last executing test programs: 7m5.766522436s ago: executing program 1 (id=5625): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3fffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x40282080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) 7m4.218033599s ago: executing program 1 (id=5627): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x2, 0x1, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @private=0xa010101, r2}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040080}, 0xc807) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffb77}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe72c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000640)={0x3f, 0x9}) fsetxattr$smack_xattr_label(r3, &(0x7f0000000680)='security.SMACK64MMAP\x00', &(0x7f00000006c0)={'^\xea-'}, 0x4, 0x2) ioctl$BLKFRAGET(r5, 0x1265, &(0x7f0000000700)) read$FUSE(r5, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mq_notify(r5, &(0x7f0000002780)={0x0, 0x24, 0x0, @tid=r8}) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f00000027c0)) socketpair(0x29, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002840)=r4, 0x4) io_setup(0x0, &(0x7f0000002880)=0x0) r12 = socket$unix(0x1, 0x1, 0x0) io_cancel(r11, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x6, 0x3, r12, &(0x7f00000028c0)="fb55067dce25e0cfd745fd50377505a419", 0x11, 0xfffffffffffffff9, 0x0, 0x6, r5}, &(0x7f0000002940)) r13 = syz_open_dev$amidi(&(0x7f0000002980), 0x40, 0x12000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r13, 0x80047213, &(0x7f00000029c0)) r14 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r14, 0x0, 0x29, &(0x7f0000002a00)={@private=0xa010102, @remote, 0x1, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @private=0xa010100, @multicast1, @loopback, @multicast2]}, 0x2c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000002a40)) syz_genetlink_get_family_id$ethtool(&(0x7f0000002a80), r4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x5c, 0x0, 0x30, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5067}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb5f9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb79f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000020) 7m3.538537217s ago: executing program 1 (id=5628): close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) 7m3.422570542s ago: executing program 1 (id=5629): r0 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x1, 0x2480) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', r2, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000000)='.\x00', 0x40) getsockopt$MRT(r1, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5452, &(0x7f0000000400)) 7m3.315694967s ago: executing program 1 (id=5631): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) 7m2.99141144s ago: executing program 1 (id=5632): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept$inet6(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8901, &(0x7f00000003c0)) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) r5 = syz_io_uring_setup(0x20, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0xc, 0x0, 0x0) 7m2.99088371s ago: executing program 32 (id=5632): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept$inet6(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8901, &(0x7f00000003c0)) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) r5 = syz_io_uring_setup(0x20, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0xc, 0x0, 0x0) 52.177268127s ago: executing program 0 (id=6114): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 49.049393167s ago: executing program 0 (id=6115): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0xf, 0x4, "3857ee75"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) 45.308844111s ago: executing program 0 (id=6117): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) io_setup(0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000400)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, r2}]) r7 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r7, &(0x7f0000000280)='io\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x5, 0x6b) 26.564568624s ago: executing program 0 (id=6120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) userfaultfd(0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 15.03218969s ago: executing program 2 (id=6136): syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0) socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x311, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.363439712s ago: executing program 0 (id=6137): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 3.249517136s ago: executing program 0 (id=6138): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.301553427s ago: executing program 2 (id=6139): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x38, 0x1, 0x70bd25, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x14e, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.113097734s ago: executing program 2 (id=6140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 443.116182ms ago: executing program 2 (id=6141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 240.535591ms ago: executing program 2 (id=6142): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) 0s ago: executing program 2 (id=6143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r1}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8643' (ED25519) to the list of known hosts. syzkaller login: [ 127.985632][ T3312] cgroup: Unknown subsys name 'net' [ 128.286395][ T3312] cgroup: Unknown subsys name 'cpuset' [ 128.328618][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 128.968667][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 140.791911][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.831157][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.243263][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.276620][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.743734][ T3318] hsr_slave_0: entered promiscuous mode [ 142.757086][ T3318] hsr_slave_1: entered promiscuous mode [ 143.264770][ T3317] hsr_slave_0: entered promiscuous mode [ 143.275207][ T3317] hsr_slave_1: entered promiscuous mode [ 143.282703][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 143.283609][ T3317] Cannot create hsr debugfs directory [ 144.425499][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.455428][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.503472][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.522964][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.748311][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.782390][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.810793][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.838393][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.108778][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.414942][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.891310][ T3318] veth0_vlan: entered promiscuous mode [ 151.918177][ T3318] veth1_vlan: entered promiscuous mode [ 152.079401][ T3318] veth0_macvtap: entered promiscuous mode [ 152.110746][ T3318] veth1_macvtap: entered promiscuous mode [ 152.363571][ T165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.398755][ T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.400834][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.401320][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.604196][ T3317] veth0_vlan: entered promiscuous mode [ 152.812013][ T3317] veth1_vlan: entered promiscuous mode [ 153.064632][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 153.140534][ T3317] veth0_macvtap: entered promiscuous mode [ 153.211972][ T3317] veth1_macvtap: entered promiscuous mode [ 