 0 descriptor?? [ 572.636234][ T9] rc_core: IR keymap rc-hauppauge not found [ 572.636254][ T9] Registered IR keymap rc-empty [ 572.660417][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 572.747024][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input30 [ 573.572586][ T30] usb 8-1: USB disconnect, device number 27 [ 574.416675][ T9902] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1151'. [ 574.624792][ T9906] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1152'. [ 576.447892][ T9926] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1155'. [ 576.586705][ T3379] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 576.906137][ T5976] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 577.202835][ T5976] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 577.288956][ T5976] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 577.558499][ T5976] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 577.558521][ T5976] usb 8-1: Manufacturer: syz [ 578.538839][ T9932] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 578.538863][ T9932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.542222][ T9932] vhci_hcd vhci_hcd.0: Device attached [ 578.579348][ T5976] usb 8-1: config 0 descriptor?? [ 578.837950][ T8871] usb 37-1: new low-speed USB device number 21 using vhci_hcd [ 579.251074][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 579.387555][ T9934] vhci_hcd: connection reset by peer [ 579.396064][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 579.396097][ T5590] vhci_hcd vhci_hcd.0: release socket [ 579.396332][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 579.427489][ T5976] rc_core: IR keymap rc-hauppauge not found [ 579.427518][ T5976] Registered IR keymap rc-empty [ 579.492577][ T5976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 579.555833][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 579.613689][ T5976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input31 [ 579.761458][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 579.954879][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 579.983507][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 579.983535][ T9] usb 9-1: Manufacturer: syz [ 580.207211][ T9] usb 9-1: config 0 descriptor?? [ 580.580910][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.647551][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.296153][ T9] rc_core: IR keymap rc-hauppauge not found [ 581.296317][ T9] Registered IR keymap rc-empty [ 581.406752][ T9] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc1 [ 581.582483][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc1/input32 [ 582.494923][ T855] usb 8-1: USB disconnect, device number 28 [ 583.429137][ T9957] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1163'. [ 583.879907][ T9963] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1164'. [ 583.938443][ T8871] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 585.566972][ T9975] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1165'. [ 585.686503][ T3379] usb 9-1: USB disconnect, device number 13 [ 587.274623][ T9990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 587.274647][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 587.274916][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 587.385129][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 587.598004][ T5979] usb 39-1: new low-speed USB device number 16 using vhci_hcd [ 587.611872][ T9994] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1179'. [ 587.834395][ T9991] vhci_hcd: connection reset by peer [ 587.840247][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 587.840295][ T5590] vhci_hcd vhci_hcd.1: release socket [ 587.841176][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 589.439974][T10003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 589.440004][T10003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 589.440558][T10003] vhci_hcd vhci_hcd.0: Device attached [ 589.774407][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 589.936417][ T5976] usb 43-1: new low-speed USB device number 11 using vhci_hcd [ 590.218901][T10007] vhci_hcd: connection reset by peer [ 590.245003][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 590.245035][ T5590] vhci_hcd vhci_hcd.3: release socket [ 590.295403][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 590.483235][T10016] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1175'. [ 591.469581][T10024] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1176'. [ 592.749380][ T5979] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 592.877177][ T50] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 593.066919][ T50] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 593.166813][ T50] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 593.179515][ T50] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 593.179552][ T50] usb 8-1: Manufacturer: syz [ 593.244860][ T50] usb 8-1: config 0 descriptor?? [ 593.741560][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.851179][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.782547][ T50] rc_core: IR keymap rc-hauppauge not found [ 594.782581][ T50] Registered IR keymap rc-empty [ 594.862770][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 595.011373][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input33 [ 595.057244][ T5976] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 595.227775][T10048] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1184'. [ 596.917533][ T5976] usb 8-1: USB disconnect, device number 29 [ 597.220077][T10064] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1187'. [ 598.546486][ T50] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 598.789629][ T50] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 598.875501][ T50] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 598.902027][ T50] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 598.902049][ T50] usb 5-1: Manufacturer: syz [ 598.964425][ T50] usb 5-1: config 0 descriptor?? [ 599.766288][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.771500][ T50] rc_core: IR keymap rc-hauppauge not found [ 599.771521][ T50] Registered IR keymap rc-empty [ 599.792829][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.816445][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 599.845800][T10085] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1190'. [ 599.886134][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 601.898933][T10103] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1194'. [ 603.369863][ T30] usb 5-1: USB disconnect, device number 22 [ 603.541216][ T50] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 603.849224][ T50] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 603.894168][ T50] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 603.958112][ T50] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 603.958132][ T50] usb 9-1: Manufacturer: syz [ 604.028207][ T50] usb 9-1: config 0 descriptor?? [ 604.196270][ T1041] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 604.396527][ T1041] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 604.482766][ T1041] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 604.498463][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.525000][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.591397][ T1041] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 604.591420][ T1041] usb 6-1: Manufacturer: syz [ 604.692908][ T1041] usb 6-1: config 0 descriptor?? [ 605.186444][ T50] rc_core: IR keymap rc-hauppauge not found [ 605.186478][ T50] Registered IR keymap rc-empty [ 605.322840][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 605.389489][T10127] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1198'. [ 605.505249][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input35 [ 605.792514][ T1041] rc_core: IR keymap rc-hauppauge not found [ 605.792549][ T1041] Registered IR keymap rc-empty [ 605.870936][ T1041] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 605.982661][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input36 [ 607.672833][ T2102] usb 6-1: USB disconnect, device number 31 [ 608.826435][ T2102] usb 9-1: USB disconnect, device number 14 [ 609.784695][T10155] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1204'. [ 610.242556][T10157] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1205'. [ 612.856014][ T6046] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 612.892236][T10185] netlink: 'syz.4.1210': attribute type 13 has an invalid length. [ 613.035705][ T6046] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.084925][ T6046] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 613.112601][ T6046] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.112621][ T6046] usb 6-1: Manufacturer: syz [ 613.174574][ T6046] usb 6-1: config 0 descriptor?? [ 613.726298][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.747505][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.240710][ T6046] rc_core: IR keymap rc-hauppauge not found [ 614.240730][ T6046] Registered IR keymap rc-empty [ 614.318042][ T6046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 614.414926][ T6046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input37 [ 616.245677][T10209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 616.245697][T10209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 616.246003][T10209] vhci_hcd vhci_hcd.0: Device attached [ 616.545787][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 616.569933][ T58] usb 45-1: new low-speed USB device number 15 using vhci_hcd [ 617.218806][T10216] vhci_hcd: connection reset by peer [ 617.222779][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 617.222976][ T5590] vhci_hcd vhci_hcd.4: release socket [ 617.223549][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 618.446050][ T6046] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 618.714402][ T2102] usb 6-1: USB disconnect, device number 32 [ 620.161748][T10229] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1220'. [ 621.104205][T10241] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1222'. [ 621.701998][ T58] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 622.859338][T10263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 622.859380][T10263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.859852][T10263] vhci_hcd vhci_hcd.0: Device attached [ 622.978514][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 623.092319][T10264] vhci_hcd: connection closed [ 623.093940][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 623.093978][ T5590] vhci_hcd vhci_hcd.3: release socket [ 623.094198][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 623.119454][ T9201] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 623.616667][ T1041] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 623.884758][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.885096][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.923642][ T1041] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 623.973997][ T1041] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 624.007906][ T1041] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 624.007926][ T1041] usb 9-1: Manufacturer: syz [ 624.049403][ T1041] usb 9-1: config 0 descriptor?? [ 624.118359][T10271] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1230'. [ 624.426711][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.466695][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.875938][ T1041] rc_core: IR keymap rc-hauppauge not found [ 624.875977][ T1041] Registered IR keymap rc-empty [ 624.932164][ T1041] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 