last executing test programs: 9.594874685s ago: executing program 0 (id=2834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.675780489s ago: executing program 0 (id=2837): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 7.761733647s ago: executing program 3 (id=2839): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 7.495412969s ago: executing program 0 (id=2842): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x6) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x6, 0x100000000010001) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 6.527791578s ago: executing program 0 (id=2843): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x1, 0x140000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) read$midi(r4, 0x0, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0), 0x0) 6.140637547s ago: executing program 3 (id=2845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5.105238613s ago: executing program 0 (id=2848): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="4749c8542e13d7c249", 0x9}], 0x1, 0x377484b2, 0x4) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) 5.104106939s ago: executing program 3 (id=2849): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x614, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x670) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket(0x11, 0x1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x16, 0x60, 0x40, 0x586, 0x102, 0x140a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0x5f, 0xb9, 0x4d}}]}}]}}, 0x0) 4.60585737s ago: executing program 2 (id=2851): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 4.055336707s ago: executing program 1 (id=2852): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3.920293082s ago: executing program 1 (id=2853): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000540)={{0xeeee0000, 0xeeee0000, 0xb, 0x4, 0x6, 0x0, 0x8, 0x1, 0x4, 0x9, 0x2, 0x8}, {0xeeef0000, 0x3000, 0x9, 0x0, 0xb, 0x8, 0x10, 0x4, 0x3, 0x4, 0x2, 0x7}, {0x3000, 0xf000, 0x0, 0x6, 0x8, 0x8, 0x1, 0xfe, 0x5, 0x1, 0xc, 0xf}, {0x4, 0x80a0000, 0xf, 0x5, 0x4, 0x2, 0x7, 0xcd, 0xfa, 0x5, 0x9, 0x7}, {0xf000, 0xffff1000, 0xf, 0x4, 0x9, 0xc, 0x80, 0x2, 0x3, 0x9, 0xe4, 0x22}, {0xdddd4000, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xd1, 0x5, 0x8, 0x6, 0xfd}, {0x1000, 0xdddc3000, 0x17, 0xff, 0x10, 0x7, 0x1, 0xf7, 0x1, 0x97, 0x87, 0xc}, {0x5000, 0x2, 0x8, 0xb, 0x4, 0x7, 0x4, 0xf, 0x2, 0x1, 0xeb, 0x4}, {0x6000, 0x4}, {0x0, 0x7}, 0x50006, 0x0, 0xdddd0000, 0x20040, 0x9, 0x4000, 0x2000, 0x1, [0xa060, 0x1, 0x866, 0x5]}) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) prlimit64(r0, 0x0, &(0x7f00000001c0)={0x6, 0xfffffe00}, 0x0) 3.485298239s ago: executing program 2 (id=2854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r3, 0x406, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000019"], 0x38}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r9, 0x40086603, &(0x7f0000000040)) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.926721883s ago: executing program 1 (id=2855): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 2.603225388s ago: executing program 2 (id=2856): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.385213529s ago: executing program 2 (id=2857): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x1, 0x140000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) read$midi(r4, 0x0, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0), 0x0) 1.985494486s ago: executing program 3 (id=2858): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400"], 0x50) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0x37ad, 0x2000, 0xfffffffb, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x0, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0x101}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 1.408283689s ago: executing program 1 (id=2859): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYBLOB="eeeaffff616d250b50c83b2a6a34"], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0x37ad, 0x2000, 0xfffffffb, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x0, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0x101}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 1.282546385s ago: executing program 2 (id=2860): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 1.091064344s ago: executing program 3 (id=2861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045", 0x19}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) fsmount(r4, 0x1, 0xf0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "a4cd91", 0x9}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f", @ANYRESDEC], 0x74}}, 0x0) statx(r4, &(0x7f0000000340)='./file0/../file0\x00', 0x2000, 0x7ff, &(0x7f00000005c0)) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8, {0xc}}, './file0/../file0\x00'}) 530.406321ms ago: executing program 1 (id=2862): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) 266.596106ms ago: executing program 0 (id=2863): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xcac, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 263.776934ms ago: executing program 1 (id=2864): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3c, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x599f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x1000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x1008, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4c, 0x8, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x0, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x7, 0x3c, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x100007, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 252.676394ms ago: executing program 2 (id=2865): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400"], 0x50) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0x37ad, 0x2000, 0xfffffffb, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x0, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0x101}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 0s ago: executing program 3 (id=2866): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x31}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x101}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) kernel console output (not intermixed with test programs): o 8 [ 518.729018][ T8444] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.733720][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 518.737025][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 518.741336][ T8444] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 518.743581][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 518.746497][ T8444] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.749756][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 518.753437][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 518.757277][ T8444] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 518.759517][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 518.762882][ T8444] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.766141][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 518.769302][ T8444] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 518.775236][ T8444] usb 8-1: string descriptor 0 read error: -22 [ 518.777054][ T8444] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 518.779598][ T8444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.789561][ T8444] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 518.858078][T14911] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2293'. [ 518.861624][T14911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2293'. [ 518.864344][T14911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2293'. [ 519.770264][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 519.950254][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 519.953938][ T24] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 519.956578][ T24] usb 7-1: config 0 has no interface number 0 [ 519.958515][ T24] usb 7-1: config 0 interface 2 has no altsetting 0 [ 519.962458][ T24] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 519.966020][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.969369][ T24] usb 7-1: Product: syz [ 519.970980][ T24] usb 7-1: Manufacturer: syz [ 519.972506][ T24] usb 7-1: SerialNumber: syz [ 519.975067][ T24] usb 7-1: config 0 descriptor?? [ 520.261248][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.266740][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.285781][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.303934][T14932] tipc: Enabling of bearer rejected, failed to enable media [ 520.311071][ T24] usb 7-1: USB disconnect, device number 104 [ 520.336283][T12916] udevd[12916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.334730][ T24] usb 8-1: USB disconnect, device number 92 [ 521.416374][T14944] tipc: Enabling of bearer rejected, failed to enable media [ 523.254155][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 