153.746281][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.748127][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.752524][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.752966][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.583917][ T3485] Zero length message leads to an empty skb [ 159.998674][ T3500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.888881][ T3531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.230445][ T3607] serio: Serial port pts0 [ 180.283206][ T3638] fuse: root generation should be zero [ 202.588848][ T3792] input: syz0 as /devices/virtual/input/input1 [ 256.434423][ T4055] serio: Serial port pts0 [ 296.544000][ T4261] serio: Serial port pts0 [ 315.571057][ T4343] input: syz0 as /devices/virtual/input/input2 [ 345.536133][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 367.884854][ T4692] syz.0.437 uses obsolete (PF_INET,SOCK_PACKET) [ 375.555519][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 409.268415][ T4972] capability: warning: `syz.1.535' uses deprecated v2 capabilities in a way that may be insecure [ 422.150499][ T5039] input: syz0 as /devices/virtual/input/input3 [ 437.959171][ T5055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.567'. [ 485.767247][ T5232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.326327][ T5262] serio: Serial port pts0 [ 495.555858][ T5269] serio: Serial port pts1 [ 603.632760][ T5764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.299467][ T5858] input: syz0 as /devices/virtual/input/input4 [ 642.357725][ T5964] serio: Serial port pts0 [ 643.201123][ T5967] serio: Serial port pts1 [ 649.568407][ T5209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.689318][ T5209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.854165][ T5209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.970902][ T5209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.273221][ T5209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.324722][ T5209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.366977][ T5209] bond0 (unregistering): Released all slaves [ 651.577553][ T5209] hsr_slave_0: left promiscuous mode [ 651.590894][ T5209] hsr_slave_1: left promiscuous mode [ 651.635873][ T5209] veth1_macvtap: left promiscuous mode [ 651.642201][ T5209] veth0_macvtap: left promiscuous mode [ 651.646047][ T5209] veth1_vlan: left promiscuous mode [ 651.650970][ T5209] veth0_vlan: left promiscuous mode [ 656.222460][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.245796][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.442733][ T5975] hsr_slave_0: entered promiscuous mode [ 658.457783][ T5975] hsr_slave_1: entered promiscuous mode [ 658.468152][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 658.477103][ T5975] Cannot create hsr debugfs directory [ 661.381531][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 661.414748][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 661.447095][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 661.475887][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 662.776959][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.198936][ T5975] veth0_vlan: entered promiscuous mode [ 667.248703][ T5975] veth1_vlan: entered promiscuous mode [ 667.426686][ T5975] veth0_macvtap: entered promiscuous mode [ 667.457988][ T5975] veth1_macvtap: entered promiscuous mode [ 667.662018][ T5209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.662749][ T5209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.663127][ T5209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.663488][ T5209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.563983][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.568356][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.394302][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 790.801835][ T7002] loop7: detected capacity change from 0 to 16385 [ 806.094824][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'. [ 816.017105][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.028676][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.695112][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 1065.846250][ T8870] fuse: Bad value for 'fd' [ 1103.643947][ T9138] "syz.0.1955" (9138) uses obsolete ecb(arc4) skcipher [ 1303.093096][T10599] input: syz0 as /devices/virtual/input/input6 [ 1324.697326][T10719] lo: entered promiscuous mode [ 1324.755637][T10719] lo: left promiscuous mode [ 1709.136393][T13552] syz_tun: entered allmulticast mode [ 1709.171074][T13551] syz_tun: left allmulticast mode [ 1773.455939][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.469603][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.618092][T14327] Process accounting resumed [ 1838.365150][T14405] : renamed from ipvlan1 [ 1852.478737][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3813'. [ 1871.965236][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3855'. [ 1928.983196][T14973] lo: entered promiscuous mode [ 1928.993956][T14971] lo: left promiscuous mode [ 2009.602423][ C1] vcan0: j1939_tp_rxtimer: 0x000000005426ab7a: rx timeout, send abort [ 2009.604331][ C1] vcan0: j1939_tp_rxtimer: 0x000000005bc03714: rx timeout, send abort [ 2009.606625][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005426ab7a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2009.608037][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005bc03714: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2015.117648][T15473] 8021q: VLANs not supported on ip6_vti0 [ 2072.797260][T15759] syz.0.4253 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2072.806977][T15759] 8021q: VLANs not supported on ip6_vti0 [ 2103.512167][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.514861][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.031037][T16415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.034122][T16415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.504857][T16505] process 'syz.0.4499' launched '/dev/fd/5' with NULL argv: empty string added [ 2270.602266][T16639] serio: Serial port pts0 [ 2296.725357][T16729] netlink: 'syz.1.4574': attribute type 27 has an invalid length. [ 2298.933663][ T9830] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.934500][ T9830] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.945041][ T9830] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.948322][ T9830] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.817384][T16808] serio: Serial port pts0 [ 2348.826926][T16884] serio: Serial port pts0 [ 2361.891851][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4637'. [ 2361.949169][T16930] vxcan3: entered promiscuous mode [ 2362.473137][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4637'. [ 2389.477443][T17057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2389.494066][T17057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.183171][T17174] 8021q: VLANs not supported on vcan0 [ 2470.364586][T17352] fuse: Bad value for 'fd' [ 2474.081225][T17368] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 2474.279431][T17371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2474.285679][T17371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2496.897119][ T30] audit: type=1326 audit(2496.