last executing test programs: 6.542297861s ago: executing program 0 (id=460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x101442, 0x0) r5 = dup(r4) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@sr0, 0x0, &(0x7f0000000180)='ntfs3\x00', 0x21004f, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) 5.412619724s ago: executing program 0 (id=465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1f, 0x3, 0x100, &(0x7f00000000c0)="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"}) 4.772031348s ago: executing program 1 (id=472): socket$kcm(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x509b, &(0x7f0000000740)={0x0, 0xce2, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$kcm(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r5 = socket(0x1d, 0xa, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) io_uring_setup(0x2917, &(0x7f0000000100)={0x0, 0x6cf6, 0x100, 0x3, 0x1e7, 0x0, r1}) 4.702649222s ago: executing program 2 (id=473): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x1c0, 0x30, 0x400, 0x0, 0x0, {}, [{0x1ac, 0x1, [@m_ct={0x98, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x58, 0x6, "28be055afd66f88b2807a38e94b9e57b6823a5c35a6ac64b0bd7cfba0b03fe0a7173f9ab581d7ed0a27853a1b39322d56eb6d84dae33f766e340e495bfd4ff25f209745393438d9c3d6a45014b009cc6fc0f14c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x110, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xac, 0x6, "0a702375638d8cad39faf8662bc254e30976cef11164d392131970ab72db349651a91ead752d4a35861614e524d24e6f151f1277c81deee6c763c78fec82a9236e90ebfa0f7f3e72ce9816e494aba5ce8834a64631bc50166652deda8a05390a148f8991fe74945d7eee6a39ecbf01117ff5b5cb2da013a804750be77e02f911b97824a97f7c2332be6128b9a87515c6fbade3eb8fc70162499ddacce19f56d3657d3a8744e81805"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x168, 0x0, 0x1, 0x10001, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x46}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x24e}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r4, &(0x7f0000000000)=""/40, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xdc05, @private0}]}, &(0x7f0000000000)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) memfd_create(&(0x7f0000000180)='/dev/audio\x00', 0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="b1cc811b30dbfc9557314aaeb4aee451d6a46294174575a93daa5fcd8738d5f3a377e5d431ab"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.383084207s ago: executing program 0 (id=475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1f, 0x3, 0x100, &(0x7f00000000c0)="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"}) 3.868181402s ago: executing program 1 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) unshare(0x40020000) 3.702439724s ago: executing program 2 (id=478): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000ee43f6642531e08004501"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)={0x3, 0x5, 0x7, 0x7ff, 0x1, 0xe}) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0x2, 0x6, 0x0) socket$inet(0x2, 0x2, 0x1) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000380)=0xfffffffe) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x41, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.300482111s ago: executing program 0 (id=479): socket(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="f4ffffff07000010060000008c00000000000000c5d172a20429509255ed38d9e0e01360d5ce598a1635e8dddae73a301639771f76da815ece1eeaba13319d75c9a560bf4494b7142a2379589bd19a1586dac0387af02c9589894ead429ccdb238873b83f19302282a3441a176a5269f2f32c87f25ea9fe66885a265e88a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000006c0)={0x2}) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149c00, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020001000428e10054e34bbd6042110000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.211487492s ago: executing program 0 (id=480): bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffeff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x37f19b96) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0xffffffff, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6b4ecdf, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="600100001000130725bd700000000000ff020000000000000000000000000001200100000000000000000000000000000000c42e2b65badde2b00008000000020200000000000080cb899c923b9d5a752caf86e814f2d82627dbb8711c4e765b1a0eaa83b9b56ef6a4cb585fcf31b818596ec54be1d31e9eeddaa11d92ee18b996a588681c2554ac9720e4ef34f7323c443bea76e32868393bef56d6c0f6ee71344ac42508eca0de8e422da5bb5526", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d232000000ac1e0001000000000000000000000000020000000000000000000000000000000000000000000000020000000000000000000000000000000000000000c0010000000000000000000000000000000000df1100000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd70000000000002000100000000000000000070001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200100006000000000"], 0x160}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x8c, 0x32, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x8000) recvmsg$unix(r6, &(0x7f0000000500)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/43, 0x2b}], 0x2}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3000000000050004000040000005000500020000000500010006000000140007800800064000000000080013"], 0x64}}, 0x0) r8 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) 2.823063408s ago: executing program 3 (id=482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=@newtaction={0x14, 0x30, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="5280a8d8dd72e8795f8b79fb1b2379575794e4ee1787b3a3a93e4e0a8ec6650a3219d0c340cd2c94e5e761251f930dc110c0bf0ff65cd0b425e8c9e7c4cbd8288e39f97955ee97e5930058823eab1584577bde21ad135117f063250828c51a13053c1089c665f42efcb2c7e819c58662f7eea4e727b5ef38c02483ca5ba23d8c73defa0c47d5d2842e8b9f399d7ab40d0be808266f7690902e2c1327846ff7a4045fda366cff7141368dc8d9e0fff3dc7d9095e693cd563b6c7cac757723526d620eae037beadb29ad7279a8aa777c041ddafdfc2e5235a946c64cef4a8e45aeb60a2ad91a5ca72396", &(0x7f0000000540)="1aa08e5a57784979f4bca13556e66961773d69faa440b4aa175582a7d77d74a6d4f91a5665300421322c74fed0b0f8e4821ab77ca91774b9ed368015d2fa0948ac81e390c1b903719571"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 2.822787839s ago: executing program 2 (id=483): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1f, 0x3, 0x100, &(0x7f00000000c0)="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"}) 2.681690493s ago: executing program 1 (id=484): r0 = io_uring_setup(0x2e34, &(0x7f0000000000)={0x0, 0x1adb}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.565432295s ago: executing program 1 (id=485): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=@newtaction={0x14, 0x30, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="5280a8d8dd72e8795f8b79fb1b2379575794e4ee1787b3a3a93e4e0a8ec6650a3219d0c340cd2c94e5e761251f930dc110c0bf0ff65cd0b425e8c9e7c4cbd8288e39f97955ee97e5930058823eab1584577bde21ad135117f063250828c51a13053c1089c665f42efcb2c7e819c58662f7eea4e727b5ef38c02483ca5ba23d8c73defa0c47d5d2842e8b9f399d7ab40d0be808266f7690902e2c1327846ff7a4045fda366cff7141368dc8d9e0fff3dc7d9095e693cd563b6c7cac757723526d620eae037beadb29ad7279a8aa777c041ddafdfc2e5235a946c64cef4a8e45aeb60a2ad91a5ca72396", &(0x7f0000000540)="1aa08e5a57784979f4bca13556e66961773d69faa440b4aa175582a7d77d74a6d4f91a5665300421322c74fed0b0f8e4821ab77ca91774b9ed368015d2fa0948ac81e390c1b903719571"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 1.832751542s ago: executing program 2 (id=486): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfff4, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 1.292700658s ago: executing program 3 (id=487): socket(0x2b, 0x80801, 0x7fff) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129203, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="300000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f131000000900000000"], 0x30}], 0x1}, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x99801, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000380)) r5 = socket$pptp(0x18, 0x1, 0x2) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000200)=""/104, &(0x7f0000000040)=0x68) dup(r2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) socket(0x10, 0x8000000803, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x20, r8, 0x3, 0x3) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f2000000516f7177520babc5c51a3760b900aa6680ce8c410daf40d5d116eba0dae44b8a5b7a3d523f1ffc073d785765490ced616ebe304714d886f4d7d3186a4953b1f000206aef4431a68531d18402fdd182fddb508ac53b910bfa844b4c44a269828b6778f8978b0ff1f2c9b9175084f81579d26218b90f26230494c85cf075d217a27ac243e68774a0ac868c5dd33a88b4e6c363a8b0e30d914f44b0dcf667bb149cddf6f20d07b02f7c107aa15b632b2e363776640531eb08d8cfcbb13b256b2dce626b5f0a2a0885930959c3636b09d45b56a3c5f96467d5320d6f99", @ANYRES16=r10, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003000000"], 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.232700087s ago: executing program 3 (id=488): socket$kcm(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x509b, &(0x7f0000000740)={0x0, 0xce2, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$kcm(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r5 = socket(0x1d, 0xa, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) io_uring_setup(0x2917, &(0x7f0000000100)={0x0, 0x6cf6, 0x100, 0x3, 0x1e7, 0x0, r1}) 922.723696ms ago: executing program 2 (id=489): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1f, 0x3, 0x100, &(0x7f00000000c0)="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"}) 912.99494ms ago: executing program 1 (id=497): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 842.498808ms ago: executing program 1 (id=490): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 362.877794ms ago: executing program 3 (id=491): socket(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="f4ffffff07000010060000008c00000000000000c5d172a20429509255ed38d9e0e01360d5ce598a1635e8dddae73a301639771f76da815ece1eeaba13319d75c9a560bf4494b7142a2379589bd19a1586dac0387af02c9589894ead429ccdb238873b83f19302282a3441a176a5269f2f32c87f25ea9fe66885a265e88a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000006c0)={0x2}) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149c00, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020001000428e10054e34bbd6042110000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 302.999739ms ago: executing program 3 (id=492): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=virtio,cache=mma']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) 212.960015ms ago: executing program 3 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x55c, 0x0, 0x1ac, 0x390, 0x0, 0x2c8, 0x494, 0x494, 0x494, 0x494, 0x494, 0x6, 0x0, {[{{@ipv6={@local, @loopback, [0xffffff00, 0xff000000, 0x0, 0xff], [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 'team0\x00', 'hsr0\x00', {}, {0xff}, 0x32, 0xff, 0x0, 0x8}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x5, 0x3}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0xff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast2, @remote, [0x0, 0x0, 0x0, 0xff], [], 'wg1\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x11c, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d6], 0xfffffffb}}, @common=@inet=@socket1={{0x24, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xc8, 0x104, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5b8) socket(0x10, 0x80003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x14) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f0000000100)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r14, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) close_range(r11, 0xffffffffffffffff, 0x0) close(r10) 122.593565ms ago: executing program 0 (id=494): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1f, 0x3, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 0s ago: executing program 2 (id=495): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) close(r2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0xd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x80000000, 0x0, 0xfffffffc}, 0x10) kernel console output (not intermixed with test programs): ave bond_slave_0): Enslaving as an active interface with an up link [ 46.333036][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.351640][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.356402][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.360940][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.412900][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.445941][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.451268][ T5959] team0: Port device team_slave_0 added [ 46.469322][ T5962] team0: Port device team_slave_0 added [ 46.473137][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.477794][ T5959] team0: Port device team_slave_1 added [ 46.492650][ T5962] team0: Port device team_slave_1 added [ 46.540055][ T5956] team0: Port device team_slave_0 added [ 46.567710][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.569957][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.579900][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.585258][ T5956] team0: Port device team_slave_1 added [ 46.601284][ T5952] team0: Port device team_slave_0 added [ 46.604823][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.607078][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.615222][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.639587][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.641774][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.649805][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.654587][ T5952] team0: Port device team_slave_1 added [ 46.671190][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.673474][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.681350][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.714351][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.716734][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.726668][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.735452][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.737636][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.748499][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.779902][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.782612][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.792787][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.798326][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.801005][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.810707][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.835732][ T5959] hsr_slave_0: entered promiscuous mode [ 46.838559][ T5959] hsr_slave_1: entered promiscuous mode [ 46.917213][ T5962] hsr_slave_0: entered promiscuous mode [ 46.919393][ T5962] hsr_slave_1: entered promiscuous mode [ 46.921426][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.924848][ T5962] Cannot create hsr debugfs directory [ 46.951428][ T5952] hsr_slave_0: entered promiscuous mode [ 46.953823][ T5952] hsr_slave_1: entered promiscuous mode [ 