524.300358][T13063] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 524.460354][T13063] usb 6-1: Using ep0 maxpacket: 32 [ 524.471773][T13063] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 524.475865][T13063] usb 6-1: config 0 has no interface number 0 [ 524.480981][T13063] usb 6-1: config 0 interface 2 has no altsetting 0 [ 524.488075][T13063] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 524.491980][T13063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.495225][T13063] usb 6-1: Product: syz [ 524.496957][T13063] usb 6-1: Manufacturer: syz [ 524.499752][T13063] usb 6-1: SerialNumber: syz [ 524.511084][T13063] usb 6-1: config 0 descriptor?? [ 524.796433][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.800087][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.809209][T13063] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.843935][T13063] usb 6-1: USB disconnect, device number 90 [ 526.390323][ T8444] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 526.543202][ T8444] usb 7-1: config 0 has no interfaces? [ 526.545450][ T8444] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 526.549016][ T8444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.554090][ T8444] usb 7-1: config 0 descriptor?? [ 526.861719][ T24] usb 7-1: USB disconnect, device number 105 [ 528.590437][ T24] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 528.743495][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 528.746594][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.749293][ T24] usb 6-1: Product: syz [ 528.751215][ T24] usb 6-1: Manufacturer: syz [ 528.752684][ T24] usb 6-1: SerialNumber: syz [ 528.756011][ T24] usb 6-1: config 0 descriptor?? [ 528.974539][ T24] usb-storage 6-1:0.0: USB Mass Storage device detected [ 529.564682][T15079] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2332'. [ 529.569560][T15079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2332'. [ 529.572969][T15079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2332'. [ 529.664422][T15080] /dev/nullb0: Can't open blockdev [ 530.530286][ T8444] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 530.680383][ T8444] usb 7-1: Using ep0 maxpacket: 32 [ 530.684171][ T8444] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 530.687530][ T8444] usb 7-1: config 0 has no interface number 0 [ 530.689820][ T8444] usb 7-1: config 0 interface 2 has no altsetting 0 [ 530.694458][ T8444] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 530.698054][ T8444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.701388][ T8444] usb 7-1: Product: syz [ 530.703000][ T8444] usb 7-1: Manufacturer: syz [ 530.704870][ T8444] usb 7-1: SerialNumber: syz [ 530.708887][ T8444] usb 7-1: config 0 descriptor?? [ 531.183870][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.187296][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.197885][ T8444] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.230400][ T75] usb 6-1: USB disconnect, device number 91 [ 531.239011][ T8444] usb 7-1: USB disconnect, device number 106 [ 531.295147][T12915] udevd[12915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.590232][ T75] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 531.790344][ T75] usb 6-1: Using ep0 maxpacket: 32 [ 531.793973][ T75] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 531.796612][ T75] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 531.800473][ T75] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 531.803852][ T75] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 531.808045][ T75] usb 6-1: config 0 interface 0 has no altsetting 0 [ 531.812461][ T75] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 531.815298][ T75] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 531.818735][ T75] usb 6-1: Product: syz [ 531.820699][ T75] usb 6-1: Manufacturer: syz [ 531.822696][ T75] usb 6-1: SerialNumber: syz [ 531.827181][ T75] usb 6-1: config 0 descriptor?? [ 531.831508][ T75] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 531.835738][ T75] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 531.890277][ T24] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 532.126795][ T24] usb 8-1: config 0 has no interfaces? [ 532.129084][ T24] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 532.133001][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.136448][ T75] usb 6-1: USB disconnect, device number 92 [ 532.141677][ T75] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 532.142134][ T24] usb 8-1: config 0 descriptor?? [ 532.676822][T15111] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2340'. [ 532.684203][T15111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2340'. [ 532.687636][T15111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2340'. [ 533.215725][T15112] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.492423][T15112] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.708435][T15112] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.065186][T15112] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.183728][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.189122][ T843] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 534.200572][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.218486][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.236666][ T61] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.759889][ T843] usb 7-1: config 0 has no interfaces? [ 534.762708][ T843] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 534.766525][ T843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.984203][ T24] usb 8-1: USB disconnect, device number 93 [ 535.143202][ T843] usb 7-1: config 0 descriptor?? [ 535.213314][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 536.118472][T14643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.122615][T14643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.126422][T14643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.131130][T14643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.135432][T14643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.283767][T15141] chnl_net:caif_netlink_parms(): no params data found [ 536.394493][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.396905][T15141] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.399237][T15141] bridge_slave_0: entered allmulticast mode [ 536.401976][T15141] bridge_slave_0: entered promiscuous mode [ 536.405595][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.408775][T15141] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.411399][T15141] bridge_slave_1: entered allmulticast mode [ 536.414094][T15141] bridge_slave_1: entered promiscuous mode [ 536.450264][ T5937] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 536.476544][T15141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.484059][T15141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.533911][T15141] team0: Port device team_slave_0 added [ 536.538438][T15141] team0: Port device team_slave_1 added [ 536.578578][T15141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.581603][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.592293][T15141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.597554][T15141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.600553][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.609540][T15141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.630230][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 536.634047][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 536.637116][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 536.642092][ T5937] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 536.644895][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 536.647411][ T5937] usb 5-1: Product: syz [ 536.648765][ T5937] usb 5-1: Manufacturer: syz [ 536.650546][ T5937] usb 5-1: SerialNumber: syz [ 536.653315][ T5937] usb 5-1: config 0 descriptor?? [ 536.658035][ T5937] hub 5-1:0.0: bad descriptor, ignoring hub [ 536.661463][ T5937] hub 5-1:0.0: probe with driver hub failed with error -5 [ 536.680628][T15141] hsr_slave_0: entered promiscuous mode [ 536.683745][T15141] hsr_slave_1: entered promiscuous mode [ 536.686679][T15141] debugfs: 'hsr0' already exists in 'hsr' [ 536.689084][T15141] Cannot create hsr debugfs directory [ 536.843872][T15141] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.919292][T15141] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.970503][ T5937] usb 5-1: USB disconnect, device number 78 [ 536.992837][T15141] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.041604][ T5937] usb 7-1: USB disconnect, device number 107 [ 537.045872][T15141] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.230463][T14643] Bluetooth: hci4: command tx timeout [ 538.270381][T15141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 538.327459][T15141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 