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17490 comm="syz.0.4828" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b5b3a8 code=0x0 [ 2561.804336][T17703] 8021q: VLANs not supported on vcan0 [ 2564.855027][T17717] serio: Serial port pts0 [ 2615.542321][T17890] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2638.945880][T17983] veth0_vlan: left promiscuous mode [ 2639.622434][T17991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2639.625009][T17991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2639.928534][T17999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2639.933078][T17999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.098738][T18001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.103037][T18001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.742773][T18009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.745190][T18009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2642.982255][T18032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2642.986536][T18032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2667.379936][ C0] hrtimer: interrupt took 620639 ns [ 2707.349372][T18380] "syz.0.5145" (18380) uses obsolete ecb(arc4) skcipher [ 2747.404704][T18551] block nbd1: shutting down sockets [ 2799.669204][T18831] kernel profiling enabled (shift: 6) [ 2801.222109][T18850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2801.224660][T18850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2801.434136][T18854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2801.439360][T18854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.267654][T18874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.278325][T18874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.868730][T18884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.876428][T18884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2803.121647][T18884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.124052][T18884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2803.660791][T18900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.664136][T18900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2813.852047][T18952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2813.854405][T18952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.271292][T19076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.275342][T19076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2873.018004][T19181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2873.028524][T19181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2875.066287][T19195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2875.083723][T19195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2875.302963][T19195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2875.305975][T19195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2877.582653][T19216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2877.594085][T19216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2893.223499][T18193] atkbd serio11: keyboard reset failed on [ 2904.509176][T19357] netlink: 'syz.1.5501': attribute type 4 has an invalid length. [ 2904.647338][T19359] FAULT_INJECTION: forcing a failure. [ 2904.647338][T19359] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2904.653431][T19359] CPU: 0 UID: 0 PID: 19359 Comm: syz.1.5502 Not tainted syzkaller #0 PREEMPT [ 2904.653699][T19359] Hardware name: linux,dummy-virt (DT) [ 2904.654012][T19359] Call trace: [ 2904.654334][T19359] show_stack+0x18/0x24 (C) [ 2904.654949][T19359] dump_stack_lvl+0x78/0x90 [ 2904.655102][T19359] dump_stack+0x18/0x24 [ 2904.655228][T19359] should_fail_ex+0x1dc/0x234 [ 2904.655360][T19359] should_fail+0x14/0x24 [ 2904.655529][T19359] should_fail_usercopy+0x1c/0x28 [ 2904.655661][T19359] simple_read_from_buffer+0x5c/0x138 [ 2904.655801][T19359] proc_fail_nth_read+0xac/0x134 [ 2904.655927][T19359] vfs_read+0xc0/0x318 [ 2904.656111][T19359] ksys_read+0x6c/0x100 [ 2904.656258][T19359] __arm64_sys_read+0x1c/0x28 [ 2904.656386][T19359] invoke_syscall+0x48/0x110 [ 2904.656518][T19359] el0_svc_common.constprop.0+0x40/0xe0 [ 2904.656648][T19359] do_el0_svc+0x1c/0x28 [ 2904.656785][T19359] el0_svc+0x34/0x10c [ 2904.656912][T19359] el0t_64_sync_handler+0xa0/0xe4 [ 2904.657077][T19359] el0t_64_sync+0x1a4/0x1a8 [ 2910.357761][T19387] FAULT_INJECTION: forcing a failure. [ 2910.357761][T19387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2910.358474][T19387] CPU: 1 UID: 0 PID: 19387 Comm: syz.1.5513 Not tainted syzkaller #0 PREEMPT [ 2910.358741][T19387] Hardware name: linux,dummy-virt (DT) [ 2910.358844][T19387] Call trace: [ 2910.358921][T19387] show_stack+0x18/0x24 (C) [ 2910.359221][T19387] dump_stack_lvl+0x78/0x90 [ 2910.359439][T19387] dump_stack+0x18/0x24 [ 2910.359712][T19387] should_fail_ex+0x1dc/0x234 [ 2910.359986][T19387] should_fail+0x14/0x24 [ 2910.360265][T19387] should_fail_usercopy+0x1c/0x28 [ 2910.360516][T19387] _inline_copy_from_user+0x24/0xb0 [ 2910.360767][T19387] copy_msghdr_from_user+0x54/0xcc [ 2910.361024][T19387] ___sys_sendmsg+0x8c/0x100 [ 2910.361304][T19387] __sys_sendmsg+0x98/0xf8 [ 2910.361575][T19387] __arm64_sys_sendmsg+0x24/0x30 [ 2910.361840][T19387] invoke_syscall+0x48/0x110 [ 2910.362175][T19387] el0_svc_common.constprop.0+0x40/0xe0 [ 2910.362437][T19387] do_el0_svc+0x1c/0x28 [ 2910.362776][T19387] el0_svc+0x34/0x10c [ 2910.363105][T19387] el0t_64_sync_handler+0xa0/0xe4 [ 2910.363352][T19387] el0t_64_sync+0x1a4/0x1a8 [ 2911.931777][T19401] FAULT_INJECTION: forcing a failure. [ 2911.931777][T19401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2911.936616][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.1.5516 Not tainted syzkaller #0 PREEMPT [ 2911.936807][T19401] Hardware name: linux,dummy-virt (DT) [ 2911.936873][T19401] Call trace: [ 2911.936926][T19401] show_stack+0x18/0x24 (C) [ 2911.937078][T19401] dump_stack_lvl+0x78/0x90 [ 2911.937207][T19401] dump_stack+0x18/0x24 [ 2911.937331][T19401] should_fail_ex+0x1dc/0x234 [ 2911.937462][T19401] should_fail+0x14/0x24 [ 2911.937592][T19401] should_fail_usercopy+0x1c/0x28 [ 2911.937720][T19401] _inline_copy_from_user+0x24/0xb0 [ 2911.937853][T19401] copy_msghdr_from_user+0x54/0xcc [ 2911.938044][T19401] ___sys_sendmsg+0x8c/0x100 [ 2911.938171][T19401] __sys_sendmsg+0x98/0xf8 [ 2911.938298][T19401] __arm64_sys_sendmsg+0x24/0x30 [ 2911.938425][T19401] invoke_syscall+0x48/0x110 [ 2911.938592][T19401] el0_svc_common.constprop.0+0x40/0xe0 [ 2911.938731][T19401] do_el0_svc+0x1c/0x28 [ 2911.938862][T19401] el0_svc+0x34/0x10c [ 2911.938994][T19401] el0t_64_sync_handler+0xa0/0xe4 [ 2911.939120][T19401] el0t_64_sync+0x1a4/0x1a8 [ 2935.508787][T19532] fuse: Bad value for 'user_id' [ 2935.509155][T19532] fuse: Bad value for 'user_id' [ 2957.165838][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2957.203112][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2957.236343][ T64] bond0 (unregistering): Released all slaves [ 2957.561745][ T64] hsr_slave_0: left promiscuous mode [ 2957.570421][ T64] hsr_slave_1: left promiscuous mode [ 2964.157778][T19727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2964.195879][T19727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2966.928948][T19727] hsr_slave_0: entered promiscuous mode [ 2966.937419][T19727] hsr_slave_1: entered promiscuous mode [ 2968.274054][T19727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2968.333128][T19727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2968.388925][T19727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2968.444271][T19727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2970.092114][T19727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2975.278583][T19727] veth0_vlan: entered promiscuous mode [ 2975.339383][T19727] veth1_vlan: entered promiscuous mode [ 2975.544025][T19727] veth0_macvtap: entered promiscuous mode [ 2975.614473][T19727] veth1_macvtap: entered promiscuous mode [ 2975.907726][ T2150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.917464][ T7533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.917882][ T7533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.918295][ T7533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.814145][T19899] fuse: Bad value for 'group_id' [ 