last executing test programs: 5.017068809s ago: executing program 2 (id=1364): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82081007d00010004070400ffff0d0007ff0400ff7f08000a050200060005015a00cd0003000100010280000409010c08f30000049f6c040904030504000400040006100202090001000000010000000800080001021b000610ff02a516ab8300000c0000002f01000006100001f8ff5b3c7e670001bf99867391e93a8c7050d7fa7a6500000000000000007804c52c40c558a8a8bf14bf2616ef7d29ac81482eecc24cc91960031e"], 0x86) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7aae, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) r4 = io_uring_setup(0x4307, &(0x7f0000000580)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x1b, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = fsmount(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000064030000090a010400000000000000000100000030030980a80002ab5925e39202bf7ea8c50b80140001800800014000000009080001400000000614000180080001400000000308000140000000000c000180080001400000efa11c00018008000140fffffff508000140000001ff080001400000f29a3400018008000140fffffff80800e43f0000000408000140000000090800014000000003080001400000000408000140000000000c000180080001400000b41d14000180080001400000000108000140fffffff908000140fffffffa04000280200002801c000180080001400000010008000140ffffffff0800014000000004080001400000d96ff00002804c000180080001400000000808000140000000060800014000000007080001400000c8de080001400000bd5b08000140000000090800014000000009080001400000000808000140000000062c0001800800014000000086080001400000800008000140fffffffa080001400500000308000140000000020c00018008000140000000162c00016208000140000000070800014000008001080001400000adee0800014000000080080001400000000714000180080001400000000508000140000000081400018008000140000000040800014000000006140001800800014000000e2e0800014000000009100002800c00018008000140000003ff3801028024000180080001407fffffff0800014000000002080001400000db7308000140000000051c0001800800014000000008080001400000000208000140000000fe0c00018008000140000000052c000180080001400000ffff08000140000000050800014000007fff080001400000000308000140fffffff75400018008000140000000dc08000140000006d1080001400000000008000140000000ee0800014000000007080001400001000108000140000000ea080001400000034c080001400000ffff080001400000a6d81c00018008000140000000010800014000000001080001400000000a0400018034000180080001400000000208000140000000610800014000000003080001400000000408000140000000030800014000000001400000000008000140000007ff18000280140001800800014000000004080001407c0000000900020073797a32000000000900010073797a3000000000080005400000000fd80200000c0a01080000000000000000010000000900020073797a32000000000900010073797a3000000000ac020380a802008098020180a90001004843390a35941bec12766ca9e916d2908d924cd5f1092f3854dfded2a72866a36ddaea35a3ff2ca44d194c2d46c2309fd37191d6d1eb79338b2d9dd244fb6685af71774661ffe31a64be6cbafea1ab7c5244551fb60e7ef7fc7b5bf1e4531dbc37c8bc20e0743df99b64122f9e5a3c9464f733caa3af19dbf5cc7b0f26c0ae2f837e2491e0f3f28e1c80831ff6b605abc18966ddcd1f58586f77cbba0e5f8064cfa72fdb4d000000d200010069e52325fd075916ee1213247199a511a275f2ade8eed42311271f8f79ed32517bd884b3f939f0a813a3d159227176ef60a52ac921261ebaa64834dabcf7c51dc5f695b605af02cbeb9817e33dc8974b4b7b51ba5f04ec05beebb93442574ae77c68f2419e11a52cf388c9c95ae8e0674535b1de3da1a2a579aeee5c8c9f06ecefc97c75ecdced8d0fb8ae27128c09f42a47c50669c8c7df6351964ddbbe1b4d36705fd265d4341632e25024491997158ee1b9fd974fa0bfea97f269b1de0abcce1c4f74a26fc7100a0704e6580b64d08b0000fb0001003978d03ce1449254a851df3c1d75cfc05f1de456f81b9483edae6751bf196e71ad7e309d8445b8850d4108549c8ca0a53f74480afa47c4cf6f499fb4af69facaf2c6def16dfee687e81ed7d92890ed0101ef5ba848366f4d55c3214807b7f5867b81e5d5169187ae5f1c52378fca90c4f5a1bbe6f8080e5e21c6e1492f585df77231d3a2ad23abad0e1913394221bbca85b0f860882171a0c1e37e52d38d0dc578451bb854ed5dd9a57040977fb15c6ab6dcd6d717498833493876452bca69f40c9e22d17d99be4569631fc091f62ce9dea322f222350922679a3c50797d5a6bec85b96505a98cfa8ba2146ae02e52376de372e000180002800900020073797a300000000008000340000000000900090073797a310000000014000000100001000000000000000000"], 0x684}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x220, r5, 0x7fffffff, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0xe}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x0, 0xa, 0xaed) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x4004084, 0x0, 0x0) io_setup(0x800, &(0x7f0000000040)) 5.016554387s ago: executing program 1 (id=1365): syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000081000040000000850000000000000000a808"]) 4.469418623s ago: executing program 1 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20202400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048810}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x83, 0xa4, &(0x7f0000000100)="ffeddef33fdf1c0cc9c4f2835438a5f008c9558a0183b477c0ae0180016c797f2b42ea9a541071668cce9c3ae0f6f8fa28135f9e52070dfe5a6210fbed99246acc9bc0350d3cd248c051e824070938384d9fd1caf82350d9d18957e4ef9f37c89519649463fca241a315959c4d3ac3ba73d34d7b574f45bc76d157cd6fbdc30d8e274d", &(0x7f00000001c0)=""/164, 0x7fff, 0x0, 0xdd, 0x0, &(0x7f0000000280)="2a0767820fbdecacffc7d596b199b0c2a11b29c91a094c74c32c49f0894623cba0bfc96c07551f188eb611e1199953902c8a0c48fe63af4904a810e9b74697e814e0a6af63ceff7b5f02e77dd26c76ad113229d51a4934bd0f63dd4e4c86fb78337c638f6537b38a83b18f12fce58820ad2c2800df5079bc64afe935ab9f3e7bf8b87f92a5cc50971bf2e81bdd4c4545163adb3b2daa0fb29bced3826369653413cb8e7ee0018f9b2f3f12c725653af6469bef80116cf0c70a7e3bbfa297561b4150bcb114d010488211b5cc5e85579826b21a3c456be94aaf1c34f679", &(0x7f0000000380), 0x2, 0x0, 0x3}, 0x4c) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x32, 0x7ff, 0xa, 0x200]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffffff01, 0xeb46]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000007c0)={"a71c566de894e0fc5a6525ded9ff96b5", 0x0, r2, {0x80, 0xfffff737}, {0x100000001, 0x8}, 0x7fffffff, [0xf7, 0xee53, 0x8, 0xf5c, 0x9, 0x6, 0x800, 0x2, 0x5, 0x4fc, 0x21f, 0x5, 0x0, 0xffffffffffffffff, 0x6, 0x1]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'SEG6\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000009c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e24, 0x101, @mcast1, 0x5}], 0x4c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(0xffffffffffffffff, &(0x7f0000000a40)=""/133, 0x85) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000b00)='1', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_FBUF(r7, 0x802c560a, &(0x7f0000000c00)={0x70, 0x58, &(0x7f0000000bc0)="c8933c1ecbb88e322faf248b3621", {0x0, 0x215, 0x32314d4e, 0x6, 0x8, 0x70e23ac3, 0x7, 0x2}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000c40)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x4e, 0x0, "15c9304ad52155bcb980b313f9f3e726079f2e5c00a63216f0829b75788f9ffbfc85a22a793d3dc8a434976997a725462c8dde059ea0d3bd841996e4e5ed6e032c3a4656a4bc9ada45a9c5c009facbc6"}, 0xd8) r9 = gettid() socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r10, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000e80)={0x0, 0x7, 0x81}) io_setup(0x2, &(0x7f0000000ec0)=0x0) io_destroy(r11) syz_clone3(&(0x7f0000001180)={0x4022000, &(0x7f0000000f00), &(0x7f0000000f40)=0x0, &(0x7f0000000f80), {0x33}, &(0x7f0000000fc0)=""/67, 0x43, &(0x7f0000001040)=""/246, &(0x7f0000001140)=[r9], 0x1, {r7}}, 0x58) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000001200)=r12) io_getevents(0x0, 0x9, 0x4, &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f0000001300)) 4.219108199s ago: executing program 1 (id=1370): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000b4800e4691018000000000066050000084007009500000000000000c002db2156f2f3376a2ad796c4aa79046f3b152bc873eb42ed4e19a325db14626a064eea8e4000aebd5ffd9d7895"], 0x0}, 0x90) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) ioperm(0x0, 0x9, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @desc1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000000c0)) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) 3.727221661s ago: executing program 2 (id=1374): kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000}], 0x160000) kexec_load(0x9128, 0x0, &(0x7f0000000500), 0x140000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x0, 0x0, 0x30, 0x0, [0x6, 0xfffffffa], [0x8, 0xffffffff]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x230}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r7) 3.216933454s ago: executing program 1 (id=1378): set_mempolicy(0x6, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000bb810000850000006d00000085000000d000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hrtimer_start\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x400443c8, 0x20000002) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r2, 0x0, 0x0) 3.120715099s ago: executing program 3 (id=1379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00f1000200"}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045000038000000000001cb78ac1e0001ac1414aa0b099078030000004000ac1414bb060086dd030020a900"/70], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpid() keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x282040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(0x0, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.669434103s ago: executing program 2 (id=1381): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x2, 0xff}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0xb}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.200208237s ago: executing program 3 (id=1382): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82081007d00010004070400ffff0d0007ff0400ff7f08000a050200060005015a00cd0003000100010280000409010c08f30000049f6c040904030504000400040006100202090001000000010000000800080001021b000610ff02a516ab8300000c0000002f01000006100001f8ff5b3c7e670001bf99867391e93a8c7050d7fa7a6500000000000000007804c52c40c558a8a8bf14bf2616ef7d29ac81482eecc24cc91960031e"], 0x86) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7aae, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) r4 = io_uring_setup(0x4307, &(0x7f0000000580)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x1b, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = fsmount(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x684}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x220, r5, 0x7fffffff, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0xe}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x0, 0xa, 0xaed) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x4004084, 0x0, 0x0) io_setup(0x800, &(0x7f0000000040)) 2.140765541s ago: executing program 2 (id=1383): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x5eee, &(0x7f0000000080)={0x0, 0x695f, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x24f9, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000010085000000170000009500276000000000f85551793a8192c83b1b0e575dffec301641fcc8a1ee1a0927a25af47ae19dac5adcd3d238eb9cbf4f8b98fe873f453a1977deb95dea15fb8611"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xda2) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000780)={0x8c, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r10}, @exit_looper, @dead_binder_done, @exit_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/85, 0x55, 0x2, 0x2a}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f00000005c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x1}], 0x1000, 0x0, &(0x7f0000001400)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x3}, @release, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r10}], 0x32, 0x0, &(0x7f0000000200)="2bfdb546fbe9ce207e155fa31f64af41ebcdc5c96b6d817c73acd0d79f31f66d5287296df8852db428090dfdbbc4efdb1d83"}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}) 1.497417739s ago: executing program 0 (id=1384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x1d}, {0xc, 0xffff}, {0x2, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x6a}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10}, 0x90) 1.310824192s ago: executing program 0 (id=1385): syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000081000040000000850000000000000000a808"]) 1.09499767s ago: executing program 3 (id=1386): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000007140), 0x2, 0x0) read$midi(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@v={0x93, 0x1, 0xa0, 0x0, @generic}], 0x8) 909.825206ms ago: executing program 0 (id=1387): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x80086301, 0x0) ioctl(r1, 0x5451, 0x0) 830.820523ms ago: executing program 0 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x14, 0x32, 0x103}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x18}]}, 0x18}}, 0x0) 770.669409ms ago: executing program 0 (id=1389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x4814) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@flushpolicy={0x1c4, 0x1d, 0x4, 0x70bd25, 0x25dfdbff, "", [@replay_thresh={0x8, 0xb, 0x844}, @lastused={0xc, 0xf, 0x3800000}, @algo_auth={0x137, 0x1, {{'crc32-pclmul\x00'}, 0x778, "2dc6e932b4fd132e7a353fb94a9c7c6fad91512c9b5d56f72391d82c63fc7421f45e6b7f1a327419c8d82d8396543465b1170b615431766980af97ac079ce249f6f4cc8ddd27ea0738a86d19700792f386eadcda62037ea0ad45675199b4053ecc6bd4b61dfd047de2dddcf3964e435f9d3a0e9dc2d82c19a0614d16758209e0fd1cc3f822496099c60e4cd0aa806f6f3483b68e8575f7289e808d5408555cf38182b8749c594811cbaab9f7ba94e8e99a2e357436e95fb0cb2e11722a642a81cb8fc3908603ac7a525617bec10418c3ebfae6a9ad6c8d2d873d0160d42fbb589300490a5349963844be45f6aa7eaf"}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @extra_flags={0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2b, 0x70bd2c, 0x70bd29, 0x70bd26, 0x8000, [0x400, 0xe979ab3c, 0x9, 0xffff, 0xd, 0x27f, 0x0]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44005}, 0x20040004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@private2, 0xfffffffb, 0x0, 0x2, 0x6, 0x6, 0x8304}, 0x20) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x1}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xedf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20000080) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f0000000680)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) capset(&(0x7f0000000740)={0x20080522, r5}, &(0x7f0000000780)={0x1000, 0x4, 0x4, 0x5, 0x4, 0xa}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r6, &(0x7f00000007c0)={0xb, 0x7, 0x8, 0x6, 0x8, 0x80000001, 0x9, 0x5, 0x400}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000840)=@v1={0x0, @aes128, 0x1, @desc4}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28000800}, 0x48800) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x318, 0x318, 0xffffffff, 0x0, 0x118, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000b40), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x2b, 0x2, 0x6a, 0x8, 0x300, 0x80, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x13, @ipv4=@broadcast, @ipv4=@remote, @port=0x4e24, @gre_key=0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private1, [0xff000000, 0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'pim6reg\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x87, 0x9, 0x4, 0x74}, 0x0, 0xec, 0x114, 0x0, {}, [@common=@eui64={{0x24}}, @common=@ipv6header={{0x24}, {0x87, 0x18}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x4}, {0x1, 0x5, 0x2}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x13}, @ipv4=@local, @gre_key=0x4, @port=0x4e21}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x3, 0x7, 0x2}}, @common=@mh={{0x24}, {"2a9a"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x4}, {0x4, 0x1, 0x6}, 0x2d84, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x564) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001140)={r3}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000012c0)={'tunl0\x00', &(0x7f0000001240)={'erspan0\x00', 0x0, 0x700, 0x8, 0xfffffcc0, 0x6, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xcc, 0x3, 0x7, [{@multicast2, 0x1}]}, @cipso={0x86, 0x34, 0x1, [{0x1, 