538.358261][T15141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 538.372628][T15141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.440057][T15141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.449777][T15141] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.456122][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.458444][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.476679][T15141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.480025][T15141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.541189][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.543522][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.860419][T15196] input: syz0 as /devices/virtual/input/input77 [ 538.880834][T15141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.906952][T15141] veth0_vlan: entered promiscuous mode [ 538.910936][T15141] veth1_vlan: entered promiscuous mode [ 538.925216][T15141] veth0_macvtap: entered promiscuous mode [ 538.942284][T15141] veth1_macvtap: entered promiscuous mode [ 538.949910][T15141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.954354][T15141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.959663][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.959704][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.959733][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.959763][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.070267][ T75] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 539.094769][ T4761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.094777][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.094795][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.098008][ T4761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.274138][ T75] usb 5-1: config 0 has no interfaces? [ 539.530473][ T75] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 539.533428][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.538958][ T75] usb 5-1: config 0 descriptor?? [ 539.640273][T13572] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 539.790301][T13572] usb 7-1: Using ep0 maxpacket: 32 [ 539.793326][T13572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 539.800542][T13572] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 539.810797][T13572] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 539.815927][T13572] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 539.819939][T13572] usb 7-1: Product: syz [ 539.821467][T13572] usb 7-1: Manufacturer: syz [ 539.823130][T13572] usb 7-1: SerialNumber: syz [ 539.832490][T13572] usb 7-1: config 0 descriptor?? [ 539.876056][T13572] hub 7-1:0.0: bad descriptor, ignoring hub [ 539.878000][T13572] hub 7-1:0.0: probe with driver hub failed with error -5 [ 540.180393][ T24] usb 7-1: USB disconnect, device number 108 [ 540.310488][T14643] Bluetooth: hci4: command tx timeout [ 541.521072][T15232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2363'. [ 541.534272][ T75] usb 5-1: USB disconnect, device number 79 [ 541.552216][T15232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2363'. [ 541.555231][T15232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2363'. [ 541.703763][T15233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.809756][T15239] tipc: Enabling of bearer rejected, failed to enable media [ 542.330747][T15244] input: syz0 as /devices/virtual/input/input78 [ 542.352974][T12966] udevd[12966]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 542.380428][T14643] Bluetooth: hci4: command tx timeout [ 542.790336][ T5993] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 542.950312][ T5993] usb 8-1: Using ep0 maxpacket: 32 [ 542.959219][ T5993] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.962174][ T5993] usb 8-1: config 0 has no interface number 0 [ 542.964356][ T5993] usb 8-1: config 0 interface 2 has no altsetting 0 [ 542.968296][ T5993] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 542.971488][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.974178][ T5993] usb 8-1: Product: syz [ 542.975586][ T5993] usb 8-1: Manufacturer: syz [ 542.977194][ T5993] usb 8-1: SerialNumber: syz [ 542.985193][ T5993] usb 8-1: config 0 descriptor?? [ 543.202574][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.206299][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.215320][ T5993] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.217771][ T5993] usb 8-1: invalid MIDI out EP 0 [ 543.240327][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 543.248009][ T5993] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 543.255109][ T5993] usb 8-1: USB disconnect, device number 94 [ 543.278185][T12916] udevd[12916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.355748][T15233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.400287][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 543.404227][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 543.408438][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 543.414547][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 543.418430][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 543.422077][ T24] usb 5-1: Product: syz [ 543.423845][ T24] usb 5-1: Manufacturer: syz [ 543.425815][ T24] usb 5-1: SerialNumber: syz [ 543.430352][ T24] usb 5-1: config 0 descriptor?? [ 543.434366][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 543.436814][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 543.437567][T15233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.537355][T15233] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.658135][T15052] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.665172][T15052] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.675435][T15052] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.782150][ T29] usb 5-1: USB disconnect, device number 80 [ 543.840488][T15052] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.460250][T14643] Bluetooth: hci4: command tx timeout [ 544.771923][T15276] fuse: Bad value for 'fd' [ 544.916691][T15281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2374'. [ 544.921114][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2374'. [ 544.972535][T15283] input: syz0 as /devices/virtual/input/input79 [ 545.830321][T13071] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 546.000327][T13071] usb 8-1: Using ep0 maxpacket: 32 [ 546.167340][T13071] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 546.169870][T13071] usb 8-1: config 0 has no interface number 0 [ 546.171894][T13071] usb 8-1: config 0 interface 2 has no altsetting 0 [ 546.175446][T13071] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 546.178286][T13071] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.180950][T13071] usb 8-1: Product: syz [ 546.182323][T13071] usb 8-1: Manufacturer: syz [ 546.183796][T13071] usb 8-1: SerialNumber: syz [ 546.186605][T13071] usb 8-1: config 0 descriptor?? [ 546.421079][ T5993] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 546.472772][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.480451][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.488456][T13071] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.490943][T13071] usb 8-1: invalid MIDI out EP 0 [ 546.511124][T13071] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 546.517107][T13071] usb 8-1: USB disconnect, device number 95 [ 546.529357][T12916] udevd[12916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.546105][T15270] Set syz1 is full, maxelem 65536 reached [ 546.586203][T15302] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2380'. [ 546.600379][T15302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2380'. [ 546.603952][T15302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2380'. [ 546.623955][ T5993] usb 5-1: config 0 has no interfaces? [ 546.625924][ T5993] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 546.628735][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.635020][ T5993] usb 5-1: config 0 descriptor?? [ 546.681916][T15305] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.744632][T15305] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.800950][T15305] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.873404][T15305] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.910297][ T24] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 546.930779][ T8444] usb 5-1: USB disconnect, device number 81 [ 547.062116][ T24] usb 7-1: config 0 has no interfaces? [ 547.064456][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 547.068173][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.073878][ T24] usb 7-1: config 0 descriptor?? [ 547.260276][ T34] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 547.347680][ T24] usb 7-1: USB disconnect, device number 109 [ 547.410450][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 547.414394][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 547.420337][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 