2976.814746][T19899] fuse: Bad value for 'group_id' [ 2982.522788][T19954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2982.525572][T19954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.901407][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2983.904568][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.070358][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2984.072820][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.143483][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2984.146052][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.866222][T20108] FAULT_INJECTION: forcing a failure. [ 3002.866222][T20108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3002.873120][T20108] CPU: 1 UID: 0 PID: 20108 Comm: syz.2.5717 Not tainted syzkaller #0 PREEMPT [ 3002.873445][T20108] Hardware name: linux,dummy-virt (DT) [ 3002.873563][T20108] Call trace: [ 3002.873645][T20108] show_stack+0x18/0x24 (C) [ 3002.873938][T20108] dump_stack_lvl+0x78/0x90 [ 3002.874164][T20108] dump_stack+0x18/0x24 [ 3002.874376][T20108] should_fail_ex+0x1dc/0x234 [ 3002.874605][T20108] should_fail+0x14/0x24 [ 3002.874851][T20108] should_fail_usercopy+0x1c/0x28 [ 3002.875075][T20108] simple_read_from_buffer+0x5c/0x138 [ 3002.875292][T20108] proc_fail_nth_read+0xac/0x134 [ 3002.875492][T20108] vfs_read+0xc0/0x318 [ 3002.875723][T20108] ksys_read+0x6c/0x100 [ 3002.875952][T20108] __arm64_sys_read+0x1c/0x28 [ 3002.876164][T20108] invoke_syscall+0x48/0x110 [ 3002.876384][T20108] el0_svc_common.constprop.0+0x40/0xe0 [ 3002.876610][T20108] do_el0_svc+0x1c/0x28 [ 3002.876890][T20108] el0_svc+0x34/0x10c [ 3002.877126][T20108] el0t_64_sync_handler+0xa0/0xe4 [ 3002.877367][T20108] el0t_64_sync+0x1a4/0x1a8 [ 3008.882000][T20181] fuse: Bad value for 'user_id' [ 3008.883502][T20181] fuse: Bad value for 'user_id' [ 3016.844979][T20263] fuse: Bad value for 'rootmode' [ 3017.237597][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.402068][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.547288][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.757812][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3019.976289][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3020.016908][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3020.046878][ T64] bond0 (unregistering): Released all slaves [ 3020.264065][ T64] hsr_slave_0: left promiscuous mode [ 3020.276209][ T64] hsr_slave_1: left promiscuous mode [ 3020.326131][ T64] veth1_macvtap: left promiscuous mode [ 3020.326740][ T64] veth0_macvtap: left promiscuous mode [ 3020.327426][ T64] veth1_vlan: left promiscuous mode [ 3026.094673][T20265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3026.138223][T20265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3029.742650][T20265] hsr_slave_0: entered promiscuous mode [ 3029.781638][T20265] hsr_slave_1: entered promiscuous mode [ 3029.787476][T20265] debugfs: 'hsr0' already exists in 'hsr' [ 3029.811170][T20265] Cannot create hsr debugfs directory [ 3033.251691][T20265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3033.286735][T20265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3033.395622][T20265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3033.424088][T20265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3036.718644][T20265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3045.822906][T20265] veth0_vlan: entered promiscuous mode [ 3045.907173][T20265] veth1_vlan: entered promiscuous mode [ 3046.177791][T20265] veth0_macvtap: entered promiscuous mode [ 3046.211224][T20265] veth1_macvtap: entered promiscuous mode [ 3046.519117][T19767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.520705][T19767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.539122][T19767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.541752][T19767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3048.861462][ T9799] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3049.170426][ T9799] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3049.173781][ T9799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.177233][ T9799] usb 1-1: Product: syz [ 3049.180360][ T9799] usb 1-1: Manufacturer: syz [ 3049.182530][ T9799] usb 1-1: SerialNumber: syz [ 3051.894367][ T9799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 3052.255117][ T9799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 3052.262320][ T9799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3052.262771][ T9799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3052.265771][ T9799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3052.299283][ T9799] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 3053.268961][ T9799] usb 1-1: USB disconnect, device number 2 [ 3056.232736][T20548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3056.234202][T20548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3061.001290][T19839] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3061.288934][T19839] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 3061.290090][T19839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3061.292873][T19839] usb 1-1: config 0 has no interface number 0 [ 3061.293354][T19839] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 3061.293659][T19839] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 3061.294030][T19839] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3061.426443][T19839] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 3061.427099][T19839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.431217][T19839] usb 1-1: Product: syz [ 3061.431440][T19839] usb 1-1: Manufacturer: syz [ 3061.431608][T19839] usb 1-1: SerialNumber: syz [ 3061.461890][T19839] usb 1-1: config 0 descriptor?? [ 3061.607646][T19839] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 3061.623540][T19839] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 3061.643825][T19839] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 3061.817074][T19839] usb 1-1: USB disconnect, device number 3 [ 3061.897318][T19839] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 3061.932981][T19839] cyberjack 1-1:0.69: device disconnected [ 3062.094426][ T30] audit: type=1326 audit(3061.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3062.098895][ T30] audit: type=1326 audit(3061.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3062.107017][ T30] audit: type=1326 audit(3061.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3062.117915][ T30] audit: type=1326 audit(3061.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3062.128752][ T30] audit: type=1326 audit(3061.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3062.137003][ T30] audit: type=1326 audit(3061.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20569 comm="syz.0.5837" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb035b3a8 code=0x7ffc0000 [ 3075.133843][ T30] audit: type=1326 audit(3074.