0x8, "a921f54d3c9f"}, {0x5, 0x11, "d6b294bb1a37686a6c8a8c721c5bcf"}, {0x0, 0x5, '-1\b'}, {0x1, 0x10, "59abc9a885bd7edc8965c5ef8237"}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000001480)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x118, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)=@alg={0xe8, 0x10, 0x300, 0x70bd2a, 0x25dfdbfc, {{'ctr(blowfish)\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x200}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24040000}, 0x200000c0) openat$fuse(0xffffff9c, &(0x7f0000001680), 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f00000016c0)={0xfffffffffffffffb, 0x200}) syz_clone(0xa020000, &(0x7f0000001700)="42c6b7b7e6feeaa836bdbc", 0xb, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)="b1784a8b4a141cc8761afcad6f4a152769b27e2f5ac81718ab0ee986e1385443e0f020d93b65c2cf3b824584d90bd4a0410f1d6630209069bffb319c4b6f7c17b5bdd8e7b498f6eae04bec51a089d1101bce35c690c3ca77d85d0a1a5d4e1f9d5b47b04f6cb77df4bc53230d76fd4f35204ce99832ba7a064c34151749ffca601625f913bf08f7c1cbd0a0029d0d8cadeb0858939e4c58dab7e616f5874d949a0560badd518b96696d6a5f4702e8be482e0577d9f6a3a89fb83e9aaf9d07bf473b2311ac612f934e04ffe619c025887eaf8ccf54f093727a3ba5c70088b2e53afabf") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f00000018c0)='xprtrdma_nomrs_err\x00', r4}, 0x10) 701.118149ms ago: executing program 2 (id=1390): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r2, &(0x7f0000fc4fbe)=""/75, 0x4b) openat(r2, &(0x7f0000000040)='./control\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000500ed40020003600e41b0000900ac000600110000001600050001400200007960327c7b7c7943b9a5cc9a9800035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad956b1df06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000340)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) fcntl$dupfd(r5, 0x0, r1) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f00000003c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @generic={0x0, 0x9, 0xb, 0x4, 0xf346}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000100)='GPL\x00'}, 0x90) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 679.417441ms ago: executing program 0 (id=1391): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[], 0x15) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000000000000001c002b8008000800", @ANYRES32, @ANYBLOB="0800030019001f0008000800", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 599.347307ms ago: executing program 3 (id=1392): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) (async) ptrace(0x10, 0x1) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000240000000000119078e00000010003417d4c1f271c32e4b46778c0f94202000000000000000000000000000000187c0747"], 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x8) (async) r3 = socket(0x200000000000011, 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000340)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r9, 0x0) (async) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r9, &(0x7f0000000c80)) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, r10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') 478.239348ms ago: executing program 3 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x1d}, {0xc, 0xffff}, {0x2, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x6a}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', r5}, 0x90) 258.273739ms ago: executing program 2 (id=1394): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x18, 0x3d, 0x21, 0x0, 0x0, {0x1}, [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x18}}, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000000085000000030000009500000000d91000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000000440)={"2a9af79d462e11c72ad654eb33416e9f421965be6128227090fc365f1c4c", 0x9, 0x4, 0x9, [0xb7, 0xfffffffd, 0x1, 0x6, 0xffff, 0x0, 0x5, 0x100, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7, 0xfffffff8, 0xfffffffa, 0x9, 0x5]}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x21, 0x7e, @random="cba434365be213452bb18bad1c3ccdaa4fb2ad99200aecf4c8046481ed"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_IE={0x29, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0xa5, 0x40}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x2, 0x0, {0x3, 0x40, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x400, 0x8}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x3, 0x1}, {0x12}, {0x5}, {0x1}, {0x1}, {0x0, 0x1}, {0x17}, {0xb, 0x1}, {0x4}, {0x12}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x30}, {0x60}, {0x18, 0x1}, {0x16}, {0x48, 0x1}, {0x48}, {0xb}, {0xb, 0x1}, {0x48}, {0x24, 0x1}, {0x5}, {0x6c, 0x1}, {0x9, 0x1}, {0x2}, {0xb363a3448cfaf47f, 0x1}, {0x1}, {0x48, 0x1}, {0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$inet6(r11, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2251ff78c69cd08be7760c435b0b397e0a545bd99b8eecf9c15e9c5edf28518d100b26b6775018b449ca930", 0x41}], 0x1}}], 0x1, 0x0) 190.607387ms ago: executing program 3 (id=1395): syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000081000040000000850000000000000000a808"]) 79.300714ms ago: executing program 1 (id=1396): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x80086601, 0x0) ioctl(r1, 0x5451, 0x0) 0s ago: executing program 1 (id=1397): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), 0x4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0d03000000000000000003"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1f1000000000000800000700110000000000e4d372465994e27c93032b99de5cbe927f928f4c2bdb803d2ad6e666a1a8e7af647b575ed45c2696b73859820fbd1e32db898108466cdc6c48c270e969296aa40aac7a689ea4758241b92e7522b5cd49366302c97ff728c36ba329aa67b6391f297172bb59d5384df70211823a26ac8f1e9d1d030a6d9e3f77989f5ead7381317b661be9c3532bc1e8e069c0445a00badabe2da8a18661514199df12504e6728c7825f02d0a44fe1c8e3c4d3f7b3d32c21c1e72172d912d2a393d1e16813933f2c0659f133658685ba7d7d1a062354f68e90e4b2052868bee2aa16", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): nfig 0 interface 0 has no altsetting 0 [ 115.200649][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.204564][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.211092][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.215615][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.219693][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.224319][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.230248][ T58] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.234174][ T58] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.237916][ T58] usb 7-1: Product: syz [ 115.239640][ T58] usb 7-1: Manufacturer: syz [ 115.242589][ T58] usb 7-1: SerialNumber: syz [ 115.247418][ T58] usb 7-1: config 0 descriptor?? [ 115.256530][ T58] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.474991][ T5346] Bluetooth: hci0: command tx timeout [ 115.486624][ T58] usb 7-1: USB disconnect, device number 5 [ 115.491395][ T58] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 115.990120][ T39] audit: type=1326 audit(1722294817.203:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.0.361" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 117.445133][ T58] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 117.583664][ T6552] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.635537][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 117.642514][ T58] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.649489][ T58] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.652547][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.656025][ T58] usb 8-1: config 1 has no interface number 0 [ 117.658369][ T58] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.666035][ T58] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.670939][ T58] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.674782][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.687246][ T58] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 117.895607][ T58] snd_usb_pod 8-1:1.1: invalid control EP [ 117.897590][ T58] snd_usb_pod 8-1:1.1: cannot start listening: -22 [ 117.901075][ T58] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 117.904863][ T58] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 118.506869][ T39] audit: type=1326 audit(1722294819.723:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.526547][ T39] audit: type=1326 audit(1722294819.723:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.535875][ T39] audit: type=1326 audit(1722294819.723:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.543703][ T39] audit: type=1326 audit(1722294819.723:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.552719][ T39] audit: type=1326 audit(1722294819.723:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.561865][ T39] audit: type=1326 audit(1722294819.723:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.570715][ T39] audit: type=1326 audit(1722294819.723:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 118.598187][ T39] audit: type=1326 audit(1722294819.723:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.3.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 119.818679][ T6601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.393'. [ 119.827937][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 120.077086][ T5716] usb 8-1: USB disconnect, device number 5 [ 120.321922][ T6611] Bluetooth: MGMT ver 1.23 [ 120.637305][ T6609] fuse: Invalid rootmode [ 122.927679][ T6668] veth1_macvtap: left promiscuous mode [ 123.596222][ T6704] 9pnet_fd: Insufficient options for proto=fd [ 124.168878][ T6702] fuse: Invalid rootmode [ 124.747626][ T6724] veth1_macvtap: left promiscuous mode [ 124.995930][ T6731] mmap: syz.2.442 (6731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.524855][ T6748] veth1_macvtap: left promiscuous mode [ 126.225011][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 126.437103][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.437125][ T35] usb 7-1: config 0 has no interfaces? [ 126.437150][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.437169][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.439145][ T35] usb 7-1: config 0 descriptor?? [ 127.420791][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.423102][ T6795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.425362][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.544208][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 127.544223][ T39] audit: type=1326 audit(1722294828.753:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.567935][ T39] audit: type=1326 audit(1722294828.753:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.577717][ T39] audit: type=1326 audit(1722294828.763:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.598663][ T39] audit: type=1326 audit(1722294828.763:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.617058][ T39] audit: type=1326 audit(1722294828.763:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.630236][ T39] audit: type=1326 audit(1722294828.763:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 127.645119][ T39] audit: type=1326 audit(1722294828.763:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 128.924625][ T1284] usb 7-1: USB disconnect, device number 6 [ 129.435143][ T833] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 129.616955][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.621642][ T833] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.638670][ T833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.642323][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.660283][ T6838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.667421][ T833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.127288][ T5716] usb 8-1: USB disconnect, device number 6 [ 130.615251][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 130.821250][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.829113][ T8] usb 7-1: config 0 has no interfaces? [ 130.831606][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.837100][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.850862][ T8] usb 7-1: config 0 descriptor?? [ 131.299308][ T6875] warning: `syz.1.495' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.665219][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.842535][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.845774][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 131.846087][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.866189][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.871059][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.888128][ T35] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.892098][ T35] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.904986][ T35] usb 5-1: Product: syz [ 131.906896][ T35] usb 5-1: Manufacturer: syz [ 131.909006][ T35] usb 5-1: SerialNumber: syz [ 131.916105][ T35] usb 5-1: config 0 descriptor?? [ 131.919170][ T6877] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.137716][ T5381] usb 5-1: USB disconnect, device number 6 [ 133.344633][ T57] usb 7-1: USB disconnect, device number 7 [ 134.124978][ T1284] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 134.307988][ T1284] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.313609][ T1284] usb 8-1: config 0 has no interfaces? [ 134.318444][ T1284] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.328877][ T1284] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.338901][ T1284] usb 8-1: config 0 descriptor?? [ 134.847582][ T6963] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.977136][ T6963] /dev/sr0: Can't open blockdev [ 135.336892][ T6966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.337350][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.343700][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.555025][ T1416] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.745370][ T1416] usb 5-1: Using ep0 maxpacket: 8 [ 136.757196][ T1416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 136.762185][ T1416] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 136.769687][ T1416] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.777749][ T1416] usb 5-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 136.781476][ T1416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.784590][ T1416] usb 5-1: SerialNumber: syz [ 136.794803][ T6993] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.801435][ T1416] hub 5-1:1.0: bad descriptor, ignoring hub [ 136.804160][ T1416] hub 5-1:1.0: probe with driver hub failed with error -5 [ 136.870053][ T5380] usb 8-1: USB disconnect, device number 7 [ 137.016250][ T6993] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 137.026723][ T7012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.230486][ T1416] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 137.267579][ T1416] usb 5-1: USB disconnect, device number 7 [ 137.918805][ T5389] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.085053][ T1284] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.108525][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.112222][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.119569][ T5389] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.124119][ T5389] usb 6-1: config 0 has no interfaces? [ 138.124150][ T5389] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.124167][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.128376][ T5389] usb 6-1: config 0 descriptor?? [ 138.296938][ T1284] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.300537][ T1284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.310573][ T1284] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.314561][ T1284] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.325821][ T1284] usb 5-1: Manufacturer: syz [ 138.332766][ T1284] usb 5-1: config 0 descriptor?? [ 138.426290][ T1284] rc_core: IR keymap rc-hauppauge not found [ 138.429423][ T1284] Registered IR keymap rc-empty [ 138.434401][ T1284] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 138.450766][ T1284] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 138.572497][ T5382] usb 5-1: USB disconnect, device number 8 [ 138.721304][ T5346] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 138.810488][ T7077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.565'. [ 139.179322][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.184734][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.188084][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.508871][ T7094] trusted_key: encrypted_key: hex blob is missing [ 139.968793][ T833] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 140.172357][ T833] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.176299][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.181953][ T833] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.186277][ T833] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.189723][ T833] usb 8-1: Manufacturer: syz [ 140.202541][ T833] usb 8-1: config 0 descriptor?? [ 140.285186][ T833] rc_core: IR keymap rc-hauppauge not found [ 140.287892][ T833] Registered IR keymap rc-empty [ 140.290971][ T833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 140.298538][ T833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 140.341180][ T7112] program syz.0.