547.432363][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 547.435703][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 547.438399][ T34] usb 8-1: Product: syz [ 547.440016][ T34] usb 8-1: Manufacturer: syz [ 547.450334][ T34] usb 8-1: SerialNumber: syz [ 547.453102][ T34] usb 8-1: config 0 descriptor?? [ 547.461403][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 547.463307][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 547.760355][ T34] usb 8-1: USB disconnect, device number 96 [ 547.870216][ T29] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 547.988984][ T4761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.005968][ T4761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.016271][ T4761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.020249][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 548.026857][ T4761] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.028449][ T29] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 548.032579][ T29] usb 5-1: config 0 has no interface number 0 [ 548.034528][ T29] usb 5-1: config 0 interface 2 has no altsetting 0 [ 548.038291][ T29] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 548.041304][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.043810][ T29] usb 5-1: Product: syz [ 548.045145][ T29] usb 5-1: Manufacturer: syz [ 548.046612][ T29] usb 5-1: SerialNumber: syz [ 548.060636][ T29] usb 5-1: config 0 descriptor?? [ 548.168585][T15317] input: syz0 as /devices/virtual/input/input80 [ 548.371685][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.374631][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.394208][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.505670][ T29] usb 5-1: USB disconnect, device number 82 [ 548.550581][T15326] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2386'. [ 548.563026][T15326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2386'. [ 548.565863][T15326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2386'. [ 548.603497][T12916] udevd[12916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.330990][T15344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 550.222346][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 550.422885][T15357] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2392'. [ 550.432289][T15357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2392'. [ 550.437575][T15357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2392'. [ 550.500534][T15358] /dev/nullb0: Can't open blockdev [ 550.521119][T15358] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.620704][T15358] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.692001][T15358] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.744487][T15358] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.785658][T15361] input: syz0 as /devices/virtual/input/input81 [ 550.830987][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.872075][T15052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.910461][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.934669][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.784174][T15394] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2403'. [ 552.797235][T15394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2403'. [ 552.800506][T15394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2403'. [ 552.875728][T15395] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.974344][T15395] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.043984][T15395] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.095140][T15395] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.173331][ T4761] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.190023][ T4761] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.206388][ T95] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.217132][ T95] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.927240][T15415] input: syz0 as /devices/virtual/input/input82 [ 554.569813][T15419] tipc: Enabling of bearer rejected, failed to enable media [ 554.729496][T15426] fuse: Bad value for 'fd' [ 555.360240][ T6006] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 555.513447][ T6006] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 555.516314][ T6006] usb 7-1: config 160 has no interface number 0 [ 555.518319][ T6006] usb 7-1: config 160 interface 200 has no altsetting 0 [ 555.523281][ T6006] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 555.526045][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.528522][ T6006] usb 7-1: Product: syz [ 555.529864][ T6006] usb 7-1: Manufacturer: syz [ 555.534875][ T6006] usb 7-1: SerialNumber: syz [ 556.152474][T15448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 556.819966][T15466] input: syz0 as /devices/virtual/input/input83 [ 557.660796][ T6006] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.663273][ T6006] usb 7-1: MIDIStreaming interface descriptor not found [ 557.700991][ T6006] usb 7-1: USB disconnect, device number 110 [ 557.714949][T12965] udevd[12965]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 557.722521][T12965] udevd[12965]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 557.728431][T12966] udevd[12966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.264299][T15501] input: syz0 as /devices/virtual/input/input84 [ 559.570559][T15510] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2432'. [ 559.574033][T15510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 559.576784][T15510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 559.652645][T15513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2430'. [ 560.827920][T15526] fuse: Bad value for 'fd' [ 560.839089][T15526] ipip0: entered promiscuous mode [ 560.841585][T15526] ipip0: entered allmulticast mode [ 560.911623][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 560.921890][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'. [ 561.481900][T15534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2436'. [ 561.488386][T15534] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2436'. [ 561.491568][T15534] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2436'. [ 561.818867][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 562.385472][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.387473][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.170249][ T8444] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 564.285075][T15584] fuse: Bad value for 'fd' [ 564.292226][T15584] ipip0: entered promiscuous mode [ 564.293965][T15584] ipip0: entered allmulticast mode [ 564.330201][ T8444] usb 5-1: Using ep0 maxpacket: 32 [ 564.334837][ T8444] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 564.337748][ T8444] usb 5-1: config 0 has no interface number 0 [ 564.339770][ T8444] usb 5-1: config 0 interface 2 has no altsetting 0 [ 564.343786][ T8444] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 564.346746][ T8444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.349365][ T8444] usb 5-1: Product: syz [ 564.351049][ T8444] usb 5-1: Manufacturer: syz [ 564.352864][ T8444] usb 5-1: SerialNumber: syz [ 564.356792][ T8444] usb 5-1: config 0 descriptor?? [ 564.650282][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.653548][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.661813][ T8444] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.684616][ T8444] usb 5-1: USB disconnect, device number 83 [ 564.710491][T15592] udevd[15592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.100731][T15600] __nla_validate_parse: 4 callbacks suppressed [ 565.100746][T15600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2449'. [ 565.193417][T15600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2449'. [ 565.197120][T15600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2449'. [ 565.282627][T15601] /dev/nullb0: Can't open blockdev [ 565.913008][T15617] input: syz0 as /devices/virtual/input/input85 [ 566.326768][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 566.990407][ T5993] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 567.150208][ T5993] usb 7-1: Using ep0 maxpacket: 32 [ 567.160303][ T5993] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 567.162950][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.166215][ T5993] usb 7-1: config 0 has no interfaces? [ 567.180228][ T5993] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 567.183117][ T5993] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 567.186273][ T5993] usb 7-1: Product: syz [ 567.187994][ T5993] usb 7-1: Manufacturer: syz [ 567.189861][ T5993] usb 7-1: SerialNumber: syz [ 567.203586][ T5993] usb 7-1: config 0 descriptor?? [ 567.410717][ T5809] usb 7-1: USB disconnect, device number 111 [ 567.501605][ T75] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 567.570251][ T6783] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 567.653794][ T75] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 567.657683][ T75] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.661144][ T75] usb 6-1: Product: syz [ 567.662907][ T75] usb 6-1: Manufacturer: syz [ 567.664872][ T75] usb 6-1: SerialNumber: syz [ 567.669796][ T75] usb 6-1: config 0 descriptor?? [ 567.720294][ T6783] usb 5-1: Using ep0 maxpacket: 32 [ 567.724526][ T6783] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 567.728043][ T6783] usb 5-1: config 0 has no interface number 0 [ 567.730816][ T6783] usb 5-1: config 0 interface 2 has no altsetting 0 [ 567.736112][ T6783] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 567.739894][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.743961][ T6783] usb 5-1: Product: syz [ 567.745819][ T6783] usb 5-1: Manufacturer: syz [ 567.747873][ T6783] usb 5-1: SerialNumber: syz [ 567.752292][ T6783] usb 5-1: config 0 descriptor?? [ 567.885990][ T75] usb-storage 6-1:0.0: USB Mass Storage device detected [ 568.023235][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.027292][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.035030][ T6783] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.038806][ T6783] usb 5-1: invalid MIDI out EP 0 [ 568.063567][ T6783] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 568.068135][ T6783] usb 5-1: USB disconnect, device number 84 [ 568.078784][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.111760][T15637] ipip0: left promiscuous mode [ 568.210301][T15425] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 568.370317][T15425] usb 7-1: Using ep0 maxpacket: 32 [ 568.374565][T15425] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 568.380404][T15425] usb 7-1: config 0 has no interface number 0 [ 568.383102][T15425] usb 7-1: config 0 interface 2 has no altsetting 0 [ 568.393094][T15425] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 568.400304][T15425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.403777][T15425] usb 7-1: Product: syz [ 568.405616][T15425] usb 7-1: Manufacturer: syz [ 568.410275][T15425] usb 7-1: SerialNumber: syz [ 568.419341][T15425] usb 7-1: config 0 descriptor?? [ 568.635062][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.639301][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.649835][T15425] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.667884][T15425] usb 7-1: USB disconnect, device number 112 [ 568.694501][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.452637][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 569.964731][T15425] usb 6-1: USB disconnect, device number 93 [ 570.341691][T15425] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 570.490230][T15425] usb 6-1: Using ep0 maxpacket: 32 [ 570.496038][T15425] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 570.500228][T15425] usb 6-1: config 0 has no interface number 0 [ 570.502678][T15425] usb 6-1: config 0 interface 2 has no altsetting 0 [ 570.510110][T15425] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 570.515367][T15425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.519204][T15425] usb 6-1: Product: syz [ 570.520684][T15425] usb 6-1: Manufacturer: syz [ 570.523294][T15425] usb 6-1: SerialNumber: syz [ 570.527635][T15425] usb 6-1: config 0 descriptor?? [ 570.846435][T15688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.850484][T15688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.862049][T15425] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.870665][T15425] usb 6-1: invalid MIDI out EP 0 [ 571.228132][T15425] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 571.242822][T15425] usb 6-1: USB disconnect, device number 94 [ 571.264239][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.070261][ T6783] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 572.137691][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.143213][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.146457][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.151991][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.156372][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 572.241105][ T6783] usb 6-1: Using ep0 maxpacket: 32 [ 572.245832][ T6783] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 572.249249][ T6783] usb 6-1: config 0 has no interface number 0 [ 572.251979][ T6783] usb 6-1: config 0 interface 2 has no altsetting 0 [ 572.256895][ T6783] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 572.259752][ T6783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.262478][ T6783] usb 6-1: Product: syz [ 572.264580][ T6783] usb 6-1: Manufacturer: syz [ 572.266619][ T6783] usb 6-1: SerialNumber: syz [ 572.295420][ T6783] usb 6-1: config 0 descriptor?? [ 572.491486][T15713] chnl_net:caif_netlink_parms(): no params data found [ 572.586622][ T6783] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.590105][ T6783] usb 6-1: invalid MIDI out EP 0 [ 572.659366][T15713] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.663591][T15713] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.670638][T15713] bridge_slave_0: entered allmulticast mode [ 572.674674][T15713] bridge_slave_0: entered promiscuous mode [ 572.681093][T15713] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.683357][ T6783] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 572.683423][T15713] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.688465][T15713] bridge_slave_1: entered allmulticast mode [ 572.689171][ T6783] usb 6-1: USB disconnect, device number 95 [ 572.691604][T15713] bridge_slave_1: entered promiscuous mode [ 572.693775][T15572] udevd[15572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.720347][ T75] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 572.781179][T15713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.788044][T15713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.849292][T15713] team0: Port device team_slave_0 added [ 572.854576][T15713] team0: Port device team_slave_1 added [ 572.897886][ T75] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 572.900873][ T75] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.902374][T15713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.903422][ T75] usb 7-1: Product: syz [ 572.906240][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.907573][ T75] usb 7-1: Manufacturer: syz [ 572.919232][T15713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.919810][ T75] usb 7-1: SerialNumber: syz [ 572.925987][T15713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.928373][ T75] usb 7-1: config 0 descriptor?? [ 572.929042][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.942195][T15713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.009610][T15713] hsr_slave_0: entered promiscuous mode [ 573.012521][T15713] hsr_slave_1: entered promiscuous mode [ 573.015446][T15713] debugfs: 'hsr0' already exists in 'hsr' [ 573.017907][T15713] Cannot create hsr debugfs directory [ 573.141133][ T75] usb-storage 7-1:0.0: USB Mass Storage device detected [ 573.184500][T15713] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.278318][T15713] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.335489][T15713] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.407674][T15713] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.594330][T15713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.599878][T15713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.607838][T15713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.613493][T15713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.753674][T15713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.763767][T15713] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.769595][T15052] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.771920][T15052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.791476][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.793768][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.909141][T15713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.936732][T15713] veth0_vlan: entered promiscuous mode [ 573.944090][T15713] veth1_vlan: entered promiscuous mode [ 573.963667][T15713] veth0_macvtap: entered promiscuous mode [ 573.967693][T15713] veth1_macvtap: entered promiscuous mode [ 573.976130][T15713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.990666][T15713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.006674][T15052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.010199][T15052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.013683][T15052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.016364][T15052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.045915][ T4761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.048556][ T4761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.063047][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.065816][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.121606][T15746] netlink: 