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.2.5852" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x0 [ 3076.003029][T20616] block nbd0: shutting down sockets [ 3079.123025][T18846] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3079.941096][T18846] usb 1-1: Using ep0 maxpacket: 16 [ 3080.976062][T18846] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 3080.993563][T18846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3081.010806][T18846] usb 1-1: Product: syz [ 3081.024712][T18846] usb 1-1: Manufacturer: syz [ 3081.026164][T18846] usb 1-1: SerialNumber: syz [ 3081.098993][T18846] usb 1-1: config 0 descriptor?? [ 3091.967385][ T9799] usb 1-1: USB disconnect, device number 4 [ 3094.824345][T20646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3094.828992][T20646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3109.161788][T20673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5867'. [ 3110.567334][T20677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.577135][T20677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3119.773004][T20710] netlink: 'syz.2.5881': attribute type 30 has an invalid length. [ 3120.334464][T20712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3120.355475][T20712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3124.842828][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3124.845056][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3125.811549][T18846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3126.045170][T18846] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 3126.053148][T18846] usb 1-1: config 0 has no interface number 0 [ 3126.124934][T18846] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=fd.3b [ 3126.128639][T18846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3126.132783][T18846] usb 1-1: Product: syz [ 3126.137532][T18846] usb 1-1: Manufacturer: syz [ 3126.140863][T18846] usb 1-1: SerialNumber: syz [ 3126.176258][T18846] usb 1-1: config 0 descriptor?? [ 3126.413863][T20630] usb 1-1: USB disconnect, device number 5 [ 3129.427136][ T30] audit: type=1326 audit(3129.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3129.437132][ T30] audit: type=1326 audit(3129.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3129.444554][ T30] audit: type=1326 audit(3129.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=181 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3130.382984][ T30] audit: type=1326 audit(3129.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3130.383705][ T30] audit: type=1326 audit(3129.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3130.384257][ T30] audit: type=1326 audit(3129.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3130.384666][ T30] audit: type=1326 audit(3129.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3130.385077][ T30] audit: type=1326 audit(3129.840:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.2.5892" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8675b3a8 code=0x7ffc0000 [ 3135.420875][T20031] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3135.570328][T20031] usb 1-1: Using ep0 maxpacket: 32 [ 3135.595795][T20031] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 3135.596395][T20031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3135.618214][T20031] usb 1-1: config 0 descriptor?? [ 3144.067749][T20764] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5900'. [ 3144.865781][T20772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3144.875725][T20772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3145.200004][T20776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3145.201476][T20776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3145.428346][T20779] bond0: entered promiscuous mode [ 3145.431816][T20779] bond_slave_0: entered promiscuous mode [ 3145.433611][T20779] bond_slave_1: entered promiscuous mode [ 3145.452112][T20779] dummy0: entered promiscuous mode [ 3145.464530][T20779] hsr1: entered promiscuous mode [ 3145.465463][T20779] hsr1: entered allmulticast mode [ 3145.465678][T20779] bond0: entered allmulticast mode [ 3145.465965][T20779] bond_slave_0: entered allmulticast mode [ 3145.466177][T20779] bond_slave_1: entered allmulticast mode [ 3145.466473][T20779] dummy0: entered allmulticast mode [ 3146.356162][ T7533] nci: nci_rx_work: unknown MT 0x5 [ 3148.517869][T20789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3148.628215][T20789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3148.726874][T20789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3148.858901][T20789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3149.163943][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3149.219192][ T7533] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3149.284912][ T64] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3149.349025][ T64] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3149.396506][T19839] usb 1-1: USB disconnect, device number 6 [ 3149.734675][T20795] netlink: 'syz.2.5913': attribute type 27 has an invalid length. [ 3150.629051][T19839] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3150.924261][T19839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3150.925104][T19839] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3150.925326][T19839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.954906][T19839] usb 1-1: config 0 descriptor?? [ 3151.556858][T20795] hsr1: left promiscuous mode [ 3151.557286][T20795] hsr1: left allmulticast mode [ 3151.562166][T20795] bond0: left allmulticast mode [ 3151.562603][T20795] bond_slave_0: left allmulticast mode [ 3151.562904][T20795] bond_slave_1: left allmulticast mode [ 3151.563208][T20795] dummy0: left allmulticast mode [ 3151.726268][T20800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3152.015633][T20800] veth1_vlan: left promiscuous mode [ 3152.031666][T20800] veth0_vlan: left promiscuous mode [ 3152.046731][T20800] veth0_vlan: entered promiscuous mode [ 3152.085251][T20800] veth1_vlan: entered promiscuous mode [ 3152.138683][T20800] veth1_macvtap: left promiscuous mode [ 3152.153840][T20800] veth0_macvtap: left promiscuous mode [ 3152.177624][T20800] veth0_macvtap: entered promiscuous mode [ 3152.196024][T20800] veth1_macvtap: entered promiscuous mode [ 3152.958750][T20811] netlink: 'syz.2.5919': attribute type 21 has an invalid length. [ 3152.966360][T20811] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5919'. [ 3152.979488][T20811] netlink: 'syz.2.5919': attribute type 5 has an invalid length. [ 3152.998323][T20811] netlink: 'syz.2.5919': attribute type 6 has an invalid length. [ 3152.999057][T20811] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5919'. [ 3160.528781][T20824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.538282][T20824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3161.063363][T20832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3161.087359][T20832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3161.300251][T20629] usb 1-1: USB disconnect, device number 7 [ 3161.827423][T20840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3161.837486][T20840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3161.922129][T18178] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3162.157833][T18178] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 3162.166067][T18178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3162.206512][T18178] usb 1-1: config 0 descriptor?? [ 3162.757502][T18178] stadia 0003:18D1:9400.0001: hidraw0: USB HID v10.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 3162.762121][T18178] stadia 0003:18D1:9400.0001: no inputs found [ 3162.764791][T18178] stadia 0003:18D1:9400.0001: force feedback init failed [ 3162.929154][T14277] usb 1-1: USB disconnect, device number 8 [ 3163.869820][T20843] fido_id[20843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3164.261467][T19839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3164.476893][T19839] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 3164.481667][T19839] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 3164.485318][T19839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.982309][T20900] can0: slcan on pty24. [ 3172.077166][T20899] can0 (unregistered): slcan off pty24. [ 3174.839201][T19839] usb 1-1: USB disconnect, device number 9 [ 3183.990851][T18178] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3184.197966][T18178] usb 1-1: Using ep0 maxpacket: 32 [ 3184.331142][T18178] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3184.331775][T18178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.332263][T18178] usb 1-1: Product: syz [ 3184.332507][T18178] usb 1-1: Manufacturer: syz [ 3184.332666][T18178] usb 1-1: SerialNumber: syz [ 3184.373813][T18178] usb 1-1: config 0 descriptor?? [ 3194.652795][T20629] usb 1-1: USB disconnect, device number 10 [ 3194.780865][T20923] Device name cannot be null; rc = [-22] [ 3196.619287][ T30] audit: type=1326 audit(3196.