625.034457][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input38 [ 625.561891][T10284] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1232'. [ 627.446223][ T9201] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 627.769652][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 628.291660][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 628.869721][ T50] usb 9-1: USB disconnect, device number 15 [ 630.022058][T10316] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 630.022088][T10316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.022708][T10316] vhci_hcd vhci_hcd.0: Device attached [ 630.126833][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 630.207168][T10320] vhci_hcd: connection closed [ 630.210217][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 630.210254][ T5590] vhci_hcd vhci_hcd.0: release socket [ 630.210465][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 630.276167][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 630.683956][T10326] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1240'. [ 631.253517][T10330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 631.253550][T10330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 631.254175][T10330] vhci_hcd vhci_hcd.0: Device attached [ 631.649716][ T9] usb 43-1: new low-speed USB device number 13 using vhci_hcd [ 631.895472][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 632.334346][T10331] vhci_hcd: connection reset by peer [ 632.341122][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 632.341169][ T5590] vhci_hcd vhci_hcd.3: release socket [ 632.341369][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 634.546639][ T6046] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 634.746550][ T1039] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 634.764811][ T6046] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 634.790712][ T6046] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 634.824836][ T6046] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 634.824869][ T6046] usb 6-1: Manufacturer: syz [ 634.890876][ T6046] usb 6-1: config 0 descriptor?? [ 634.906683][ T3379] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 634.979487][ T1039] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 635.184001][ T1039] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 635.348834][ T1039] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 635.348874][ T1039] usb 8-1: Manufacturer: syz [ 635.554683][ T1039] usb 8-1: config 0 descriptor?? [ 636.121255][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.142536][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.256342][ T6046] rc_core: IR keymap rc-hauppauge not found [ 636.256371][ T6046] Registered IR keymap rc-empty [ 636.296709][ T6046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 636.339340][ T1039] rc_core: IR keymap rc-hauppauge not found [ 636.339368][ T1039] Registered IR keymap rc-empty [ 636.380198][ T6046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 636.406937][ T1039] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 636.635275][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input40 [ 636.726294][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 639.920167][T10378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 639.920188][T10378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 639.920743][T10378] vhci_hcd vhci_hcd.0: Device attached [ 640.074860][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 640.220264][T10381] vhci_hcd: connection closed [ 640.223502][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 640.223597][ T5590] vhci_hcd vhci_hcd.0: release socket [ 640.225478][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 640.234485][ T6046] usb 37-1: new low-speed USB device number 23 using vhci_hcd [ 640.234838][ T6046] usb 37-1: enqueue for inactive port 0 [ 640.315922][ T6046] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 641.538827][ T5979] usb 6-1: USB disconnect, device number 33 [ 642.098156][ T9] usb 8-1: USB disconnect, device number 31 [ 642.104151][T10386] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1252'. [ 644.447934][T10410] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1260'. [ 644.591369][ T8871] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 645.426982][T10420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 645.427011][T10420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.427505][T10420] vhci_hcd vhci_hcd.0: Device attached [ 646.517860][ T9] usb 43-1: new low-speed USB device number 14 using vhci_hcd [ 647.010401][T10422] vhci_hcd: connection reset by peer [ 647.021305][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 647.021359][ T5590] vhci_hcd vhci_hcd.3: release socket [ 647.021756][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 647.210204][T10432] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1264'. [ 647.303114][ T6046] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 647.492915][ T6046] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 647.503952][ T6046] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 647.519872][ T6046] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 647.519893][ T6046] usb 6-1: Manufacturer: syz [ 647.559058][ T6046] usb 6-1: config 0 descriptor?? [ 647.993466][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.049014][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.146009][ T6046] rc_core: IR keymap rc-hauppauge not found [ 648.146034][ T6046] Registered IR keymap rc-empty [ 648.167063][ T6046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 648.196741][ T6046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 650.445870][ T1039] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 650.726827][ T1039] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 651.075973][ T1039] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 651.159094][ T1039] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 651.159115][ T1039] usb 5-1: Manufacturer: syz [ 651.425569][ T1039] usb 5-1: config 0 descriptor?? [ 651.651645][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 651.773947][T10450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 651.773996][T10450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.777875][T10450] vhci_hcd vhci_hcd.0: Device attached [ 652.304449][ T9] usb 43-1: device descriptor read/64, error -110 [ 652.605985][ T9] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 652.901138][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 653.669287][T10453] vhci_hcd: connection reset by peer [ 653.673163][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 653.673210][ T5590] vhci_hcd vhci_hcd.3: release socket [ 653.673759][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 654.587968][ T5976] usb 6-1: USB disconnect, device number 34 [ 654.606414][ T1039] rc_core: IR keymap rc-hauppauge not found [ 654.606432][ T1039] Registered IR keymap rc-empty [ 654.656169][ T1039] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1 [ 654.845984][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1/input42 [ 655.911884][T10462] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1271'. [ 656.301090][ T5976] usb 5-1: USB disconnect, device number 24 [ 657.709668][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 657.790285][T10483] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1280'. [ 658.881445][T10496] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 658.881470][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.881996][T10496] vhci_hcd vhci_hcd.0: Device attached [ 659.226031][ T8871] usb 45-1: new low-speed USB device number 16 using vhci_hcd [ 659.301621][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 659.745450][T10501] vhci_hcd: connection reset by peer [ 659.765527][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 659.765568][ T5590] vhci_hcd vhci_hcd.4: release socket [ 659.766093][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 662.262763][T10525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 662.262803][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 662.263259][T10525] vhci_hcd vhci_hcd.0: Device attached [ 662.643346][ T2644] usb 37-1: new low-speed USB device number 24 using vhci_hcd [ 662.809198][ T6046] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 663.102731][ T6046] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 663.303152][ T6046] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.414487][ T6046] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 663.414525][ T6046] usb 6-1: Manufacturer: syz [ 663.590436][ T6046] usb 6-1: config 0 descriptor?? [ 663.643358][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 664.035035][T10524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.130648][T10527] vhci_hcd: connection reset by peer [ 664.133335][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 664.133487][ T5590] vhci_hcd vhci_hcd.0: release socket [ 664.133848][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 664.144701][T10524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.327489][ T8871] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 664.519316][ T6046] rc_core: IR keymap rc-hauppauge not found [ 664.519358][ T6046] Registered IR keymap rc-empty [ 664.562063][ T6046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 664.650334][ T6046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 667.294794][ T9] usb 6-1: USB disconnect, device number 35 [ 667.771010][ T2644] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 667.774957][T10564] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1288'. [ 669.039710][T10575] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 669.039732][T10575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.040089][T10575] vhci_hcd vhci_hcd.0: Device attached [ 669.577958][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 669.676265][ T5976] usb 39-1: new low-speed USB device number 17 using vhci_hcd [ 669.760323][ T855] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 670.227666][T10577] vhci_hcd: connection reset by peer [ 670.310700][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 670.311417][ T5590] vhci_hcd vhci_hcd.1: release socket [ 670.350524][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 670.572409][T10585] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 670.572434][T10585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.572695][T10585] vhci_hcd vhci_hcd.0: Device attached [ 670.846158][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 670.887983][ T6046] usb 45-1: new low-speed USB device number 17 using vhci_hcd [ 670.993734][T10587] vhci_hcd: connection reset by peer [ 670.997158][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 670.997203][ T5590] vhci_hcd vhci_hcd.4: release socket [ 670.997402][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 674.012645][T10619] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1300'. [ 674.028328][ T50] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 674.237842][ T50] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 674.271746][ T50] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 674.299078][ T50] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 674.299098][ T50] usb 9-1: Manufacturer: syz [ 674.419421][ T50] usb 9-1: config 0 descriptor?? [ 674.806173][ T5976] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 675.036574][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.124560][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.133262][ T50] rc_core: IR keymap rc-hauppauge not found [ 675.133287][ T50] Registered IR keymap rc-empty [ 675.184528][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 675.283956][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 676.007046][ T6046] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 677.229594][T10644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 677.229619][T10644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.229958][T10644] vhci_hcd vhci_hcd.0: Device attached [ 677.567267][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 677.746267][ T5976] usb 43-1: new low-speed USB device number 16 using vhci_hcd [ 677.946714][ T9201] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 678.151948][ T9201] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 678.209107][ T9201] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 678.253524][ T9201] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 678.253653][ T9201] usb 6-1: Manufacturer: syz [ 678.284877][T10645] vhci_hcd: connection reset by peer [ 678.293700][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 678.293864][ T5590] vhci_hcd vhci_hcd.3: release socket [ 678.294909][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 678.358779][ T9201] usb 6-1: config 0 descriptor?? [ 679.326333][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.353059][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.477091][ T9201] rc_core: IR keymap rc-hauppauge not found [ 679.477117][ T9201] Registered IR keymap rc-empty [ 679.719694][ T9201] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 679.859184][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input45 [ 681.301820][ T855] usb 9-1: USB disconnect, device number 18 [ 682.854465][ T1041] usb 6-1: USB disconnect, device number 36 [ 682.908555][ T5976] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 683.692417][T10673] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1312'. [ 684.942417][T10690] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 684.942436][T10690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.943032][T10690] vhci_hcd vhci_hcd.0: Device attached [ 685.079058][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 685.347240][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.347699][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.407077][T10693] vhci_hcd: connection closed [ 685.413511][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 685.413572][ T5590] vhci_hcd vhci_hcd.4: release socket [ 685.414395][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 685.463633][ T8168] usb 45-1: new low-speed USB device number 18 using vhci_hcd [ 685.465086][ T8168] usb 45-1: enqueue for inactive port 0 [ 685.559302][ T8168] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 687.588078][ T5976] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 687.982101][ T5976] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 688.086498][ T5976] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.241208][ T5976] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 688.241231][ T5976] usb 9-1: Manufacturer: syz [ 688.325917][ T5976] usb 9-1: config 0 descriptor?? [ 688.851512][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.865824][ T5976] rc_core: IR keymap rc-hauppauge not found [ 688.865843][ T5976] Registered IR keymap rc-empty [ 688.918469][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.967478][ T5976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 689.153083][ T5976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input46 [ 689.430157][T10714] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1321'. [ 691.338306][T10729] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1324'. [ 693.126208][ T5976] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 693.404366][ T5976] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 693.413312][ T9201] usb 9-1: USB disconnect, device number 19 [ 693.454251][ T5976] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 693.521053][ T5976] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 693.521076][ T5976] usb 8-1: Manufacturer: syz [ 693.571242][ T5976] usb 8-1: config 0 descriptor?? [ 694.033826][T10750] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 694.033848][T10750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 694.035867][T10750] vhci_hcd vhci_hcd.0: Device attached [ 694.259464][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.304442][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.353312][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 694.516343][ T30] usb 39-1: new low-speed USB device number 18 using vhci_hcd [ 694.825755][T10751] vhci_hcd: connection reset by peer [ 694.828573][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 694.828626][ T5590] vhci_hcd vhci_hcd.1: release socket [ 694.828823][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 695.270688][ T5976] rc_core: IR keymap rc-hauppauge not found [ 695.270710][ T5976] Registered IR keymap rc-empty [ 695.550151][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 695.579387][ T5976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 695.709833][ T5976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input47 [ 696.284538][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 697.587828][ T50] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 697.788558][ T50] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 697.864616][ T50] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 697.922468][ T50] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 697.922497][ T50] usb 5-1: Manufacturer: syz [ 698.047324][ T50] usb 5-1: config 0 descriptor?? [ 698.767054][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.804561][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.368467][ T50] rc_core: IR keymap rc-hauppauge not found [ 699.368484][ T50] Registered IR keymap rc-empty [ 699.417317][ T50] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1 [ 699.519218][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1/input48 [ 699.606428][ T30] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 700.838608][T10790] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1335'. [ 700.878774][ T30] usb 8-1: USB disconnect, device number 33 [ 704.022278][ T1041] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 704.276188][ T1041] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 704.363056][ T1041] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 704.437248][ T1041] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 704.437270][ T1041] usb 8-1: Manufacturer: syz [ 704.555370][T10812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 704.555390][T10812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 704.556010][T10812] vhci_hcd vhci_hcd.0: Device attached [ 704.610528][ T1041] usb 8-1: config 0 descriptor?? [ 704.761947][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 704.795806][ T5976] usb 5-1: USB disconnect, device number 25 [ 705.016627][ T8871] usb 45-1: new low-speed USB device number 19 using vhci_hcd [ 705.239839][T10813] vhci_hcd: connection reset by peer [ 705.277055][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.401261][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 705.402276][ T5590] vhci_hcd vhci_hcd.4: release socket [ 705.405435][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 705.445851][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.239993][ T1041] rc_core: IR keymap rc-hauppauge not found [ 706.240038][ T1041] Registered IR keymap rc-empty [ 706.317566][ T1041] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 706.476376][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input49 [ 709.314652][ T30] usb 8-1: USB disconnect, device number 34 [ 710.179734][ T8871] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 710.495999][ T1041] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 710.673741][ T1041] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 710.695096][ T1041] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 710.716035][ T1041] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 710.716056][ T1041] usb 9-1: Manufacturer: syz [ 710.800901][ T1041] usb 9-1: config 0 descriptor?? [ 710.940360][T10844] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1346'. [ 711.221112][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.252566][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.683041][ T1041] rc_core: IR keymap rc-hauppauge not found [ 711.683068][ T1041] Registered IR keymap rc-empty [ 711.796559][ T1041] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 711.996145][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input50 [ 713.549283][T10846] usb 9-1: USB disconnect, device number 20 [ 714.162133][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 715.296172][ T2102] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 716.077023][ T9201] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 716.264311][ T9201] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 716.343549][ T9201] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 716.413604][ T9201] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 716.413628][ T9201] usb 9-1: Manufacturer: syz [ 716.548047][ T9201] usb 9-1: config 0 descriptor?? [ 716.954818][T10883] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1355'. [ 717.032028][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.063397][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.079547][ T9201] rc_core: IR keymap rc-hauppauge not found [ 717.079575][ T9201] Registered IR keymap rc-empty [ 717.120447][ T9201] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 717.213675][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input51 [ 718.785992][T10899] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1357'. [ 720.500264][ T1041] usb 9-1: USB disconnect, device number 21 [ 721.138020][ T9201] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 721.328657][ T9201] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 721.391549][ T9201] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 721.436314][ T9201] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 721.436337][ T9201] usb 5-1: Manufacturer: syz [ 721.495250][ T9201] usb 5-1: config 0 descriptor?? [ 721.804236][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.824246][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.939355][ T9201] rc_core: IR keymap rc-hauppauge not found [ 721.939380][ T9201] Registered IR keymap rc-empty [ 722.013605][ T9201] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 722.110620][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 723.105534][ T1041] usb 5-1: USB disconnect, device number 26 [ 723.115829][ T855] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 723.877119][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 724.162673][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 724.491979][T10944] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1368'. [ 727.076145][ T1041] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 727.262184][ T1041] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 727.293876][ T1041] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 727.308413][ T1041] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 727.308437][ T1041] usb 9-1: Manufacturer: syz [ 727.370500][ T1041] usb 9-1: config 0 descriptor?? [ 727.711680][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.741656][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.847936][ T1041] rc_core: IR keymap rc-hauppauge not found [ 727.847960][ T1041] Registered IR keymap rc-empty [ 727.919409][ T1041] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 728.098087][ T1041] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input53 [ 728.109490][ T855] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 729.176442][ T50] usb 9-1: USB disconnect, device number 23 [ 731.336190][ T2102] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 732.132379][T11008] FAULT_INJECTION: forcing a failure. [ 732.132379][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.132426][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.4.1389 Not tainted syzkaller #0 PREEMPT(full) [ 732.132447][T11008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 732.132461][T11008] Call Trace: [ 732.132489][T11008] [ 732.132519][T11008] dump_stack_lvl+0x100/0x190 [ 732.132580][T11008] should_fail_ex.cold+0x5/0xa [ 732.132685][T11008] _copy_to_user+0x32/0xd0 [ 732.132811][T11008] simple_read_from_buffer+0xcb/0x170 [ 732.132876][T11008] proc_fail_nth_read+0x1af/0x230 [ 732.132963][T11008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.133088][T11008] ? rw_verify_area+0xce/0x6d0 [ 732.133124][T11008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.133178][T11008] vfs_read+0x1e4/0xb40 [ 732.133260][T11008] ? lock_acquire+0x1d1/0x380 [ 732.133310][T11008] ? __fget_files+0x34/0x3d0 [ 732.133376][T11008] ? __pfx_vfs_read+0x10/0x10 [ 732.133402][T11008] ? find_held_lock+0x2b/0x80 [ 732.133441][T11008] ? __fget_files+0x215/0x3d0 [ 732.133568][T11008] ? __fget_files+0x21f/0x3d0 [ 732.133745][T11008] ksys_read+0x12a/0x250 [ 732.133799][T11008] ? __pfx_ksys_read+0x10/0x10 [ 732.133984][T11008] do_int80_emulation+0x166/0x650 [ 732.134086][T11008] asm_int80_emulation+0x1a/0x20 [ 732.134124][T11008] RIP: 0023:0xf71275ab [ 732.134186][T11008] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 732.134205][T11008] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 732.134233][T11008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 732.134246][T11008] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 732.134255][T11008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 732.134263][T11008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 732.134272][T11008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 732.134525][T11008] [ 732.816883][T11013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 732.816907][T11013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.817182][T11013] vhci_hcd vhci_hcd.0: Device attached [ 732.931420][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 733.296747][T11018] vhci_hcd: connection closed [ 733.352467][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 733.352513][ T5590] vhci_hcd vhci_hcd.1: release socket [ 733.353218][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 733.487057][ T30] usb 39-1: new low-speed USB device number 19 using vhci_hcd [ 733.488765][ T30] usb 39-1: enqueue for inactive port 0 [ 733.628228][ T30] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 734.529477][T11028] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1392'. [ 735.067893][ T50] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 735.321247][ T9201] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 735.610093][ T9201] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 735.630661][ T9201] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 735.644715][ T9201] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 735.644732][ T9201] usb 5-1: Manufacturer: syz [ 735.695005][ T9201] usb 5-1: config 0 descriptor?? [ 736.039195][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.072058][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.269576][ T9201] rc_core: IR keymap rc-hauppauge not found [ 736.269614][ T9201] Registered IR keymap rc-empty [ 736.349467][ T9201] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 736.503870][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 738.122248][T11063] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1400'. [ 738.125272][ T9201] usb 5-1: USB disconnect, device number 28 [ 740.137424][T11075] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 740.137461][T11075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.138428][T11075] vhci_hcd vhci_hcd.0: Device attached [ 740.333975][T11082] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1403'. [ 740.338543][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 740.644761][T11079] vhci_hcd: connection closed [ 740.650667][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 740.650717][ T5590] vhci_hcd vhci_hcd.0: release socket [ 740.651065][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 740.706584][ T30] usb 37-1: new low-speed USB device number 25 using vhci_hcd [ 740.707236][ T30] usb 37-1: enqueue for inactive port 0 [ 740.800107][ T30] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 741.481656][ T50] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 742.757318][T11099] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1407'. [ 744.229568][ T9201] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 744.416540][ T9201] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 744.469616][ T9201] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 744.519778][ T9201] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 744.519798][ T9201] usb 6-1: Manufacturer: syz [ 744.582786][ T9201] usb 6-1: config 0 descriptor?? [ 744.693538][T11117] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1413'. [ 744.926071][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.942481][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.108378][ T9201] rc_core: IR keymap rc-hauppauge not found [ 745.108416][ T9201] Registered IR keymap rc-empty [ 745.187172][ T9201] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 745.329130][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input55 [ 746.027103][T10846] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 746.652646][ T3268] usb 6-1: USB disconnect, device number 38 [ 746.750542][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.750833][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.087302][ T8871] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 748.544832][T11139] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1419'. [ 750.581809][T11159] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1427'. [ 751.336341][T10846] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 751.493839][T10846] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 751.530699][T10846] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 751.573427][T10846] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 751.573454][T10846] usb 5-1: Manufacturer: syz [ 751.632423][T10846] usb 5-1: config 0 descriptor?? [ 751.948013][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.978672][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.076940][T10846] rc_core: IR keymap rc-hauppauge not found [ 752.076962][T10846] Registered IR keymap rc-empty [ 752.111402][T10846] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 752.153775][T10846] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 752.936005][T11023] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 752.985792][T11179] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1430'. [ 753.590543][ T3268] usb 5-1: USB disconnect, device number 30 [ 754.528624][T11189] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1434'. [ 755.416470][T11203] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1437'. [ 756.445929][T11215] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1440'. [ 757.606333][T10846] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 758.205903][T11228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 758.205928][T11228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.206360][T11228] vhci_hcd vhci_hcd.0: Device attached [ 758.943822][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 759.445822][ T855] usb 43-1: new low-speed USB device number 17 using vhci_hcd [ 759.882847][T11230] vhci_hcd: connection reset by peer [ 759.887973][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 759.888025][ T5590] vhci_hcd vhci_hcd.3: release socket [ 759.888399][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 760.782932][T11244] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1447'. [ 762.039845][T11261] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1452'. [ 763.416878][ T30] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 764.563386][T11284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 764.563410][T11284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 764.564005][T11284] vhci_hcd vhci_hcd.0: Device attached [ 764.577677][ T855] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 764.828686][ T9201] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 764.996153][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 765.037245][ T9201] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 765.078896][ T9201] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 765.125937][ T9201] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 765.125961][ T9201] usb 8-1: Manufacturer: syz [ 765.189847][ T9201] usb 8-1: config 0 descriptor?? [ 765.243465][T11023] usb 39-1: new low-speed USB device number 20 using vhci_hcd [ 765.969473][ T9201] rc_core: IR keymap rc-hauppauge not found [ 765.969500][ T9201] Registered IR keymap rc-empty [ 766.054080][ T9201] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 766.140480][ T9201] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input57 [ 766.413916][T11286] vhci_hcd: connection reset by peer [ 766.485168][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 766.485513][ T5590] vhci_hcd vhci_hcd.1: release socket [ 766.486480][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 766.783390][T11291] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1461'. [ 766.866426][T11283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.895184][T11283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.894863][ T9201] usb 8-1: USB disconnect, device number 38 [ 768.048973][T11300] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1463'. [ 769.596629][ T855] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 770.229636][T11317] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1468'. [ 770.406666][T11023] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 773.175885][ T9201] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 773.829332][T11339] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1472'. [ 774.903995][T11344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 774.904033][T11344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 774.904408][T11344] vhci_hcd vhci_hcd.0: Device attached [ 775.404089][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 775.625825][ T50] usb 37-1: new low-speed USB device number 26 using vhci_hcd [ 776.100407][T11355] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1475'. [ 777.226052][T11348] vhci_hcd: connection reset by peer [ 777.231289][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 777.231317][ T5590] vhci_hcd vhci_hcd.0: release socket [ 777.231517][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 777.825541][T11361] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1478'. [ 778.610352][T11367] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1479'. [ 780.750642][ T50] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 780.845880][ T1041] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 781.075827][ T3268] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 781.116703][T11400] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1486'. [ 781.280517][ T3268] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 781.293291][ T3268] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 