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.461171][ T833] usb 8-1: USB disconnect, device number 8 [ 140.628758][ T1284] usb 6-1: USB disconnect, device number 3 [ 140.672857][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 140.690964][ T7119] gtp0: entered promiscuous mode [ 140.693011][ T7119] gtp0: entered allmulticast mode [ 140.736120][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.935019][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 140.938740][ T35] usb 5-1: config 0 has no interfaces? [ 140.941096][ T35] usb 5-1: New USB device found, idVendor=0eef, idProduct=732a, bcdDevice= 0.00 [ 140.945000][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.950466][ T35] usb 5-1: config 0 descriptor?? [ 141.164402][ T35] usb 5-1: USB disconnect, device number 9 [ 141.235746][ T1284] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.415872][ T1284] usb 6-1: Using ep0 maxpacket: 8 [ 141.420456][ T1284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.424516][ T1284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.428514][ T1284] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 141.431879][ T1284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.439863][ T1284] usb 6-1: config 0 descriptor?? [ 141.901159][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.904153][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.907760][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.910664][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.913530][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.917658][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.920605][ T1284] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 141.930394][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 141.930932][ T1284] hid-led 0003:04D8:F372.0002: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 141.955791][ T833] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 141.961152][ T1284] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 142.000782][ T7159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 142.003942][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.011907][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 142.034071][ T7160] vhci_hcd: connection closed [ 142.041281][ T13] vhci_hcd: stop threads [ 142.055474][ T13] vhci_hcd: release socket [ 142.057496][ T13] vhci_hcd: disconnect device [ 142.137221][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 142.167829][ T833] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 142.171511][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.183572][ T833] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.187883][ T833] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.191325][ T833] usb 7-1: Manufacturer: syz [ 142.195949][ T833] usb 7-1: config 0 descriptor?? [ 142.265233][ T833] rc_core: IR keymap rc-hauppauge not found [ 142.267860][ T833] Registered IR keymap rc-empty [ 142.270920][ T833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 142.279339][ T833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 142.433923][ T5134] usb 7-1: USB disconnect, device number 8 [ 142.772778][ T5354] Bluetooth: hci2: Unknown advertising packet type: 0x70 [ 142.772853][ T5354] Bluetooth: hci2: adv larger than maximum supported [ 142.776838][ T5354] Bluetooth: hci2: Malformed LE Event: 0x0d [ 144.185313][ T5346] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.188293][ T5354] Bluetooth: hci4: command 0x1003 tx timeout [ 144.222521][ T35] usb 6-1: USB disconnect, device number 4 [ 144.239405][ T1284] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 144.262670][ T1284] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 144.267931][ T1284] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 144.297159][ T1284] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 144.311686][ T1284] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 144.321929][ T1284] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 144.346098][ T1284] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 144.357200][ T1284] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 144.365966][ T1284] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 144.382987][ T1284] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 144.397539][ T1284] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 144.414355][ T1284] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 144.419029][ T1284] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 144.424757][ T1284] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 144.435543][ T1284] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 144.441636][ T1284] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 144.465353][ T1284] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 144.469574][ T1284] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 144.975858][ T833] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 145.090176][ T39] audit: type=1804 audit(1722294846.303:69): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.624" name="/newroot/165/bus/bus" dev="overlay" ino=890 res=1 errno=0 [ 145.195009][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 145.199190][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.204276][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.214277][ T833] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 145.224367][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.237059][ T833] usb 6-1: config 0 descriptor?? [ 145.254877][ T39] audit: type=1800 audit(1722294846.463:70): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.624" name="/bus" dev="overlay" ino=890 res=0 errno=0 [ 145.255805][ T7234] Invalid ELF header magic: != ELF [ 145.691481][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.693833][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.697333][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.704965][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.708989][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.712081][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.715956][ T833] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 145.721784][ T833] hid-led 0003:04D8:F372.0003: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 145.754366][ T833] hid-led 0003:04D8:F372.0003: Greynut Luxafor initialized [ 145.870537][ T5346] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 145.876703][ T7251] futex_wake_op: syz.2.630 tries to shift op by -1; fix this program [ 145.951853][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 146.756725][ T7263] team_slave_0: entered promiscuous mode [ 146.759636][ T7263] team_slave_1: entered promiscuous mode [ 147.161027][ T5354] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 147.388621][ T39] audit: type=1326 audit(1722294848.603:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.407154][ T39] audit: type=1326 audit(1722294848.603:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.417176][ T39] audit: type=1326 audit(1722294848.613:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.425525][ T39] audit: type=1326 audit(1722294848.613:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.433587][ T39] audit: type=1326 audit(1722294848.623:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.455774][ T39] audit: type=1326 audit(1722294848.633:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.464679][ T39] audit: type=1326 audit(1722294848.633:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.485104][ T39] audit: type=1326 audit(1722294848.633:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.0.645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 147.651188][ T7289] futex_wake_op: syz.0.646 tries to shift op by -1; fix this program [ 147.945395][ T5346] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.993568][ T833] usb 6-1: USB disconnect, device number 5 [ 148.000824][ T5382] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 148.006555][ T5382] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 148.012105][ T5382] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 148.053453][ T5382] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 148.059984][ T5382] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 148.064253][ T5382] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 148.069121][ T5382] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 148.073413][ T5382] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 148.079561][ T5382] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 148.085220][ T5382] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 148.091222][ T5382] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 148.098751][ T5382] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 148.103034][ T5382] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 148.124014][ T5382] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 148.127400][ T5382] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 148.130614][ T5382] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 148.139842][ T5382] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 148.149525][ T5382] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 148.217723][ T5346] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 148.218099][ T5346] Bluetooth: hci2: link tx timeout [ 148.224398][ T5346] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.886557][ T7325] futex_wake_op: syz.1.659 tries to shift op by -1; fix this program [ 148.958339][ T7329] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.299765][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 149.403070][ T7352] Invalid ELF header magic: != ELF [ 149.505686][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.685207][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 149.691047][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.696184][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.699912][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 149.703377][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.724761][ T8] usb 5-1: config 0 descriptor?? [ 150.194594][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.194666][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.197775][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.198356][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.198374][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.198434][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.198582][ T8] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 150.205591][ T8] hid-led 0003:04D8:F372.0004: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 150.272435][ T5354] Bluetooth: hci2: command 0x0406 tx timeout [ 150.275704][ T8] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 150.418162][ T1105] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.959576][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 151.959587][ T39] audit: type=1804 audit(1722294853.173:104): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.679" name="/newroot/123/bus/bus" dev="overlay" ino=665 res=1 errno=0 [ 152.051818][ T7383] Invalid ELF header magic: != ELF [ 152.052833][ T39] audit: type=1800 audit(1722294853.263:105): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.679" name="/bus" dev="overlay" ino=665 res=0 errno=0 [ 152.131126][ T7386] netlink: 'syz.1.680': attribute type 7 has an invalid length. [ 152.134454][ T7386] netlink: 'syz.1.680': attribute type 39 has an invalid length. [ 152.186887][ T7386] bridge1: port 1(gretap1) entered blocking state [ 152.189687][ T7386] bridge1: port 1(gretap1) entered disabled state [ 152.192177][ T7386] gretap1: entered allmulticast mode [ 152.198494][ T7386] gretap1: entered promiscuous mode [ 152.223649][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 152.227617][ T7386] gretap1: left allmulticast mode [ 152.229798][ T7386] gretap1: left promiscuous mode [ 152.232146][ T7386] bridge1: port 1(gretap1) entered disabled state [ 152.310456][ T7389] random: crng reseeded on system resumption [ 152.425151][ T5354] Bluetooth: hci4: command 0x1003 tx timeout [ 152.425443][ T5346] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.437920][ T833] usb 5-1: USB disconnect, device number 10 [ 152.446528][ T5382] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 152.455405][ T5382] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 152.462086][ T5382] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 152.482275][ T5382] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 152.488718][ T5382] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 152.493097][ T5382] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 152.498349][ T5382] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 152.505135][ T5382] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 152.513175][ T5382] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 152.535257][ T5382] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 152.568423][ T5382] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 152.576165][ T5382] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 152.587671][ T5382] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 152.593212][ T5382] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 152.608350][ T5382] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 152.612400][ T5382] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 152.616670][ T5382] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 152.621982][ T5382] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 152.709922][ T39] audit: type=1804 audit(1722294853.923:106): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.688" name="/newroot/188/bus/bus" dev="overlay" ino=1028 res=1 errno=0 [ 152.780970][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.800637][ T39] audit: type=1800 audit(1722294854.013:107): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.688" name="/bus" dev="overlay" ino=1028 res=0 errno=0 [ 152.811125][ T7411] Invalid ELF header magic: != ELF [ 152.854536][ T7415] netlink: 'syz.0.691': attribute type 7 has an invalid length. [ 152.858702][ T7415] netlink: 'syz.0.691': attribute type 39 has an invalid length. [ 152.912997][ T7415] bridge1: port 1(gretap1) entered blocking state [ 152.915169][ T7415] bridge1: port 1(gretap1) entered disabled state [ 152.917254][ T7415] gretap1: entered allmulticast mode [ 152.920489][ T7415] gretap1: entered promiscuous mode [ 152.974833][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 