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20925 comm="syz.2.5959" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675b3a8 code=0x0 [ 3199.193269][T20952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3199.195865][T20952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3211.224501][T20991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3211.253796][T20991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3212.294488][T21000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3212.301555][T21000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.724273][T21051] netlink: 'syz.0.6008': attribute type 1 has an invalid length. [ 3227.973636][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6012'. [ 3228.163907][T21056] vlan2: entered promiscuous mode [ 3228.188033][T21056] syz_tun: entered promiscuous mode [ 3229.108412][T21062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3229.151008][T21062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.803566][T21079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3236.807293][T21079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3244.694614][T21101] loop9: detected capacity change from 0 to 7 [ 3244.712203][T21101] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.713786][T21101] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.714172][T21101] loop9: unable to read partition table [ 3244.714915][T21101] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 3244.714915][T21101] ) failed (rc=-5) [ 3244.773217][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.775568][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.777780][T21095] loop9: unable to read partition table [ 3244.785722][T21101] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.786621][T21101] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.786839][T21101] loop9: unable to read partition table [ 3244.787430][T21101] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 3244.787430][T21101] ) failed (rc=-5) [ 3244.862792][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.864809][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.865929][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3244.867176][T21095] Buffer I/O error on dev loop9, logical block 0, async page read [ 3245.484475][T21103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3256.860916][T21132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3256.862536][T21132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3257.272607][T21137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3257.276755][T21137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3261.127940][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3261.143751][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3261.449270][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6047'. [ 3261.450842][T21168] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6047'. [ 3264.781241][T21181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3270.871712][T21191] binder: 21184:21191 ioctl c0306201 0 returned -14 [ 3285.160566][T20031] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3285.350861][T20031] usb 1-1: Using ep0 maxpacket: 32 [ 3285.385661][T20031] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3285.389143][T20031] usb 1-1: config 0 has no interface number 0 [ 3285.397582][T20031] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3285.505419][T20031] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3285.508990][T20031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.512727][T20031] usb 1-1: Product: syz [ 3285.514985][T20031] usb 1-1: Manufacturer: syz [ 3285.517238][T20031] usb 1-1: SerialNumber: syz [ 3285.548831][T20031] usb 1-1: config 0 descriptor?? [ 3285.578668][T20031] smsc75xx v1.0.0 [ 3286.233726][T20031] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3286.237996][T20031] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3287.296551][T20031] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3287.311691][T20031] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 3287.315575][T20031] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3287.321239][T20031] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 3287.340344][T20031] usb 1-1: USB disconnect, device number 11 [ 3287.737365][T21226] binder: 21224:21226 got transaction to invalid handle, 1 [ 3287.744582][T21226] binder: 21224:21226 cannot find target node [ 3287.753259][T21226] binder: 21224:21226 transaction call to 0:0 failed 1/29201/-22, code 0 size 72-0 line 3241 [ 3287.783060][T20031] binder: undelivered TRANSACTION_ERROR: 29201 [ 3288.752850][T20629] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3288.910889][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 3288.936675][T20629] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3288.937235][T20629] usb 1-1: config 0 has no interface number 0 [ 3288.937648][T20629] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3290.348812][T20629] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3290.354242][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.361083][T20629] usb 1-1: Product: syz [ 3290.361622][T20629] usb 1-1: Manufacturer: syz [ 3290.361959][T20629] usb 1-1: SerialNumber: syz [ 3290.575833][T20629] usb 1-1: config 0 descriptor?? [ 3290.851629][T20629] smsc75xx v1.0.0 [ 3291.633080][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3291.635241][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3292.574767][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3292.575410][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3292.594181][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3292.595889][T20629] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 3292.663521][T20629] usb 1-1: USB disconnect, device number 12 [ 3293.291173][T20629] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3293.490931][T20629] usb 1-1: Using ep0 maxpacket: 16 [ 3293.718932][T20629] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3293.732692][T20629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3293.918094][T20629] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3293.922949][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3293.928946][T20629] usb 1-1: Product: syz [ 3293.934001][T20629] usb 1-1: Manufacturer: syz [ 3293.938436][T20629] usb 1-1: SerialNumber: syz [ 3293.978223][T20629] usb 1-1: config 0 descriptor?? [ 3294.055698][T21237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3294.075691][T21237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3296.575792][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3296.587514][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.363175][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.368695][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.507765][T21251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.522231][T21251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.766815][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.772206][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3300.608824][T21262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3300.611894][T21262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3300.763075][T21264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3300.771418][T21264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3301.894773][T21278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3301.902250][T21278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3302.007515][T21280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3302.009148][T21280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3302.289285][T21284] input: syz0 as /devices/virtual/input/input9 [ 3305.156536][T20821] usb 1-1: USB disconnect, device number 13 [ 3307.260619][T20629] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3307.421387][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 3307.443969][T20629] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3307.444572][T20629] usb 1-1: config 0 has no interface number 0 [ 3307.445336][T20629] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3307.492981][T20629] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3307.493301][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3307.493688][T20629] usb 1-1: Product: syz [ 3307.493835][T20629] usb 1-1: Manufacturer: syz [ 3307.493967][T20629] usb 1-1: SerialNumber: syz [ 3307.505289][T20629] usb 1-1: config 0 descriptor?? [ 3308.213559][T20629] smsc75xx v1.0.0 [ 3308.647313][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3308.647989][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3309.518125][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3309.518782][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3309.519311][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3309.521428][T20629] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 3309.573132][T20629] usb 1-1: USB disconnect, device number 14 [ 3311.011485][T20629] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3311.180545][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 3311.200927][T20629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3311.255118][T20629] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3311.255776][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.256272][T20629] usb 1-1: Product: syz [ 3311.256583][T20629] usb 1-1: Manufacturer: syz [ 3311.256782][T20629] usb 1-1: SerialNumber: syz [ 3311.277836][T20629] usb 1-1: config 0 descriptor?? [ 3312.603008][T20629] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 3312.900441][T20629] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 3312.932215][T20629] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 3313.276177][T20629] usb 1-1: USB disconnect, device number 15 [ 3315.560600][T20629] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3315.711291][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 3315.742214][T20629] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3315.743022][T20629] usb 1-1: config 0 has no interface number 0 [ 3315.743650][T20629] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3315.797182][T20629] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3315.797768][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3315.798397][T20629] usb 1-1: Product: syz [ 3315.798594][T20629] usb 1-1: Manufacturer: syz [ 3315.798763][T20629] usb 1-1: SerialNumber: syz [ 3315.815605][T20629] usb 1-1: config 0 descriptor?? [ 3316.692932][T20629] smsc75xx v1.0.0 [ 3317.154448][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3317.154818][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3317.798327][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 3317.798968][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 3317.800327][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3317.801377][T20629] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 3317.873713][T20629] usb 1-1: USB disconnect, device number 16 [ 3319.588731][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3319.595167][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3319.787122][T21324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3319.796177][T21324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3320.550856][T21326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3324.449412][T21344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3324.468578][T21344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3330.070833][T14277] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3330.230780][T14277] usb 1-1: Using ep0 maxpacket: 32 [ 3330.251859][T14277] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3330.255123][T14277] usb 1-1: config 0 has no interface number 0 [ 3330.256033][T14277] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3330.295168][T14277] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3330.295833][T14277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3330.296330][T14277] usb 1-1: Product: syz [ 3330.296636][T14277] usb 1-1: Manufacturer: syz [ 3330.296956][T14277] usb 1-1: SerialNumber: syz [ 3330.953431][T14277] usb 1-1: config 0 descriptor?? [ 3331.030502][T14277] smsc75xx v1.0.0 [ 3331.631120][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3331.631964][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3332.061847][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3332.062858][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3332.063134][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 3332.063328][T14277] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3332.064654][T14277] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 3332.083624][T14277] usb 1-1: USB disconnect, device number 17 [ 3346.787668][T21385] mmap: syz.2.6119 (21385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3357.253494][T21396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3357.255997][T21396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3357.553980][T21399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3357.559622][T21399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3358.085132][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6125'. [ 3360.254167][T21408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.272708][T21408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.557963][T21410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.574127][T21410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.047569][T21414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.063212][T21414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.585223][T21418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.602782][T21418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.879018][T21420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.889349][T21420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3362.708982][T21427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3362.763026][T21427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3374.770978][T20629] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3375.050966][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 3375.192017][T20629] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 3375.200796][T20629] usb 1-1: config 0 has no interface number 0 [ 3375.205978][T20629] usb 1-1: config 0 interface 184 has no altsetting 0 [ 3375.423602][T20629] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3375.427050][T20629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.437174][T20629] usb 1-1: Product: syz [ 3375.444642][T20629] usb 1-1: Manufacturer: syz [ 3375.451811][T20629] usb 1-1: SerialNumber: syz [ 3375.506930][T20629] usb 1-1: config 0 descriptor?? [ 3375.675982][T20629] smsc75xx v1.0.0 [ 3376.361392][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3376.361967][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 3376.362530][T20629] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 3376.363707][T20629] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 