781.356819][ T3268] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 781.356842][ T3268] usb 6-1: Manufacturer: syz [ 781.415520][ T3268] usb 6-1: config 0 descriptor?? [ 781.855501][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.883040][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.027286][ T3268] rc_core: IR keymap rc-hauppauge not found [ 782.027307][ T3268] Registered IR keymap rc-empty [ 782.040410][ T3268] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 782.064625][ T3268] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input58 [ 782.370446][T10846] usb 6-1: USB disconnect, device number 41 [ 783.005471][T11409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 783.005519][T11409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 783.008101][T11409] vhci_hcd vhci_hcd.0: Device attached [ 783.496301][ T5820] usb 43-1: new low-speed USB device number 18 using vhci_hcd [ 783.688610][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 784.014817][T11414] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1490'. [ 784.789902][T11410] vhci_hcd: connection reset by peer [ 784.825425][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 784.826451][ T5590] vhci_hcd vhci_hcd.3: release socket [ 784.827948][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 787.182436][T11439] jffs2: notice: (11439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 788.656878][ T5820] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 789.198948][ T30] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 790.892526][ T50] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 791.093722][ T50] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 791.167736][ T50] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 791.188394][ T50] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 791.188428][ T50] usb 5-1: Manufacturer: syz [ 791.258339][ T50] usb 5-1: config 0 descriptor?? [ 791.613042][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.635074][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.736245][ T50] rc_core: IR keymap rc-hauppauge not found [ 791.736284][ T50] Registered IR keymap rc-empty [ 791.791942][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 791.962231][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 793.644514][T11484] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 793.644545][T11484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.644941][T11484] vhci_hcd vhci_hcd.0: Device attached [ 794.189465][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 794.330058][ T1041] usb 45-1: new low-speed USB device number 20 using vhci_hcd [ 794.641241][ T855] usb 5-1: USB disconnect, device number 31 [ 794.838148][T11487] vhci_hcd: connection reset by peer [ 794.843185][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 794.843254][ T5590] vhci_hcd vhci_hcd.4: release socket [ 794.843943][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 796.166468][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 796.545885][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 797.496697][ T2644] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 797.566663][T11507] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 797.566686][T11507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 797.567047][T11507] vhci_hcd vhci_hcd.0: Device attached [ 798.434639][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 799.112902][T11509] vhci_hcd: connection closed [ 799.151502][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 799.151782][ T5590] vhci_hcd vhci_hcd.4: release socket [ 799.152010][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 799.446544][ T1041] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 801.059328][ T3268] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 801.249705][ T3268] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 801.264365][ T3268] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 801.321947][ T3268] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 801.321973][ T3268] usb 9-1: Manufacturer: syz [ 801.390093][ T3268] usb 9-1: config 0 descriptor?? [ 801.744176][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.760173][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.937231][T11534] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1519'. [ 801.959046][ T3268] rc_core: IR keymap rc-hauppauge not found [ 801.959071][ T3268] Registered IR keymap rc-empty [ 802.008464][ T3268] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 802.044017][ T3268] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input60 [ 802.425890][ T2644] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 804.098298][ T9] usb 9-1: USB disconnect, device number 29 [ 805.716656][ T50] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 806.526326][ T3268] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 806.744028][ T3268] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 806.766917][ T3268] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 806.789894][ T3268] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 806.789915][ T3268] usb 8-1: Manufacturer: syz [ 806.889677][ T3268] usb 8-1: config 0 descriptor?? [ 807.266593][ T3268] rc_core: IR keymap rc-hauppauge not found [ 807.266621][ T3268] Registered IR keymap rc-empty [ 807.331297][ T3268] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 807.396565][ T3268] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input61 [ 808.152105][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.192336][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.192631][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.246472][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.561889][T11579] lo: Caught tx_queue_len zero misconfig [ 811.914660][T11582] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1531'. [ 812.282628][T11584] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1532'. [ 812.522742][ T30] usb 8-1: USB disconnect, device number 40 [ 814.941961][T11603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 814.941993][T11603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 814.942571][T11603] vhci_hcd vhci_hcd.0: Device attached [ 815.076681][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 815.266353][T11604] vhci_hcd: connection closed [ 815.268664][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 815.268721][ T5590] vhci_hcd vhci_hcd.0: release socket [ 815.269842][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 815.296692][ T855] usb 37-1: new low-speed USB device number 27 using vhci_hcd [ 815.297094][ T855] usb 37-1: enqueue for inactive port 0 [ 815.368239][ T855] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 816.910634][T11620] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1544'. [ 818.852668][T11635] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1546'. [ 820.995548][T11652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 820.995587][T11652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 820.996106][T11652] vhci_hcd vhci_hcd.0: Device attached [ 821.174521][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 821.296893][ T9] usb 39-1: new low-speed USB device number 21 using vhci_hcd [ 821.382254][T11654] vhci_hcd: connection reset by peer [ 821.389292][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 821.389428][ T5590] vhci_hcd vhci_hcd.1: release socket [ 821.393435][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 821.638059][ T1039] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 821.851315][ T1039] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 821.860694][ T1039] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 821.887563][ T1039] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 821.887585][ T1039] usb 5-1: Manufacturer: syz [ 821.937224][ T1039] usb 5-1: config 0 descriptor?? [ 822.032069][T11662] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1554'. [ 822.508732][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.524062][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.585780][ T1039] rc_core: IR keymap rc-hauppauge not found [ 822.585810][ T1039] Registered IR keymap rc-empty [ 822.633379][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 822.684811][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 823.915446][ T30] usb 5-1: USB disconnect, device number 32 [ 824.758144][T11687] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1559'. [ 825.494440][T11695] FAULT_INJECTION: forcing a failure. [ 825.494440][T11695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.494480][T11695] CPU: 2 UID: 0 PID: 11695 Comm: syz.0.1560 Not tainted syzkaller #0 PREEMPT(full) [ 825.494499][T11695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 825.494512][T11695] Call Trace: [ 825.494536][T11695] [ 825.494561][T11695] dump_stack_lvl+0x100/0x190 [ 825.494668][T11695] should_fail_ex.cold+0x5/0xa [ 825.494748][T11695] _copy_to_user+0x32/0xd0 [ 825.494861][T11695] simple_read_from_buffer+0xcb/0x170 [ 825.494970][T11695] proc_fail_nth_read+0x1af/0x230 [ 825.495041][T11695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.495159][T11695] ? rw_verify_area+0xce/0x6d0 [ 825.495232][T11695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.495272][T11695] vfs_read+0x1e4/0xb40 [ 825.495351][T11695] ? lock_acquire+0x1d1/0x380 [ 825.495397][T11695] ? __fget_files+0x34/0x3d0 [ 825.495453][T11695] ? __pfx_vfs_read+0x10/0x10 [ 825.495485][T11695] ? find_held_lock+0x2b/0x80 [ 825.495575][T11695] ? __fget_files+0x215/0x3d0 [ 825.495674][T11695] ? __fget_files+0x21f/0x3d0 [ 825.495869][T11695] ksys_read+0x12a/0x250 [ 825.495912][T11695] ? __pfx_ksys_read+0x10/0x10 [ 825.496119][T11695] do_int80_emulation+0x166/0x650 [ 825.496200][T11695] asm_int80_emulation+0x1a/0x20 [ 825.496233][T11695] RIP: 0023:0xf71475ab [ 825.496285][T11695] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 825.496303][T11695] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 825.496329][T11695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd5d0 [ 825.496343][T11695] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 825.496357][T11695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.496371][T11695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.496385][T11695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.496642][T11695] [ 826.359734][T11702] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1563'. [ 826.406219][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 827.354083][T11707] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 827.354113][T11707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 827.354595][T11707] vhci_hcd vhci_hcd.0: Device attached [ 827.776461][ T9] usb 39-1: new low-speed USB device number 22 using vhci_hcd [ 827.850479][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 828.299171][T11710] vhci_hcd: connection reset by peer [ 828.300699][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 828.300727][ T5590] vhci_hcd vhci_hcd.1: release socket [ 828.301695][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 830.783821][ T43] audit: type=1804 audit(1789029999.721:3): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1573" name="bus" dev="ramfs" ino=29019 res=1 errno=0 [ 830.805141][ T43] audit: type=1804 audit(1789029999.741:4): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1573" name="bus" dev="ramfs" ino=29019 res=1 errno=0 [ 831.268094][T11747] tmpfs: Unknown parameter 'grp²uota_blo%‹[÷ardlim)ÇÈÛ×' [ 832.898253][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 834.022443][ T43] audit: type=1800 audit(1789030002.921:5): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1576" name="file0" dev="overlay" ino=2132 