152.978676][ T7415] gretap1: left allmulticast mode [ 152.980580][ T7415] gretap1: left promiscuous mode [ 152.983442][ T7415] bridge1: port 1(gretap1) entered disabled state [ 153.645045][ T833] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.835976][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 153.843057][ T833] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 153.852864][ T833] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 153.865638][ T833] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 153.872910][ T833] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 153.897663][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.903014][ T833] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.907258][ T833] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.910902][ T833] usb 5-1: Product: syz [ 153.912737][ T833] usb 5-1: Manufacturer: syz [ 153.914553][ T833] usb 5-1: SerialNumber: syz [ 153.923815][ T833] usb 5-1: config 0 descriptor?? [ 153.929125][ T833] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.934622][ T833] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.132103][ T833] usb 5-1: USB disconnect, device number 11 [ 154.140984][ T833] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 154.390156][ T7440] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 154.876601][ T7457] netlink: 'syz.3.707': attribute type 7 has an invalid length. [ 154.876662][ T7457] netlink: 'syz.3.707': attribute type 39 has an invalid length. [ 154.934566][ T7457] bridge1: port 1(gretap1) entered blocking state [ 154.935667][ T7457] bridge1: port 1(gretap1) entered disabled state [ 154.936037][ T7457] gretap1: entered allmulticast mode [ 154.940108][ T7457] gretap1: entered promiscuous mode [ 154.995897][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 154.995983][ T7457] gretap1: left allmulticast mode [ 154.995993][ T7457] gretap1: left promiscuous mode [ 154.996541][ T7457] bridge1: port 1(gretap1) entered disabled state [ 155.384061][ T7473] wireguard: wg2: Could not create IPv4 socket [ 155.441845][ T57] libceph: connect (1)[c::]:6789 error -101 [ 155.441973][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 155.534027][ T7475] ceph: No mds server is up or the cluster is laggy [ 155.556312][ T5389] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.747647][ T5389] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.752214][ T5389] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.765033][ T5389] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.768322][ T5389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.788068][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.795487][ T5389] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.169848][ T7504] vxfs: WRONG superblock magic 00000000 at 1 [ 156.173286][ T7504] vxfs: WRONG superblock magic 00000000 at 8 [ 156.195704][ T7504] vxfs: can't find superblock. [ 156.223994][ T5382] usb 5-1: USB disconnect, device number 12 [ 156.329193][ T5346] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 156.548622][ T7515] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 156.605410][ T7518] random: crng reseeded on system resumption [ 157.116539][ T7530] syz.3.735 (7530): /proc/7529/oom_adj is deprecated, please use /proc/7529/oom_score_adj instead. [ 157.184610][ T7534] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 157.227300][ T7534] team0: Port device netdevsim0 added [ 157.320423][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.737'. [ 157.415366][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 157.875067][ T1284] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.079739][ T1284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.083721][ T1284] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.095090][ T1284] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 158.106577][ T1284] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.109661][ T1284] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.112432][ T1284] usb 5-1: Manufacturer: syz [ 158.121911][ T1284] usb 5-1: config 0 descriptor?? [ 158.135871][ T1284] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 158.248807][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.688049][ T833] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 158.875766][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 158.887339][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.891381][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.896859][ T833] usb 8-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 158.899786][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.905852][ T833] usb 8-1: config 0 descriptor?? [ 159.350826][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.353346][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.357879][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.361357][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.364404][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.367724][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.370471][ T833] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 159.378955][ T833] hid-led 0003:04D8:F372.0005: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 159.409436][ T833] hid-led 0003:04D8:F372.0005: Greynut Luxafor initialized [ 159.997263][ T39] audit: type=1326 audit(1722294861.213:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 160.007020][ T39] audit: type=1326 audit(1722294861.213:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 160.017932][ T39] audit: type=1326 audit(1722294861.223:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.755" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 160.029824][ T39] audit: type=1326 audit(1722294861.223:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 160.041390][ T39] audit: type=1326 audit(1722294861.223:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 160.078821][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 160.624242][ T5716] usb 5-1: USB disconnect, device number 13 [ 161.625258][ T5346] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 161.625619][ T5354] Bluetooth: hci4: command 0x1003 tx timeout [ 161.641170][ T833] usb 8-1: USB disconnect, device number 9 [ 161.684185][ T5382] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 161.706570][ T5382] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 161.735576][ T5382] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 161.770529][ T5382] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 161.775916][ T5382] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 161.780714][ T5382] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 161.803052][ T5382] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 161.810171][ T5382] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 161.814324][ T5382] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 161.830337][ T5382] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 161.836842][ T5382] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 161.844236][ T5382] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 161.848645][ T5382] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 161.856055][ T5382] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 161.865452][ T5382] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 161.874722][ T5382] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 161.897805][ T5382] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 161.902458][ T5382] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 162.149620][ T7644] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 162.171243][ T7644] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 162.176188][ T7644] team0: Port device netdevsim0 added [ 162.525398][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 162.529773][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 162.552567][ T7660] netlink: 'syz.2.783': attribute type 6 has an invalid length. [ 162.575880][ T7662] netlink: 116 bytes leftover after parsing attributes in process `syz.1.785'. [ 163.955012][ T1284] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 164.146958][ T1284] usb 7-1: Using ep0 maxpacket: 8 [ 164.151132][ T1284] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 164.155560][ T1284] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.158705][ T1284] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.162010][ T1284] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.171660][ T1284] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.184988][ T1284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.447626][ T1284] usb 7-1: GET_CAPABILITIES returned 0 [ 164.450061][ T1284] usbtmc 7-1:16.0: can't read capabilities [ 164.651430][ T1284] usb 7-1: USB disconnect, device number 9 [ 164.665218][ T5341] Bluetooth: hci0: command 0x0406 tx timeout [ 165.576854][ T7735] ======================================================= [ 165.576854][ T7735] WARNING: The mand mount option has been deprecated and [ 165.576854][ T7735] and is ignored by this kernel. Remove the mand [ 165.576854][ T7735] option from the mount to silence this warning. [ 165.576854][ T7735] ======================================================= [ 165.655627][ T7735] overlayfs: failed to resolve './file1': -2 [ 166.852129][ T7754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.875037][ T5389] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 167.054994][ T5389] usb 7-1: Using ep0 maxpacket: 8 [ 167.071420][ T5389] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.078246][ T5389] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.082838][ T5389] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.095471][ T5389] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.105543][ T5389] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.109463][ T5389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.299130][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 167.387990][ T7764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 167.390469][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.393686][ T5389] usb 7-1: GET_CAPABILITIES returned 0 [ 167.396976][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 167.401050][ T5389] usbtmc 7-1:16.0: can't read capabilities [ 167.412545][ T7765] vhci_hcd: connection closed [ 167.412712][ T13] vhci_hcd: stop threads [ 167.430743][ T13] vhci_hcd: release socket [ 167.433750][ T13] vhci_hcd: disconnect device [ 167.603687][ T5389] usb 7-1: USB disconnect, device number 10 [ 168.125808][ T7778] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 168.205842][ T7780] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 168.331565][ T7788] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.423399][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 168.449909][ T39] audit: type=1326 audit(1722294869.663:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 168.469375][ T39] audit: type=1326 audit(1722294869.663:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf745e579 code=0x7fc00000 [ 168.487859][ T7800] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 168.490609][ T7800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.497213][ T7800] vhci_hcd vhci_hcd.0: Device attached [ 168.509875][ T7801] vhci_hcd: connection closed [ 168.511906][ T1100] vhci_hcd: stop threads [ 168.518728][ T1100] vhci_hcd: release socket [ 168.522065][ T1100] vhci_hcd: disconnect device [ 168.553099][ T7806] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 169.111414][ T39] audit: type=1326 audit(1722294870.323:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 169.565023][ T833] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.787231][ T833] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.801147][ T833] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.822062][ T833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.835778][ T833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.850859][ T833] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.854762][ T833] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.869293][ T833] usb 5-1: Product: syz [ 169.871223][ T833] usb 5-1: Manufacturer: syz [ 169.879303][ T833] cdc_wdm 5-1:1.0: skipping garbage [ 169.881659][ T833] cdc_wdm 5-1:1.0: skipping garbage [ 169.886208][ T833] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 169.888950][ T833] cdc_wdm 5-1:1.0: Unknown control protocol [ 170.218417][ T39] audit: type=1326 audit(1722294871.433:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 170.239978][ T39] audit: type=1326 audit(1722294871.433:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.857" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf745e579 code=0x7fc00000 [ 170.352636][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 170.424125][ T7859] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 170.427081][ T7859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.432020][ T7859] vhci_hcd vhci_hcd.0: Device attached [ 170.442844][ T7860] vhci_hcd: connection closed [ 170.443710][ T78] vhci_hcd: stop threads [ 170.448209][ T78] vhci_hcd: release socket [ 170.450960][ T78] vhci_hcd: disconnect device [ 170.690968][ T5380] usb 5-1: USB disconnect, device number 14 [ 170.804986][ T1284] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 170.882852][ T39] audit: type=1326 audit(1722294872.093:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 170.910991][ T39] audit: type=1326 audit(1722294872.103:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.857" exe="/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf745e579 code=0x7fc00000 [ 171.017503][ T1284] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.041177][ T1284] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.045585][ T1284] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.066531][ T1284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.092334][ T7865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.099968][ T1284] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.560230][ T833] usb 6-1: USB disconnect, device number 6 [ 172.278669][ T39] audit: type=1326 audit(1722294873.493:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 172.291857][ T39] audit: type=1326 audit(1722294873.503:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.872" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf745e579 code=0x7fc00000 [ 172.292258][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 172.388095][ T7903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 172.390739][ T7903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.394518][ T7903] vhci_hcd vhci_hcd.0: Device attached [ 172.410657][ T7904] vhci_hcd: connection closed [ 172.411701][ T1105] vhci_hcd: stop threads [ 172.416699][ T1105] vhci_hcd: release socket [ 172.419117][ T1105] vhci_hcd: disconnect device [ 172.917711][ T39] audit: type=1326 audit(1722294874.123:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7fc00000 [ 173.295796][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 173.485182][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 173.491578][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.497183][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.512122][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.516687][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.525951][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.530044][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.578435][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 173.578448][ T39] audit: type=1326 audit(1722294874.793:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.3.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 173.594153][ T39] audit: type=1326 audit(1722294874.793:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.3.