last executing test programs: 4.260321077s ago: executing program 1 (id=2771): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.14970623s ago: executing program 1 (id=2772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 3.099542403s ago: executing program 0 (id=2779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 2.847042463s ago: executing program 3 (id=2780): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.811938983s ago: executing program 3 (id=2781): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x4}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x25f1, &(0x7f00000002c0)={0x0, 0xa609, 0x2, 0x2, 0x366}) prlimit64(0x0, 0xe, 0x0, 0x0) memfd_create(&(0x7f0000000140)='\x00G\x87\xedn\\j-\\GX\xd7', 0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.80190303s ago: executing program 0 (id=2782): openat$tun(0xffffffffffffff9c, 0x0, 0x286400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x45ce43, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0x8d1d, 0x1, 0x0, 0x45}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000008c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) 2.75011713s ago: executing program 1 (id=2783): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000002c0)=0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0x5, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1.896633035s ago: executing program 3 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000540)={0x1d, r4, 0x3, {0x2, 0xff, 0x1}, 0x1}, 0x18) bind$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f00000021c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xd}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.896179608s ago: executing program 0 (id=2788): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fsopen(0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xfb, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2fb71da9810a96bc, 0x0) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) 1.895816002s ago: executing program 1 (id=2789): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f000000a880)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.578873392s ago: executing program 2 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000000010800"], 0x44}}, 0x0) 1.527035981s ago: executing program 2 (id=2792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r1, &(0x7f0000000000), 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 1.480112519s ago: executing program 2 (id=2793): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4075, 0xfeb}, {&(0x7f0000000200)=""/2, 0x2}], 0x2}, 0x2}], 0x30d, 0x0, 0x0) 919.817967ms ago: executing program 0 (id=2794): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002"]) 919.368844ms ago: executing program 0 (id=2795): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x25f1, &(0x7f00000002c0)={0x0, 0xa609, 0x2, 0x2, 0x366}) prlimit64(0x0, 0xe, 0x0, 0x0) memfd_create(&(0x7f0000000140)='\x00G\x87\xedn\\j-\\GX\xd7', 0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 769.585199ms ago: executing program 3 (id=2796): setuid(0xee01) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x30000010}) 768.939861ms ago: executing program 3 (id=2797): openat$tun(0xffffffffffffff9c, 0x0, 0x286400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x45ce43, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0x8d1d, 0x1, 0x0, 0x45}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000008c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) 586.07855ms ago: executing program 2 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r2) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d003f00000000000000000004008d80050011802e7ac76255c6a86de78f2c0c3047ac8c6d6bd4b7cce8a3ad3fd3457fddc1808737f90a0e2588eeeca3a844d18d1300749c2c8751c901"], 0x1c}], 0x1, 0x0, 0x0, 0x24040041}, 0x300) 479.9039ms ago: executing program 2 (id=2799): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xda) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 430.018169ms ago: executing program 2 (id=2800): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff01) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 280.373059ms ago: executing program 1 (id=2801): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r1, &(0x7f0000000000), 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 279.931701ms ago: executing program 1 (id=2802): sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000380)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='.\x00', 0x2) syz_emit_ethernet(0x102, &(0x7f00000002c0)={@remote, @dev, @void, {@generic={0x9300, "c2dea414bb8900e1b075bab73ce950691688878e3c9422d5ff2f399955a9e9c3f108c22e9f4cfea36f3e88c8638f017fc60de44f799ff4ffa96b114df32250d605cd4bbdbbe41d1e961801fe1555625e746ab47cb07a15ca5ae91467a8b21f5741eabc07c0d9e81661e43a2996703a4d0ff40a94c1a4f8f4800f09e735bee1a4ff55fec21ca3d17bf7de08dc0d1ad5f54e0f0d4013c736ea341c51b0030500d33240b4ae0247b4318f4bbca93cb847599dd0e492d9f2bef34434c5123bd5738408410ac3185b94c0b5675d23e688c4ec7f2b90d0e67eb6974a5118fc584cb50da2bd418305e2c934b476b7ac18f8e024565b30a1"}}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x8000000, 0x6000}) 160.421109ms ago: executing program 3 (id=2803): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x34900) 0s ago: executing program 0 (id=2804): unshare(0x40020000) r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", "0200", "be4d22a4", ["c386afeeffffffffffffec00", "51f3541a910080ffffcb3a10", "e100"]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000600)=0x1) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7afa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000380)=""/143, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0xfffffff8, 0xfff}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000006c0)=[{0x4, 0x1, 0xa, 0x3}, {0x1, 0x2, 0x10, 0x7}, {0x4, 0x1, 0xb, 0xa}, {0x5, 0x2, 0x6, 0xc}, {0x4, 0x2, 0xf, 0xb}, {0x2, 0x1, 0xd, 0x9}, {0x3, 0x4, 0xe, 0x7}, {0x3, 0x4, 0xa, 0x5}, {0x1, 0x1, 0x0, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000018000100000000240b55cb0002000000000000070000000008001680040001000600150001"], 0x2c}}, 0x0) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000200), &(0x7f00000004c0)=r3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000020001c0"]) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 0s ago: executing program 0 (id=2805): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2008, 0x0) kernel console output (not intermixed with test programs): 06, SerialNumber=59 [ 343.296647][ T5981] usb 6-1: Product: syz [ 343.298177][ T5981] usb 6-1: SerialNumber: syz [ 343.306524][ T5981] hub 6-1:250.228: bad descriptor, ignoring hub [ 343.309111][ T5981] hub 6-1:250.228: probe with driver hub failed with error -5 [ 343.507626][ T5981] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 343.628783][T11949] program syz.0.2094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.394778][T11943] usb 6-1: reset high-speed USB device number 62 using dummy_hcd [ 344.625581][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 344.666577][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 344.708769][T11972] fuse: Bad value for 'rootmode' [ 345.064241][ T6315] usb 6-1: USB disconnect, device number 62 [ 345.068474][ T6315] usblp0: removed [ 345.700303][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 345.864204][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 345.869604][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.874763][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.877938][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.882217][ T10] usb 5-1: config 0 descriptor?? [ 346.089852][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 346.398680][T11993] fuse: Bad value for 'fd' [ 346.497156][T11982] syz.2.2103 (11982) used greatest stack depth: 19192 bytes left [ 346.500740][ T10] usb 5-1: USB disconnect, device number 78 [ 346.677180][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 347.340418][T11997] syz.3.2108: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.363806][T11997] CPU: 2 UID: 0 PID: 11997 Comm: syz.3.2108 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 347.363824][T11997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.363831][T11997] Call Trace: [ 347.363835][T11997] [ 347.363839][T11997] dump_stack_lvl+0x16c/0x1f0 [ 347.363874][T11997] warn_alloc+0x248/0x3a0 [ 347.363900][T11997] ? __pfx_warn_alloc+0x10/0x10 [ 347.363919][T11997] ? __get_vm_area_node+0x1dc/0x330 [ 347.363935][T11997] ? __get_vm_area_node+0x208/0x330 [ 347.363954][T11997] __vmalloc_node_range_noprof+0x1110/0x1540 [ 347.363977][T11997] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 347.363991][T11997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.364019][T11997] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 347.364030][T11997] vmalloc_user_noprof+0x6b/0x90 [ 347.364039][T11997] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 347.364049][T11997] vb2_vmalloc_alloc+0x135/0x3f0 [ 347.364061][T11997] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 347.364071][T11997] __vb2_queue_alloc+0x8c6/0x1280 [ 347.364088][T11997] vb2_core_reqbufs+0xa90/0xfe0 [ 347.364102][T11997] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 347.364111][T11997] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.364134][T11997] vb2_reqbufs+0x1a3/0x1f0 [ 347.364149][T11997] ? __pfx_vb2_reqbufs+0x10/0x10 [ 347.364165][T11997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.364181][T11997] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 347.364199][T11997] v4l_reqbufs+0x152/0x1e0 [ 347.364213][T11997] __video_do_ioctl+0xb40/0xfc0 [ 347.364229][T11997] ? __might_fault+0xe3/0x190 [ 347.364241][T11997] ? __pfx___video_do_ioctl+0x10/0x10 [ 347.364259][T11997] video_usercopy+0x47c/0x1440 [ 347.364275][T11997] ? __pfx___video_do_ioctl+0x10/0x10 [ 347.364289][T11997] ? __pfx_video_usercopy+0x10/0x10 [ 347.364308][T11997] ? hook_file_ioctl_common+0x145/0x410 [ 347.364329][T11997] v4l2_ioctl+0x1bd/0x250 [ 347.364344][T11997] v4l2_compat_ioctl32+0x214/0x2c0 [ 347.364356][T11997] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 347.364368][T11997] __ia32_compat_sys_ioctl+0x24f/0x360 [ 347.364386][T11997] __do_fast_syscall_32+0x73/0x120 [ 347.364403][T11997] do_fast_syscall_32+0x32/0x80 [ 347.364419][T11997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.364432][T11997] RIP: 0023:0xf7fb2579 [ 347.364441][T11997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 347.364451][T11997] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 347.364460][T11997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 347.364467][T11997] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.364473][T11997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.364478][T11997] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 347.364484][T11997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.364497][T11997] [ 347.459755][ C2] vkms_vblank_simulate: vblank timer overrun [ 347.461930][ C2] hpet: Lost 5 RTC interrupts [ 347.483994][T11997] Mem-Info: [ 347.485221][T11997] active_anon:3215 inactive_anon:16174 isolated_anon:0 [ 347.485221][T11997] active_file:1689 inactive_file:1551 isolated_file:0 [ 347.485221][T11997] unevictable:1768 dirty:53 writeback:0 [ 347.485221][T11997] slab_reclaimable:5450 slab_unreclaimable:59438 [ 347.485221][T11997] mapped:33672 shmem:20454 pagetables:911 [ 347.485221][T11997] sec_pagetables:335 bounce:0 [ 347.485221][T11997] kernel_misc_reclaimable:0 [ 347.485221][T11997] free:18467 free_pcp:3226 free_cma:0 [ 347.501992][T11997] Node 0 active_anon:0kB inactive_anon:12kB active_file:184kB inactive_file:148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:184kB dirty:0kB writeback:0kB shmem:5532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9168kB pagetables:692kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB [ 347.516127][T11997] Node 1 active_anon:13424kB inactive_anon:64684kB active_file:6832kB inactive_file:6056kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:134744kB dirty:244kB writeback:0kB shmem:76284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3004kB pagetables:3172kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB [ 347.528116][T11997] Node 0 DMA free:1920kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.540281][T11997] lowmem_reserve[]: 0 293 293 293 293 [ 347.542199][T11997] Node 0 DMA32 free:12908kB boost:4096kB min:17544kB low:20904kB high:24264kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:8kB active_file:220kB inactive_file:148kB unevictable:3536kB writepending:0kB present:1032196kB managed:300216kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:60kB free_cma:0kB [ 347.553866][T11997] lowmem_reserve[]: 0 0 0 0 0 [ 347.556341][T11997] Node 1 DMA32 free:56532kB boost:8192kB min:55340kB low:67124kB high:78908kB reserved_highatomic:2048KB active_anon:13728kB inactive_anon:64272kB active_file:7296kB inactive_file:6056kB unevictable:3536kB writepending:324kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:12588kB local_pcp:9100kB free_cma:0kB [ 347.569940][T11997] lowmem_reserve[]: 0 0 0 0 0 [ 347.572674][T11997] Node 0 DMA: 0*4kB 0*8kB 2*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1920kB [ 347.582020][T11997] Node 0 DMA32: 69*4kB (UMEH) 137*8kB (UMEH) 90*16kB (UMEH) 53*32kB (ME) 28*64kB (UME) 20*128kB (UMEH) 6*256kB (UME) 2*512kB (UM) 1*1024kB (H) 0*2048kB 0*4096kB = 12444kB [ 347.589781][T11997] Node 1 DMA32: 4*4kB (E) 26*8kB (UME) 16*16kB (UME) 132*32kB (UMEH) 284*64kB (UMEH) 97*128kB (MEH) 34*256kB (UMH) 21*512kB (UMH) 2*1024kB (M) 0*2048kB 0*4096kB = 56800kB [ 347.600870][T11997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.606198][T11997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.612494][T11997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.616791][T11997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.621467][T11997] 24362 total pagecache pages [ 347.623615][T11997] 556 pages in swap cache [ 347.626036][T11997] Free swap = 57476kB [ 347.627784][T11997] Total swap = 124996kB [ 347.630347][T11997] 524155 pages RAM [ 347.633116][T11997] 0 pages HighMem/MovableOnly [ 347.636433][T11997] 208190 pages reserved [ 347.639010][T11997] 0 pages cma reserved [ 347.740422][T12015] syzkaller0: entered promiscuous mode [ 347.742669][T12015] syzkaller0: entered allmulticast mode [ 348.278041][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 348.368118][T12029] fuse: Bad value for 'fd' [ 