46.956275][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.958653][ T5952] Cannot create hsr debugfs directory [ 46.992040][ T5956] hsr_slave_0: entered promiscuous mode [ 46.994825][ T5956] hsr_slave_1: entered promiscuous mode [ 46.996878][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.999266][ T5956] Cannot create hsr debugfs directory [ 47.324800][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.333056][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.338844][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.348018][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.370261][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.377154][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.384088][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.390122][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.448444][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.452950][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.459008][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.463274][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.511755][ T5962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.516533][ T5962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.527701][ T5962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.538880][ T5962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.557663][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.583576][ T5955] Bluetooth: hci2: command tx timeout [ 47.583592][ T5961] Bluetooth: hci1: command tx timeout [ 47.584435][ T5309] Bluetooth: hci3: command tx timeout [ 47.592798][ T5309] Bluetooth: hci0: command tx timeout [ 47.604059][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.607917][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.622619][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.625153][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.639294][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.647480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.650541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.676353][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.679516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.681778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.694224][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.696491][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.702100][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.731170][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.739360][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.749350][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.751604][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.763306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.765555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.768702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.770943][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.784678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.786940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.880410][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.910738][ T5956] veth0_vlan: entered promiscuous mode [ 47.926907][ T5956] veth1_vlan: entered promiscuous mode [ 47.943964][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.968532][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.985137][ T5956] veth0_macvtap: entered promiscuous mode [ 48.001190][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.004309][ T5956] veth1_macvtap: entered promiscuous mode [ 48.011621][ T5959] veth0_vlan: entered promiscuous mode [ 48.026066][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.031289][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.039456][ T5956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.042385][ T5956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.045391][ T5956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.048385][ T5956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.052617][ T5959] veth1_vlan: entered promiscuous mode [ 48.063480][ T5952] veth0_vlan: entered promiscuous mode [ 48.075922][ T5952] veth1_vlan: entered promiscuous mode [ 48.096874][ T5962] veth0_vlan: entered promiscuous mode [ 48.125439][ T5962] veth1_vlan: entered promiscuous mode [ 48.129451][ T5959] veth0_macvtap: entered promiscuous mode [ 48.134177][ T5959] veth1_macvtap: entered promiscuous mode [ 48.139823][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.142303][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.153542][ T5952] veth0_macvtap: entered promiscuous mode [ 48.159973][ T5952] veth1_macvtap: entered promiscuous mode [ 48.172095][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.175801][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.180412][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.186238][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.189443][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.193299][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.202361][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.206003][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.210001][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.214614][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.218223][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.222653][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.225627][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.228460][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.231331][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.238080][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.238161][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.241188][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.243895][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.249543][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.253126][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.257049][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.273930][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.276450][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279338][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.282314][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.287195][ T5962] veth0_macvtap: entered promiscuous mode [ 48.304461][ T5962] veth1_macvtap: entered promiscuous mode [ 48.326580][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.343399][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.346440][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.352428][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.358351][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.362442][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.369628][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.373423][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.377211][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.382010][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.403295][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.403699][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.406210][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.414440][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.417906][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.422119][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.425854][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.429342][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.435054][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.451334][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.451582][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.455381][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.457513][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.464125][ T5962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.467298][ T5962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.494272][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.496752][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.539456][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.550670][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.575809][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.578173][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.586812][ T6023] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 48.649905][ T6029] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 48.665502][ T6029] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.709988][ T6032] netlink: 'syz.2.5': attribute type 10 has an invalid length. [ 48.721014][ T6032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.759391][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.932753][ T5996] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.002802][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.082811][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 49.087728][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.091492][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.095063][ T5996] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.099283][ T5996] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 49.105007][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.111235][ T5996] usb 8-1: config 0 descriptor?? [ 49.152741][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 49.156090][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.159601][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.162879][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.166931][ T24] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 49.169860][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.173808][ T24] usb 7-1: config 0 descriptor?? [ 49.507778][ T6041] capability: warning: `syz.0.7' uses 32-bit capabilities (legacy support in use) [ 49.525178][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 49.527781][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 49.530309][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.531556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 49.533049][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.537838][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.540356][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.541925][ T5996] usbhid 8-1:0.0: can't add hid device: -71 [ 49.543285][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.543299][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.543310][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.543321][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.543332][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.543344][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.545696][ T5996] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 49.548034][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.553294][ T5996] usb 8-1: USB disconnect, device number 2 [ 49.568310][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.570860][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.573689][ T5995] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 49.578959][ T5995] hid-generic 0000:3000000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 49.607711][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 49.609634][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 49.634792][ T24] usb 7-1: USB disconnect, device number 2 [ 49.663079][ T5309] Bluetooth: hci0: command tx timeout [ 49.663117][ T5955] Bluetooth: hci2: command tx timeout [ 49.663178][ T5961] Bluetooth: hci3: command tx timeout [ 49.663208][ T5961] Bluetooth: hci1: command tx timeout [ 49.782850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.785596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.788307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.790955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.240764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 50.333812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.342557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.597863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.683229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.012903][ T5996] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.162900][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 51.166526][ T5996] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.171084][ T5996] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 51.179393][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.192467][ T5996] usb 8-1: config 0 descriptor?? [ 51.196833][ T5996] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 51.490262][ T6081] overlayfs: failed to resolve './file1/file0': -2 [ 51.493650][ T6081] overlayfs: failed to resolve './file1/file0': -2 [ 51.743376][ T5955] Bluetooth: hci2: command tx timeout [ 51.752775][ T5955] Bluetooth: hci1: command tx timeout [ 51.753502][ T67] Bluetooth: hci0: command tx timeout [ 51.754721][ T5955] Bluetooth: hci3: command tx timeout [ 52.102584][ T6092] random: crng reseeded on system resumption [ 52.315945][ T6095] Zero length message leads to an empty skb [ 52.637336][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 52.639766][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 52.642150][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.644626][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.647048][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.649422][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.651806][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.654509][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.656909][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.659273][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.661626][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.664626][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.667071][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.669433][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.671806][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.674938][ T65] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.679142][ T65] hid-generic 0000:3000000:0000.0003: hidraw1: HID v0.00 Device [sy] on syz0 [ 53.781186][ T63] usb 8-1: USB disconnect, device number 3 [ 53.822799][ T5955] Bluetooth: hci0: command tx timeout [ 53.823135][ T5309] Bluetooth: hci1: command tx timeout [ 53.833676][ T5309] Bluetooth: hci3: command tx timeout [ 53.834392][ T5955] Bluetooth: hci2: command tx timeout [ 53.844873][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 53.847361][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 53.849804][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.852339][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.855487][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.857961][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.860888][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.864396][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.867447][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.870208][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.873108][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.876171][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.878661][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.881694][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.885040][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.888327][ T1457] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 53.892867][ T1457] hid-generic 0000:3000000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 54.629426][ T6129] xt_ecn: cannot match TCP bits for non-tcp packets [ 54.765181][ T6137] netlink: 'syz.3.31': attribute type 10 has an invalid length. [ 55.012750][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.022227][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.026267][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.029785][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.032724][ T2020] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.033687][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.160358][ T6141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.172994][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 55.176964][ T65] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.181189][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.186714][ T2020] usb 8-1: Using ep0 maxpacket: 16 [ 55.189438][ T65] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 55.193961][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.199310][ T2020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.205618][ T2020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.209515][ T65] usb 6-1: config 0 descriptor?? [ 55.211446][ T2020] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 55.215655][ T2020] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 55.218726][ T2020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.222973][ T65] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 55.225814][ T2020] usb 8-1: config 0 descriptor?? [ 55.655162][ T2020] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 55.678310][ T2020] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 55.681117][ T2020] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 55.864049][ T5996] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 55.864335][ T63] usb 8-1: USB disconnect, device number 4 [ 55.868674][ T5996] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 55.877645][ T5996] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 55.883303][ T5996] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 56.127626][ T6156] random: crng reseeded on system resumption [ 56.537764][ T6162] overlay: filesystem on ./bus not supported as upperdir [ 57.141019][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 57.144471][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 57.147352][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.150167][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.153193][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.156052][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.159067][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.161497][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.164026][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.166434][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.168881][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.171482][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.174264][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.176780][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.179345][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.181878][ T63] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 57.185804][ T63] hid-generic 0000:3000000:0000.0006: hidraw1: HID v0.00 Device [sy] on syz0 [ 57.757867][ T63] usb 6-1: USB disconnect, device number 2 [ 58.102818][ T63] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.263865][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 58.278943][ T63] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.282590][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.282636][ T63] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 58.283045][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.288214][ T63] usb 6-1: config 0 descriptor?? [ 58.289891][ T63] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 59.021166][ T6190] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 59.021166][ T6190] program syz.0.47 not setting count and/or reply_len properly [ 59.218900][ T6196] random: crng reseeded on system resumption [ 60.808514][ T5996] usb 6-1: USB disconnect, device number 3 [ 61.051528][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.54'. [ 61.055217][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 61.058737][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.54'. [ 61.062172][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.54'. [ 61.372747][ T1454] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 61.522848][ T1454] usb 8-1: Using ep0 maxpacket: 16 [ 61.526636][ T1454] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.530600][ T1454] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.535930][ T1454] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 61.539482][ T1454] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.545672][ T1454] usb 8-1: config 0 descriptor?? [ 61.551321][ T1454] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 62.455160][ T6230] random: crng reseeded on system resumption [ 62.908176][ T6238] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.803171][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'. [ 63.806042][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 63.808921][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'. [ 63.811825][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'. [ 64.029993][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.66'. [ 64.032837][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 64.128887][ T1454] usb 8-1: USB disconnect, device number 5 [ 64.241922][ T6260] xt_ecn: cannot match TCP bits for non-tcp packets [ 64.672793][ T833] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.822942][ T833] usb 6-1: Using ep0 maxpacket: 16 [ 64.825902][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.829756][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.833146][ T833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 64.837264][ T833] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 64.840049][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.844652][ T833] usb 6-1: config 0 descriptor?? [ 65.250684][ T6263] random: crng reseeded on system resumption [ 65.258351][ T833] usbhid 6-1:0.0: can't add hid device: -71 [ 65.260280][ T833] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 65.269354][ T833] usb 6-1: USB disconnect, device number 4 [ 65.882776][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 65.887386][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 65.889910][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.893113][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.896211][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.898697][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.901351][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.904374][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.906968][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.910381][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.913876][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.917152][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.919776][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.922451][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.925600][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.928365][ T833] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 65.933888][ T833] hid-generic 0000:3000000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 65.956665][ T6290] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 65.956665][ T6290] program syz.2.75 not setting count and/or reply_len properly [ 66.733281][ T65] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.751278][ T6297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.808747][ T6300] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.912759][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 66.915639][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.918651][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.922476][ T65] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 66.926791][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.930715][ T65] usb 7-1: config 0 descriptor?? [ 66.935438][ T65] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 67.840924][ T6316] random: crng reseeded on system resumption [ 68.518052][ T6322] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 68.518052][ T6322] program syz.3.85 not setting count and/or reply_len properly [ 69.490817][ T65] usb 7-1: USB disconnect, device number 3 [ 69.537271][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 69.540032][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 69.542814][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.545519][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.548167][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.550843][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.555367][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.558057][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.560746][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.563553][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.566245][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.568892][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.571569][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.574401][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.577117][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.583357][ T1454] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 69.593254][ T1454] hid-generic 0000:3000000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 69.631340][ T6336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.655782][ T6336] syz.3.90 (6336) used greatest stack depth: 20824 bytes left [ 70.515448][ T6349] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 70.515448][ T6349] program syz.2.94 not setting count and/or reply_len properly [ 70.785330][ T6357] __nla_validate_parse: 2 callbacks suppressed [ 70.785340][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.790747][ T6357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.793613][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.796682][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.876952][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.879750][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.909068][ T6361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.162862][ T1454] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.322807][ T1454] usb 6-1: Using ep0 maxpacket: 16 [ 71.325073][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.325096][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.325112][ T1454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.325141][ T1454] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 71.325157][ T1454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.327081][ T1454] usb 6-1: config 0 descriptor?? [ 71.558723][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 71.561312][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 71.563791][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.566119][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.568422][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.570691][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.573075][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.575671][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.577951][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.580249][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.582561][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.584947][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.587205][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.589406][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.591656][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.594144][ T2020] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 71.598013][ T2020] hid-generic 0000:3000000:0000.0009: hidraw1: HID v0.00 Device [sy] on syz0 [ 71.733330][ T6364] random: crng reseeded on system resumption [ 71.750659][ T1454] usbhid 6-1:0.0: can't add hid device: -71 [ 71.760485][ T1454] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 71.768399][ T1454] usb 6-1: USB disconnect, device number 5 [ 72.145639][ T6381] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 72.145639][ T6381] program syz.2.105 not setting count and/or reply_len properly [ 72.583604][ T833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.732723][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 72.736000][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.739899][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.743917][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.748869][ T833] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 72.751986][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.760658][ T833] usb 7-1: config 0 descriptor?? [ 73.166774][ T6385] random: crng reseeded on system resumption [ 73.176197][ T833] usbhid 7-1:0.0: can't add hid device: -71 [ 73.178482][ T833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 73.183257][ T833] usb 7-1: USB disconnect, device number 4 [ 73.235237][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.238200][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.240972][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.243866][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.832940][ T6408] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 73.832940][ T6408] program syz.2.115 not setting count and/or reply_len properly [ 74.048877][ T6411] overlayfs: failed to resolve './file1/file0': -2 [ 74.056228][ T6411] overlayfs: failed to resolve './file1/file0': -2 [ 74.862167][ T6419] overlayfs: failed to resolve './file0': -2 [ 74.951701][ T6423] overlayfs: failed to resolve './file0': -2 [ 75.166792][ T6433] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 75.166792][ T6433] program syz.3.124 not setting count and/or reply_len properly [ 75.272780][ T2020] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.422856][ T2020] usb 7-1: Using ep0 maxpacket: 16 [ 75.426164][ T2020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.429829][ T2020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.433596][ T2020] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.438016][ T2020] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 75.440874][ T2020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.445339][ T2020] usb 7-1: config 0 descriptor?? [ 75.851082][ T6425] random: crng reseeded on system resumption [ 75.857603][ T2020] usbhid 7-1:0.0: can't add hid device: -71 [ 75.859727][ T2020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.865957][ T2020] usb 7-1: USB disconnect, device number 5 [ 76.604042][ T6445] overlayfs: failed to resolve './file1': -2 [ 76.785089][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 76.787574][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 76.789962][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.792347][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.812888][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.815518][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.817912][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.823505][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.862557][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.908794][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.916259][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.921754][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.927026][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.933151][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.938633][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.942945][ T5996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 76.953745][ T5996] hid-generic 0000:3000000:0000.000A: hidraw1: HID v0.00 Device [sy] on syz0 [ 77.232803][ T6459] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 77.232803][ T6459] program syz.3.134 not setting count and/or reply_len properly [ 77.709819][ T6470] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 77.722088][ T6470] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 77.882737][ T833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.992740][ T1454] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.032815][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 78.036892][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.041384][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.045110][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.049068][ T833] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.051854][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.055937][ T833] usb 7-1: config 0 descriptor?? [ 78.142727][ T1454] usb 6-1: Using ep0 maxpacket: 16 [ 78.145732][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.149552][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.153513][ T1454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.158495][ T1454] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.162022][ T1454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.174171][ T1454] usb 6-1: config 0 descriptor?? [ 78.408493][ T6472] overlayfs: failed to resolve './file1': -2 [ 78.417108][ T6474] netlink: 'syz.0.139': attribute type 10 has an invalid length. [ 78.428803][ T6474] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 78.586389][ T1454] usbhid 6-1:0.0: can't add hid device: -71 [ 78.588363][ T1454] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 78.591731][ T1454] usb 6-1: USB disconnect, device number 6 [ 78.672464][ T6468] random: crng reseeded on system resumption [ 78.683246][ T833] usbhid 7-1:0.0: can't add hid device: -71 [ 78.685234][ T833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 78.688620][ T833] usb 7-1: USB disconnect, device number 6 [ 79.231904][ T6481] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 79.231904][ T6481] program syz.2.143 not setting count and/or reply_len properly [ 79.261318][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.142'. [ 79.266264][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 79.269956][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.142'. [ 79.273340][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.142'. [ 79.337839][ T6486] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 79.337839][ T6486] program syz.1.152 not setting count and/or reply_len properly [ 80.328990][ T6500] overlayfs: failed to resolve './file1': -2 [ 80.702854][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.862862][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 80.866649][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.871036][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.875193][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 80.880248][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 80.883458][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.887133][ T10] usb 6-1: config 0 descriptor?? [ 81.091184][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'. [ 81.094133][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 81.097051][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'. [ 81.102899][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'. [ 81.114294][ T57] cfg80211: failed to load regulatory.db [ 81.215217][ T6514] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 81.215217][ T6514] program syz.3.155 not setting count and/or reply_len properly [ 81.494632][ T6505] random: crng reseeded on system resumption [ 81.502126][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 81.504401][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 81.509572][ T10] usb 6-1: USB disconnect, device number 7 [ 82.059159][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 82.062587][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 82.067285][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.070476][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.073961][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.077140][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.080292][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.084097][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.087440][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.090599][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.094430][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.097886][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.101873][ T6526] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 82.101873][ T6526] program syz.2.158 not setting count and/or reply_len properly [ 82.108851][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.112148][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.115501][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.127528][ T2020] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 82.152313][ T2020] hid-generic 0000:3000000:0000.000B: hidraw1: HID v0.00 Device [sy] on syz0 [ 82.372776][ T6531] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 82.372776][ T6531] program syz.3.160 not setting count and/or reply_len properly [ 82.490271][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 82.501373][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 82.511995][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.518241][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.530795][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.535222][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.538509][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.541814][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.545129][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.548385][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.551610][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.554869][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.558099][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.561302][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.564573][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.567850][ T29] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 82.574697][ T29] hid-generic 0000:3000000:0000.000C: hidraw1: HID v0.00 Device [sy] on syz0 [ 82.987538][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 82.987565][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 82.987604][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987622][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987640][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987658][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987675][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987693][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987711][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987728][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987746][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987764][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987782][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987800][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987818][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.987836][ T2020] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 82.990216][ T2020] hid-generic 0000:3000000:0000.000D: hidraw1: HID v0.00 Device [sy] on syz0 [ 83.565931][ T6544] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 83.565931][ T6544] program syz.0.164 not setting count and/or reply_len properly [ 83.880779][ T6550] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 83.880779][ T6550] program syz.2.166 not setting count and/or reply_len properly [ 84.162784][ T63] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.200025][ T6557] netlink: 'syz.2.169': attribute type 10 has an invalid length. [ 84.312750][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 84.316002][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.319712][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.323005][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.326913][ T63] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 84.329744][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.333490][ T63] usb 6-1: config 0 descriptor?? [ 84.452880][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.547636][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.170'. [ 84.550547][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 84.553511][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.170'. [ 84.556455][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.170'. [ 84.612880][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 84.624040][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.628559][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.632534][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.637862][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 84.641655][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.647132][ T9] usb 7-1: config 0 descriptor?? [ 84.943792][ T6554] random: crng reseeded on system resumption [ 84.950969][ T63] usbhid 6-1:0.0: can't add hid device: -71 [ 84.953066][ T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 84.959150][ T63] usb 6-1: USB disconnect, device number 8 [ 85.056918][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 85.071173][ T9] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 85.074179][ T9] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 85.257415][ T6013] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 85.257721][ T2020] usb 7-1: USB disconnect, device number 7 [ 85.260967][ T6013] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 85.267008][ T6013] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 85.270545][ T6013] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 86.176249][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 86.179158][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.179'. [ 86.181978][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 86.184995][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 89.628804][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 89.631597][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 89.638561][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 89.642226][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 90.488214][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 90.491946][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 90.495713][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 90.499230][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 91.396408][ T6698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.559175][ T6707] netlink: 'syz.3.216': attribute type 10 has an invalid length. [ 91.724052][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 91.730622][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 91.812940][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.962810][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 91.967021][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.970367][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.975890][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.979818][ T10] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 91.982608][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.992755][ T10] usb 8-1: config 0 descriptor?? [ 92.400969][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 92.410120][ T10] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 92.412799][ T10] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 92.601224][ T9] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 92.601899][ T57] usb 8-1: USB disconnect, device number 6 [ 92.606058][ T9] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 92.610974][ T9] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 92.614518][ T9] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 92.683621][ T833] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.832768][ T833] usb 6-1: Using ep0 maxpacket: 16 [ 92.836425][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.840620][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.844761][ T833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.850091][ T833] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 92.853171][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.857860][ T833] usb 6-1: config 0 descriptor?? [ 93.258732][ T6731] FAULT_INJECTION: forcing a failure. [ 93.258732][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.262959][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.3.225 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 93.262973][ T6731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.262979][ T6731] Call Trace: [ 93.262983][ T6731] [ 93.262987][ T6731] dump_stack_lvl+0x16c/0x1f0 [ 93.263005][ T6731] should_fail_ex+0x512/0x640 [ 93.263020][ T6731] _copy_from_user+0x2e/0xd0 [ 93.263034][ T6731] kvm_vm_ioctl+0x13b5/0x3d40 [ 93.263049][ T6731] ? stack_trace_save+0x8e/0xc0 [ 93.263060][ T6731] ? __pfx_stack_trace_save+0x10/0x10 [ 93.263071][ T6731] ? stack_depot_save_flags+0x28/0xa50 [ 93.263084][ T6731] ? __lock_acquire+0xaa4/0x1ba0 [ 93.263098][ T6731] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 93.263110][ T6731] ? kasan_save_stack+0x42/0x60 [ 93.263122][ T6731] ? kasan_save_stack+0x33/0x60 [ 93.263132][ T6731] ? kasan_save_track+0x14/0x30 [ 93.263142][ T6731] ? kasan_save_free_info+0x3b/0x60 [ 93.263157][ T6731] ? __kasan_slab_free+0x51/0x70 [ 93.263168][ T6731] ? kfree+0x2b6/0x4d0 [ 93.263177][ T6731] ? tomoyo_path_number_perm+0x470/0x580 [ 93.263189][ T6731] ? security_file_ioctl_compat+0x9b/0x240 [ 93.263201][ T6731] ? __ia32_compat_sys_ioctl+0xc3/0x360 [ 93.263216][ T6731] ? __do_fast_syscall_32+0x73/0x120 [ 93.263230][ T6731] ? do_fast_syscall_32+0x32/0x80 [ 93.263244][ T6731] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.263256][ T6731] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 93.263272][ T6731] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 93.263305][ T6731] ? kasan_quarantine_put+0x10a/0x240 [ 93.263322][ T6731] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.263344][ T6731] ? find_held_lock+0x2b/0x80 [ 93.263373][ T6731] ? do_vfs_ioctl+0x512/0x1990 [ 93.263396][ T6731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 93.263417][ T6731] kvm_vm_compat_ioctl+0x393/0x430 [ 93.263430][ T6731] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 93.263443][ T6731] ? find_held_lock+0x2b/0x80 [ 93.263452][ T6731] ? hook_file_ioctl_common+0x145/0x410 [ 93.263467][ T6731] ? __fget_files+0x20e/0x3c0 [ 93.263476][ T6731] ? __fput_deferred+0x310/0x370 [ 93.263491][ T6731] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 93.263504][ T6731] __ia32_compat_sys_ioctl+0x24c/0x360 [ 93.263520][ T6731] __do_fast_syscall_32+0x73/0x120 [ 93.263536][ T6731] do_fast_syscall_32+0x32/0x80 [ 93.263550][ T6731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.263562][ T6731] RIP: 0023:0xf703e579 [ 93.263570][ T6731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.263586][ T6731] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 93.263595][ T6731] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004020ae46 [ 93.263602][ T6731] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.263607][ T6731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.263613][ T6731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.263618][ T6731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.263630][ T6731] [ 93.464447][ T6723] random: crng reseeded on system resumption [ 93.474359][ T833] usbhid 6-1:0.0: can't add hid device: -71 [ 93.478666][ T833] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 93.482416][ T833] usb 6-1: USB disconnect, device number 9 [ 94.015011][ T6752] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 94.272794][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.442784][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 94.452043][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.458748][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.462495][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.467730][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 94.471498][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.479635][ T9] usb 6-1: config 0 descriptor?? [ 94.525541][ T6764] FAULT_INJECTION: forcing a failure. [ 94.525541][ T6764] name failslab, interval 1, probability 0, space 0, times 1 [ 94.530675][ T6764] CPU: 2 UID: 0 PID: 6764 Comm: syz.0.236 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 94.530697][ T6764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.530707][ T6764] Call Trace: [ 94.530713][ T6764] [ 94.530719][ T6764] dump_stack_lvl+0x16c/0x1f0 [ 94.530746][ T6764] should_fail_ex+0x512/0x640 [ 94.530765][ T6764] ? __kmalloc_noprof+0xbf/0x510 [ 94.530786][ T6764] ? iovec_from_user+0x108/0x140 [ 94.530805][ T6764] should_failslab+0xc2/0x120 [ 94.530827][ T6764] __kmalloc_noprof+0xd2/0x510 [ 94.530845][ T6764] ? __lock_acquire+0x5ca/0x1ba0 [ 94.530871][ T6764] iovec_from_user+0x108/0x140 [ 94.530894][ T6764] __import_iovec+0x88/0x660 [ 94.530917][ T6764] ? find_held_lock+0x2b/0x80 [ 94.530951][ T6764] import_iovec+0x86/0xb0 [ 94.530975][ T6764] vfs_readv+0x193/0x8a0 [ 94.530997][ T6764] ? __pfx_vfs_readv+0x10/0x10 [ 94.531027][ T6764] ? __fget_files+0x20e/0x3c0 [ 94.531041][ T6764] ? __fget_files+0x200/0x3c0 [ 94.531061][ T6764] ? do_readv+0x295/0x330 [ 94.531074][ T6764] do_readv+0x295/0x330 [ 94.531089][ T6764] ? __pfx_do_readv+0x10/0x10 [ 94.531105][ T6764] ? rcu_is_watching+0x12/0xc0 [ 94.531124][ T6764] __do_fast_syscall_32+0x73/0x120 [ 94.531149][ T6764] do_fast_syscall_32+0x32/0x80 [ 94.531173][ T6764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.531192][ T6764] RIP: 0023:0xf70de579 [ 94.531205][ T6764] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.531220][ T6764] RSP: 002b:00000000f50ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 94.531236][ T6764] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 94.531246][ T6764] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.531255][ T6764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.531264][ T6764] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.531273][ T6764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.531294][ T6764] [ 94.690279][ T6773] __nla_validate_parse: 6 callbacks suppressed [ 94.690294][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.238'. [ 94.696613][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 94.700058][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.238'. [ 94.704612][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.238'. [ 94.892954][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 94.904982][ T9] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 94.907546][ T9] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 95.102055][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 95.103791][ T833] usb 6-1: USB disconnect, device number 10 [ 95.106146][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 95.112570][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 95.116812][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 95.494523][ T6779] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.508178][ T6779] kvm: pic: level sensitive irq not supported [ 95.509267][ T6779] kvm: pic: non byte read [ 95.792813][ T5996] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.922883][ T5996] usb 8-1: device descriptor read/64, error -71 [ 95.993252][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.142787][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 96.145735][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.149370][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.152527][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.156549][ T57] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 96.159407][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.163801][ T57] usb 6-1: config 0 descriptor?? [ 96.173531][ T5996] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.302825][ T5996] usb 8-1: device descriptor read/64, error -71 [ 96.422997][ T5996] usb usb8-port1: attempt power cycle [ 96.762760][ T5996] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.768798][ T6787] random: crng reseeded on system resumption [ 96.777040][ T57] usbhid 6-1:0.0: can't add hid device: -71 [ 96.779851][ T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 96.783495][ T5996] usb 8-1: device descriptor read/8, error -71 [ 96.785662][ T57] usb 6-1: USB disconnect, device number 11 [ 97.022849][ T5996] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.043269][ T5996] usb 8-1: device descriptor read/8, error -71 [ 97.153291][ T5996] usb usb8-port1: unable to enumerate USB device [ 97.863843][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'. [ 97.867332][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 97.870246][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'. [ 97.873443][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'. [ 98.182187][ T6811] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 98.432738][ T6013] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 98.525692][ T6816] capability: warning: `syz.3.253' uses deprecated v2 capabilities in a way that may be insecure [ 98.592785][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 98.598452][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.602646][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.606633][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.610698][ T6013] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 98.614571][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.620996][ T6013] usb 6-1: config 0 descriptor?? [ 98.638653][ T6817] fuse: Bad value for 'fd' [ 98.845287][ T6825] sctp: [Deprecated]: syz.0.256 (pid 6825) Use of int in max_burst socket option deprecated. [ 98.845287][ T6825] Use struct sctp_assoc_value instead [ 99.034796][ T6013] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 99.048878][ T6013] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 99.052164][ T6013] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 99.138175][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.258'. [ 99.140957][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 99.232031][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 99.242558][ T9] usb 6-1: USB disconnect, device number 12 [ 99.244715][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 99.252241][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 99.255894][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 99.719928][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 99.725376][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 99.727823][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.730688][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.734081][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.736680][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.739141][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.741482][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.744778][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.747471][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.750150][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.753220][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.755623][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.758198][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.760706][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.760720][ T29] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 99.761849][ T29] hid-generic 0000:3000000:0000.0012: hidraw1: HID v0.00 Device [sy] on syz0 [ 100.667698][ T6863] __nla_validate_parse: 2 callbacks suppressed [ 100.667714][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.267'. [ 100.673345][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 100.676277][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.267'. [ 100.679225][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.267'. [ 101.031654][ T6873] FAULT_INJECTION: forcing a failure. [ 101.031654][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 101.031690][ T6873] CPU: 3 UID: 0 PID: 6873 Comm: syz.0.271 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 101.031710][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.031720][ T6873] Call Trace: [ 101.031726][ T6873] [ 101.031732][ T6873] dump_stack_lvl+0x16c/0x1f0 [ 101.031760][ T6873] should_fail_ex+0x512/0x640 [ 101.031780][ T6873] ? fs_reclaim_acquire+0xae/0x150 [ 101.031807][ T6873] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 101.031830][ T6873] should_failslab+0xc2/0x120 [ 101.031852][ T6873] __kmalloc_noprof+0xd2/0x510 [ 101.031875][ T6873] tomoyo_realpath_from_path+0xc2/0x6e0 [ 101.031901][ T6873] ? tomoyo_profile+0x47/0x60 [ 101.031919][ T6873] tomoyo_path_number_perm+0x245/0x580 [ 101.031937][ T6873] ? tomoyo_path_number_perm+0x237/0x580 [ 101.031959][ T6873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.032003][ T6873] ? find_held_lock+0x2b/0x80 [ 101.032020][ T6873] ? hook_file_ioctl_common+0x145/0x410 [ 101.032039][ T6873] ? __fget_files+0x204/0x3c0 [ 101.032059][ T6873] ? __fget_files+0x20e/0x3c0 [ 101.032073][ T6873] ? __fput_deferred+0x310/0x370 [ 101.032097][ T6873] security_file_ioctl_compat+0x9b/0x240 [ 101.032119][ T6873] __ia32_compat_sys_ioctl+0xc3/0x360 [ 101.032146][ T6873] __do_fast_syscall_32+0x73/0x120 [ 101.032172][ T6873] do_fast_syscall_32+0x32/0x80 [ 101.032196][ T6873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.032216][ T6873] RIP: 0023:0xf70de579 [ 101.032229][ T6873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.032244][ T6873] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 101.032261][ T6873] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 101.032271][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.032280][ T6873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.032289][ T6873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.032299][ T6873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.032321][ T6873] [ 101.032327][ T6873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.345418][ T6882] fuse: Bad value for 'user_id' [ 101.346986][ T6882] fuse: Bad value for 'user_id' [ 101.509153][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 101.512294][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 101.515873][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.519066][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.522026][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.526045][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.529023][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.532107][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.535812][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.538858][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.541883][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.545443][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.548483][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.551514][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.554596][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.557676][ T5996] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 101.562002][ T5996] hid-generic 0000:3000000:0000.0013: hidraw1: HID v0.00 Device [sy] on syz0 [ 101.715198][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.277'. [ 101.718110][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'. [ 101.720873][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.277'. [ 101.723794][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.277'. [ 101.757970][ T6892] Bluetooth: MGMT ver 1.23 [ 102.864121][ T5955] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.867035][ T5955] Bluetooth: hci2: Injecting HCI hardware error event [ 102.870181][ T5309] Bluetooth: hci2: hardware error 0x00 [ 103.029754][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.286'. [ 103.032509][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 103.879809][ T40] audit: type=1326 audit(1745146591.