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 173.613877][ T39] audit: type=1326 audit(1722294874.803:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.3.886" exe="/syz-executor" sig=0 arch=40000003 syscall=129 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 173.624242][ T39] audit: type=1326 audit(1722294874.803:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.3.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 173.647792][ T39] audit: type=1326 audit(1722294874.823:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.3.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 173.807197][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 173.809350][ T8] usbtmc 6-1:16.0: can't read capabilities [ 174.013405][ T8] usb 6-1: USB disconnect, device number 7 [ 174.513976][ T7948] overlayfs: failed to resolve './file1': -2 [ 174.861466][ T5346] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 174.944128][ T7973] netlink: 64 bytes leftover after parsing attributes in process `syz.1.896'. [ 175.902426][ T7983] input: syz0 as /devices/virtual/input/input19 [ 176.545172][ T833] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.738527][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 176.743261][ T833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.747335][ T833] usb 5-1: config 0 has no interface number 0 [ 176.750092][ T833] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.758535][ T833] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.767116][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.774421][ T833] usb 5-1: config 0 descriptor?? [ 176.786962][ T833] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 176.984695][ T1284] usb 5-1: USB disconnect, device number 15 [ 176.997024][ T1284] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 177.457268][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 177.566321][ T8030] input: syz0 as /devices/virtual/input/input20 [ 177.615169][ T1284] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 177.665162][ T35] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 177.696940][ T8034] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 177.700484][ T8034] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 177.808729][ T1284] usb 5-1: Using ep0 maxpacket: 8 [ 177.817304][ T1284] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.820973][ T1284] usb 5-1: config 0 has no interface number 0 [ 177.823850][ T1284] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.834100][ T1284] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.844063][ T1284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.854982][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 177.863653][ T1284] usb 5-1: config 0 descriptor?? [ 177.873710][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 177.879027][ T1284] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 177.884474][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.892736][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.898393][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.903144][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.909796][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 177.913025][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.918188][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.921952][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.927808][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.934607][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 177.938060][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.943084][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.949726][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.954777][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.963358][ T35] usb 8-1: string descriptor 0 read error: -22 [ 177.966306][ T35] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 177.969761][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.976859][ T35] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 178.077809][ T833] usb 5-1: USB disconnect, device number 16 [ 178.077901][ C3] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 178.090634][ T833] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 178.200815][ T35] usb 8-1: USB disconnect, device number 10 [ 178.805026][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 178.901225][ T5389] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 178.987741][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.992809][ T35] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.007022][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.012716][ T35] usb 8-1: config 0 descriptor?? [ 179.086510][ T5389] usb 6-1: Using ep0 maxpacket: 32 [ 179.108400][ T5389] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 179.138399][ T5389] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 179.143604][ T5389] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 179.149262][ T5389] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 179.155753][ T5389] usb 6-1: config 0 interface 0 has no altsetting 0 [ 179.167069][ T5389] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 179.171353][ T5389] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 179.178757][ T5389] usb 6-1: Product: syz [ 179.180873][ T5389] usb 6-1: Manufacturer: syz [ 179.182972][ T5389] usb 6-1: SerialNumber: syz [ 179.188132][ T5389] usb 6-1: config 0 descriptor?? [ 179.194091][ T5389] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.201962][ T5389] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 179.401786][ T8062] ldusb 6-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 179.436668][ T8] usb 6-1: USB disconnect, device number 8 [ 179.450801][ T8] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 179.906302][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 179.910349][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 179.921367][ T35] usb 8-1: USB disconnect, device number 11 [ 180.872768][ T8127] capability: warning: `syz.2.956' uses deprecated v2 capabilities in a way that may be insecure [ 180.958511][ T8131] 9pnet_fd: Insufficient options for proto=fd [ 181.145187][ T5346] Bluetooth: hci3: command 0x0406 tx timeout [ 181.508101][ T8164] netlink: 112 bytes leftover after parsing attributes in process `syz.3.974'. [ 182.118586][ T8191] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 182.485269][ T8201] netlink: zone id is out of range [ 182.487594][ T8201] netlink: zone id is out of range [ 182.491991][ T8201] netlink: del zone limit has 4 unknown bytes [ 182.825084][ T5341] Bluetooth: hci2: command 0x0406 tx timeout [ 182.995208][ T39] audit: type=1326 audit(1722294884.203:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.3.993" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 183.299301][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 183.497649][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 183.509243][ T35] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 183.528470][ T35] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 183.533793][ T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 183.543445][ T35] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 183.550436][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.556838][ T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 183.561176][ T35] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 183.565444][ T35] usb 6-1: Product: syz [ 183.567437][ T35] usb 6-1: Manufacturer: syz [ 183.569515][ T35] usb 6-1: SerialNumber: syz [ 183.573150][ T35] usb 6-1: config 0 descriptor?? [ 183.577938][ T35] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 183.585531][ T35] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 183.822364][ T8219] ldusb 6-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 183.847374][ T5382] usb 6-1: USB disconnect, device number 9 [ 183.853437][ T5382] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 185.637317][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.820437][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 185.835326][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 185.843400][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 185.848848][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 185.853817][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 185.866782][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.877613][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 185.881833][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 185.886072][ T8] usb 5-1: Product: syz [ 185.888197][ T8] usb 5-1: Manufacturer: syz [ 185.890342][ T8] usb 5-1: SerialNumber: syz [ 185.915680][ T8] usb 5-1: config 0 descriptor?? [ 185.923314][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 185.933117][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.147563][ T8252] ldusb 5-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 186.152745][ T8] usb 5-1: USB disconnect, device number 17 [ 186.158380][ T8] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 188.245106][ T57] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 188.425413][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 188.428855][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.432138][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.438157][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.443391][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.449456][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.461743][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.466806][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.471993][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.479359][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.484108][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.491323][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.494558][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.502704][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.508534][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.513484][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.533084][ T57] usb 6-1: string descriptor 0 read error: -22 [ 188.537458][ T57] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.542242][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.586362][ T57] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.964819][ T5382] usb 6-1: USB disconnect, device number 10 [ 189.675099][ T5389] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 189.881101][ T5389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.881135][ T5389] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.881152][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.883188][ T5389] usb 6-1: config 0 descriptor?? [ 190.762407][ T5389] usbhid 6-1:0.0: can't add hid device: -71 [ 190.771186][ T5389] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 190.786607][ T5389] usb 6-1: USB disconnect, device number 11 [ 191.443122][ T8330] block device autoloading is deprecated and will be removed. [ 191.676478][ T8339] batadv0: entered promiscuous mode [ 192.309374][ T8353] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 192.321159][ T8353] team0: Port device netdevsim0 added [ 192.333915][ T8353] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 192.346184][ T8353] team0: Port device netdevsim0 removed [ 192.351733][ T8353] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 192.571230][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 193.546363][ T5346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.562510][ T5346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.567212][ T5346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.571123][ T5346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.574557][ T5346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.595195][ T5346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.258208][ T8390] chnl_net:caif_netlink_parms(): no params data found [ 194.581249][ T8417] overlayfs: failed to resolve './file0': -2 [ 194.688554][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.691802][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.707264][ T8390] bridge_slave_0: entered allmulticast mode [ 194.711456][ T8390] bridge_slave_0: entered promiscuous mode [ 194.767140][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.770795][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.774459][ T8390] bridge_slave_1: entered allmulticast mode [ 194.782335][ T8390] bridge_slave_1: entered promiscuous mode [ 194.885526][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.898569][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.004254][ T8390] team0: Port device team_slave_0 added [ 195.018909][ T8390] team0: Port device team_slave_1 added [ 195.140866][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 195.272809][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.282081][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.304594][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.317007][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.320106][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.342583][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.691275][ T8390] hsr_slave_0: entered promiscuous mode [ 195.715278][ T5341] Bluetooth: hci4: command tx timeout [ 195.720025][ T8390] hsr_slave_1: entered promiscuous mode [ 195.739467][ T8390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.743178][ T8390] Cannot create hsr debugfs directory [ 196.213963][ T8390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.402397][ T8390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.583030][ T8390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.786337][ T8454] trusted_key: syz.1.1080 sent an empty control message without MSG_MORE. [ 196.849147][ T8390] team0: Port device netdevsim0 removed [ 196.870212][ T8390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.786080][ T5341] Bluetooth: hci4: command tx timeout [ 197.931121][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.290462][ T8485] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 198.302992][ T8485] usb 1-1: USB disconnect, device number 2 [ 198.380623][ T8486] hub 1-0:1.0: USB hub found [ 198.384107][ T8486] hub 1-0:1.0: 6 ports detected [ 198.585173][ T8] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 198.676653][ T8390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.720211][ T8390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.737549][ T8390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.755008][ T8390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.884066][ T8] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 198.887975][ T8] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 198.891347][ T8] usb 1-1: Product: QEMU USB Tablet [ 198.893591][ T8] usb 1-1: Manufacturer: QEMU [ 198.905729][ T8] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 198.963724][ T8] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input22 [ 199.023691][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.069649][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.073043][ T8] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 199.096219][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.099081][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.114079][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.117532][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.187883][ T8488] random: crng reseeded on system resumption [ 199.206956][ T8488] Restarting kernel threads ... done. [ 199.431735][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.432152][ T8504] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1098'. [ 199.519777][ T8390] veth0_vlan: entered promiscuous mode [ 199.532516][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1099'. [ 