res=0 errno=0 [ 834.098027][T11756] jffs2: notice: (11756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 834.946321][T11763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 834.946354][T11763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 834.949526][T11763] vhci_hcd vhci_hcd.0: Device attached [ 835.827745][ T30] usb 43-1: new low-speed USB device number 19 using vhci_hcd [ 835.914346][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 836.072534][T11766] vhci_hcd: connection reset by peer [ 836.079724][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 836.079768][ T5590] vhci_hcd vhci_hcd.3: release socket [ 836.080397][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 836.464894][T11779] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1581'. [ 836.812831][T11785] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1583'. [ 838.092256][ T2102] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 839.954430][T11810] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1591'. [ 840.003474][T11812] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1592'. [ 840.980470][ T30] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 842.220056][T11824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 842.220077][T11824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 842.220437][T11824] vhci_hcd vhci_hcd.0: Device attached [ 842.586399][ T50] usb 45-1: new low-speed USB device number 21 using vhci_hcd [ 843.005575][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 843.061482][T11826] vhci_hcd: connection reset by peer [ 843.062314][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 843.062369][ T5590] vhci_hcd vhci_hcd.4: release socket [ 843.071858][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 846.002982][T11860] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1603'. [ 846.038653][ T6046] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 847.710882][ T50] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 848.281014][T11883] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 848.281045][T11883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 848.285071][T11883] vhci_hcd vhci_hcd.0: Device attached [ 848.796109][ T9] usb 37-1: new low-speed USB device number 28 using vhci_hcd [ 849.195979][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 849.892409][T11886] vhci_hcd: connection reset by peer [ 849.894775][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 849.894818][ T5590] vhci_hcd vhci_hcd.0: release socket [ 849.895255][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 851.946048][T11916] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1615'. [ 852.566365][ T2102] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 853.927155][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 856.795889][T11953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 856.795913][T11953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 856.797351][T11953] vhci_hcd vhci_hcd.0: Device attached [ 857.335985][ T1041] usb 43-1: new low-speed USB device number 20 using vhci_hcd [ 857.366855][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 857.428955][T11960] vhci_hcd: connection reset by peer [ 857.430529][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 857.430578][ T5590] vhci_hcd vhci_hcd.3: release socket [ 857.430993][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 858.143518][T11973] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1628'. [ 862.510354][ T1041] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 862.999961][T12024] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1642'. [ 864.103995][T12022] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 864.104013][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 864.128727][T12022] vhci_hcd vhci_hcd.0: Device attached [ 864.538294][ T6046] usb 37-1: new low-speed USB device number 29 using vhci_hcd [ 864.540518][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 864.629894][T12038] vhci_hcd: connection reset by peer [ 864.634711][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 864.634745][ T5590] vhci_hcd vhci_hcd.0: release socket [ 864.635128][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 865.185893][ T1039] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 865.350619][ T1039] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 865.359289][ T1039] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 865.359503][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.366380][ T1039] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 865.366398][ T1039] usb 6-1: Manufacturer: syz [ 865.431043][ T1039] usb 6-1: config 0 descriptor?? [ 865.732329][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.751767][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.426641][ T1039] rc_core: IR keymap rc-hauppauge not found [ 866.426666][ T1039] Registered IR keymap rc-empty [ 866.470878][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 866.525271][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input63 [ 867.436539][T11023] usb 6-1: USB disconnect, device number 47 [ 868.001086][T12080] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1654'. [ 869.075072][T12090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 869.075102][T12090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 869.075883][T12090] vhci_hcd vhci_hcd.0: Device attached [ 869.172952][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 869.240251][T12092] vhci_hcd: connection closed [ 869.245413][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 869.245475][ T5590] vhci_hcd vhci_hcd.1: release socket [ 869.245572][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 869.639343][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.639634][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.690924][ T6046] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 869.705547][T12098] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1658'. [ 872.343192][T12125] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1666'. [ 872.908652][T12135] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 872.908677][T12135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.908917][T12135] vhci_hcd vhci_hcd.0: Device attached [ 872.988899][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 873.049756][T12138] vhci_hcd: connection closed [ 873.053412][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 873.053444][ T5590] vhci_hcd vhci_hcd.1: release socket [ 873.053485][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 875.940304][T12165] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1677'. [ 876.998671][T12180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 876.998698][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 876.998937][T12180] vhci_hcd vhci_hcd.0: Device attached [ 877.285809][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 877.326015][ T6046] usb 43-1: new low-speed USB device number 21 using vhci_hcd [ 877.447333][T12182] vhci_hcd: connection reset by peer [ 877.448809][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 877.448849][ T5590] vhci_hcd vhci_hcd.3: release socket [ 877.449076][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 880.184627][T12215] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1689'. [ 881.739838][T12230] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 881.739872][T12230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 881.740456][T12230] vhci_hcd vhci_hcd.0: Device attached [ 881.921668][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 882.078338][T12231] vhci_hcd: connection closed [ 882.080497][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 882.080528][ T5590] vhci_hcd vhci_hcd.3: release socket [ 882.080766][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 882.516585][ T6046] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 884.449313][T12256] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1702'. [ 885.861652][T12277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 885.861678][T12277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 885.861968][T12277] vhci_hcd vhci_hcd.0: Device attached [ 885.990806][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 886.191833][ T2102] usb 45-1: new low-speed USB device number 22 using vhci_hcd [ 886.283172][T12279] vhci_hcd: connection reset by peer [ 886.286227][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 886.286254][ T5590] vhci_hcd vhci_hcd.4: release socket [ 886.287022][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 888.821965][T12307] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1716'. [ 890.283348][T12326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 890.283387][T12326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 890.283911][T12326] vhci_hcd vhci_hcd.0: Device attached [ 890.463625][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 890.629725][T11023] usb 37-1: new low-speed USB device number 30 using vhci_hcd [ 890.652991][T12328] vhci_hcd: connection reset by peer [ 890.667139][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 890.667217][ T5590] vhci_hcd vhci_hcd.0: release socket [ 890.667546][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 890.800306][T12331] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1724'. [ 891.286355][ T2102] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 892.799275][ T30] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 893.520432][T12352] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1730'. [ 893.775108][T12355] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1731'. [ 895.766811][T11023] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 896.323659][T12378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 896.323679][T12378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 896.323962][T12378] vhci_hcd vhci_hcd.0: Device attached [ 896.384750][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 896.465146][T12382] vhci_hcd: connection closed [ 896.466105][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 896.466131][ T5590] vhci_hcd vhci_hcd.0: release socket [ 896.471251][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 896.756374][T12386] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1738'. [ 897.730291][T12397] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1740'. [ 898.713735][T12410] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1743'. [ 900.116342][ T30] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 900.564367][T12428] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 900.564391][T12428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 900.564694][T12428] vhci_hcd vhci_hcd.0: Device attached [ 900.690677][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 900.825066][T12431] vhci_hcd: connection closed [ 900.827558][ T5590] vhci_hcd vhci_hcd.0: stop threads [ 900.827618][ T5590] vhci_hcd vhci_hcd.0: release socket [ 900.827910][ T5590] vhci_hcd vhci_hcd.0: disconnect device [ 900.885924][ T9201] usb 37-1: new low-speed USB device number 31 using vhci_hcd [ 900.886320][ T9201] usb 37-1: enqueue for inactive port 0 [ 900.966962][ T9201] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 901.902381][T12437] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1751'. [ 902.177629][T12442] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1753'. [ 903.133724][T12452] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1755'. [ 903.417832][T12456] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1756'. [ 904.460209][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 904.840210][T12475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 