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.292" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e579 code=0x0 [ 104.942983][ T5309] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 105.852199][ T6992] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.125726][ T7003] __nla_validate_parse: 6 callbacks suppressed [ 106.125740][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'. [ 106.132465][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 106.136018][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'. [ 106.139472][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'. [ 107.524672][ T7030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.961660][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 107.965255][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 107.968740][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 107.971674][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 108.706047][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 108.709109][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 108.712258][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.715946][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.719045][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.722155][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.725499][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.728020][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.730342][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.734183][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.737228][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.740231][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.744032][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.747397][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.750488][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.753937][ T29] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 108.759698][ T29] hid-generic 0000:3000000:0000.0014: hidraw1: HID v0.00 Device [sy] on syz0 [ 108.804245][ T7057] befs: (nullb0): No write support. Marking filesystem read-only [ 108.808215][ T7057] befs: (nullb0): invalid magic header [ 108.827240][ T7056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.022843][ T5309] Bluetooth: hci3: command tx timeout [ 110.126464][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.332'. [ 110.129340][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 110.302970][ T7085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.008835][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 111.011553][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 111.014897][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.017671][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.020183][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.022546][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.027797][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.030705][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.035052][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.037417][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.039814][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.042179][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.045144][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.047527][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.049980][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.052314][ T63] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 111.056182][ T63] hid-generic 0000:3000000:0000.0015: hidraw1: HID v0.00 Device [sy] on syz0 [ 111.547652][ T7111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.690408][ T7116] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 111.932865][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 112.102777][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 112.106114][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.109552][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.112647][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.116752][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 112.119530][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.124479][ T10] usb 6-1: config 0 descriptor?? [ 112.532189][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 112.561035][ T10] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 112.564562][ T10] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 112.733557][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.734616][ T5996] usb 6-1: USB disconnect, device number 13 [ 112.737423][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 112.766293][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 112.770527][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 113.466163][ T7142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.669933][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 113.672383][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 113.681116][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.684295][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.686636][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.689232][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.691755][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.694483][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.696864][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.699401][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.702487][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.705559][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.708038][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.710434][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.713235][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.715532][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 113.724072][ T9] hid-generic 0000:3000000:0000.0017: hidraw1: HID v0.00 Device [sy] on syz0 [ 115.598882][ T7173] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 115.717600][ T7176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.843510][ T5996] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 116.002835][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 116.006525][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.010819][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.014301][ T5996] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.018327][ T5996] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 116.021154][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.025354][ T5996] usb 8-1: config 0 descriptor?? [ 116.441521][ T5996] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 116.462598][ T5996] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 116.468002][ T5996] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 116.639028][ T65] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 116.639060][ T6013] usb 8-1: USB disconnect, device number 11 [ 116.643566][ T65] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 116.650407][ T65] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 116.655328][ T65] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 117.439194][ T7201] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 117.439194][ T7201] program syz.1.371 not setting count and/or reply_len properly [ 117.883523][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 117.885895][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 117.888257][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.890631][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.893169][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.896409][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.899913][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.903230][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.905742][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.908599][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.911020][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.913635][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.915965][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.918296][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.920625][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.924079][ T65] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 117.928683][ T65] hid-generic 0000:3000000:0000.0019: hidraw1: HID v0.00 Device [sy] on syz0 [ 118.191351][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 118.195211][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 118.197613][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.200665][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.204326][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.207715][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.210774][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.213781][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.216476][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.219672][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.223339][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.226547][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.229715][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.232529][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.236185][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.238635][ T29] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 118.243210][ T29] hid-generic 0000:3000000:0000.001A: hidraw1: HID v0.00 Device [sy] on syz0 [ 119.062631][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 119.067306][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 119.070463][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.074902][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.078136][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.081266][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.086264][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.089503][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.093101][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.096281][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.099422][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.100210][ T7226] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 119.102292][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.109881][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.114386][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.117522][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.120570][ T5996] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 119.126114][ T5996] hid-generic 0000:3000000:0000.001B: hidraw1: HID v0.00 Device [sy] on syz0 [ 119.156271][ T7229] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 119.156271][ T7229] program syz.1.378 not setting count and/or reply_len properly [ 119.352749][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.542736][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 119.550904][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.555244][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.558988][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.563488][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 119.566459][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.578697][ T29] usb 7-1: config 0 descriptor?? [ 119.988652][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 119.997559][ T29] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 119.997751][ T29] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 120.187939][ T57] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 120.188187][ T9] usb 7-1: USB disconnect, device number 8 [ 120.195311][ T57] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 120.199258][ T57] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 120.260685][ T57] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 120.307690][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 120.310593][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 120.315443][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.318080][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.320977][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.324618][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.327686][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.330686][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.334102][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.336984][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.339589][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.342547][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.345978][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.348681][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.351553][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.354902][ T10] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 120.361479][ T10] hid-generic 0000:3000000:0000.001D: hidraw1: HID v0.00 Device [sy] on syz0 [ 120.882183][ T7255] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 120.882183][ T7255] program syz.2.386 not setting count and/or reply_len properly [ 121.799834][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 121.803086][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 121.805990][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.808962][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.811920][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.818367][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.820730][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.823362][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.825682][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.828047][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.830424][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.832917][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.835252][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.837597][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.839924][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.842291][ T65] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 121.845637][ T65] hid-generic 0000:3000000:0000.001E: hidraw1: HID v0.00 Device [sy] on syz0 [ 122.319570][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 122.322411][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 122.326363][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.329085][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.331951][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.336398][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.339600][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.342824][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.346019][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.349224][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.352524][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.356352][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.359186][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.361688][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.364545][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.367890][ T1454] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 122.372896][ T1454] hid-generic 0000:3000000:0000.001F: hidraw1: HID v0.00 Device [sy] on syz0 [ 122.374404][ T7275] __nla_validate_parse: 6 callbacks suppressed [ 122.374414][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.381822][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.382776][ T5968] udevd[5968]: setting mode of /dev/hidraw1 to 020600 failed: No such file or directory [ 122.384886][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.388652][ T5968] udevd[5968]: setting owner of /dev/hidraw1 to uid=0, gid=0 failed: No such file or directory [ 122.391285][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.450158][ T7278] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 122.702885][ T65] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 122.862854][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 122.868981][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.873374][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.876584][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.880718][ T65] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 122.883772][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.888151][ T65] usb 6-1: config 0 descriptor?? [ 123.297965][ T65] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 123.338151][ T65] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 123.343319][ T65] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 123.496950][ T2020] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.498254][ T833] usb 6-1: USB disconnect, device number 14 [ 123.498345][ T2020] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.498400][ T2020] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 123.498452][ T2020] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 124.205328][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.404'. [ 124.208249][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 124.211078][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.404'. [ 124.214387][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.404'. [ 124.258457][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 124.261029][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 124.264015][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.266510][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.268878][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.271342][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.274981][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.277628][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.280060][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.282476][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.285532][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.287953][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.290345][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.293300][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.295948][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.298421][ T5996] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 124.302564][ T5996] hid-generic 0000:3000000:0000.0021: hidraw1: HID v0.00 Device [sy] on syz0 [ 124.558492][ T7311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.196997][ T7319] 9pnet_fd: Insufficient options for proto=fd [ 125.309878][ T7322] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 125.652834][ T833] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 125.812911][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 125.817585][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.820935][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.825457][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 125.830030][ T833] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 125.833649][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.837217][ T833] usb 7-1: config 0 descriptor?? [ 126.251895][ T833] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 126.278899][ T833] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 126.282459][ T833] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 126.396563][ T7339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.459823][ T833] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 126.459827][ T5996] usb 7-1: USB disconnect, device number 9 [ 126.459887][ T833] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.471198][ T833] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.474674][ T833] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.549490][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 126.552564][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 126.556411][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.559423][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.562367][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.565455][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.568406][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.571374][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.574590][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.577586][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.580525][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.583704][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.586728][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.589720][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.592773][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.595791][ T65] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 126.600076][ T65] hid-generic 0000:3000000:0000.0023: hidraw1: HID v0.00 Device [sy] on syz0 [ 126.682211][ T7350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.420'. [ 126.688104][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 128.079123][ T7370] 9pnet_fd: Insufficient options for proto=fd [ 128.674579][ T7386] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 128.942007][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 129.025510][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 129.028394][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 129.030971][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.033588][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.036057][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.038803][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.041257][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.043903][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.046360][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.049177][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.051778][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.054379][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.056834][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.059302][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.061768][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.064799][ T63] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 129.068809][ T63] hid-generic 0000:3000000:0000.0024: hidraw1: HID v0.00 Device [sy] on syz0 [ 129.112758][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 129.116412][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.119764][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.123292][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.127287][ T65] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 129.130151][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.142766][ T65] usb 6-1: config 0 descriptor?? [ 129.278430][ T40] audit: type=1800 audit(1745146617.320:3): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 129.567846][ T65] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 129.591029][ T65] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 129.628133][ T65] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 129.761835][ T2020] usb 6-1: USB disconnect, device number 15 [ 129.764229][ T65] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 129.770294][ T65] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 129.778389][ T65] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 129.782390][ T65] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 130.518097][ T7422] FAULT_INJECTION: forcing a failure. [ 130.518097][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.524055][ T7422] CPU: 3 UID: 0 PID: 7422 Comm: syz.1.445 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 130.524078][ T7422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.524087][ T7422] Call Trace: [ 130.524092][ T7422] [ 130.524100][ T7422] dump_stack_lvl+0x16c/0x1f0 [ 130.524127][ T7422] should_fail_ex+0x512/0x640 [ 130.524150][ T7422] _copy_from_user+0x2e/0xd0 [ 130.524172][ T7422] copy_from_sockptr_offset+0x15c/0x1b0 [ 130.524198][ T7422] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 130.524235][ T7422] ? xt_alloc_table_info+0x3e/0xa0 [ 130.524269][ T7422] compat_do_replace+0x1c4/0x3c0 [ 130.524287][ T7422] ? __pfx_compat_do_replace+0x10/0x10 [ 130.524301][ T7422] ? __pfx_aa_get_newest_label+0x10/0x10 [ 130.524320][ T7422] ? rcu_is_watching+0x12/0xc0 [ 130.524343][ T7422] ? bpf_lsm_capable+0x9/0x10 [ 130.524361][ T7422] ? security_capable+0x7e/0x260 [ 130.524381][ T7422] do_ipt_set_ctl+0x55d/0xa60 [ 130.524396][ T7422] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 130.524422][ T7422] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 130.524436][ T7422] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.524457][ T7422] ? sockopt_release_sock+0x52/0x60 [ 130.524480][ T7422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.524500][ T7422] ? sockopt_release_sock+0x52/0x60 [ 130.524526][ T7422] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 130.524548][ T7422] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 130.524573][ T7422] nf_setsockopt+0x8a/0xf0 [ 130.524596][ T7422] ip_setsockopt+0xcb/0xf0 [ 130.524613][ T7422] raw_setsockopt+0xb7/0x2a0 [ 130.524630][ T7422] ? __pfx_raw_setsockopt+0x10/0x10 [ 130.524647][ T7422] ? sock_common_setsockopt+0x2e/0xf0 [ 130.524672][ T7422] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.524697][ T7422] do_sock_setsockopt+0x221/0x470 [ 130.524720][ T7422] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.524757][ T7422] __sys_setsockopt+0x120/0x1a0 [ 130.524780][ T7422] __ia32_sys_setsockopt+0xbc/0x160 [ 130.524799][ T7422] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.524820][ T7422] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 130.524843][ T7422] __do_fast_syscall_32+0x73/0x120 [ 130.524868][ T7422] do_fast_syscall_32+0x32/0x80 [ 130.524891][ T7422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.524911][ T7422] RIP: 0023:0xf704e579 [ 130.524924][ T7422] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.524939][ T7422] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 130.524956][ T7422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 130.524965][ T7422] RDX: 0000000000000040 RSI: 0000000080000040 RDI: 00000000000002ec [ 130.524974][ T7422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.524983][ T7422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.524991][ T7422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.525010][ T7422] [ 131.420440][ T7441] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 131.713855][ T7450] FAULT_INJECTION: forcing a failure. [ 131.713855][ T7450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.719254][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.0.453 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 131.719289][ T7450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.719299][ T7450] Call Trace: [ 131.719305][ T7450] [ 131.719311][ T7450] dump_stack_lvl+0x16c/0x1f0 [ 131.719338][ T7450] should_fail_ex+0x512/0x640 [ 131.719360][ T7450] _copy_from_user+0x2e/0xd0 [ 131.719381][ T7450] get_compat_msghdr+0xa7/0x170 [ 131.719402][ T7450] ? __pfx_get_compat_msghdr+0x10/0x10 [ 131.719425][ T7450] ? __pfx___schedule+0x10/0x10 [ 131.719447][ T7450] ___sys_recvmsg+0x191/0x1a0 [ 131.719469][ T7450] ? __pfx____sys_recvmsg+0x10/0x10 [ 131.719503][ T7450] ? __pfx___might_resched+0x10/0x10 [ 131.719520][ T7450] ? do_recvmmsg+0x2d8/0x740 [ 131.719539][ T7450] ? do_recvmmsg+0x54d/0x740 [ 131.719561][ T7450] do_recvmmsg+0x568/0x740 [ 131.719584][ T7450] ? __pfx_do_recvmmsg+0x10/0x10 [ 131.719602][ T7450] ? trace_sched_exit_tp+0xde/0x130 [ 131.719636][ T7450] ? __pfx___schedule+0x10/0x10 [ 131.719655][ T7450] ? __fget_files+0x20e/0x3c0 [ 131.719673][ T7450] __sys_recvmmsg+0x21c/0x280 [ 131.719694][ T7450] ? __pfx___sys_recvmmsg+0x10/0x10 [ 131.719721][ T7450] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 131.719741][ T7450] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.719763][ T7450] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 131.719785][ T7450] __do_fast_syscall_32+0x73/0x120 [ 131.719808][ T7450] do_fast_syscall_32+0x32/0x80 [ 131.719829][ T7450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.719848][ T7450] RIP: 0023:0xf70de579 [ 131.719861][ T7450] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 131.719876][ T7450] RSP: 002b:00000000f508c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 131.719892][ T7450] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080003700 [ 131.719902][ T7450] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.719911][ T7450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.719920][ T7450] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 131.719929][ T7450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.719950][ T7450] [ 131.797479][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.811706][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 131.962802][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 131.966482][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.970514][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.974200][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.978865][ T10] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 131.982163][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.988208][ T10] usb 8-1: config 0 descriptor?? [ 132.307117][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.307235][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.457429][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 132.492499][ T10] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 132.496982][ T10] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 132.531718][ T40] audit: type=1800 audit(1745146620.570:4): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.457" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 132.633772][ T6013] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 132.634027][ T63] usb 8-1: USB disconnect, device number 12 [ 132.637960][ T6013] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.644966][ T6013] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.646539][ T7463] warning: `syz.1.458' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.648253][ T6013] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 134.252354][ T40] audit: type=1800 audit(1745146622.290:5): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 134.977014][ T7521] __nla_validate_parse: 2 callbacks suppressed [ 134.977032][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.473'. [ 135.548197][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 135.551496][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 