'syz.3.2475': attribute type 12 has an invalid length. [ 574.124593][T15746] netlink: 'syz.3.2475': attribute type 29 has an invalid length. [ 574.127114][T15746] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2475'. [ 574.230265][ T64] Bluetooth: hci2: command tx timeout [ 574.710225][ T75] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 574.861218][ T75] usb 5-1: Using ep0 maxpacket: 32 [ 574.864888][ T75] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 574.867718][ T75] usb 5-1: config 0 has no interface number 0 [ 574.869724][ T75] usb 5-1: config 0 interface 2 has no altsetting 0 [ 574.873618][ T75] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 574.876451][ T75] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.878907][ T75] usb 5-1: Product: syz [ 574.880295][ T75] usb 5-1: Manufacturer: syz [ 574.881740][ T75] usb 5-1: SerialNumber: syz [ 574.886678][ T75] usb 5-1: config 0 descriptor?? [ 575.135975][T15756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.139108][T15756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.146485][ T75] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.149003][ T75] usb 5-1: invalid MIDI out EP 0 [ 575.169197][ T75] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 575.173639][ T75] usb 5-1: USB disconnect, device number 85 [ 575.199893][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.384585][ T75] usb 7-1: USB disconnect, device number 113 [ 576.000349][ T34] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 576.150285][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 576.153975][ T34] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 576.156523][ T34] usb 6-1: config 0 has no interface number 0 [ 576.158542][ T34] usb 6-1: config 0 interface 2 has no altsetting 0 [ 576.162591][ T34] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 576.165433][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.167999][ T34] usb 6-1: Product: syz [ 576.169377][ T34] usb 6-1: Manufacturer: syz [ 576.171110][ T34] usb 6-1: SerialNumber: syz [ 576.174022][ T34] usb 6-1: config 0 descriptor?? [ 576.300457][ T64] Bluetooth: hci2: command tx timeout [ 576.435517][T15769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.438628][T15769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.450314][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.464343][ T34] usb 6-1: USB disconnect, device number 96 [ 576.477224][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.599263][T15776] netlink: 'syz.3.2489': attribute type 12 has an invalid length. [ 576.601868][T15776] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 576.604806][T15776] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2489'. [ 578.060450][T13071] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 578.216448][T15810] netlink: 'syz.2.2498': attribute type 12 has an invalid length. [ 578.219968][T15810] netlink: 'syz.2.2498': attribute type 29 has an invalid length. [ 578.224232][T15810] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2498'. [ 578.234548][T13071] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 578.238323][T13071] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.242847][T13071] usb 8-1: Product: syz [ 578.244895][T13071] usb 8-1: Manufacturer: syz [ 578.246863][T13071] usb 8-1: SerialNumber: syz [ 578.251901][T13071] usb 8-1: config 0 descriptor?? [ 578.380472][ T64] Bluetooth: hci2: command tx timeout [ 578.468270][T13071] usb-storage 8-1:0.0: USB Mass Storage device detected [ 578.510557][T15425] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 578.660228][T15425] usb 7-1: Using ep0 maxpacket: 32 [ 578.663892][T15425] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 578.666559][T15425] usb 7-1: config 0 has no interface number 0 [ 578.670262][T15425] usb 7-1: config 0 interface 2 has no altsetting 0 [ 578.677631][T15425] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 578.683340][T15425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.686479][T15425] usb 7-1: Product: syz [ 578.690087][T15425] usb 7-1: Manufacturer: syz [ 578.692404][T15425] usb 7-1: SerialNumber: syz [ 578.696470][T15425] usb 7-1: config 0 descriptor?? [ 578.998378][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.014481][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.027249][T15425] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.029709][T15425] usb 7-1: invalid MIDI out EP 0 [ 579.078959][T15425] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 579.083873][T15425] usb 7-1: USB disconnect, device number 114 [ 579.253965][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.470255][ T64] Bluetooth: hci2: command tx timeout [ 580.765827][ T5809] usb 8-1: USB disconnect, device number 97 [ 580.881031][T15844] tipc: Enabling of bearer rejected, failed to enable media [ 581.332500][ T5993] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 581.500267][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 581.506065][ T5993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 581.508970][ T5993] usb 5-1: config 0 has no interface number 0 [ 581.510958][ T5993] usb 5-1: config 0 interface 2 has no altsetting 0 [ 581.528997][ T5993] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 581.532211][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.534783][ T5993] usb 5-1: Product: syz [ 581.536399][ T5993] usb 5-1: Manufacturer: syz [ 581.537960][ T5993] usb 5-1: SerialNumber: syz [ 581.545355][ T5993] usb 5-1: config 0 descriptor?? [ 581.890903][T15848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.897964][T15848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.922409][ T5993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.925319][ T5993] usb 5-1: invalid MIDI out EP 0 [ 581.977918][ T5993] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 581.982014][ T5993] usb 5-1: USB disconnect, device number 86 [ 582.019699][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.790279][ T5993] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 582.829033][T15866] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2513'. [ 582.835114][T15866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2513'. [ 582.838217][T15866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2513'. [ 582.975311][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 582.978381][ T5993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.983311][ T5993] usb 5-1: config 0 has no interface number 0 [ 582.988962][ T5993] usb 5-1: config 0 interface 2 has no altsetting 0 [ 582.999400][ T5993] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 583.002661][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.005346][ T5993] usb 5-1: Product: syz [ 583.006867][ T5993] usb 5-1: Manufacturer: syz [ 583.008822][ T5993] usb 5-1: SerialNumber: syz [ 583.023629][ T5993] usb 5-1: config 0 descriptor?? [ 583.423446][T15861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.428616][T15861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.601477][ T5993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.681251][T15882] fuse: Bad value for 'fd' [ 583.701380][T15882] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 583.711295][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 583.837141][ T5993] usb 5-1: USB disconnect, device number 87 [ 584.201438][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.448961][T15884] input: syz0 as /devices/virtual/input/input86 [ 584.501161][T15890] bridge0: entered allmulticast mode [ 584.502919][T15889] tipc: Enabling of bearer rejected, failed to enable media [ 584.507589][T15890] batadv0: left promiscuous mode [ 584.507875][T15890] bridge0: port 3(batadv0) entered disabled state [ 584.532689][T15890] bridge_slave_1: left allmulticast mode [ 584.532713][T15890] bridge_slave_1: left promiscuous mode [ 584.532895][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.539107][T15890] bridge_slave_0: left allmulticast mode [ 584.539129][T15890] bridge_slave_0: left promiscuous mode [ 584.539289][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.791429][T15897] tipc: Enabling of bearer rejected, failed to enable media [ 585.777823][T15910] netlink: 'syz.3.2525': attribute type 12 has an invalid length. [ 585.781036][T15910] netlink: 'syz.3.2525': attribute type 29 has an invalid length. [ 585.784335][T15910] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2525'. [ 586.100247][ T75] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 586.250403][ T75] usb 8-1: Using ep0 maxpacket: 32 [ 586.291138][ T75] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 586.294443][ T75] usb 8-1: config 0 has no interface number 0 [ 586.296964][ T75] usb 8-1: config 0 interface 2 has no altsetting 0 [ 586.304972][ T75] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 586.308773][ T75] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.312265][ T75] usb 8-1: Product: syz [ 