349.635300][T12047] delete_channel: no stack [ 350.185815][T12056] fuse: Unknown parameter 'user_i00000000000000000000' [ 350.444066][ T834] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 350.514032][ T6315] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 350.598352][ T834] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 350.601295][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.603857][ T834] usb 6-1: Product: syz [ 350.614204][ T834] usb 6-1: Manufacturer: syz [ 350.616277][ T834] usb 6-1: SerialNumber: syz [ 350.621366][ T834] usb 6-1: config 0 descriptor?? [ 350.664208][ T6315] usb 5-1: Using ep0 maxpacket: 8 [ 350.667631][ T6315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.671499][ T6315] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.675187][ T6315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.679400][ T6315] usb 5-1: config 0 descriptor?? [ 350.833290][ T834] usb 6-1: ignoring: probably an ADSL modem [ 350.889147][ T6315] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 351.141453][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 351.235882][ T834] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 351.239140][T12072] fuse: Bad value for 'group_id' [ 351.241234][T12072] fuse: Bad value for 'group_id' [ 351.302702][ T5981] usb 5-1: USB disconnect, device number 79 [ 351.485200][T12080] binder: 12077:12080 ioctl c0306201 80000480 returned -14 [ 351.839237][T12082] fuse: Unknown parameter 'user_i00000000000000000000' [ 353.105972][ T6315] usb 6-1: USB disconnect, device number 63 [ 354.334055][ T10] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 354.504006][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 354.508086][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.512332][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 354.518111][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 354.521838][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.527539][ T10] usb 7-1: config 0 descriptor?? [ 354.534082][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 354.974044][ T5981] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 355.124299][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 355.127954][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.131588][ T5981] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.135350][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.140150][ T5981] usb 6-1: config 0 descriptor?? [ 355.353022][ T5981] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 355.693086][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 355.938731][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 356.726029][T12169] batman_adv: batadv0: Adding interface: dummy0 [ 356.728118][T12169] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.736595][T12169] batman_adv: batadv0: Interface activated: dummy0 [ 356.748554][T12169] batadv0: mtu less than device minimum [ 356.751731][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.755774][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.759604][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.763354][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.767611][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.771351][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.775057][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.778808][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.783047][T12169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 357.034052][ T6026] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 357.116631][ T5981] usb 7-1: USB disconnect, device number 67 [ 357.187824][ T6026] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 357.190532][ T6026] usb 5-1: config 0 has no interface number 0 [ 357.192544][ T6026] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 357.196700][ T6026] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 357.200905][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.207663][ T6026] usb 5-1: config 0 descriptor?? [ 357.216451][ T6026] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input43 [ 357.315843][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 357.452630][ T9] usb 5-1: USB disconnect, device number 80 [ 357.704090][ T10] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 357.762003][ T9] usb 6-1: USB disconnect, device number 64 [ 357.854952][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 357.858434][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.861960][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.866117][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.872657][ T10] usb 7-1: config 0 descriptor?? [ 358.184056][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 358.203051][T12198] netlink: 'syz.0.2172': attribute type 4 has an invalid length. [ 358.206451][T12198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2172'. [ 358.221261][T12198] : renamed from bond0 (while UP) [ 358.354281][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 358.357811][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.361259][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 358.365578][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.368677][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.373177][ T9] usb 6-1: config 0 descriptor?? [ 358.385054][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 359.316594][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 360.453476][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 360.458605][ T10] usb 7-1: USB disconnect, device number 68 [ 360.843153][ T6026] usb 6-1: USB disconnect, device number 65 [ 362.082889][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 362.085904][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 362.094933][T12260] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.097855][T12260] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.100712][T12260] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.104300][T12260] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.434093][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 362.584105][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 362.587563][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.590776][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 362.595069][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.597860][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.602506][ T10] usb 6-1: config 0 descriptor?? [ 362.608423][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 363.391868][T12283] fuse: Unknown parameter 'user_id00000000000000000000' [ 363.429438][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 363.432420][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 363.438584][T12285] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.441630][T12285] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.444647][T12285] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.447586][T12285] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.498406][T12287] syzkaller0: entered promiscuous mode [ 363.501119][T12287] syzkaller0: entered allmulticast mode [ 363.894275][ T834] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 364.044042][ T834] usb 7-1: Using ep0 maxpacket: 32 [ 364.047708][ T834] usb 7-1: config 2 has an invalid interface number: 157 but max is 0 [ 364.050251][ T834] usb 7-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 364.053730][ T834] usb 7-1: config 2 has no interface number 0 [ 364.057590][ T834] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 364.061805][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.065569][ T834] usb 7-1: Product: syz [ 364.067244][ T834] usb 7-1: Manufacturer: syz [ 364.069123][ T834] usb 7-1: SerialNumber: syz [ 364.077693][ T834] imon 7-1:2.157: unable to register, err -19 [ 364.514152][T12299] loop6: detected capacity change from 0 to 524287999 [ 364.519639][ T6176] buffer_io_error: 8 callbacks suppressed [ 364.519655][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.527131][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.538096][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.545110][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.548248][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.554210][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.557660][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.560960][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.566750][ T6176] ldm_validate_partition_table(): Disk read failed. [ 364.568865][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.571802][ T6176] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.574819][ T6176] Dev loop6: unable to read RDB block 0 [ 364.576960][ T6176] loop6: unable to read partition table [ 364.596452][T12299] ldm_validate_partition_table(): Disk read failed. [ 364.601704][T12299] Dev loop6: unable to read RDB block 0 [ 364.614487][T12299] loop6: unable to read partition table [ 364.617433][T12299] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 364.814236][T12295] batadv_slave_1: entered promiscuous mode [ 365.189741][ T834] usb 6-1: USB disconnect, device number 66 [ 365.294565][T12317] fuse: Bad value for 'fd' [ 365.694183][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 365.852737][ T6003] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 365.854203][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 365.857260][ T6003] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 365.859018][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.864041][ T6003] hid-generic 0000:0003:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 365.868781][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.875575][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.881981][ T10] usb 6-1: config 0 descriptor?? [ 366.701022][T12299] batadv_slave_1: left promiscuous mode [ 366.724580][ T5943] usb 7-1: USB disconnect, device number 69 [ 366.757579][T12347] fuse: Unknown parameter 'grou00000000000000000000' [ 368.404542][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.409592][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.412802][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.416841][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.420374][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.427912][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.431956][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.435290][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.440205][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.443795][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.466492][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 368.474236][ T10] usb 6-1: USB disconnect, device number 67 [ 368.605669][ T93] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.609521][ T93] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.621777][T12396] chnl_net:caif_netlink_parms(): no params data found [ 368.691224][ T93] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.695281][ T93] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.720942][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.723602][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.726199][T12396] bridge_slave_0: entered allmulticast mode [ 368.729098][T12396] bridge_slave_0: entered promiscuous mode [ 368.733848][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.736566][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.739102][T12396] bridge_slave_1: entered allmulticast mode [ 368.742068][T12396] bridge_slave_1: entered promiscuous mode [ 368.784657][ T93] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.788145][ T93] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.818887][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.823841][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.864934][T12396] team0: Port device team_slave_0 added [ 368.875661][ T93] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.879272][ T93] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.887628][T12396] team0: Port device team_slave_1 added [ 368.939274][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.942271][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.951010][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.960777][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.963157][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.972244][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.047203][T12396] hsr_slave_0: entered promiscuous mode [ 369.050048][T12396] hsr_slave_1: entered promiscuous mode [ 369.052108][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.056346][T12396] Cannot create hsr debugfs directory [ 369.319540][ T93] dvmrp0 (unregistering): left allmulticast mode [ 369.553182][ T93]  (unregistering): left allmulticast mode [ 369.555756][ T93]  (unregistering): left promiscuous mode [ 369.574138][ T93]  (unregistering): Released all slaves [ 369.644843][ T93] tipc: Left network mode [ 370.100275][ T93] hsr_slave_0: left promiscuous mode [ 370.110002][ T93] hsr_slave_1: left promiscuous mode [ 370.148239][ T93] veth1_macvtap: left promiscuous mode [ 370.150080][ T93] veth0_macvtap: left promiscuous mode [ 370.162087][ T93] veth1_vlan: left promiscuous mode [ 370.163846][ T93] veth0_vlan: left promiscuous mode [ 370.504538][ T5952] Bluetooth: hci2: command tx timeout [ 371.348963][T12396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.359132][T12396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.365365][T12396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.371306][T12396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.476302][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.480534][T12456] fuse: Bad value for 'group_id' [ 371.482602][T12456] fuse: Bad value for 'group_id' [ 371.492287][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.502817][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.505598][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.516077][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.518383][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.530843][T12458] fuse: Unknown parameter '0x0000000000000005' [ 371.570265][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 371.637112][T12472] fuse: Unknown parameter 'group_i00000000000000000000' [ 371.686734][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.694388][T12477] fuse: Bad value for 'fd' [ 