199.536832][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 199.548600][ T8390] veth1_vlan: entered promiscuous mode [ 199.555688][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.558551][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.593419][ T8390] veth0_macvtap: entered promiscuous mode [ 199.606101][ T8390] veth1_macvtap: entered promiscuous mode [ 199.616836][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.620346][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.623879][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.629529][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.633773][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.644503][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.650252][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.654824][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.664456][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.674644][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.679780][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.684132][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.689293][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.693660][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.698786][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.703319][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.708015][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.717487][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.724354][ T8390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.729100][ T8390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.733179][ T8390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.737688][ T8390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.819746][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.823329][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.865297][ T5341] Bluetooth: hci4: command tx timeout [ 199.877438][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.881401][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.085281][ T8520] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 200.096690][ T8520] usb 1-1: USB disconnect, device number 3 [ 200.183274][ T8523] hub 1-0:1.0: USB hub found [ 200.186679][ T8523] hub 1-0:1.0: 6 ports detected [ 200.215832][ T8524] batadv0: entered promiscuous mode [ 200.395059][ T8] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 200.617355][ T8] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 200.621864][ T8] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 200.625894][ T8] usb 1-1: Product: QEMU USB Tablet [ 200.628207][ T8] usb 1-1: Manufacturer: QEMU [ 200.634601][ T8] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 200.636191][ T58] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 200.713495][ T8] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input23 [ 200.808881][ T8] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 200.845250][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 200.861321][ T58] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.864779][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.870035][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.880143][ T58] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.895033][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.900424][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.114148][ T58] usb 6-1: GET_CAPABILITIES returned 0 [ 201.117308][ T58] usbtmc 6-1:16.0: can't read capabilities [ 201.363402][ T5389] usb 6-1: USB disconnect, device number 12 [ 201.480932][ T8536] random: crng reseeded on system resumption [ 201.503541][ T8536] Restarting kernel threads ... done. [ 201.872933][ T8541] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 201.945075][ T5341] Bluetooth: hci4: command tx timeout [ 202.995072][ T1416] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 203.225249][ T1416] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 203.227849][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 203.231930][ T1416] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.236702][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.241395][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 203.254822][ T1416] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 203.258125][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 203.262716][ T1416] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.274703][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.279894][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 203.293968][ T1416] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 203.297765][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 203.303156][ T1416] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.308565][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.313406][ T1416] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 203.330070][ T1416] usb 5-1: string descriptor 0 read error: -22 [ 203.333701][ T1416] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.338933][ T1416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.361754][ T1416] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.726463][ T5134] usb 5-1: USB disconnect, device number 18 [ 204.712707][ T8580] netlink: 'syz.2.1126': attribute type 2 has an invalid length. [ 204.727985][ T8580] usb 1-1: USB disconnect, device number 4 [ 204.834036][ T8584] hub 1-0:1.0: USB hub found [ 204.843592][ T8584] hub 1-0:1.0: 6 ports detected [ 205.034998][ T1416] usb 1-1: new high-speed USB device number 5 using ehci-pci [ 205.264272][ T1416] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 205.275106][ T1416] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 205.292981][ T1416] usb 1-1: Product: QEMU USB Tablet [ 205.304072][ T1416] usb 1-1: Manufacturer: QEMU [ 205.306612][ T1416] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 205.356612][ T1416] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input25 [ 205.465597][ T1416] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 205.897027][ T8611] netlink: 'syz.0.1135': attribute type 4 has an invalid length. [ 206.026981][ T8613] ip6erspan0: entered allmulticast mode [ 206.671174][ T8624] gretap0: entered promiscuous mode [ 206.696631][ T8624] netlink: 'syz.2.1141': attribute type 2 has an invalid length. [ 206.700076][ T8624] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1141'. [ 206.785101][ T1284] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 206.808754][ T8626] overlay: filesystem on ./bus not supported [ 206.825197][ T5380] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 206.977237][ T1284] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 206.980552][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 206.985532][ T1284] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.990397][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.005505][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 207.020301][ T5380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.020750][ T1284] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 207.024546][ T5380] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.027190][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 207.034035][ T5380] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.040958][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.054044][ T5380] usb 8-1: config 0 descriptor?? [ 207.056728][ T1284] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.061891][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.114963][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 207.128815][ T1284] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 207.132685][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 207.148339][ T1284] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.158765][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.163547][ T1284] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 207.187675][ T1284] usb 6-1: string descriptor 0 read error: -22 [ 207.190428][ T1284] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 207.194622][ T1284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.222041][ T1284] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 207.392173][ T8633] ip6erspan0: entered allmulticast mode [ 207.487958][ T5380] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 207.506616][ T5380] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 207.582641][ T8] usb 6-1: USB disconnect, device number 13 [ 207.882698][ T8645] netlink: 'syz.2.1150': attribute type 2 has an invalid length. [ 207.888769][ T8645] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1150'. [ 207.951828][ T5341] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 209.562178][ T5716] usb 8-1: USB disconnect, device number 12 [ 211.945021][ T1997] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 212.035051][ T5716] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 212.143341][ T1997] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 212.152265][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 212.157608][ T1997] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.163791][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.170036][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 212.181014][ T1997] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 212.184080][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 212.191527][ T1997] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.196363][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.200907][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 212.215031][ T1997] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 212.221127][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 212.224807][ T1997] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.231017][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.235595][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.240701][ T1997] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 212.245263][ T5716] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.249912][ T5716] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.254067][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.261074][ T1997] usb 8-1: string descriptor 0 read error: -22 [ 212.264046][ T1997] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.269559][ T5716] usb 6-1: config 0 descriptor?? [ 212.271655][ T1997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.286031][ T1997] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.431070][ T5341] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 212.649906][ T5380] usb 8-1: USB disconnect, device number 13 [ 212.667408][ T8732] adutux: No device or device unplugged -19 [ 212.747218][ T5716] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 212.758280][ T5716] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 213.160522][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 213.653360][ T1997] usb 6-1: USB disconnect, device number 14 [ 214.101074][ T8771] macvlan1: entered allmulticast mode [ 214.181287][ T8772] vivid-004: disconnect [ 214.186740][ T8769] vivid-004: reconnect [ 214.615958][ T1416] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 214.826162][ T1416] usb 6-1: Using ep0 maxpacket: 8 [ 214.838022][ T1416] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 214.842774][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.863098][ T1416] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.868278][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.872958][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.887395][ T1416] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 214.891287][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.896607][ T1416] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.901447][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.908251][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.914853][ T1416] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 214.918873][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.923640][ T1416] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.939497][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.955053][ T1416] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.963962][ T1416] usb 6-1: string descriptor 0 read error: -22 [ 214.967093][ T1416] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 214.971439][ T1416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.983216][ T1416] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 215.345619][ T5716] usb 6-1: USB disconnect, device number 15 [ 215.346585][ T8793] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 215.352173][ T8796] adutux: No device or device unplugged -19 [ 215.705118][ T5716] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 215.845730][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 215.906886][ T5716] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.911938][ T5716] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.918516][ T5716] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.922966][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.942990][ T5716] usb 8-1: config 0 descriptor?? [ 216.005279][ T8] usb 6-1: device descriptor read/64, error -71 [ 216.315162][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 216.438908][ T5716] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 216.454875][ T5716] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 216.485003][ T8] usb 6-1: device descriptor read/64, error -71 [ 216.605290][ T8] usb usb6-port1: attempt power cycle [ 217.024990][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 217.066570][ T8] usb 6-1: device descriptor read/8, error -71 [ 217.289395][ T8820] random: crng reseeded on system resumption [ 217.329457][ T8820] Restarting kernel threads ... done. [ 217.358072][ T1416] usb 8-1: USB disconnect, device number 14 [ 217.367128][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 217.603129][ T8] usb 6-1: device not accepting address 19, error -71 [ 217.618087][ T8] usb usb6-port1: unable to enumerate USB device [ 218.048475][ T8844] ptrace attach of ""[8845] was attempted by "/syz-executor exec"[8844] [ 218.102631][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 218.146701][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 218.375096][ T1416] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.526054][ T8860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.556923][ T1416] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 218.566777][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.572269][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.579555][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.585607][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.590148][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.596382][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.602008][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.607323][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.612893][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.618324][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.623195][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.629901][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.638287][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.642961][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.648538][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.654683][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.659216][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.664512][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.672137][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.676489][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.681187][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.686001][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.691633][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.696905][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.702692][ T1416] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.707006][ T1416] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.710275][ T1416] usb 5-1: Product: syz [ 218.711847][ T1416] usb 5-1: Manufacturer: syz [ 218.713570][ T1416] usb 5-1: SerialNumber: syz [ 218.720673][ T1416] usb 5-1: config 0 descriptor?? [ 218.727898][ T1416] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 219.098933][ T1416] usb 5-1: USB disconnect, device number 19 [ 219.103030][ T1416] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 219.221438][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 219.224454][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 220.078649][ T8879] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1231'. [ 220.083658][ T8879] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 220.475849][ T8881] random: crng reseeded on system resumption [ 220.516969][ T8881] Restarting kernel threads ... done. [ 220.935212][ T833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.125936][ T833] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 221.130902][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.136399][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.145449][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.168005][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.171738][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.184981][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.189334][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.193240][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.208986][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.216613][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.220263][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.240547][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.255974][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.261370][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.267691][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.279166][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.283438][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.289233][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.295312][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.299488][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.309659][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.314028][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.320444][ T833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.343213][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.361408][ T833] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.369033][ T833] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.372611][ T833] usb 5-1: Product: syz [ 221.374547][ T833] usb 5-1: Manufacturer: syz [ 221.376747][ T833] usb 5-1: SerialNumber: syz [ 221.387931][ T833] usb 5-1: config 0 descriptor?? [ 221.394535][ T833] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.625907][ T8918] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1241'. [ 221.629838][ T8918] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 221.850702][ T35] usb 5-1: USB disconnect, device number 20 [ 221.916610][ T35] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 223.523104][ T8941] syz.1.1245[8941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.524156][ T8941] syz.1.1245[8941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.035270][ T8941] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1245'. [ 226.080322][ T8941] gretap0: entered promiscuous mode [ 226.098131][ T8942] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1245'. [ 226.102294][ T8942] 0ªX¹¦D: renamed from gretap0 [ 226.133817][ T8942] 0ªX¹¦D: left promiscuous mode [ 226.150384][ T8942] 0ªX¹¦D: entered allmulticast mode [ 226.153971][ T8942] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 226.379993][ T5341] Bluetooth: hci2: unexpected event 0x17 length: 14 > 6 [ 226.523704][ T8952] Bluetooth: MGMT ver 1.23 [ 226.531437][ T8952] Bluetooth: hci3: service_discovery: expected 132 bytes, got 7 bytes [ 226.930418][ T8957] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1251'. [ 227.367267][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'. [ 227.419140][ T8972] C: renamed from team_slave_0 (while UP) [ 227.423409][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.432295][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.439457][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.455109][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.464325][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.471853][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.478090][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.485572][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.494402][ T8972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.804658][ T8984] netlink: 'syz.1.1259': attribute type 2 has an invalid length. [ 227.816080][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 227.906793][ T8984] /dev/nullb0: Can't open blockdev [ 228.109230][ T8991] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1261'. [ 229.530185][ T9010] fuse: Bad value for 'fd' [ 230.522593][ T9031] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1270'. [ 230.544865][ T9031] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.1270'. [ 230.599055][ T5346] Bluetooth: hci0: command 0x0406 tx timeout [ 230.825417][ T5346] Bluetooth: hci4: command tx timeout [ 230.886882][ T39] audit: type=1326 audit(1722294932.093:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.1275" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 231.106061][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 231.615048][ T5134] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 231.817377][ T5134] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.822133][ T5134] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.845200][ T5134] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.849225][ T5134] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.876904][ T5134] usb 7-1: config 0 descriptor?? [ 232.401465][ T5134] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 232.418596][ T5134] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 232.585082][ T5346] Bluetooth: hci1: command 0x0406 tx timeout [ 233.264702][ T9089] net_ratelimit: 25 callbacks suppressed [ 233.264713][ T9089] dccp_v4_rcv: dropped packet with invalid checksum [ 233.318992][ T1284] usb 7-1: USB disconnect, device number 11 [ 234.225413][ T5346] Bluetooth: hci4: Malformed LE Event: 0x1d [ 234.228848][ T9106] fuse: Unknown parameter 'f‚' [ 234.316212][ T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 234.505657][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 234.511220][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.517139][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.535105][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.545437][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.555028][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.558956][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.825794][ T57] usb 7-1: GET_CAPABILITIES returned 0 [ 234.876927][ T57] usbtmc 7-1:16.0: can't read capabilities [ 235.145499][ T1284] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 235.145836][ T5346] Bluetooth: hci2: command 0x0406 tx timeout [ 235.186844][ T57] usb 7-1: USB disconnect, device number 12 [ 235.335667][ T1284] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 235.339889][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.343946][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.361063][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.366397][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.375751][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.404000][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.409630][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.413436][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.429726][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.433658][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.439861][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.444137][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.451337][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.483873][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.488629][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.505030][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.508465][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.512776][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.516253][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.519637][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.524285][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.531074][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.534577][ T1284] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.544970][ T1284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.550376][ T1284] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 235.554428][ T1284] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.562455][ T1284] usb 6-1: Product: syz [ 235.564266][ T1284] usb 6-1: Manufacturer: syz [ 235.569262][ T1284] usb 6-1: SerialNumber: syz [ 235.575893][ T1284] usb 6-1: config 0 descriptor?? [ 235.583393][ T1284] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.907365][ T9121] xt_TCPMSS: Only works on TCP SYN packets [ 235.978075][ T5134] usb 6-1: USB disconnect, device number 20 [ 236.009036][ T5134] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 236.905035][ T57] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 237.071412][ T9147] dccp_v4_rcv: dropped packet with invalid checksum [ 237.098386][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.103939][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.110988][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.115346][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.127418][ T57] usb 5-1: config 0 descriptor?? [ 237.586110][ T57] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 237.598604][ T57] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 238.470596][ T57] usb 5-1: USB disconnect, device number 21 [ 238.470732][ T9159] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 239.228177][ T5346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.235133][ T5346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.239550][ T5346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.243356][ T5346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.254315][ T5346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 239.259144][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.476265][ T5341] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 239.481563][ T5341] Bluetooth: hci2: Injecting HCI hardware error event [ 239.487008][ T5346] Bluetooth: hci2: hardware error 0x00 [ 239.523840][ T5341] Bluetooth: hci2: Malformed LE Event: 0x1d [ 239.526671][ T9179] fuse: Unknown parameter 'f‚' [ 239.680034][ T9167] chnl_net:caif_netlink_parms(): no params data found [ 239.926353][ T9192] xt_CT: No such helper "syz0" [ 239.959339][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 240.115685][ T1284] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 240.211961][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.220966][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.224076][ T9167] bridge_slave_0: entered allmulticast mode [ 240.233268][ T9167] bridge_slave_0: entered promiscuous mode [ 240.238612][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.241741][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.246089][ T9167] bridge_slave_1: entered allmulticast mode [ 240.249789][ T9167] bridge_slave_1: entered promiscuous mode [ 240.303555][ T1284] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.308414][ T1284] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.323779][ T1284] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.328250][ T1284] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.333893][ T1284] usb 8-1: config 0 descriptor?? [ 240.344520][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.359801][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.495950][ T9167] team0: Port device team_slave_0 added [ 240.500965][ T9167] team0: Port device team_slave_1 added [ 240.598175][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.601543][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.616005][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.623593][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.628140][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.639201][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.813946][ T1284] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 240.824300][ T1284] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 240.902820][ T9167] hsr_slave_0: entered promiscuous mode [ 240.907674][ T9167] hsr_slave_1: entered promiscuous mode [ 240.910972][ T9167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.914017][ T9167] Cannot create hsr debugfs directory [ 241.159860][ T9167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.288212][ T9167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.395086][ T5341] Bluetooth: hci3: command tx timeout [ 241.442772][ T9167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.495163][ T9215] input: syz1 as /devices/virtual/input/input32 [ 241.545015][ T5346] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 241.584644][ T9167] bond0: (slave netdevsim0): Releasing backup interface [ 241.599511][ T9167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.712665][ T5389] usb 8-1: USB disconnect, device number 15 [ 241.790296][ T9222] fuse: Unknown parameter 'f‚' [ 241.798198][ T9221] x86/PAT: syz.0.1320:9221 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 241.900948][ T9167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.928185][ T9167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.937418][ T9167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.943357][ T9167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.055925][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.071875][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.097304][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.100263][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.106797][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.109496][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.144642][ T9167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.150178][ T9167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.350671][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.425572][ T9167] veth0_vlan: entered promiscuous mode [ 242.457506][ T9167] veth1_vlan: entered promiscuous mode [ 242.489039][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 242.570552][ T9232] xt_CT: No such helper "syz0" [ 242.647526][ T9167] veth0_macvtap: entered promiscuous mode [ 242.690571][ T9167] veth1_macvtap: entered promiscuous mode [ 242.748463][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.753145][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.766810][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.771568][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.778629][ T1105] Bluetooth: hci5: Frame reassembly failed (-84) [ 