586.314053][ T75] usb 8-1: Manufacturer: syz [ 586.316025][ T75] usb 8-1: SerialNumber: syz [ 586.321623][ T75] usb 8-1: config 0 descriptor?? [ 586.578193][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.582576][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.594693][ T75] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.597939][ T75] usb 8-1: invalid MIDI out EP 0 [ 586.639844][ T75] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 586.646529][ T75] usb 8-1: USB disconnect, device number 98 [ 586.661171][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.862102][T14643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.873036][T14643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.881077][T14643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.884082][T14643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.886955][T14643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.001831][T15924] chnl_net:caif_netlink_parms(): no params data found [ 587.008328][T15935] fuse: Bad value for 'fd' [ 587.137497][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.137840][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 587.142018][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.146371][T15924] bridge_slave_0: entered allmulticast mode [ 587.150403][T15924] bridge_slave_0: entered promiscuous mode [ 587.154959][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.158039][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.162749][T15924] bridge_slave_1: entered allmulticast mode [ 587.166565][T15924] bridge_slave_1: entered promiscuous mode [ 587.217478][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.222811][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.275598][T15924] team0: Port device team_slave_0 added [ 587.304960][T15924] team0: Port device team_slave_1 added [ 587.357204][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.359445][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.367722][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.372266][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.374496][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.383578][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.451804][T15924] hsr_slave_0: entered promiscuous mode [ 587.454913][T15924] hsr_slave_1: entered promiscuous mode [ 587.457969][T15924] debugfs: 'hsr0' already exists in 'hsr' [ 587.461229][T15924] Cannot create hsr debugfs directory [ 587.946537][T15924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.952299][T15924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.956468][T15924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.968611][T15924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 588.080912][T15924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.099049][T15924] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.104640][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.106866][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.122518][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.124903][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.371330][T15924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.399897][T15972] netlink: 'syz.3.2536': attribute type 12 has an invalid length. [ 588.407138][T15972] netlink: 'syz.3.2536': attribute type 29 has an invalid length. [ 588.411290][T15972] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2536'. [ 588.458633][T15924] veth0_vlan: entered promiscuous mode [ 588.474661][T15924] veth1_vlan: entered promiscuous mode [ 588.537843][T15924] veth0_macvtap: entered promiscuous mode [ 588.553512][T15924] veth1_macvtap: entered promiscuous mode [ 588.576501][T15924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.594378][T15924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.607249][T15839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.610354][T15839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.613508][T15839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.616416][T15839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.677888][T15839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.689456][T15839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.752986][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.755893][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.323300][T15991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2529'. [ 589.839025][ T34] usb 8-1: new full-speed USB device number 99 using dummy_hcd [ 590.012503][ T34] usb 8-1: config 16 has an invalid interface number: 168 but max is 0 [ 590.016022][ T34] usb 8-1: config 16 has no interface number 0 [ 590.018720][ T34] usb 8-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 590.023668][ T34] usb 8-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 590.028265][ T34] usb 8-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 590.032321][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.038932][T16001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.045666][ T34] HFC-S_USB 8-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 590.154052][T16008] input: syz0 as /devices/virtual/input/input87 [ 590.201122][T15572] udevd[15572]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 590.320340][T13063] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 590.407181][T16014] netlink: 'syz.1.2545': attribute type 12 has an invalid length. [ 590.410661][T16014] netlink: 'syz.1.2545': attribute type 29 has an invalid length. [ 590.414111][T16014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2545'. [ 590.470347][T13063] usb 7-1: Using ep0 maxpacket: 32 [ 590.485227][T13063] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 590.498085][T13063] usb 7-1: config 0 has no interface number 0 [ 590.501987][T16018] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2547'. [ 590.505933][T16018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2547'. [ 590.508976][T16018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2547'. [ 590.518639][T13063] usb 7-1: config 0 interface 2 has no altsetting 0 [ 590.531433][T13063] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 590.536203][T13063] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.540088][T13063] usb 7-1: Product: syz [ 590.542119][T13063] usb 7-1: Manufacturer: syz [ 590.544130][T13063] usb 7-1: SerialNumber: syz [ 590.558124][T13063] usb 7-1: config 0 descriptor?? [ 590.828233][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.832952][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.844848][T13063] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.850900][T13063] usb 7-1: invalid MIDI out EP 0 [ 590.914953][T13063] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 590.919772][T13063] usb 7-1: USB disconnect, device number 115 [ 590.923713][T15572] udevd[15572]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.074474][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 592.350260][ T6006] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 592.601589][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 592.604335][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.607984][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.611900][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.615621][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.619962][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 592.640200][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.644928][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.648722][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.652832][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.658121][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 592.660914][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.664668][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.669092][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.673912][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.677288][T13063] usb 8-1: USB disconnect, device number 99 [ 592.681434][ T6006] usb 6-1: string descriptor 0 read error: -22 [ 592.685817][ T6006] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 592.689279][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.706031][ T6006] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 592.971597][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2552'. [ 593.238130][T16048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2554'. [ 593.810391][T13063] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 593.944649][T16052] input: syz0 as /devices/virtual/input/input88 [ 593.960256][T13063] usb 7-1: Using ep0 maxpacket: 32 [ 593.962005][T13063] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 593.962020][T13063] usb 7-1: config 0 has no interface number 0 [ 593.962038][T13063] usb 7-1: config 0 interface 2 has no altsetting 0 [ 593.963661][T13063] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 