371.706330][T12396] veth0_vlan: entered promiscuous mode [ 371.710960][T12396] veth1_vlan: entered promiscuous mode [ 371.729071][T12396] veth0_macvtap: entered promiscuous mode [ 371.742003][T12396] veth1_macvtap: entered promiscuous mode [ 371.757211][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.764090][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.768545][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.772769][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.780608][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.784828][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.791645][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.805421][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.809625][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.817051][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.820759][T12481] fuse: Unknown parameter '0x0000000000000004' [ 371.822950][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.827626][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.831093][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.838883][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.857618][T12396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.860955][T12396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.863651][T12396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.875033][T12396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.928794][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 371.941605][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'. [ 371.978438][T12484] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.981978][T12484] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.986324][T12484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.176047][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.180987][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.237162][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.240174][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.538267][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 372.595186][ T5952] Bluetooth: hci2: command tx timeout [ 372.764039][ T834] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 372.935599][ T834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.939681][ T834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.954710][ T834] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.958549][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.961798][ T834] usb 7-1: SerialNumber: syz [ 373.172631][ T834] usb 7-1: 0:2 : does not exist [ 373.182377][ T834] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 373.188749][ T834] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 373.213377][ T834] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 373.227769][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 373.230637][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 373.237648][ T834] usb 7-1: USB disconnect, device number 70 [ 373.278668][ T6176] udevd[6176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.562135][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 373.655181][T12532] fuse: Bad value for 'fd' [ 373.800959][T12535] syzkaller0: entered promiscuous mode [ 373.802873][T12535] syzkaller0: entered allmulticast mode [ 374.234119][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 374.237296][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 374.664212][ T5952] Bluetooth: hci2: command tx timeout [ 374.860292][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 375.109278][T12561] fuse: Unknown parameter 'group_id00000000000000000000' [ 375.151599][ T5943] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 375.155450][ T5943] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 375.162036][ T5943] hid-generic 0000:0003:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 375.190578][T12565] fido_id[12565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 376.084525][T12586] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 376.084525][T12586] program syz.2.2286 not setting count and/or reply_len properly [ 376.681829][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 376.684897][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'. [ 376.744100][ T5952] Bluetooth: hci2: command tx timeout [ 377.626793][ T6003] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 377.629123][ T6003] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 377.635232][ T6003] hid-generic 0000:0003:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 377.731824][T12604] fuse: Bad value for 'fd' [ 377.800774][T12608] batman_adv: batadv0: Adding interface: dummy0 [ 377.803044][T12608] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.807904][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 377.811452][T12608] batman_adv: batadv0: Interface activated: dummy0 [ 377.814080][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 377.822839][T12608] net_ratelimit: 10 callbacks suppressed [ 377.822850][T12608] batadv0: mtu less than device minimum [ 377.828008][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.831777][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.835696][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.839557][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.844044][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.847797][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.851495][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.855921][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.859930][T12608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.036434][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.038504][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.128339][ T6847] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 378.275216][ T6847] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 378.277882][ T6847] usb 7-1: config 0 has no interface number 0 [ 378.280263][ T6847] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 378.284265][ T6847] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 378.287137][ T6847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.291640][ T6847] usb 7-1: config 0 descriptor?? [ 378.296597][ T6847] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.120/input/input44 [ 378.374107][ T834] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 378.417095][ T6847] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 378.419601][ T6847] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 378.425994][ T6847] hid-generic 0000:0003:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz1 [ 378.498025][ T6003] usb 7-1: USB disconnect, device number 71 [ 378.547116][ T834] usb 6-1: config 0 has no interfaces? [ 378.550584][ T834] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.553498][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.556746][ T834] usb 6-1: Product: syz [ 378.558134][ T834] usb 6-1: Manufacturer: syz [ 378.559682][ T834] usb 6-1: SerialNumber: syz [ 378.563210][ T834] usb 6-1: config 0 descriptor?? [ 379.033318][T12630] fuse: Bad value for 'fd' [ 379.240300][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2305'. [ 379.934010][T12639] fuse: Bad value for 'user_id' [ 379.935667][T12639] fuse: Bad value for 'user_id' [ 379.969268][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2308'. [ 380.244157][ T5980] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 380.254131][ T5943] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 380.403987][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 380.408411][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.412241][ T5980] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 380.414982][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.418123][ T5943] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 380.421826][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.424998][ T5980] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 380.427743][ T5980] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 380.430956][ T5980] usb 5-1: config 250 has no interface number 0 [ 380.432988][ T5980] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 380.440710][ T5943] usb 7-1: config 0 descriptor?? [ 380.442469][ T5980] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 380.446258][ T5980] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 380.451130][ T5980] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 380.455009][ T5980] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 380.459546][ T5980] usb 5-1: config 250 interface 228 has no altsetting 0 [ 380.463357][ T5980] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 380.466375][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 380.469631][ T5980] usb 5-1: Product: syz [ 380.471119][ T5980] usb 5-1: SerialNumber: syz [ 380.478044][ T5980] hub 5-1:250.228: bad descriptor, ignoring hub [ 380.480198][ T5980] hub 5-1:250.228: probe with driver hub failed with error -5 [ 380.656563][ T5943] usbhid 7-1:0.0: can't add hid device: -71 [ 380.658809][ T5943] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 380.663150][ T5943] usb 7-1: USB disconnect, device number 72 [ 380.679790][ T5980] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 81 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 381.038651][ T5943] usb 6-1: USB disconnect, device number 68 [ 381.104001][T12650] syzkaller0: entered promiscuous mode [ 381.106117][T12650] syzkaller0: entered allmulticast mode [ 381.566256][T12643] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 382.254709][ T6003] usb 5-1: USB disconnect, device number 81 [ 382.258975][ T6003] usblp0: removed [ 382.376224][ T10] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 382.379009][ T10] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 382.383609][ T10] hid-generic 0000:0003:0000.0011: hidraw1: HID v0.00 Device [syz0] on syz1 [ 382.469404][T12669] fuse: Bad value for 'user_id' [ 382.470998][T12669] fuse: Bad value for 'user_id' [ 382.512955][T12672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'. [ 382.824227][ T5943] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 382.913986][ T34] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 382.980371][T12685] syzkaller0: entered promiscuous mode [ 382.982681][T12685] syzkaller0: entered allmulticast mode [ 382.985653][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.989614][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.992621][ T5943] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 382.995683][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.003818][ T5943] usb 6-1: config 0 descriptor?? [ 383.064130][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 383.069336][ T34] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 383.072445][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.075074][ T34] usb 5-1: Product: syz [ 383.076425][ T34] usb 5-1: Manufacturer: syz [ 383.077937][ T34] usb 5-1: SerialNumber: syz [ 383.080938][ T34] usb 5-1: config 0 descriptor?? [ 383.084738][ T34] empeg 5-1:0.0: empeg converter detected [ 383.086661][ T34] usb 5-1: active config #0 != 1 ?? [ 383.227000][ T5943] usbhid 6-1:0.0: can't add hid device: -71 [ 383.229022][ T5943] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 383.235450][ T5943] usb 6-1: USB disconnect, device number 69 [ 383.837005][ T5980] usb 5-1: USB disconnect, device number 82 [ 384.228186][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 384.231499][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 384.241336][T12695] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.246024][T12695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.249848][T12695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.253207][T12695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.584584][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 385.591291][T12722] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.594630][T12722] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.597423][T12722] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.600216][T12722] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.667419][T12731] fuse: Bad value for 'fd' [ 386.591699][T12756] fuse: Bad value for 'fd' [ 386.843979][ T6003] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 387.006237][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.010990][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.021566][ T6003] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 387.026844][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.036758][ T6003] usb 6-1: config 0 descriptor?? [ 387.249899][ T6003] usbhid 6-1:0.0: can't add hid device: -71 [ 387.251949][ T6003] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 387.255867][ T6003] usb 6-1: USB disconnect, device number 70 [ 387.444043][ T6315] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 387.597028][ T6315] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 387.599914][ T6315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.602403][ T6315] usb 5-1: Product: syz [ 387.603715][ T6315] usb 5-1: Manufacturer: syz [ 387.605467][ T6315] usb 5-1: SerialNumber: syz [ 387.608170][ T6315] usb 5-1: config 0 descriptor?? [ 387.823308][ T6315] usb 5-1: ignoring: probably an ADSL modem [ 388.227882][ T6315] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 388.437357][T12763] program syz.0.2348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.603993][ T5980] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 389.755429][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.759465][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.763576][ T5980] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 389.768184][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.773350][ T5980] usb 7-1: config 0 descriptor?? [ 389.969679][ T834] usb 5-1: USB disconnect, device number 83 [ 389.980569][ T5980] usbhid 7-1:0.0: can't add hid device: -71 [ 389.983089][ T5980] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 389.988908][ T5980] usb 7-1: USB disconnect, device number 73 [ 390.354037][ T834] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 390.504063][ T834] usb 5-1: device descriptor read/64, error -71 [ 390.737665][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 390.744077][ T834] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 390.876665][ T834] usb 5-1: device descriptor read/64, error -71 [ 390.984283][ T834] usb usb5-port1: attempt power cycle [ 391.324004][ T834] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 391.344604][ T834] usb 5-1: device descriptor read/8, error -71 [ 391.509688][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 391.553399][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 391.584292][ T834] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 391.614842][ T834] usb 5-1: device descriptor read/8, error -71 [ 391.724308][ T834] usb usb5-port1: unable to enumerate USB device [ 392.829064][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.833725][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.837035][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.841231][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.844347][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.959257][T12837] chnl_net:caif_netlink_parms(): no params data found [ 393.041456][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.043828][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.048037][T12837] bridge_slave_0: entered allmulticast mode [ 393.050904][T12837] bridge_slave_0: entered promiscuous mode [ 393.077809][ T1230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.081295][ T1230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.091853][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.096123][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.098649][T12837] bridge_slave_1: entered allmulticast mode [ 393.102297][T12837] bridge_slave_1: entered promiscuous mode [ 393.141999][T12837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.151336][T12837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.164741][ T1230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.167967][ T1230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.218161][T12837] team0: Port device team_slave_0 added [ 393.225805][T12837] team0: Port device team_slave_1 added [ 393.275639][T12837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.278582][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.287850][T12837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.304581][ T1230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.307935][ T1230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.314666][T12837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.320341][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.330016][T12837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.381904][T12851] netlink: 'syz.3.2374': attribute type 4 has an invalid length. [ 393.384845][T12851] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'. [ 393.421035][T12837] hsr_slave_0: entered promiscuous mode [ 393.425402][T12837] hsr_slave_1: entered promiscuous mode [ 393.605309][ T1230] bridge_slave_1: left allmulticast mode [ 393.607075][ T1230] bridge_slave_1: left promiscuous mode [ 393.609111][ T1230] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.618478][ T1230] bridge_slave_0: left allmulticast mode [ 393.620287][ T1230] bridge_slave_0: left promiscuous mode [ 393.622770][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.772486][ T1230] dvmrp0 (unregistering): left allmulticast mode [ 393.796928][ T1230] team0: Port device geneve0 removed [ 393.924356][ T1230]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.928268][ T1230]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.931547][ T1230]  (unregistering): Released all slaves [ 393.980561][T12855] fuse: Unknown parameter 'group_i00000000000000000000' [ 394.164111][ T6315] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 394.169031][ T6315] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 394.177590][ T6315] hid-generic 0000:0003:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz1 [ 394.282845][T12879] fuse: Invalid rootmode [ 394.435213][T12837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.444354][T12837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.449535][T12837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.457243][T12837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.514859][T12837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.529326][T12837] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.538492][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.540525][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.550972][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.553981][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.696247][T12837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.723629][T12837] veth0_vlan: entered promiscuous mode [ 394.737507][T12837] veth1_vlan: entered promiscuous mode [ 394.765869][T12837] veth0_macvtap: entered promiscuous mode [ 394.769583][T12837] veth1_macvtap: entered promiscuous mode [ 394.778150][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.782502][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.786212][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.789505][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.792653][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.796492][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.799555][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.802784][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.807995][T12837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.817869][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.821153][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.824494][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.828207][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.831535][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.835535][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.838637][T12837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.842823][T12837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.846833][T12837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.853040][T12837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.856319][T12837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.859516][T12837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.862280][T12837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.901297][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.904085][ T5947] Bluetooth: hci0: command tx timeout [ 394.906509][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.928498][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.932886][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.233478][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 395.418796][T12908] netlink: 'syz.2.2387': attribute type 4 has an invalid length. [ 395.421784][T12908] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2387'. [ 395.430942][T12908] : renamed from bond0 (while UP) [ 395.713025][ T10] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 395.716059][ T10] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 395.730937][ T10] hid-generic 0000:0003:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz1 [ 395.769538][T12915] fido_id[12915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 395.815223][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 395.818845][ T1230] hsr_slave_0: left promiscuous mode [ 395.821824][ T1230] hsr_slave_1: left promiscuous mode [ 395.825123][ T5983] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 395.826347][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.831151][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.837941][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.841020][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.871328][ T1230] veth1_macvtap: left promiscuous mode [ 395.873783][ T1230] veth0_macvtap: left promiscuous mode [ 395.876489][ T1230] veth1_vlan: left promiscuous mode [ 395.878827][ T1230] veth0_vlan: left promiscuous mode [ 395.975499][ T5983] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 395.978212][ T5983] usb 5-1: config 0 has no interface number 0 [ 395.980133][ T5983] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 395.984071][ T5983] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 395.987014][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.991186][ T5983] usb 5-1: config 0 descriptor?? [ 396.004070][ T5983] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input45 [ 396.198274][ T5983] usb 5-1: USB disconnect, device number 88 [ 396.249374][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 396.602807][ T1230] team0 (unregistering): Port device team_slave_1 removed [ 396.669992][ T1230] team0 (unregistering): Port device team_slave_0 removed [ 396.994129][ T5947] Bluetooth: hci0: command tx timeout [ 397.094123][ T5983] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 397.201366][T12941] fuse: Unknown parameter 'group_id00000000000000000000' [ 397.246756][ T5983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.250248][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.254038][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.257324][ T5983] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 397.262771][ T5983] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 397.266471][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.269211][ T5983] usb 5-1: SerialNumber: syz [ 397.290559][ T5983] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 397.297047][ T5983] usb-storage 5-1:1.0: USB Mass Storage device detected [ 397.316481][ T5983] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 397.491873][ T5983] usb 5-1: USB disconnect, device number 89 [ 398.369835][T12961] batman_adv: batadv0: Adding interface: dummy0 [ 398.372215][T12961] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.380978][T12961] batman_adv: batadv0: Interface activated: dummy0 [ 398.429991][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2406'. [ 398.490924][T12968] fuse: Unknown parameter 'group_id00000000000000000000' [ 398.611907][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 398.644097][ T5980] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 398.796855][ T5980] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 398.802429][ T5980] usb 6-1: config 0 has no interface number 0 [ 398.807874][ T5980] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 398.812424][ T5980] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 398.815697][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.822520][ T5980] usb 6-1: config 0 descriptor?? [ 398.838705][ T5980] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input46 [ 399.037130][ T5980] usb 6-1: USB disconnect, device number 71 [ 399.064232][ T5947] Bluetooth: hci0: command tx timeout [ 399.886991][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 401.154083][ T5947] Bluetooth: hci0: command tx timeout [ 401.222294][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 402.112347][T13066] fuse: Bad value for 'user_id' [ 402.114693][T13066] fuse: Bad value for 'user_id' [ 402.172792][T13068] fuse: Unknown parameter 'use00000000000000000000' [ 402.588045][T13084] netlink: 'syz.2.2445': attribute type 4 has an invalid length. [ 402.591377][T13084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2445'. [ 403.331410][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 403.604228][ T5943] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 403.656361][ T29] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 403.759126][ T5943] usb 6-1: config index 0 descriptor too short (expected 95, got 36) [ 403.762587][ T5943] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 403.767579][ T5943] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 403.770745][ T5943] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.775411][ T5943] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.778704][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.782309][ T5943] usb 6-1: Product: syz [ 403.783783][ T5943] usb 6-1: Manufacturer: syz [ 403.786758][ T5943] usb 6-1: SerialNumber: syz [ 403.804035][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 403.808246][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.812893][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.817649][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.824215][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 403.831061][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.843263][ T29] usb 5-1: config 0 descriptor?? [ 403.997145][ T5943] usb 6-1: 0:2 : does not exist [ 404.006684][ T5943] usb 6-1: USB disconnect, device number 72 [ 404.022954][ T6176] udevd[6176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.252391][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 404.255760][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 404.259426][ T29] usb 5-1: USB disconnect, device number 90 [ 404.494054][ T5943] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 404.645855][ T5943] usb 6-1: config index 0 descriptor too short (expected 95, got 36) [ 404.649228][ T5943] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 404.655258][ T5943] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 404.659357][ T5943] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.669783][ T5943] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.674275][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.677615][ T5943] usb 6-1: Product: syz [ 404.679457][ T5943] usb 6-1: Manufacturer: syz [ 404.681464][ T5943] usb 6-1: SerialNumber: syz [ 404.896915][ C2] raw-gadget.0 gadget.1: ignoring, device is not running [ 404.915808][ T5943] usb 6-1: 0:2 : does not exist [ 404.929526][ T5943] usb 6-1: USB disconnect, device number 73 [ 405.611754][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2461'. [ 406.103566][ T5983] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 406.106540][ T5983] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 406.111399][ T5983] hid-generic 0000:0003:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz1 [ 406.624034][ T5980] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 406.775278][ T5980] usb 6-1: config index 0 descriptor too short (expected 95, got 36) [ 406.778267][ T5980] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 406.782250][ T5980] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 406.785934][ T5980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.790715][ T5980] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.794136][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.798164][ T5980] usb 6-1: Product: syz [ 406.799937][ T5980] usb 6-1: Manufacturer: syz [ 406.801866][ T5980] usb 6-1: SerialNumber: syz [ 407.015930][ T5980] usb 6-1: 0:2 : does not exist [ 407.025503][ T5980] usb 6-1: USB disconnect, device number 74 [ 407.042341][ T6176] udevd[6176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.444033][ T5980] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 407.595254][ T5980] usb 6-1: config index 0 descriptor too short (expected 95, got 36) [ 407.598416][ T5980] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 407.601803][ T5980] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 407.606007][ T5980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.611520][ T5980] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.615189][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.618279][ T5980] usb 6-1: Product: syz [ 407.619971][ T5980] usb 6-1: Manufacturer: syz [ 407.621678][ T5980] usb 6-1: SerialNumber: syz [ 407.836123][ T5980] usb 6-1: 0:2 : does not exist [ 407.848051][ T5980] usb 6-1: USB disconnect, device number 75 [ 407.860426][ T6176] udevd[6176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.016735][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.021662][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.026010][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.031151][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.035070][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.140596][T13169] chnl_net:caif_netlink_parms(): no params data found [ 408.207520][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.209780][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.212055][T13169] bridge_slave_0: entered allmulticast mode [ 408.215028][T13169] bridge_slave_0: entered promiscuous mode [ 408.219618][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.221886][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.225766][T13169] bridge_slave_1: entered allmulticast mode [ 408.228411][T13169] bridge_slave_1: entered promiscuous mode [ 408.260564][T13169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.267075][T13169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.302099][T13169] team0: Port device team_slave_0 added [ 408.306729][T13169] team0: Port device team_slave_1 added [ 408.340945][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.343552][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.352988][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.359352][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.362125][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.371866][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.427176][T13169] hsr_slave_0: entered promiscuous mode [ 408.429612][T13169] hsr_slave_1: entered promiscuous mode [ 408.431655][T13169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.434448][T13169] Cannot create hsr debugfs directory [ 408.549618][T13169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.552894][T13169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.556490][T13169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.627971][T13169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.632113][T13169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.636830][T13169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.711098][T13169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.715872][T13169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.719951][T13169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.787312][T13169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.790556][T13169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.793716][T13169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.820717][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 408.932224][T13169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.937165][T13169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.941323][T13169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.947202][T13169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.964078][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.964102][ T29] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 408.966734][T13169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.973598][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.976700][T13169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.032085][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.046724][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.051153][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.066714][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.073988][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.076489][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.083062][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.085443][T12487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.126397][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 409.130731][ T29] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 409.133598][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.136880][ T29] usb 7-1: Product: syz [ 409.138327][ T29] usb 7-1: Manufacturer: syz [ 409.139893][ T29] usb 7-1: SerialNumber: syz [ 409.143400][ T29] usb 7-1: config 0 descriptor?? [ 409.207337][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.236789][T13169] veth0_vlan: entered promiscuous mode [ 409.246122][T13169] veth1_vlan: entered promiscuous mode [ 409.270720][T13169] veth0_macvtap: entered promiscuous mode [ 409.278581][T13169] veth1_macvtap: entered promiscuous mode [ 409.291298][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.297045][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.300069][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.303297][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.306539][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.309765][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.312817][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.316117][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.319995][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.326257][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.329532][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.332574][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.336080][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.339139][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.342516][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.345723][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.349135][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.354518][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.360223][ T29] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 409.362646][ T29] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 409.362813][T13169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.367101][ T29] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 409.368480][T13169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.368498][T13169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.370548][ T29] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 409.373296][T13169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.380709][ T29] usb 7-1: USB disconnect, device number 74 [ 409.426154][T12487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.428745][T12487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.443064][T12487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.445751][T12487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.514846][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2479'. [ 410.104219][ T5947] Bluetooth: hci1: command tx timeout [ 410.143982][ T834] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 410.324028][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 410.331134][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.339677][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.342890][ T834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.349329][ T834] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.352359][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.356604][ T834] usb 7-1: config 0 descriptor?? [ 410.594858][ T5980] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 410.744550][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 410.748669][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.752539][ T5980] usb 5-1: config 0 has no interfaces? [ 410.755619][ T5980] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 410.758463][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.764736][ T5980] usb 5-1: config 0 descriptor?? [ 410.768536][ T834] usbhid 7-1:0.0: can't add hid device: -71 [ 410.770564][ T834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 410.778501][ T834] usb 7-1: USB disconnect, device number 75 [ 410.844674][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 410.980893][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 411.419185][T13248] netlink: 'syz.2.2493': attribute type 4 has an invalid length. [ 411.422628][T13248] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2493'. [ 412.005915][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 412.036473][ C1] vcan0: j1939_session_tx_dat: 0xffff888023ab3400: queue data error: -100 [ 412.180787][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 412.184087][ T5947] Bluetooth: hci1: command tx timeout [ 413.371661][ T5943] usb 5-1: USB disconnect, device number 91 [ 413.517979][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'. [ 413.584010][ T834] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 413.680537][T13286] netlink: 'syz.1.2505': attribute type 4 has an invalid length. [ 413.683000][T13286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2505'. [ 413.689332][T13286] : renamed from bond0 (while UP) [ 413.733986][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 413.737014][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.740492][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.743531][ T834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.747946][ T834] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.751333][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.758872][ T834] usb 7-1: config 0 descriptor?? [ 414.174395][ T834] usbhid 7-1:0.0: can't add hid device: -71 [ 414.176411][ T834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 414.180462][ T834] usb 7-1: USB disconnect, device number 76 [ 414.264711][ T5947] Bluetooth: hci1: command tx timeout [ 415.494070][ T6847] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 415.584161][ T6004] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 415.645511][ T6847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.649025][ T6847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.652185][ T6847] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 415.655608][ T6847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.660337][ T6847] usb 7-1: config 0 descriptor?? [ 415.743960][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 415.748579][ T6004] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 415.751403][ T6004] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 415.754247][ T6004] usb 5-1: config 250 contains an unexpected descriptor of type 0x1, skipping [ 415.757195][ T6004] usb 5-1: config 250 has an invalid descriptor of length 1, skipping remainder of the config [ 415.760642][ T6004] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 415.766163][ T6004] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 415.769269][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 415.771994][ T6004] usb 5-1: Product: syz [ 415.773523][ T6004] usb 5-1: SerialNumber: syz [ 415.779773][ T6004] hub 5-1:250.0: bad descriptor, ignoring hub [ 415.781872][ T6004] hub 5-1:250.0: probe with driver hub failed with error -5 [ 415.867944][ T6847] usbhid 7-1:0.0: can't add hid device: -71 [ 415.870677][ T6847] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 415.877787][ T6847] usb 7-1: USB disconnect, device number 77 [ 415.981493][ T6004] usb 5-1: 0:2 : does not exist [ 416.004303][ T6004] usb 5-1: USB disconnect, device number 92 [ 416.184084][ T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 416.344127][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 416.344187][ T5947] Bluetooth: hci1: command tx timeout [ 416.347088][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.351001][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.354136][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.358912][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.362645][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.368771][ T10] usb 6-1: config 0 descriptor?? [ 416.513991][ T6004] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 416.664430][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 416.669577][ T6004] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 416.672839][ T6004] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 416.677349][ T6004] usb 5-1: config 250 contains an unexpected descriptor of type 0x1, skipping [ 416.681190][ T6004] usb 5-1: config 250 has an invalid descriptor of length 1, skipping remainder of the config [ 416.686375][ T6004] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 416.691024][ T6004] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 416.695152][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 416.697908][ T6004] usb 5-1: Product: syz [ 416.699365][ T6004] usb 5-1: SerialNumber: syz [ 416.707673][ T6004] hub 5-1:250.0: bad descriptor, ignoring hub [ 416.710498][ T6004] hub 5-1:250.0: probe with driver hub failed with error -5 [ 416.777731][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 416.780194][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 416.785579][ T10] usb 6-1: USB disconnect, device number 76 [ 416.909694][ T6004] usb 5-1: 0:2 : does not exist [ 416.944375][ T6004] usb 5-1: USB disconnect, device number 93 [ 417.322514][T13343] fuse: Bad value for 'fd' [ 417.541579][T13358] lo: entered allmulticast mode [ 418.163997][ T834] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 418.314095][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 418.323857][ T834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 418.327295][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.330012][ T834] usb 5-1: Product: syz [ 418.331754][ T834] usb 5-1: Manufacturer: syz [ 418.333311][ T834] usb 5-1: SerialNumber: syz [ 418.337666][ T834] usb 5-1: config 0 descriptor?? [ 418.362192][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 418.549930][ T834] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.571885][ T834] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 418.586106][ T834] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.588906][ T834] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 418.606154][ T834] usb 5-1: USB disconnect, device number 94 [ 418.626759][T13377] fuse: Unknown parameter 'use00000000000000000000' [ 418.666714][T13379] overlayfs: missing 'lowerdir' [ 418.794912][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 419.644690][ T6004] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 419.794005][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 419.797030][ T6004] usb 5-1: config 2 has an invalid interface number: 157 but max is 0 [ 419.799837][ T6004] usb 5-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 419.803104][ T6004] usb 5-1: config 2 has no interface number 0 [ 419.808531][ T6004] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 419.811623][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.814442][ T6004] usb 5-1: Product: syz [ 419.816339][ T6004] usb 5-1: Manufacturer: syz [ 419.818181][ T6004] usb 5-1: SerialNumber: syz [ 419.824516][ T6004] imon 5-1:2.157: unable to register, err -19 [ 420.007420][T13408] fuse: Unknown parameter 'use00000000000000000000' [ 420.134823][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.140392][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.146812][T13413] batadv_slave_1: entered promiscuous mode [ 420.151676][T13413] loop6: detected capacity change from 0 to 524287999 [ 420.156285][T13413] buffer_io_error: 24 callbacks suppressed [ 420.156297][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.162440][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.165980][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.169152][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.172895][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.176448][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.180115][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.183285][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.186955][T13413] ldm_validate_partition_table(): Disk read failed. [ 420.189613][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.192720][T13413] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.195556][T13413] Dev loop6: unable to read RDB block 0 [ 420.197624][T13413] loop6: unable to read partition table [ 420.199534][T13413] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 420.334079][ T5943] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 420.506145][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.510301][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.514594][ T5943] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 420.517647][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.529937][ T5943] usb 6-1: config 0 descriptor?? [ 420.737127][ T5943] usbhid 6-1:0.0: can't add hid device: -71 [ 420.739184][ T5943] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 420.747233][ T5943] usb 6-1: USB disconnect, device number 77 [ 421.778183][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 421.875329][T13444] program syz.2.2556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.031840][T13446] fuse: Unknown parameter '0x0000000000000003' [ 422.195124][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.199870][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.203142][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.206990][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.209900][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.388902][T13448] chnl_net:caif_netlink_parms(): no params data found [ 422.442330][T13413] batadv_slave_1: left promiscuous mode [ 422.461974][ T6004] usb 5-1: USB disconnect, device number 95 [ 422.501236][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.504208][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.507003][T13448] bridge_slave_0: entered allmulticast mode [ 422.510111][T13448] bridge_slave_0: entered promiscuous mode [ 422.514838][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.517569][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.520399][T13448] bridge_slave_1: entered allmulticast mode [ 422.523804][T13448] bridge_slave_1: entered promiscuous mode [ 422.566441][T13448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.573054][T13448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.613404][T13448] team0: Port device team_slave_0 added [ 422.617429][T13448] team0: Port device team_slave_1 added [ 422.656884][T13448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.659148][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.670518][T13448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.676504][T13448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.678766][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.689096][T13448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.749737][T13448] hsr_slave_0: entered promiscuous mode [ 422.752907][T13448] hsr_slave_1: entered promiscuous mode [ 422.757024][T13448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.760142][T13448] Cannot create hsr debugfs directory [ 422.821890][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 422.874001][ T6004] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 422.887092][T13448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.891528][T13448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.975521][T13448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.979592][T13448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.043957][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 423.047622][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.051828][ T6004] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.056117][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.057249][T13448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.062515][ T6004] usb 5-1: config 0 descriptor?? [ 423.063869][T13448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.078668][ T6004] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 423.163686][T13448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.168296][T13448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.193148][T13480] fuse: Unknown parameter '0x0000000000000003' [ 423.272542][T13448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.277789][T13448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.281932][T13448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.286108][T13448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.304632][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.306920][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.309272][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.311581][T13448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.341861][T13448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.356400][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.363449][T12487] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.388276][T13448] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.401454][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.404539][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.409464][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.412457][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.583397][T13448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.607338][T13448] veth0_vlan: entered promiscuous mode [ 423.612527][T13448] veth1_vlan: entered promiscuous mode [ 423.627358][T13448] veth0_macvtap: entered promiscuous mode [ 423.633188][T13448] veth1_macvtap: entered promiscuous mode [ 423.642868][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.647211][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.650360][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.653636][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.656789][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.660014][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.663116][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.666462][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.669569][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.672943][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.676975][T13448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.683741][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.687959][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.691175][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.694510][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.697472][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.700625][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.703719][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.706997][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.709948][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.713133][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.717135][T13448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.722636][T13448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.728071][T13448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.733585][T13448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.736343][T13448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.773675][T12487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.784666][T12487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.800761][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.804137][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.048847][T13499] warning: `syz.1.2570' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.264120][ T5947] Bluetooth: hci4: command tx timeout [ 424.374149][ T6026] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 424.524114][ T6026] usb 7-1: Using ep0 maxpacket: 16 [ 424.532054][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.536693][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.540745][ T6026] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.546524][ T6026] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.553344][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.559241][ T6026] usb 7-1: config 0 descriptor?? [ 425.054129][ T5983] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 425.169067][ T6026] usbhid 7-1:0.0: can't add hid device: -71 [ 425.171094][ T6026] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 425.185592][ T6026] usb 7-1: USB disconnect, device number 78 [ 425.214023][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 425.218392][ T5983] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 425.221497][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.224175][ T5983] usb 6-1: Product: syz [ 425.225687][ T5983] usb 6-1: Manufacturer: syz [ 425.227175][ T5983] usb 6-1: SerialNumber: syz [ 425.234840][ T5983] usb 6-1: config 0 descriptor?? [ 425.445856][ T5983] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 425.450731][ T5983] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 425.454645][ T5983] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 425.456954][ T5983] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 425.462627][ T5983] usb 6-1: USB disconnect, device number 78 [ 425.549815][ T5980] usb 5-1: USB disconnect, device number 96 [ 426.242383][T13523] usb usb8: usbfs: process 13523 (syz.2.2578) did not claim interface 0 before use [ 426.343993][ T5947] Bluetooth: hci4: command tx timeout [ 426.703998][ T6026] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 426.834147][ T6026] usb 5-1: device descriptor read/64, error -71 [ 427.084111][ T6026] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 427.124081][ T5983] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 427.214132][ T6026] usb 5-1: device descriptor read/64, error -71 [ 427.274395][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 427.278305][ T5983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.282303][ T5983] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 427.285484][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.291152][ T5983] usb 6-1: config 0 descriptor?? [ 427.295064][ T5983] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 427.334402][ T6026] usb usb5-port1: attempt power cycle [ 427.674150][ T6026] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 427.694425][ T6026] usb 5-1: device descriptor read/8, error -71 [ 427.934027][ T6026] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 427.964372][ T6026] usb 5-1: device descriptor read/8, error -71 [ 428.075048][ T6026] usb usb5-port1: unable to enumerate USB device [ 428.424051][ T5947] Bluetooth: hci4: command tx timeout [ 428.894079][ T6004] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 429.057134][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.060561][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.064031][ T6004] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.068328][ T6004] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.071178][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.075060][ T6004] usb 7-1: config 0 descriptor?? [ 429.485407][ T6004] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 429.491132][ T6004] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 429.901470][ T5980] usb 6-1: USB disconnect, device number 79 [ 429.948561][T13560] netlink: 'syz.1.2592': attribute type 12 has an invalid length. [ 429.951168][T13560] netlink: 'syz.1.2592': attribute type 29 has an invalid length. [ 429.953685][T13560] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 429.956369][T13560] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 429.959746][T13560] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 429.963049][T13560] netlink: 'syz.1.2592': attribute type 37 has an invalid length. [ 429.966673][T13560] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 429.970304][T13560] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.514129][ T5947] Bluetooth: hci4: command tx timeout [ 431.124284][ T6026] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 431.164099][ T1455] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 431.274029][ T6026] usb 6-1: device descriptor read/64, error -71 [ 431.324844][ T1455] usb 5-1: Using ep0 maxpacket: 8 [ 431.327775][ T1455] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.331135][ T1455] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.335926][ T1455] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.338857][ T1455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.346362][ T1455] usb 5-1: config 0 descriptor?? [ 431.349479][ T1455] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 431.533969][ T6026] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 431.674006][ T6026] usb 6-1: device descriptor read/64, error -71 [ 431.676182][ T5983] usb 7-1: USB disconnect, device number 79 [ 431.784457][ T6026] usb usb6-port1: attempt power cycle [ 432.124005][ T6026] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 432.144376][ T6026] usb 6-1: device descriptor read/8, error -71 [ 432.305398][T13599] netlink: 'syz.3.2605': attribute type 4 has an invalid length. [ 432.308044][T13599] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2605'. [ 432.315077][T13599] : renamed from bond0 (while UP) [ 432.404030][ T6026] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 432.426695][ T6026] usb 6-1: device descriptor read/8, error -71 [ 432.544440][ T6026] usb usb6-port1: unable to enumerate USB device [ 433.922572][ T1455] usb 5-1: USB disconnect, device number 101 [ 434.504122][ T5983] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 434.665887][ T5983] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 434.668452][ T5983] usb 6-1: config 0 has no interface number 0 [ 434.672177][ T5983] usb 6-1: New USB device found, idVendor=12d1, idProduct=1441, bcdDevice=6c.51 [ 434.675327][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.677854][ T5983] usb 6-1: Product: syz [ 434.679217][ T5983] usb 6-1: Manufacturer: syz [ 434.680774][ T5983] usb 6-1: SerialNumber: syz [ 434.683465][ T5983] usb 6-1: config 0 descriptor?? [ 434.686707][ T5983] usb 6-1: bad CDC descriptors [ 434.688655][ T5983] option 6-1:0.35: GSM modem (1-port) converter detected [ 434.844157][ T6026] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 434.887765][ T5983] usb 6-1: USB disconnect, device number 84 [ 434.891135][ T5983] option 6-1:0.35: device disconnected [ 434.994418][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 434.997678][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.002101][ T6026] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 435.006084][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.012032][ T6026] usb 7-1: config 0 descriptor?? [ 435.221045][ T6026] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 435.422835][ T5943] usb 7-1: USB disconnect, device number 80 [ 435.714065][ T6026] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 435.844015][ T6026] usb 6-1: device descriptor read/64, error -71 [ 436.084049][ T6026] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 436.214081][ T6026] usb 6-1: device descriptor read/64, error -71 [ 436.324177][ T6026] usb usb6-port1: attempt power cycle [ 436.568310][T13669] netlink: 'syz.2.2632': attribute type 4 has an invalid length. [ 436.571661][T13669] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2632'. [ 436.674032][ T6026] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 436.694797][ T6026] usb 6-1: device descriptor read/8, error -71 [ 436.934072][ T6026] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 436.954731][ T6026] usb 6-1: device descriptor read/8, error -71 [ 437.064620][ T6026] usb usb6-port1: unable to enumerate USB device [ 438.156746][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2644'. [ 438.199605][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 439.244382][ T6003] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 439.393968][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 439.404029][ T6003] usb 7-1: no configurations [ 439.405598][ T6003] usb 7-1: can't read configurations, error -22 [ 439.468526][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.470591][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.544168][ T6003] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 439.694171][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 439.697194][ T6003] usb 7-1: no configurations [ 439.699199][ T6003] usb 7-1: can't read configurations, error -22 [ 439.702255][ T6003] usb usb7-port1: attempt power cycle [ 440.053993][ T6003] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 440.074691][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 440.076853][ T6003] usb 7-1: no configurations [ 440.078402][ T6003] usb 7-1: can't read configurations, error -22 [ 440.206944][T13745] program syz.0.2663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.213982][ T6003] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 440.244681][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 440.246651][ T6003] usb 7-1: no configurations [ 440.248158][ T6003] usb 7-1: can't read configurations, error -22 [ 440.250861][ T6003] usb usb7-port1: unable to enumerate USB device [ 440.368739][T13755] netlink: 'syz.0.2664': attribute type 4 has an invalid length. [ 440.371111][T13755] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2664'. [ 440.378448][T13755] : renamed from bond0 (while UP) [ 440.439741][T13760] fuse: Unknown parameter '0x0000000000000003' [ 440.481017][ T6003] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 440.483242][ T6003] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 440.494037][ T6003] hid-generic 0000:0003:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz1 [ 441.544779][ T5947] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 441.547934][ T5947] Bluetooth: hci2: Injecting HCI hardware error event [ 441.551241][ T5947] Bluetooth: hci2: hardware error 0x00 [ 441.843326][T13782] net_ratelimit: 10 callbacks suppressed [ 441.843338][T13782] batadv0: mtu less than device minimum [ 441.848153][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.852066][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.855965][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.859818][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.863583][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.867442][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.871403][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.875448][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 441.879383][T13782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.028586][ T5980] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 442.031499][ T5980] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 442.036576][ T5980] hid-generic 0000:0003:0000.0017: hidraw1: HID v0.00 Device [syz0] on syz1 [ 442.133993][ T6003] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 442.285012][T13796] netlink: 'syz.2.2681': attribute type 4 has an invalid length. [ 442.288184][T13796] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2681'. [ 442.295701][ T6003] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 442.299179][ T6003] usb 6-1: config 0 has no interface number 0 [ 442.302057][ T6003] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 442.306571][ T6003] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 442.310399][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.318287][ T6003] usb 6-1: config 0 descriptor?? [ 442.330722][ T6003] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input47 [ 442.526167][T13645] usb 6-1: USB disconnect, device number 89 [ 443.162059][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 443.221923][T12647] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 443.225052][T12647] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 443.236396][T12647] hid-generic 0000:0003:0000.0018: hidraw1: HID v0.00 Device [syz0] on syz1 [ 443.293991][ T5943] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 443.444149][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 443.446660][ T5943] usb 7-1: no configurations [ 443.448559][ T5943] usb 7-1: can't read configurations, error -22 [ 443.574057][ T5943] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 443.623975][ T5947] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 443.724036][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 443.727113][ T5943] usb 7-1: no configurations [ 443.729202][ T5943] usb 7-1: can't read configurations, error -22 [ 443.732099][ T5943] usb usb7-port1: attempt power cycle [ 443.903327][T13822] fuse: Bad value for 'fd' [ 444.074033][ T5943] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 444.104761][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 444.108110][ T5943] usb 7-1: no configurations [ 444.110115][ T5943] usb 7-1: can't read configurations, error -22 [ 444.244080][ T5943] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 444.265043][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 444.267806][ T5943] usb 7-1: no configurations [ 444.269803][ T5943] usb 7-1: can't read configurations, error -22 [ 444.272867][ T5943] usb usb7-port1: unable to enumerate USB device [ 445.806492][ T5943] hid-generic 0000:0003:0000.0019: unknown main item tag 0x0 [ 445.809316][ T5943] hid-generic 0000:0003:0000.0019: unknown main item tag 0x0 [ 445.815062][ T5943] hid-generic 0000:0003:0000.0019: hidraw1: HID v0.00 Device [syz0] on syz1 [ 445.984073][ T5980] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 446.080362][T13852] fuse: Bad value for 'fd' [ 446.156112][ T5980] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 446.158677][ T5980] usb 6-1: config 0 has no interface number 0 [ 446.160656][ T5980] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 446.175832][ T5980] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 446.180239][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.189574][ T5980] usb 6-1: config 0 descriptor?? [ 446.199441][ T5980] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input48 [ 446.393562][ T6026] usb 6-1: USB disconnect, device number 90 [ 447.233980][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 447.404059][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 447.406731][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 447.408882][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 447.413429][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.416868][ T10] usb 6-1: Product: syz [ 447.418633][ T10] usb 6-1: Manufacturer: syz [ 447.420634][ T10] usb 6-1: SerialNumber: syz [ 447.429004][ T10] usb 6-1: config 0 descriptor?? [ 447.641021][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 447.648084][ T10] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 447.652737][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 447.655558][ T10] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 447.661617][ T10] usb 6-1: USB disconnect, device number 91 [ 447.733977][ T6026] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 447.883960][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 447.886131][ T6026] usb 7-1: no configurations [ 447.887625][ T6026] usb 7-1: can't read configurations, error -22 [ 448.023992][ T6026] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 448.168629][T13880] fuse: Bad value for 'fd' [ 448.184051][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 448.186129][ T6026] usb 7-1: no configurations [ 448.187613][ T6026] usb 7-1: can't read configurations, error -22 [ 448.189870][ T6026] usb usb7-port1: attempt power cycle [ 448.524097][ T6026] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 448.544479][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 448.546573][ T6026] usb 7-1: no configurations [ 448.548062][ T6026] usb 7-1: can't read configurations, error -22 [ 448.684054][ T6026] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 448.704445][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 448.706551][ T6026] usb 7-1: no configurations [ 448.708082][ T6026] usb 7-1: can't read configurations, error -22 [ 448.710296][ T6026] usb usb7-port1: unable to enumerate USB device [ 448.921349][T13883] batman_adv: batadv0: Interface deactivated: dummy0 [ 448.923499][T13883] batman_adv: batadv0: Removing interface: dummy0 [ 449.164028][ T5980] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 449.325497][ T5980] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 449.328688][ T5980] usb 6-1: config 0 has no interface number 0 [ 449.330751][ T5980] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 449.334056][ T5980] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 449.337074][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.342432][ T5980] usb 6-1: config 0 descriptor?? [ 449.347252][ T5980] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input49 [ 449.546820][T13645] usb 6-1: USB disconnect, device number 92 [ 450.194731][ T5980] hid-generic FFFF:0004:0000.001A: unknown main item tag 0x0 [ 450.197906][ T5980] hid-generic FFFF:0004:0000.001A: unknown main item tag 0x0 [ 450.201598][ T5980] hid-generic FFFF:0004:0000.001A: unknown main item tag 0x0 [ 450.210406][ T5980] hid-generic FFFF:0004:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz1 [ 450.253158][T13886] fido_id[13886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.225540][ T5981] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 451.248281][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 451.262549][T13908] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2720'. [ 451.298023][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'. [ 451.376876][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 451.384863][ T5981] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 451.387617][ T5981] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 451.390755][ T5981] usb 5-1: config 250 has an invalid interface number: 1 but max is -1 [ 451.393354][ T5981] usb 5-1: config 250 has 2 interfaces, different from the descriptor's value: 0 [ 451.396790][ T5981] usb 5-1: config 250 has no interface number 0 [ 451.398826][ T5981] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 451.402597][ T5981] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 451.406716][ T5981] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 451.410949][ T5981] usb 5-1: config 250 interface 228 has no altsetting 0 [ 451.414787][ T5981] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 451.417781][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 451.420896][ T5981] usb 5-1: Product: syz [ 451.422285][ T5981] usb 5-1: SerialNumber: syz [ 451.429729][ T5981] hub 5-1:250.228: Invalid hub with more than one config or interface [ 451.432275][ T5981] hub 5-1:250.228: probe with driver hub failed with error -22 [ 451.437470][ T5981] hub 5-1:250.1: Invalid hub with more than one config or interface [ 451.440163][ T5981] hub 5-1:250.1: probe with driver hub failed with error -22 [ 451.674062][ T10] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 451.824057][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 451.826987][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.830075][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 451.832905][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.837284][ T10] usb 7-1: config 0 descriptor?? [ 451.840666][ T10] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 452.019448][ T10] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 452.022625][ T10] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 452.027245][ T10] hid-generic 0000:0003:0000.001B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 452.182729][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.188207][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.336850][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'. [ 452.345380][T13935] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2729'. [ 452.428771][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 453.904327][ T6003] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 453.906747][ T6003] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 453.909956][ T6003] hid-generic 0000:0003:0000.001C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 453.978969][T12893] usb 5-1: USB disconnect, device number 102 [ 454.071305][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'. [ 454.078331][T13959] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2738'. [ 454.456372][T13645] usb 7-1: USB disconnect, device number 93 [ 454.482110][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 455.089031][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 455.156236][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 455.308089][T13645] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 455.464179][T13645] usb 6-1: Using ep0 maxpacket: 8 [ 455.469744][T13645] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.474362][T13645] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.481495][T13645] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 455.485720][T13645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.497934][T13645] usb 6-1: config 0 descriptor?? [ 455.708463][T13645] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 455.906551][T13989] iowarrior 6-1:0.0: Error -90 while submitting URB [ 455.909468][T13989] iowarrior 6-1:0.0: Error -90 while submitting URB [ 455.914484][T13645] usb 6-1: USB disconnect, device number 93 [ 456.070225][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'. [ 456.313999][ T6003] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 456.448325][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'. [ 456.464066][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 456.476606][ T6003] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 456.480013][ T6003] usb 7-1: can't read configurations, error -61 [ 456.615255][ T6003] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 456.776787][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 456.781449][ T6003] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 456.788075][ T6003] usb 7-1: can't read configurations, error -61 [ 456.791175][ T6003] usb usb7-port1: attempt power cycle [ 457.067441][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 457.163994][ T6003] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 457.185862][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 457.188937][ T6003] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 457.191147][ T6003] usb 7-1: can't read configurations, error -61 [ 457.314299][ T6003] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 457.334782][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 457.339144][ T6003] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 457.342299][ T6003] usb 7-1: can't read configurations, error -61 [ 457.345270][ T6003] usb usb7-port1: unable to enumerate USB device [ 457.493510][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 457.679892][ T5980] hid-generic 0000:0003:0000.001D: unknown main item tag 0x0 [ 457.683379][ T5980] hid-generic 0000:0003:0000.001D: unknown main item tag 0x0 [ 457.689747][ T5980] hid-generic 0000:0003:0000.001D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 457.824067][ T5981] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 457.973988][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 457.978631][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.984207][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.988387][ T5981] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 457.992218][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.997615][ T5981] usb 6-1: config 0 descriptor?? [ 458.215604][ T5981] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 458.415363][T14049] iowarrior 6-1:0.0: Error -90 while submitting URB [ 458.419532][T14049] iowarrior 6-1:0.0: Error -90 while submitting URB [ 458.423429][ T5981] usb 6-1: USB disconnect, device number 94 [ 459.129195][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 459.155834][T14087] program syz.2.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.211009][T12893] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 459.214454][T12893] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 459.230754][T12893] hid-generic 0000:0003:0000.001E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 459.814946][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'. [ 460.785381][T14111] program syz.0.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.290909][ T834] hid-generic 0000:0003:0000.001F: unknown main item tag 0x0 [ 461.295403][ T834] hid-generic 0000:0003:0000.001F: unknown main item tag 0x0 [ 461.302497][ T834] hid-generic 0000:0003:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 461.764204][T12893] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 461.924083][T12893] usb 6-1: Using ep0 maxpacket: 8 [ 461.927800][T12893] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 461.931452][T12893] usb 6-1: config 179 has no interface number 0 [ 461.934155][T12893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 461.938557][T12893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 461.943001][T12893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 461.947342][T12893] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 461.952881][T12893] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 461.956682][T12893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.962810][T14134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.140773][T14143] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 462.145689][T14143] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 462.150636][T14143] CPU: 0 UID: 0 PID: 14143 Comm: syz.0.2805 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 462.155571][T14143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.159094][T14143] RIP: 0010:do_move_mount+0x1fd/0x1930 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.161303][T14143] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 462.169321][T14143] RSP: 0018:ffffc90007a7fcf0 EFLAGS: 00010206 [ 462.171832][T14143] RAX: dffffc0000000000 RBX: ffff88804b1ac480 RCX: ffffc9000dcc1000 [ 462.175034][T14143] RDX: 0000000000000006 RSI: ffffffff823c01a4 RDI: ffff888063fff970 [ 462.178201][T14143] RBP: ffff88804049c560 R08: 0000000000000007 R09: fffffffffffff000 [ 462.181336][T14143] R10: ffff88804b1ac480 R11: 0000000000000000 R12: ffffffffffffffea [ 462.184559][T14143] R13: ffff88804ece9800 R14: ffff88804ece9800 R15: ffffc90007a7fea0 [ 462.187785][T14143] FS: 0000000000000000(0000) GS:ffff8880977ea000(0063) knlGS:00000000f5096b40 [ 462.191250][T14143] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 462.193891][T14143] CR2: 00000000f5095e7c CR3: 000000005e55d000 CR4: 0000000000352ef0 [ 462.196383][T14143] Call Trace: [ 462.197440][T14143] [ 462.198587][T14143] ? putname+0x154/0x1a0 [ 462.200356][T14143] path_mount+0x12fb/0x1f20 [ 462.202268][T14143] ? kmem_cache_free+0x2d4/0x4d0 [ 462.204257][T14143] ? __pfx_path_mount+0x10/0x10 [ 462.206033][T14143] ? putname+0x154/0x1a0 [ 462.207294][T14143] __ia32_sys_mount+0x28b/0x310 [ 462.208786][T14143] ? __pfx___ia32_sys_mount+0x10/0x10 [ 462.210414][T14143] ? rcu_is_watching+0x12/0xc0 [ 462.211884][T14143] __do_fast_syscall_32+0x73/0x120 [ 462.213500][T14143] do_fast_syscall_32+0x32/0x80 [ 462.215024][T14143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.217022][T14143] RIP: 0023:0xf7f73579 [ 462.218366][T14143] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.224177][T14143] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 462.226714][T14143] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000080 [ 462.229461][T14143] RDX: 0000000000000000 RSI: 0000000000002008 RDI: 0000000000000000 [ 462.232619][T14143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.235803][T14143] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 462.238948][T14143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.241523][T14143] [ 462.242493][T14143] Modules linked in: [ 462.244262][T14143] ---[ end trace 0000000000000000 ]--- [ 462.249811][T12893] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input50 [ 462.253793][T14143] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 462.266164][T14143] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 462.282307][T14143] RSP: 0018:ffffc90007a7fcf0 EFLAGS: 00010206 [ 462.284543][T14143] RAX: dffffc0000000000 RBX: ffff88804b1ac480 RCX: ffffc9000dcc1000 [ 462.287119][T14143] RDX: 0000000000000006 RSI: ffffffff823c01a4 RDI: ffff888063fff970 [ 462.289788][T14143] RBP: ffff88804049c560 R08: 0000000000000007 R09: fffffffffffff000 [ 462.292248][T14143] R10: ffff88804b1ac480 R11: 0000000000000000 R12: ffffffffffffffea [ 462.296131][T14143] R13: ffff88804ece9800 R14: ffff88804ece9800 R15: ffffc90007a7fea0 [ 462.298749][T14143] FS: 0000000000000000(0000) GS:ffff8880978ea000(0063) knlGS:00000000f5096b40 [ 462.301554][T14143] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 462.303813][T14143] CR2: 00007f486d64e380 CR3: 000000005e55d000 CR4: 0000000000352ef0 [ 462.307119][T14143] Kernel panic - not syncing: Fatal exception [ 462.309629][T14143] Kernel Offset: disabled [ 462.311026][T14143] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:40:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c38b5 RDI=ffffffff9ade1c40 RBP=ffffffff9ade1c00 RSP=ffffc90007a7f6f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ade1c00 R15=ffffffff854c3850 RIP=ffffffff854c38df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5095e7c CR3=000000005e55d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000060aa24 RBX=0000000000000001 RCX=ffffffff8b6973e9 RDX=ffffed10056665be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=ffffed1003b52488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801da92440 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800016c0 CR3=0000000050529000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccbd810cde142122 8449fdfee39e9724 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a48a729acfb78efe 3bed9f2fd5db8f1d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1a75142eccf1e9d 1d7b4f543cd30081 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43c122b94d06b9d2 54b4d1409c1cf1b9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001240 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5dde000054da0000 0000023a0118f225 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7a20000df180000 eb6e0000565a0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e0200000118f05e 00000a820118f052 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001c0118f34c 8bb2000000000089 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 548927235b9edb64 a09d037603ac9cc9 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ce980d15a40b5a5 acecfdbb52d181fc ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffed100eba29a8 RBX=ffffed100eba29a9 RCX=ffffffff84d43ef0 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff888075d14d44 RBP=ffffed100eba29a8 RSP=ffffc900038770e0 R8 =0000000000000001 R9 =ffffed100eba29a8 R10=ffff888075d14d47 R11=0000000000000000 R12=ffff888075d14d44 R13=0000000000000004 R14=0000000000000d3c R15=0000000000000d40 RIP=ffffffff821f2b8b RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3f8d882300 ffffffff 00c00000 GS =0000 ffff8880979ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560326614000 CR3=000000004f3e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a61e324 ffffffff823001d5 0000000400000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000afc 0000001800000000 ffffffff8a61e67c ffffffff817e5272 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e01ffffffffffff ffffed0806800324 0000083500000008 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080008848c080003 8002010000000806 0a01558e0008000c b008005ec0800201 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020806080157 c201dc080005bfbf f002010000000806 060104b000080005 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbff80300020005 bfbff40300040005 bfbff00308028802 0508028000050280 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200080006080002 0800080170c00680 02000800040174b0 00367063742f7465 ZMM24=fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 fcc91e09fcc91e09 ZMM25=9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 9ce7ffd69ce7ffd6 ZMM26=4463899444638994 4463899444638994 4463899444638994 4463899444638994 4463899444638994 4463899444638994 4463899444638994 4463899444638994 ZMM27=5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c 5b5cd09c5b5cd09c ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=cc140000cc140000 cc140000cc140000 cc140000cc140000 cc140000cc140000 cc140000cc140000 cc140000cc140000 cc140000cc140000 cc140000cc140000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b2414a0 RCX=ffffffff81aea199 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90006c377e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=ffffed1005648295 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b53b180 RIP=ffffffff81baab6c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c24d31f CR3=0000000065320000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000