242.781247][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.788052][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.792740][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.798238][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.803268][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.823200][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.834372][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.862176][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.868494][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.873037][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.878612][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.882976][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.887663][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.892320][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.897850][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.902113][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.908697][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.921403][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.956582][ T9167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.960534][ T9167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.963849][ T9167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.973024][ T9167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.061310][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.079851][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.113190][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.116277][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.478467][ T5341] Bluetooth: hci3: command tx timeout [ 243.661426][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 244.139671][ T9247] input: syz1 as /devices/virtual/input/input33 [ 244.416945][ T9265] dccp_v4_rcv: dropped packet with invalid checksum [ 244.825154][ T5341] Bluetooth: hci5: command 0x1003 tx timeout [ 244.828368][ T5346] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 245.269792][ T9274] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1333'. [ 245.555814][ T5346] Bluetooth: hci3: command tx timeout [ 245.772317][ T1100] bridge_slave_1: left allmulticast mode [ 245.786650][ T1100] bridge_slave_1: left promiscuous mode [ 245.790241][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.798439][ T1100] bridge_slave_0: left allmulticast mode [ 245.800633][ T1100] bridge_slave_0: left promiscuous mode [ 245.803401][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.822237][ T9282] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 245.828652][ T9282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.912368][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 246.089141][ T9297] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 246.091995][ T9297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.097551][ T9297] vhci_hcd vhci_hcd.0: Device attached [ 246.103154][ T9298] vhci_hcd: connection closed [ 246.109513][ T13] vhci_hcd: stop threads [ 246.113826][ T13] vhci_hcd: release socket [ 246.135337][ T13] vhci_hcd: disconnect device [ 246.425830][ T9306] Invalid logical block size (64493) [ 246.868786][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.881045][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.888426][ T1100] bond0 (unregistering): Released all slaves [ 247.445344][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.643672][ T5341] Bluetooth: hci3: command tx timeout [ 247.649534][ T99] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.687155][ T1100] hsr_slave_0: left promiscuous mode [ 247.690693][ T1100] hsr_slave_1: left promiscuous mode [ 247.698129][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.708784][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.722511][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.747563][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.836107][ T1100] veth1_macvtap: left promiscuous mode [ 247.838688][ T1100] veth0_macvtap: left promiscuous mode [ 247.842442][ T1100] veth1_vlan: left promiscuous mode [ 248.345185][ T39] audit: type=1326 audit(1722294949.553:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.2.1348" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x0 [ 248.423526][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 249.262958][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 249.399524][ T9357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 249.402020][ T9357] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.415141][ T9357] vhci_hcd vhci_hcd.0: Device attached [ 249.439261][ T9358] vhci_hcd: connection closed [ 249.442706][ T1111] vhci_hcd: stop threads [ 249.446594][ T1111] vhci_hcd: release socket [ 249.449761][ T1111] vhci_hcd: disconnect device [ 249.537693][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 249.673721][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 249.705905][ T5346] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 251.814652][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'. [ 251.931105][ T9393] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 252.027595][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'. [ 252.245300][ T9409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1364'. [ 253.293577][ T9433] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 254.175178][ T58] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 254.335115][ T58] usb 6-1: device descriptor read/64, error -71 [ 254.463183][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 254.611121][ T58] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 254.775145][ T58] usb 6-1: device descriptor read/64, error -71 [ 254.825181][ T9464] hsr_slave_0 (unregistering): left promiscuous mode [ 254.905410][ T58] usb usb6-port1: attempt power cycle [ 254.968929][ T5346] Bluetooth: hci4: link tx timeout [ 254.971382][ T5346] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 254.978312][ T5346] Bluetooth: hci4: link tx timeout [ 254.980517][ T5346] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.218377][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1382'. [ 255.335459][ T58] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 255.368612][ T58] usb 6-1: device descriptor read/8, error -71 [ 255.645061][ T58] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 255.675765][ T58] usb 6-1: device descriptor read/8, error -71 [ 255.806281][ T58] usb usb6-port1: unable to enumerate USB device [ 256.211635][ T9489] tc_dump_action: action bad kind [ 256.447106][ T9494] netlink: 'syz.2.1390': attribute type 5 has an invalid length. [ 256.474414][ T9500] ptrace attach of "/syz-executor exec"[8390] was attempted by "/syz-executor exec"[9500] [ 256.528059][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 256.970284][ T9510] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 256.985182][ T5346] Bluetooth: hci4: command 0x0406 tx timeout [ 257.145762][ C2] Oops: general protection fault, probably for non-canonical address 0xdffffc0004060000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 257.151006][ C2] KASAN: probably user-memory-access in range [0x0000000020300000-0x0000000020300007] [ 257.155323][ C2] CPU: 2 UID: 0 PID: 9510 Comm: syz.2.1394 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 257.162037][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.166368][ C2] RIP: 0010:__dev_flush+0x49/0x1e0 [ 257.168667][ C2] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 257.176454][ C2] RSP: 0018:ffffc90000540c80 EFLAGS: 00010206 [ 257.178966][ C2] RAX: dffffc0000000000 RBX: 00000000202fff80 RCX: ffffffff88f1131b [ 257.182323][ C2] RDX: 0000000004060000 RSI: ffffffff81b13e16 RDI: ffffc90004a27a58 [ 257.185833][ C2] RBP: 0000000020300000 R08: 0000000000000005 R09: 0000000000000000 [ 257.189243][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a27a48 [ 257.192313][ C2] R13: ffff88802c240608 R14: ffffc90004a27a58 R15: ffffc90004a27a58 [ 257.195327][ C2] FS: 0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:00000000f56b6b40 [ 257.199098][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 257.202062][ C2] CR2: 0000000057aca4c0 CR3: 000000005b6c0000 CR4: 0000000000352ef0 [ 257.205559][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.208855][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.212114][ C2] Call Trace: [ 257.213535][ C2] [ 257.214730][ C2] ? show_regs+0x8c/0xa0 [ 257.216593][ C2] ? die_addr+0x4f/0xd0 [ 257.218303][ C2] ? exc_general_protection+0x155/0x230 [ 257.220737][ C2] ? asm_exc_general_protection+0x26/0x30 [ 257.223198][ C2] ? xdp_do_check_flushed+0x21b/0x4e0 [ 257.225585][ C2] ? __dev_flush+0x16/0x1e0 [ 257.227373][ C2] ? __dev_flush+0x49/0x1e0 [ 257.229264][ C2] xdp_do_check_flushed+0x40a/0x4e0 [ 257.231252][ C2] __napi_poll.constprop.0+0xd1/0x550 [ 257.233574][ C2] net_rx_action+0xa92/0x1010 [ 257.235221][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 257.237423][ C2] ? __pfx_mark_lock+0x10/0x10 [ 257.239572][ C2] ? rcu_qs+0x60/0xe0 [ 257.241444][ C2] ? trace_rcu_utilization+0x100/0x160 [ 257.243826][ C2] ? mark_held_locks+0x9f/0xe0 [ 257.245827][ C2] handle_softirqs+0x216/0x8f0 [ 257.247714][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 257.250002][ C2] irq_exit_rcu+0xbb/0x120 [ 257.251927][ C2] sysvec_apic_timer_interrupt+0x95/0xb0 [ 257.254298][ C2] [ 257.255636][ C2] [ 257.256915][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.258920][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 257.261608][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 ad 60 f6 48 89 df e8 ae 2a 61 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 a7 52 f6 65 8b 05 66 53 fb 74 85 c0 74 16 5b [ 257.268966][ C2] RSP: 0018:ffffc90004a27500 EFLAGS: 00000246 [ 257.271087][ C2] RAX: 0000000000000006 RBX: ffff88805afcf090 RCX: 1ffffffff28bab23 [ 257.273791][ C2] RDX: 0000000000000000 RSI: ffffffff8b4cd060 RDI: ffffffff8bb048e0 [ 257.276712][ C2] RBP: 0000000000000292 R08: 0000000000000001 R09: fffffbfff28b60e3 [ 257.279718][ C2] R10: ffffffff945b071f R11: 0000000000000000 R12: 000000000000001e [ 257.282782][ C2] R13: dffffc0000000000 R14: ffff88802c237f90 R15: ffff88802c238088 [ 257.285358][ C2] folio_batch_move_lru+0xec/0x3b0 [ 257.286930][ C2] ? __pfx_lru_add_fn+0x10/0x10 [ 257.288539][ C2] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 257.290468][ C2] ? do_raw_spin_lock+0x12d/0x2c0 [ 257.292172][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.294302][ C2] ? __pfx___might_resched+0x10/0x10 [ 257.296671][ C2] ? __pfx_lru_add_fn+0x10/0x10 [ 257.298909][ C2] folio_batch_add_and_move+0xe5/0x160 [ 257.301389][ C2] folio_add_lru+0x37d/0x7f0 [ 257.303457][ C2] shmem_alloc_and_add_folio+0x53e/0xcd0 [ 257.305867][ C2] ? filemap_get_entry+0x1b2/0x3c0 [ 257.308073][ C2] ? __pfx_filemap_get_entry+0x10/0x10 [ 257.310529][ C2] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 257.313157][ C2] ? shmem_allowable_huge_orders+0x2c9/0x340 [ 257.315651][ C2] shmem_get_folio_gfp+0xa62/0x15e0 [ 257.317841][ C2] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 257.320145][ C2] ? filemap_map_pages+0xeb6/0x1440 [ 257.322357][ C2] shmem_fault+0x205/0xaf0 [ 257.324111][ C2] ? __pfx_shmem_fault+0x10/0x10 [ 257.326024][ C2] ? __handle_mm_fault+0x38c7/0x5360 [ 257.328105][ C2] ? __pfx_lock_release+0x10/0x10 [ 257.330055][ C2] __do_fault+0x10a/0x490 [ 257.332011][ C2] __handle_mm_fault+0x3980/0x5360 [ 257.334289][ C2] ? no_page_table+0xc7/0x230 [ 257.336249][ C2] ? __pfx___handle_mm_fault+0x10/0x10 [ 257.338430][ C2] ? follow_page_pte+0x3dc/0x1cf0 [ 257.340423][ C2] ? vma_pgtable_walk_end+0x3d/0x70 [ 257.342461][ C2] handle_mm_fault+0x44e/0x7b0 [ 257.344368][ C2] __get_user_pages+0x475/0x15c0 [ 257.346292][ C2] ? __pfx___get_user_pages+0x10/0x10 [ 257.348246][ C2] populate_vma_page_range+0x27f/0x3a0 [ 257.350581][ C2] ? __pfx_populate_vma_page_range+0x10/0x10 [ 257.353166][ C2] ? __pfx_find_vma_intersection+0x10/0x10 [ 257.355750][ C2] ? vm_mmap_pgoff+0x25b/0x360 [ 257.357442][ C2] __mm_populate+0x1d6/0x380 [ 257.359037][ C2] ? __pfx___mm_populate+0x10/0x10 [ 257.361349][ C2] ? up_write+0x1b2/0x520 [ 257.363159][ C2] vm_mmap_pgoff+0x293/0x360 [ 257.364879][ C2] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 257.366966][ C2] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 257.369359][ C2] ? xfd_validate_state+0x5d/0x180 [ 257.371523][ C2] ksys_mmap_pgoff+0x7d/0x5d0 [ 257.373484][ C2] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 257.375821][ C2] __do_fast_syscall_32+0x73/0x120 [ 257.378004][ C2] do_fast_syscall_32+0x32/0x80 [ 257.380114][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.382734][ C2] RIP: 0023:0xf739e579 [ 257.384439][ C2] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.392525][ C2] RSP: 002b:00000000f56b657c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 257.396132][ C2] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 257.399469][ C2] RDX: 0000000007ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 257.402875][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.406035][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.408865][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.411777][ C2] [ 257.413015][ C2] Modules linked in: [ 257.414681][ C2] ---[ end trace 0000000000000000 ]--- [ 257.416993][ C2] RIP: 0010:__dev_flush+0x49/0x1e0 [ 257.419228][ C2] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 257.426958][ C2] RSP: 0018:ffffc90000540c80 EFLAGS: 00010206 [ 257.429239][ C2] RAX: dffffc0000000000 RBX: 00000000202fff80 RCX: ffffffff88f1131b [ 257.432574][ C2] RDX: 0000000004060000 RSI: ffffffff81b13e16 RDI: ffffc90004a27a58 [ 257.435953][ C2] RBP: 0000000020300000 R08: 0000000000000005 R09: 0000000000000000 [ 257.438813][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a27a48 [ 257.441706][ C2] R13: ffff88802c240608 R14: ffffc90004a27a58 R15: ffffc90004a27a58 [ 257.444602][ C2] FS: 0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:00000000f56b6b40 [ 257.448078][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 257.450521][ C2] CR2: 0000000057aca4c0 CR3: 000000005b6c0000 CR4: 0000000000352ef0 [ 257.453669][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.456915][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.460162][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 257.463770][ C2] Kernel Offset: disabled [ 257.465661][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:15:58 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90006ec0000 RBX=ffff8880194b8000 RCX=ffffffff8169aefd RDX=1ffff11003297279 RSI=0000000000000004 RDI=ffff8880194b93c0 RBP=1ffff92001a19f6a RSP=ffffc9000d0cfad8 R8 =0000000000000001 R9 =fffff52001a19f49 R10=0000000000000003 R11=ffffffff8b4f4940 R12=ffff8880194b8ed8 R13=0000000000000000 R14=ffff888019562000 R15=ffff8880194b8cc0 RIP=ffffffff86380602 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f56a4548 CR3=00000000283c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000052de1c RBX=0000000000000001 RCX=ffffffff8b05da19 RDX=ffffed1005826fda RSI=ffffffff8bb04860 RDI=ffffffff81633acc RBP=ffffed1002ce1910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000001 R12=0000000000000001 R13=ffff88801670c880 R14=ffffffff9010f198 R15=0000000000000000 RIP=ffffffff8b05ee0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000206d4000 CR3=00000000520ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa18d5 RDI=ffffffff951173c0 RBP=ffffffff95117380 RSP=ffffc90000540658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fa1870 R15=0000000000000000 RIP=ffffffff84fa18ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057aca4c0 CR3=000000005b6c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000013d9c4 RBX=0000000000000003 RCX=ffffffff8b05da19 RDX=ffffed1005866fda RSI=ffffffff8bb04860 RDI=ffffffff81633acc RBP=ffffed1002cf4488 RSP=ffffc90000497e08 R8 =0000000000000000 R9 =ffffed1005866fd9 R10=ffff88802c337ecb R11=0000000000000000 R12=0000000000000003 R13=ffff8880167a2440 R14=ffffffff9010f198 R15=0000000000000000 RIP=ffffffff8b05ee0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c275ea6 CR3=000000002791c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000