3377.441689][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3377.447372][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3377.653011][T21448] ================================================================== [ 3377.656027][T21448] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 3377.658303][T21448] Write at addr f6ff80008351d268 by task syz.2.6143/21448 [ 3377.658876][T21448] Pointer tag: [f6], memory tag: [fe] [ 3377.659038][T21448] [ 3377.659864][T21448] CPU: 1 UID: 0 PID: 21448 Comm: syz.2.6143 Not tainted syzkaller #0 PREEMPT [ 3377.660456][T21448] Hardware name: linux,dummy-virt (DT) [ 3377.660827][T21448] Call trace: [ 3377.661200][T21448] show_stack+0x18/0x24 (C) [ 3377.661586][T21448] dump_stack_lvl+0x78/0x90 [ 3377.661823][T21448] print_report+0x108/0x61c [ 3377.662068][T21448] kasan_report+0x88/0xac [ 3377.662271][T21448] __do_kernel_fault+0x170/0x1c8 [ 3377.662476][T21448] do_bad_area+0x68/0x78 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3377.662675][T21448] do_tag_check_fault+0x34/0x44 [ 3377.662942][T21448] do_mem_abort+0x44/0x94 [ 3377.663172][T21448] el1_abort+0x44/0x68 [ 3377.663395][T21448] el1h_64_sync_handler+0x50/0xac [ 3377.663609][T21448] el1h_64_sync+0x6c/0x70 [ 3377.663922][T21448] __memcpy+0xc/0x54 (P) [ 3377.664145][T21448] do_misc_fixups+0x174/0x1aac [ 3377.664347][T21448] bpf_check+0x1348/0x2a24 [ 3377.664581][T21448] bpf_prog_load+0x63c/0xcd4 [ 3377.664794][T21448] __sys_bpf+0x2e0/0x1a88 [ 3377.665027][T21448] __arm64_sys_bpf+0x24/0x34 [ 3377.665259][T21448] invoke_syscall+0x48/0x110 [ 3377.665588][T21448] el0_svc_common.constprop.0+0x40/0xe0 [ 3377.665793][T21448] do_el0_svc+0x1c/0x28 [ 3377.666083][T21448] el0_svc+0x34/0x10c [ 3377.666298][T21448] el0t_64_sync_handler+0xa0/0xe4 [ 3377.666515][T21448] el0t_64_sync+0x1a4/0x1a8 [ 3377.666946][T21448] [ 3377.667203][T21448] The buggy address belongs to a 1-page vmalloc region starting at 0xf6ff80008351d000 allocated at bpf_check+0x8c/0x2a24 [ 3377.668777][T21448] The buggy address belongs to the physical page: [ 3377.669203][T21448] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xf2f00000062d1000 pfn:0x462d1 [ 3377.669680][T21448] flags: 0x1ffe40000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x9) [ 3377.670805][T21448] raw: 01ffe40000000000 0000000000000000 dead000000000122 0000000000000000 [ 3377.671009][T21448] raw: f2f00000062d1000 0000000000000000 00000001ffffffff 0000000000000000 [ 3377.671221][T21448] page dumped because: kasan: bad access detected [ 3377.671337][T21448] [ 3377.671427][T21448] Memory state around the buggy address: [ 3377.671758][T21448] ffff80008351d000: f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 [ 3377.671955][T21448] ffff80008351d100: f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 fe fe fe fe [ 3377.672130][T21448] >ffff80008351d200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3377.672281][T21448] ^ [ 3377.672591][T21448] ffff80008351d300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3377.672701][T21448] ffff80008351d400: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3377.672847][T21448] ================================================================== [ 3377.674719][T21448] Disabling lock debugging due to kernel taint [ 3378.751594][T21301] usb 1-1: USB disconnect, device number 18 [ 3378.856396][ T7533] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3378.995564][ T7533] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.171281][ T7533] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.252165][ T7533] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3380.144984][ T7533] bond0 (unregistering): left promiscuous mode [ 3380.145580][ T7533] bond_slave_0: left promiscuous mode [ 3380.157542][ T7533] bond_slave_1: left promiscuous mode [ 3380.186918][ T7533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3380.261844][ T7533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3380.312295][ T7533] bond0 (unregistering): Released all slaves [ 3380.526561][ T7533] dummy0: left promiscuous mode [ 3380.583107][ T7533] hsr_slave_0: left promiscuous mode [ 3380.589334][ T7533] hsr_slave_1: left promiscuous mode [ 3380.642559][ T7533] veth1_macvtap: left promiscuous mode [ 3380.643185][ T7533] veth0_macvtap: left promiscuous mode [ 3380.644071][ T7533] veth1_vlan: left promiscuous mode [ 3380.644589][ T7533] veth0_vlan: left promiscuous mode [ 3382.547549][ T7533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.724460][ T7533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.837550][ T7533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.973327][ T7533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3383.796021][ T7533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3383.829257][ T7533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3383.866098][ T7533] bond0 (unregistering): Released all slaves [ 3384.085957][ T7533] hsr_slave_0: left promiscuous mode [ 3384.098171][ T7533] hsr_slave_1: left promiscuous mode [ 3384.139352][ T7533] veth1_macvtap: left promiscuous mode [ 3384.141753][ T7533] veth0_macvtap: left promiscuous mode [ 3384.145216][ T7533] veth1_vlan: left promiscuous mode [ 3384.146267][ T7533] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 16:02:10 Registers: info registers vcpu 0 CPU#0 PC=ffff800081853554 X00=00000000000005dc X01=f7f0000007f83540 X02=f5f000000403bd00 X03=00000000ffffefbf X04=0000000000000001 X05=0000000000000203 X06=f7f0000007f83400 X07=f6f0000004742a9c X08=ffff800082cfb6b8 X09=0000000000000007 X10=0000000000000000 X11=fff000007f8d6a40 X12=0000000000000000 X13=0000000000000001 X14=00000000000001e9 X15=ffff800081b74330 X16=ffff800082cf8000 X17=fff07ffffcfc3000 X18=0000000000000000 X19=f7f0000007482000 X20=f5f000000403bd00 X21=0000000000000000 X22=000000000000000e X23=0000000000000000 X24=0000000000000000 X25=0000000000000040 X26=0000000000000000 X27=f7f0000007f834ec X28=000000000007db1c X29=ffff800082cfb330 X30=85ff8000816b51a8 SP=ffff800082cfb330 PSTATE=40402009 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65642f000a732520:7325207334362e25 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000f00f00f00000f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:665b203a67617420:79726f6d656d202c Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd01f97b0:0000ffffd01f97b0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd01f9780 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080902f40 X00=0000000000000002 X01=0000000000000018 X02=ffff800082d25018 X03=ffff800082acf018 X04=f2f00000032db880 X05=000000000000002e X06=000000000000005d X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082acf048 X10=0000000000000001 X11=ffff800083103e20 X12=ffff800082a0f4c0 X13=ffff800083103b8d X14=ffff800083103b98 X15=ffff800083103a00 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=f1f00000032c9007 X20=ffff8000809030e4 X21=f2f00000032db880 X22=f1f00000032c9007 X23=ffff8000809030e4 X24=000000000000003b X25=0000000000000001 X26=fdf0000003175dc0 X27=0000000000000000 X28=0000000000000000 X29=ffff800083103ca0 X30=ffff80008090310c SP=ffff800083103ca0 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=000000000000ffff P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572207265767265:730073250a0d0a0d Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:78756e696c203a65:6d616e2065726177 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:333431362e322e7a:7973203a6d6d6f43 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6f43203834343132:203a444950203020 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:4e20333431362e32:2e7a7973203a6d6d Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffd351b10:0000fffffd351b10 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000fffffd351ae0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000