904.840235][T12475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 904.840487][T12475] vhci_hcd vhci_hcd.0: Device attached [ 904.936480][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 905.035905][T12476] vhci_hcd: connection closed [ 905.045871][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 905.045907][ T5590] vhci_hcd vhci_hcd.4: release socket [ 905.046124][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 905.096167][ T855] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 905.114511][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 905.114542][T12480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1762'. [ 906.000682][T12487] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1764'. [ 906.802008][T12494] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1767'. [ 906.952207][T12496] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1768'. [ 907.720707][T12510] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1769'. [ 908.164772][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 909.317391][T12527] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 909.317413][T12527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 909.317686][T12527] vhci_hcd vhci_hcd.0: Device attached [ 909.448773][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 909.594721][T12528] vhci_hcd: connection closed [ 909.599039][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 909.599077][ T5590] vhci_hcd vhci_hcd.3: release socket [ 909.599292][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 909.618549][ T1039] usb 43-1: new low-speed USB device number 22 using vhci_hcd [ 909.619337][ T1039] usb 43-1: enqueue for inactive port 0 [ 909.686183][ T1039] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 909.840180][T12534] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1776'. [ 910.660803][T12542] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1779'. [ 911.522742][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 911.820606][T12554] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1782'. [ 913.300009][T12572] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1787'. [ 913.386997][T12574] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 913.387016][T12574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.387261][T12574] vhci_hcd vhci_hcd.0: Device attached [ 913.476176][ T5820] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 913.523509][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 913.700584][ T1041] usb 43-1: new low-speed USB device number 23 using vhci_hcd [ 913.744501][T12575] vhci_hcd: connection reset by peer [ 913.761435][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 913.761511][ T5590] vhci_hcd vhci_hcd.3: release socket [ 913.761780][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 915.341926][T12589] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1792'. [ 917.157108][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 917.257574][T12610] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1797'. [ 917.968357][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 918.017381][ T1039] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 918.673897][T12623] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 918.673926][T12623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 918.674966][T12623] vhci_hcd vhci_hcd.0: Device attached [ 918.827423][ T1041] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 918.967928][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 919.103638][ T5976] usb 39-1: new low-speed USB device number 23 using vhci_hcd [ 919.194242][T12624] vhci_hcd: connection reset by peer [ 919.203608][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 919.203740][ T5590] vhci_hcd vhci_hcd.1: release socket [ 919.204172][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 920.644691][T12640] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1807'. [ 922.140877][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'. [ 922.431554][T12656] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1812'. [ 923.190151][ T6046] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 923.249735][T12666] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 923.249759][T12666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 923.250078][T12666] vhci_hcd vhci_hcd.0: Device attached [ 923.430268][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 923.559678][T11023] usb 45-1: new low-speed USB device number 24 using vhci_hcd [ 923.601820][T12670] vhci_hcd: connection reset by peer [ 923.609554][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 923.609636][ T5590] vhci_hcd vhci_hcd.4: release socket [ 923.622513][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 924.278086][ T5976] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 925.492429][T12680] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1819'. [ 925.846002][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 927.021274][T12702] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1824'. [ 927.819088][T12711] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 927.819118][T12711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 927.819649][T12711] vhci_hcd vhci_hcd.0: Device attached [ 927.942113][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 928.026679][T12714] vhci_hcd: connection closed [ 928.029412][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 928.029469][ T5590] vhci_hcd vhci_hcd.1: release socket [ 928.030329][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 928.064213][ T5976] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 928.743300][T11023] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 928.878832][T12725] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1830'. [ 929.226817][T12730] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1832'. [ 930.679792][T12750] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1837'. [ 931.066740][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.067272][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.899418][T12762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 931.899443][T12762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 931.899719][T12762] vhci_hcd vhci_hcd.0: Device attached [ 931.980433][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 932.075510][T12763] vhci_hcd: connection closed [ 932.078741][ T5590] vhci_hcd vhci_hcd.3: stop threads [ 932.078791][ T5590] vhci_hcd vhci_hcd.3: release socket [ 932.079644][ T5590] vhci_hcd vhci_hcd.3: disconnect device [ 932.136170][ T30] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 933.123469][T12775] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1845'. [ 933.263487][T12776] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1846'. [ 933.581529][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 933.581578][T12785] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1847'. [ 934.665259][T12796] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1851'. [ 935.911136][T12810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 935.911162][T12810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.911442][T12810] vhci_hcd vhci_hcd.0: Device attached [ 935.984514][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 936.045801][T12811] vhci_hcd: connection closed [ 936.048395][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 936.048434][ T5590] vhci_hcd vhci_hcd.4: release socket [ 936.048466][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 936.553247][T12820] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1860'. [ 937.979891][T12836] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1864'. [ 939.473242][T12851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 939.473267][T12851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 939.473554][T12851] vhci_hcd vhci_hcd.0: Device attached [ 939.548315][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 939.635704][T12852] vhci_hcd: connection closed [ 939.638108][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 939.638138][ T5590] vhci_hcd vhci_hcd.1: release socket [ 939.638186][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 939.690140][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 940.194208][T12861] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1873'. [ 941.297683][T12877] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1877'. [ 941.797661][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 942.271989][T12893] netlink: 'syz.0.1879': attribute type 12 has an invalid length. [ 942.272016][T12893] netlink: 'syz.0.1879': attribute type 29 has an invalid length. [ 942.272037][T12893] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1879'. [ 942.272061][T12893] netlink: 'syz.0.1879': attribute type 3 has an invalid length. [ 942.272082][T12893] netlink: 'syz.0.1879': attribute type 2 has an invalid length. [ 942.272103][T12893] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1879'. [ 943.952370][T12906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 943.952393][T12906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.954728][T12906] vhci_hcd vhci_hcd.0: Device attached [ 944.137199][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 944.240320][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1887'. [ 944.246040][ T5976] usb 45-1: new low-speed USB device number 25 using vhci_hcd [ 944.276353][T12908] vhci_hcd: connection reset by peer [ 944.292936][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 944.293000][ T5590] vhci_hcd vhci_hcd.4: release socket [ 944.296058][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 945.717704][T12928] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1891'. [ 946.076367][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1892'. [ 947.462680][T12946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'. [ 947.797278][T12952] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1900'. [ 948.031820][T12953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 948.031844][T12953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 948.032175][T12953] vhci_hcd vhci_hcd.0: Device attached [ 948.120219][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 948.330929][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1902'. [ 948.334045][T12958] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1901'. [ 948.537423][ T6046] usb 39-1: new low-speed USB device number 25 using vhci_hcd [ 948.614725][T12955] vhci_hcd: connection reset by peer [ 948.623302][ T5590] vhci_hcd vhci_hcd.1: stop threads [ 948.623344][ T5590] vhci_hcd vhci_hcd.1: release socket [ 948.623560][ T5590] vhci_hcd vhci_hcd.1: disconnect device [ 949.389372][ T5976] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 949.592091][T12969] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1904'. [ 950.831744][ T38] ================================================================== [ 950.831769][ T38] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 950.831817][ T38] Read of size 1 at addr ffff888021ec3009 by task kworker/u33:1/38 [ 950.831834][ T38] [ 950.831856][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 950.831878][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 950.831888][ T38] Workqueue: events_unbound commit_work [ 950.831914][ T38] Call Trace: [ 950.831927][ T38] [ 950.831941][ T38] dump_stack_lvl+0x100/0x190 [ 950.832017][ T38] print_report+0x13d/0x4b0 [ 950.832122][ T38] ? __virt_addr_valid+0x239/0x430 [ 950.832220][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 950.832246][ T38] kasan_report+0xdf/0x1c0 [ 950.832338][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7 ** replaying previous printk message ** [ 950.832338][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 950.832516][ T38] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 950.832576][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 950.832642][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 950.832732][ T38] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 950.832804][ T38] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 950.832843][ T38] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 950.833051][ T38] drm_atomic_helper_commit_tail+0xff/0x130 [ 950.833094][ T38] commit_tail+0x338/0x430 [ 950.833276][ T38] process_one_work+0xac7/0x1b10 [ 950.833513][ T38] ? __pfx_process_one_work+0x10/0x10 [ 950.833590][ T38] ? lock_acquire+0x1d1/0x380 [ 950.833748][ T38] ? __pfx_commit_work+0x10/0x10 [ 950.833862][ T38] worker_thread+0x5ef/0xe50 [ 950.834102][ T38] ? kthread+0x13a/0x450 [ 950.834120][ T38] ? __pfx_worker_thread+0x10/0x10 [ 950.834155][ T38] kthread+0x373/0x450 [ 950.834186][ T38] ? __pfx_kthread+0x10/0x10 [ 950.834259][ T38] ret_from_fork+0x730/0xd60 [ 950.834371][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 950.834457][ T38] ? __switch_to+0x800/0x10f0 [ 950.834503][ T38] ? __pfx_kthread+0x10/0x10 [ 950.834577][ T38] ret_from_fork_asm+0x1a/0x30 [ 950.834865][ T38] [ 950.834877][ T38] [ 950.834887][ T38] Allocated by task 12980: [ 950.834899][ T38] kasan_save_stack+0x30/0x50 [ 950.834933][ T38] kasan_save_track+0x14/0x30 [ 950.834967][ T38] __kasan_kmalloc+0xaa/0xb0 [ 950.835002][ T38] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 950.835037][ T38] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 950.835055][ T38] drm_atomic_get_crtc_state+0x1de/0x690 [ 950.835076][ T38] drm_atomic_set_property+0x165/0x3f90 [ 950.835100][ T38] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 950.835125][ T38] drm_ioctl_kernel+0x1f3/0x3e0 [ 950.835151][ T38] drm_ioctl+0x5e6/0xc60 [ 950.835177][ T38] drm_compat_ioctl+0x386/0x4c0 [ 950.835201][ T38] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 950.835233][ T38] __do_fast_syscall_32+0x13a/0x8b0 [ 950.835265][ T38] do_fast_syscall_32+0x32/0x70 [ 950.835299][ T38] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.835331][ T38] [ 950.835340][ T38] Freed by task 2644: [ 950.835352][ T38] kasan_save_stack+0x30/0x50 [ 950.835385][ T38] kasan_save_track+0x14/0x30 [ 950.835419][ T38] kasan_save_free_info+0x3b/0x70 [ 950.835459][ T38] __kasan_slab_free+0x5f/0x80 [ 950.835484][ T38] kfree+0x22b/0x6d0 [ 950.835508][ T38] drm_atomic_commit_default_clear+0x465/0x10c0 [ 950.835531][ T38] __drm_atomic_commit_free+0x185/0x2f0 [ 950.835555][ T38] drm_atomic_helper_dirtyfb+0x578/0x790 [ 950.835578][ T38] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 950.835601][ T38] drm_fb_helper_damage_work+0x4c8/0xab0 [ 950.835630][ T38] process_one_work+0xac7/0x1b10 [ 950.835657][ T38] worker_thread+0x5ef/0xe50 [ 950.835684][ T38] kthread+0x373/0x450 [ 950.835711][ T38] ret_from_fork+0x730/0xd60 [ 950.835745][ T38] ret_from_fork_asm+0x1a/0x30 [ 950.835774][ T38] [ 950.835783][ T38] The buggy address belongs to the object at ffff888021ec3000 [ 950.835783][ T38] which belongs to the cache kmalloc-512 of size 512 [ 950.835799][ T38] The buggy address is located 9 bytes inside of [ 950.835799][ T38] freed 512-byte region [ffff888021ec3000, ffff888021ec3200) [ 950.835816][ T38] [ 950.835833][ T38] The buggy address belongs to the physical page: [ 950.835846][ T38] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21ec0 [ 950.835863][ T38] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 950.835880][ T38] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 950.835898][ T38] page_type: f5(slab) [ 950.835916][ T38] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 950.835935][ T38] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 950.835946][ T38] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 950.835957][ T38] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 950.835968][ T38] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 950.835979][ T38] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 950.835987][ T38] page dumped because: kasan: bad access detected [ 950.835996][ T38] page_owner tracks the page as allocated [ 950.836003][ T38] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3172077636 [ 950.836022][ T38] post_alloc_hook+0xfd/0x120 [ 950.836046][ T38] get_page_from_freelist+0x110d/0x35d0 [ 950.836067][ T38] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 950.836089][ T38] new_slab+0xa9/0x6e0 [ 950.836111][ T38] refill_objects+0xe3/0x410 [ 950.836135][ T38] __pcs_replace_empty_main+0x35e/0x650 [ 950.836166][ T38] __kmalloc_flags_noprof+0x6a9/0x8e0 [ 950.836199][ T38] do_kmem_cache_create+0x6fc/0x7a0 [ 950.836231][ T38] __kmem_cache_create_args+0x1e3/0x430 [ 950.836265][ T38] fs_bio_integrity_init+0x9b/0x120 [ 950.836302][ T38] do_one_initcall+0x11c/0x6f0 [ 950.836340][ T38] kernel_init_freeable+0x6ea/0x7b0 [ 950.836378][ T38] kernel_init+0x21/0x1e0 [ 950.836404][ T38] ret_from_fork+0x730/0xd60 [ 950.836426][ T38] ret_from_fork_asm+0x1a/0x30 [ 950.836443][ T38] page last free pid 1 tgid 1 ts 3171868463 stack trace: [ 950.836452][ T38] __free_frozen_pages+0x79f/0x10f0 [ 950.836476][ T38] stack_depot_save_flags+0x456/0x9f0 [ 950.836504][ T38] kasan_save_stack+0x3f/0x50 [ 950.836528][ T38] kasan_save_track+0x14/0x30 [ 950.836552][ T38] __kasan_slab_alloc+0x89/0x90 [ 950.836579][ T38] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 950.836606][ T38] alloc_inode+0x183/0x250 [ 950.836638][ T38] new_inode+0x22/0x1c0 [ 950.836671][ T38] __aafs_setup_d_inode.constprop.0+0x4d/0x340 [ 950.836707][ T38] aafs_create.constprop.0+0x127/0x250 [ 950.836744][ T38] __aafs_ns_mkdir+0x3a1/0x8e0 [ 950.836776][ T38] aa_create_aafs+0x4d1/0x810 [ 950.836812][ T38] security_initcall_fs+0x155/0x200 [ 950.836840][ T38] do_one_initcall+0x11c/0x6f0 [ 950.836862][ T38] kernel_init_freeable+0x6ea/0x7b0 [ 950.836884][ T38] kernel_init+0x21/0x1e0 [ 950.836904][ T38] [ 950.836910][ T38] Memory state around the buggy address: [ 950.836919][ T38] ffff888021ec2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 950.836930][ T38] ffff888021ec2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 950.836941][ T38] >ffff888021ec3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.836951][ T38] ^ [ 950.836960][ T38] ffff888021ec3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.836972][ T38] ffff888021ec3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.836982][ T38] ================================================================== [ 950.874740][ T38] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 951.083982][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 951.086892][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 951.090033][ T38] Workqueue: events_unbound commit_work [ 951.091776][ T38] Call Trace: [ 951.092853][ T38] [ 951.093879][ T38] dump_stack_lvl+0x100/0x190 [ 951.095499][ T38] vpanic+0x553/0x970 [ 951.096785][ T38] ? __pfx_vpanic+0x10/0x10 [ 951.098224][ T38] ? mark_held_locks+0x40/0x70 [ 951.099885][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 951.102119][ T38] panic+0xd1/0xe0 [ 951.103372][ T38] ? __pfx_panic+0x10/0x10 [ 951.104822][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 951.107093][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 951.109057][ T38] check_panic_on_warn.cold+0x19/0x34 [ 951.110860][ T38] end_report.part.0+0x3a/0x90 [ 951.112453][ T38] kasan_report.cold+0xe/0x18 [ 951.114022][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 951.116419][ T38] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 951.118629][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 951.120401][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 951.122118][ T38] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 951.124496][ T38] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 951.126353][ T38] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 951.128627][ T38] drm_atomic_helper_commit_tail+0xff/0x130 [ 951.130515][ T38] commit_tail+0x338/0x430 [ 951.132111][ T38] process_one_work+0xac7/0x1b10 [ 951.133896][ T38] ? __pfx_process_one_work+0x10/0x10 [ 951.135626][ T38] ? lock_acquire+0x1d1/0x380 [ 951.137302][ T38] ? __pfx_commit_work+0x10/0x10 [ 951.139050][ T38] worker_thread+0x5ef/0xe50 [ 951.140793][ T38] ? kthread+0x13a/0x450 [ 951.142131][ T38] ? __pfx_worker_thread+0x10/0x10 [ 951.143763][ T38] kthread+0x373/0x450 [ 951.145089][ T38] ? __pfx_kthread+0x10/0x10 [ 951.146708][ T38] ret_from_fork+0x730/0xd60 [ 951.148252][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 951.149902][ T38] ? __switch_to+0x800/0x10f0 [ 951.151425][ T38] ? __pfx_kthread+0x10/0x10 [ 951.153080][ T38] ret_from_fork_asm+0x1a/0x30 [ 951.154902][ T38] [ 951.156478][ T38] Kernel Offset: disabled [ 951.157859][ T38] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:48:39 Registers: info registers vcpu 0 CPU#0 RAX=ffff888013d20068 RBX=ffff888013d20068 RCX=dffffc0000000000 RDX=0000000000000000 RSI=ffffffff820de8d7 RDI=ffff888023d8cb00 RBP=0000000000000058 RSP=ffffc9000c3af690 R8 =0000000000000004 R9 =0000000000000e1c R10=0000000000000058 R11=0000000000000000 R12=0000000000000e1c R13=000000000000002c R14=000000dd64682277 R15=ffff888013d20010 RIP=ffffffff820de8f5 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffa04e10c80 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c416c6d CR3=0000000023c86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000060003000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc7fc939b 00007ffdc7fc939b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc7fc98a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc7fc98a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e646e756f662029 6e616870726f2030 202c646165642030 2820666572782066 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f203020646e6120 296e616870726f20 30202c64656b6365 68636e7520302820 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d75746164782066 6f2030202c6d6574 7379736275732072 7474617820676e69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646c697562206574 656c706d6f63203a 6d65747379736275 735f72747461785f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc9000042f9e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=0000000000000001 R15=ffffc9000042fda8 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74492f0 CR3=00000000680c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004fffffff3 0000012800000094 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000004 RBX=ffff88804bbfa590 RCX=ffffffff820de920 RDX=0000000000000004 RSI=000000000000001f RDI=ffff8880241fa580 RBP=0000000000000580 RSP=ffffc900047675f8 R8 =0000000000000001 R9 =000000000000001f R10=000000000000000a R11=0000000000000000 R12=0000000000000d88 R13=000000000000000a R14=000000dd64800e8b R15=ffff88804bbfa010 RIP=ffffffff820b61dc RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e221f9880 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003341fff8 CR3=000000004ae18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000002 RBX=ffff88804618a0c0 RCX=ffffffff820de97a RDX=0000000000000002 RSI=ffffffff820deb3e RDI=ffff888024b3cb00 RBP=00000000000000b0 RSP=ffffc90004446a00 R8 =0000000000000004 R9 =000000000000002c R10=0000000000000748 R11=0000000000018887 R12=00000000000007f8 R13=000000000000002c R14=000000dd648d5ecf R15=ffff88804618a010 RIP=ffffffff820b61e0 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73fba54 CR3=0000000060c1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000003ffffffeb 000000c8ffffffeb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000