135.558464][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.561799][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.565158][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.568081][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.571133][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.574604][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.577531][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.580527][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.584412][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.587753][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.590755][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.594019][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.600339][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.608382][ T2020] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 135.613801][ T2020] hid-generic 0000:3000000:0000.0027: hidraw1: HID v0.00 Device [sy] on syz0 [ 136.583696][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.484'. [ 136.586437][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 136.589083][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.484'. [ 136.592794][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.484'. [ 138.602789][ T1454] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 138.772803][ T1454] usb 6-1: Using ep0 maxpacket: 16 [ 138.775860][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.779274][ T1454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.782329][ T1454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.786457][ T1454] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 138.789416][ T1454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.793840][ T1454] usb 6-1: config 0 descriptor?? [ 138.907610][ T7583] 9p: Unknown Cache mode or invalid value mma [ 139.005631][ T7585] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 139.202082][ T1454] shield 0003:0955:7214.0028: unknown main item tag 0x0 [ 139.210191][ T1454] shield 0003:0955:7214.0028: unknown main item tag 0x0 [ 139.212393][ T1454] shield 0003:0955:7214.0028: unknown main item tag 0x0 [ 139.220286][ T1454] shield 0003:0955:7214.0028: unknown main item tag 0x0 [ 139.222474][ T1454] shield 0003:0955:7214.0028: unknown main item tag 0x0 [ 139.229584][ T1454] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 139.237259][ T1454] shield 0003:0955:7214.0028: Registered Thunderstrike controller [ 139.239952][ T1454] shield 0003:0955:7214.0028: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 139.262885][ T6013] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 139.400876][ T7577] random: crng reseeded on system resumption [ 139.404199][ T7577] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 139.404224][ T7577] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 139.404255][ T7577] PM: hibernation: Basic memory bitmaps created [ 139.405007][ T7576] PM: hibernation: Basic memory bitmaps freed [ 139.407304][ T63] usb 6-1: USB disconnect, device number 16 [ 139.410818][ T63] ------------[ cut here ]------------ [ 139.410827][ T63] workqueue: work disable count underflowed [ 139.410907][ T63] WARNING: CPU: 2 PID: 63 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 139.410935][ T63] Modules linked in: [ 139.410959][ T63] CPU: 2 UID: 0 PID: 63 Comm: kworker/2:1 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 139.410986][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.410999][ T63] Workqueue: usb_hub_wq hub_event [ 139.411018][ T63] RIP: 0010:enable_work+0x2f8/0x340 [ 139.411035][ T63] Code: 89 ee e8 fb 41 37 00 45 84 ed 0f 85 29 fe ff ff e8 0d 47 37 00 c6 05 a1 50 eb 0e 01 90 48 c7 c7 e0 e3 8b 8b e8 e9 2a f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 67 c8 9b 00 e9 aa fe ff ff [ 139.411050][ T63] RSP: 0018:ffffc9000082f3c8 EFLAGS: 00010086 [ 139.411064][ T63] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 139.411075][ T63] RDX: ffff88801f178000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 139.411086][ T63] RBP: ffff88802648a730 R08: 0000000000000001 R09: 0000000000000000 [ 139.411096][ T63] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000105e7a [ 139.411107][ T63] R13: 0000000000000000 R14: ffff88802648a728 R15: ffffffff8fc4c080 [ 139.411118][ T63] FS: 0000000000000000(0000) GS:ffff8880979bf000(0000) knlGS:0000000000000000 [ 139.411149][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.411162][ T63] CR2: 000000000c363386 CR3: 000000004ab4e000 CR4: 0000000000352ef0 [ 139.411173][ T63] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.411185][ T63] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.411196][ T63] Call Trace: [ 139.411201][ T63] [ 139.411210][ T63] ? __pfx_enable_work+0x10/0x10 [ 139.411232][ T63] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 139.411261][ T63] __cancel_work_sync+0xe7/0x130 [ 139.411281][ T63] thermal_zone_device_unregister+0x239/0x450 [ 139.411303][ T63] ? __pfx_shield_remove+0x10/0x10 [ 139.411332][ T63] power_supply_unregister+0x10a/0x150 [ 139.411353][ T63] shield_remove+0x75/0x130 [ 139.411376][ T63] ? __pfx_shield_remove+0x10/0x10 [ 139.411399][ T63] hid_device_remove+0xce/0x260 [ 139.411420][ T63] ? __pfx_hid_device_remove+0x10/0x10 [ 139.411441][ T63] device_remove+0xc8/0x170 [ 139.411465][ T63] device_release_driver_internal+0x44b/0x620 [ 139.411487][ T63] bus_remove_device+0x22f/0x420 [ 139.411512][ T63] device_del+0x396/0x9f0 [ 139.411538][ T63] ? __pfx_device_del+0x10/0x10 [ 139.411560][ T63] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.411582][ T63] hid_destroy_device+0x19c/0x240 [ 139.411604][ T63] usbhid_disconnect+0xa0/0xe0 [ 139.411621][ T63] usb_unbind_interface+0x1da/0x9a0 [ 139.411646][ T63] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 139.411667][ T63] ? __pfx_usb_unbind_interface+0x10/0x10 [ 139.411688][ T63] device_remove+0x122/0x170 [ 139.411713][ T63] device_release_driver_internal+0x44b/0x620 [ 139.411735][ T63] bus_remove_device+0x22f/0x420 [ 139.411762][ T63] device_del+0x396/0x9f0 [ 139.411790][ T63] ? __pfx_device_del+0x10/0x10 [ 139.411812][ T63] ? kobject_put+0x210/0x5a0 [ 139.411845][ T63] usb_disable_device+0x355/0x7d0 [ 139.411870][ T63] usb_disconnect+0x2e1/0x920 [ 139.411893][ T63] hub_event+0x1c57/0x4fa0 [ 139.411931][ T63] ? __lock_acquire+0xaa4/0x1ba0 [ 139.411955][ T63] ? __pfx_hub_event+0x10/0x10 [ 139.411978][ T63] ? debug_object_deactivate+0x1ec/0x3a0 [ 139.412012][ T63] ? rcu_is_watching+0x12/0xc0 [ 139.412033][ T63] process_one_work+0x9cc/0x1b70 [ 139.412058][ T63] ? __pfx_process_one_work+0x10/0x10 [ 139.412082][ T63] ? assign_work+0x1a0/0x250 [ 139.412107][ T63] worker_thread+0x6c8/0xf10 [ 139.412131][ T63] ? __kthread_parkme+0x19e/0x250 [ 139.412153][ T63] ? __pfx_worker_thread+0x10/0x10 [ 139.412169][ T63] kthread+0x3c2/0x780 [ 139.412192][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412215][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412236][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412259][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412282][ T63] ? rcu_is_watching+0x12/0xc0 [ 139.412300][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412325][ T63] ret_from_fork+0x45/0x80 [ 139.412342][ T63] ? __pfx_kthread+0x10/0x10 [ 139.412366][ T63] ret_from_fork_asm+0x1a/0x30 [ 139.412404][ T63] [ 139.412412][ T63] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.412424][ T63] CPU: 2 UID: 0 PID: 63 Comm: kworker/2:1 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 139.412444][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.412456][ T63] Workqueue: usb_hub_wq hub_event [ 139.412473][ T63] Call Trace: [ 139.412479][ T63] [ 139.412486][ T63] dump_stack_lvl+0x3d/0x1f0 [ 139.412511][ T63] panic+0x71c/0x800 [ 139.412536][ T63] ? __pfx_panic+0x10/0x10 [ 139.412560][ T63] ? show_trace_log_lvl+0x29b/0x3e0 [ 139.412584][ T63] ? check_panic_on_warn+0x1f/0xb0 [ 139.412609][ T63] ? enable_work+0x2f8/0x340 [ 139.412624][ T63] check_panic_on_warn+0xab/0xb0 [ 139.412673][ T63] __warn+0xf6/0x3c0 [ 139.412690][ T63] ? enable_work+0x2f8/0x340 [ 139.412709][ T63] report_bug+0x3c3/0x580 [ 139.412730][ T63] ? enable_work+0x2f8/0x340 [ 139.412747][ T63] handle_bug+0x184/0x210 [ 139.412763][ T63] exc_invalid_op+0x17/0x50 [ 139.412776][ T63] asm_exc_invalid_op+0x1a/0x20 [ 139.412792][ T63] RIP: 0010:enable_work+0x2f8/0x340 [ 139.412809][ T63] Code: 89 ee e8 fb 41 37 00 45 84 ed 0f 85 29 fe ff ff e8 0d 47 37 00 c6 05 a1 50 eb 0e 01 90 48 c7 c7 e0 e3 8b 8b e8 e9 2a f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 67 c8 9b 00 e9 aa fe ff ff [ 139.412825][ T63] RSP: 0018:ffffc9000082f3c8 EFLAGS: 00010086 [ 139.412838][ T63] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 139.412848][ T63] RDX: ffff88801f178000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 139.412857][ T63] RBP: ffff88802648a730 R08: 0000000000000001 R09: 0000000000000000 [ 139.412867][ T63] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000105e7a [ 139.412876][ T63] R13: 0000000000000000 R14: ffff88802648a728 R15: ffffffff8fc4c080 [ 139.412894][ T63] ? __warn_printk+0x198/0x350 [ 139.412916][ T63] ? __warn_printk+0x1a5/0x350 [ 139.412939][ T63] ? enable_work+0x2f7/0x340 [ 139.412954][ T63] ? __pfx_enable_work+0x10/0x10 [ 139.412976][ T63] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 139.413001][ T63] __cancel_work_sync+0xe7/0x130 [ 139.413020][ T63] thermal_zone_device_unregister+0x239/0x450 [ 139.413040][ T63] ? __pfx_shield_remove+0x10/0x10 [ 139.413062][ T63] power_supply_unregister+0x10a/0x150 [ 139.413083][ T63] shield_remove+0x75/0x130 [ 139.413106][ T63] ? __pfx_shield_remove+0x10/0x10 [ 139.413129][ T63] hid_device_remove+0xce/0x260 [ 139.413150][ T63] ? __pfx_hid_device_remove+0x10/0x10 [ 139.413174][ T63] device_remove+0xc8/0x170 [ 139.413198][ T63] device_release_driver_internal+0x44b/0x620 [ 139.413221][ T63] bus_remove_device+0x22f/0x420 [ 139.413247][ T63] device_del+0x396/0x9f0 [ 139.413274][ T63] ? __pfx_device_del+0x10/0x10 [ 139.413298][ T63] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.413321][ T63] hid_destroy_device+0x19c/0x240 [ 139.413344][ T63] usbhid_disconnect+0xa0/0xe0 [ 139.413362][ T63] usb_unbind_interface+0x1da/0x9a0 [ 139.413386][ T63] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 139.413409][ T63] ? __pfx_usb_unbind_interface+0x10/0x10 [ 139.413430][ T63] device_remove+0x122/0x170 [ 139.413454][ T63] device_release_driver_internal+0x44b/0x620 [ 139.413476][ T63] bus_remove_device+0x22f/0x420 [ 139.413502][ T63] device_del+0x396/0x9f0 [ 139.413529][ T63] ? __pfx_device_del+0x10/0x10 [ 139.413577][ T63] ? kobject_put+0x210/0x5a0 [ 139.413606][ T63] usb_disable_device+0x355/0x7d0 [ 139.413632][ T63] usb_disconnect+0x2e1/0x920 [ 139.413654][ T63] hub_event+0x1c57/0x4fa0 [ 139.413691][ T63] ? __lock_acquire+0xaa4/0x1ba0 [ 139.413717][ T63] ? __pfx_hub_event+0x10/0x10 [ 139.413734][ T63] ? debug_object_deactivate+0x1ec/0x3a0 [ 139.413768][ T63] ? rcu_is_watching+0x12/0xc0 [ 139.413789][ T63] process_one_work+0x9cc/0x1b70 [ 139.413817][ T63] ? __pfx_process_one_work+0x10/0x10 [ 139.413840][ T63] ? assign_work+0x1a0/0x250 [ 139.413868][ T63] worker_thread+0x6c8/0xf10 [ 139.413894][ T63] ? __kthread_parkme+0x19e/0x250 [ 139.413916][ T63] ? __pfx_worker_thread+0x10/0x10 [ 139.413932][ T63] kthread+0x3c2/0x780 [ 139.413956][ T63] ? __pfx_kthread+0x10/0x10 [ 139.413985][ T63] ? __pfx_kthread+0x10/0x10 [ 139.414008][ T63] ? __pfx_kthread+0x10/0x10 [ 139.414031][ T63] ? __pfx_kthread+0x10/0x10 [ 139.414054][ T63] ? rcu_is_watching+0x12/0xc0 [ 139.414072][ T63] ? __pfx_kthread+0x10/0x10 [ 139.414097][ T63] ret_from_fork+0x45/0x80 [ 139.414113][ T63] ? __pfx_kthread+0x10/0x10 [ 139.414138][ T63] ret_from_fork_asm+0x1a/0x30 [ 139.414175][ T63] [ 139.414825][ T63] Kernel Offset: disabled VM DIAGNOSIS: 10:57:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815f62a0 RDX=ffff888023d18000 RSI=ffffffff815f62e8 RDI=ffffffff93ab1e80 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27563d0 R10=ffffffff93ab1e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f62e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f502be7c CR3=000000004cfa2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000020 Opmask01=00000000000003ff Opmask02=00000000ffff7fff Opmask03=0008004000040442 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe200e6180 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff0f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00204b4e494c0020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00ff0000 0000ff0000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 006e6f6d77683d4d 4554535953425553 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400444955564544 003d444955564544 0045444f4d564544 004d554e51455300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400444955564544 0018444955564544 0045444f4d564544 004d554e51455300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a312d362f312d 362f366273752f31 2e6463685f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7075735f7265776f 702f383230302e34 3132373a35353930 3a333030302f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055003100306e 6f6d77682f305f65 6b69727473726564 6e7568742f796c70 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815f62a0 RDX=ffff88801daba440 RSI=ffffffff815f62e8 RDI=ffffffff93ab1e80 RBP=0000000000000001 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff27563d0 R10=ffffffff93ab1e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f62e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c247864 CR3=000000004fa40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854ae4f5 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc9000082ee18 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae0cb40 R15=ffffffff854ae490 RIP=ffffffff854ae51f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c363386 CR3=000000004ab4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815f62a0 RDX=ffff888021a60000 RSI=ffffffff815f62e8 RDI=ffffffff93ab1e80 RBP=0000000000000003 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff27563d0 R10=ffffffff93ab1e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f62e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f49cd291280 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003000affc CR3=00000000470da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=00000000c0000000 Opmask02=000000000000ffdf Opmask03=0000084000040442 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe200e8870 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f4a37f202b23c4f 737326bd085199de ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 0000000000000000 000000000000312e 7465676461672f31 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cb27906710 00007f49ccff1b80 0000000000000091 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000080 00007f003100306e 6f6d77682f305f65 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cb2790fff1 000065af5dffffff 6c7f7fcbffffffff 00007fcffffffffd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 000030656e221e44 003944495345443c 00004d5f45224154 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 000030656e221e44 000044492745443c 00004d5f45221e54 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000