593.963676][T13063] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.963687][T13063] usb 7-1: Product: syz [ 593.963695][T13063] usb 7-1: Manufacturer: syz [ 593.963702][T13063] usb 7-1: SerialNumber: syz [ 593.964792][T13063] usb 7-1: config 0 descriptor?? [ 594.282186][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.284984][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.291033][T13063] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.296227][T13063] usb 7-1: invalid MIDI out EP 0 [ 594.335807][T13063] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 594.344347][T13063] usb 7-1: USB disconnect, device number 116 [ 594.360893][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.965741][T16073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2560'. [ 594.980330][T16073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2560'. [ 595.048473][T16075] /dev/nullb0: Can't open blockdev [ 595.086140][T16075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.178139][T16075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.284429][T16075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.393861][T16075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.793379][ T1147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.799950][ T1147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.811941][ T1147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.815289][ T1147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.650517][T16097] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2564'. [ 596.834776][T16100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2565'. [ 597.126613][T16103] input: syz0 as /devices/virtual/input/input89 [ 597.181030][ T24] usb 6-1: USB disconnect, device number 97 [ 598.390402][ T24] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 598.551955][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 598.555036][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 598.557749][ T24] usb 6-1: config 0 has no interface number 0 [ 598.559724][ T24] usb 6-1: config 0 interface 2 has no altsetting 0 [ 598.560238][ T59] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 598.565419][ T24] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 598.568243][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.571080][ T24] usb 6-1: Product: syz [ 598.572429][ T24] usb 6-1: Manufacturer: syz [ 598.573978][ T24] usb 6-1: SerialNumber: syz [ 598.581146][ T24] usb 6-1: config 0 descriptor?? [ 598.863893][T16122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.869001][T16122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.880950][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.918671][ T24] usb 6-1: USB disconnect, device number 98 [ 599.023041][ T59] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 599.026444][ T59] usb 5-1: config 160 has no interface number 0 [ 599.029001][ T59] usb 5-1: config 160 interface 200 has no altsetting 0 [ 599.051948][ T59] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 599.055519][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.058609][ T59] usb 5-1: Product: syz [ 599.060760][ T59] usb 5-1: Manufacturer: syz [ 599.062581][ T59] usb 5-1: SerialNumber: syz [ 600.145075][T16109] Set syz1 is full, maxelem 65536 reached [ 600.230791][ T5937] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 600.255829][T16141] tipc: Enabling of bearer rejected, failed to enable media [ 600.391040][ T5937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 600.393964][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.398259][ T5937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.402966][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 600.406808][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.412919][ T5937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 600.416138][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.419738][ T5937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.423837][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 600.427749][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.434460][ T5937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 600.436953][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.440610][ T5937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.444715][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 600.448514][ T5937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.466803][ T5937] usb 6-1: string descriptor 0 read error: -22 [ 600.470341][ T5937] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 600.473238][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.487967][ T5937] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 600.799084][T16146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2578'. [ 600.894883][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.897779][ T59] usb 5-1: MIDIStreaming interface descriptor not found [ 600.916424][ T59] usb 5-1: USB disconnect, device number 88 [ 600.949562][T15591] udevd[15591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.238029][T16148] input: syz0 as /devices/virtual/input/input90 [ 603.160352][ T6783] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 603.310240][ T6783] usb 8-1: Using ep0 maxpacket: 32 [ 603.313689][ T6783] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.316460][ T6783] usb 8-1: config 0 has no interface number 0 [ 603.318382][ T6783] usb 8-1: config 0 interface 2 has no altsetting 0 [ 603.322245][ T6783] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 603.325448][ T6783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.328068][ T6783] usb 8-1: Product: syz [ 603.329498][ T6783] usb 8-1: Manufacturer: syz [ 603.331146][ T6783] usb 8-1: SerialNumber: syz [ 603.334385][ T6783] usb 8-1: config 0 descriptor?? [ 603.600772][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.607366][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.617798][ T6783] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.645348][ T6783] usb 8-1: USB disconnect, device number 100 [ 603.701859][T16187] input: syz0 as /devices/virtual/input/input91 [ 603.834060][T16188] udevd[16188]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.976199][T16191] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2590'. [ 604.359804][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.362392][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.365553][T16196] bridge0: entered allmulticast mode [ 604.374944][T16196] bridge_slave_1: left allmulticast mode [ 604.376859][T16196] bridge_slave_1: left promiscuous mode [ 604.378698][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.382420][T16196] bridge_slave_0: left allmulticast mode [ 604.384200][T16196] bridge_slave_0: left promiscuous mode [ 604.386044][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.031541][ T5809] usb 6-1: USB disconnect, device number 99 [ 606.308290][T16218] tipc: Enabling of bearer rejected, failed to enable media [ 607.383283][T16233] tipc: Enabling of bearer rejected, failed to enable media [ 607.540223][ T6783] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 607.731197][ T6783] usb 5-1: config 16 has an invalid interface number: 168 but max is 0 [ 607.733795][ T6783] usb 5-1: config 16 has no interface number 0 [ 607.735685][ T6783] usb 5-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 607.743460][ T6783] usb 5-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 607.758521][ T6783] usb 5-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 607.896910][ T6783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.910679][T16234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 607.916420][ T6783] HFC-S_USB 5-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 609.087298][T16211] Set syz1 is full, maxelem 65536 reached [ 609.410233][ T59] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 609.760223][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 609.763801][ T59] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.766396][ T59] usb 7-1: config 0 has no interface number 0 [ 609.768500][ T59] usb 7-1: config 0 interface 2 has no altsetting 0 [ 609.772531][ T59] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 609.775623][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.778173][ T59] usb 7-1: Product: syz [ 609.779647][ T59] usb 7-1: Manufacturer: syz [ 609.781345][ T59] usb 7-1: SerialNumber: syz [ 609.784557][ T59] usb 7-1: config 0 descriptor?? [ 610.091073][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.094932][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.294049][ T6783] usb 5-1: USB disconnect, device number 89 [ 610.719493][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.849359][ T59] usb 7-1: USB disconnect, device number 117 [ 610.887636][T16188] udevd[16188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.956974][T16267] tipc: Enabling of bearer rejected, failed to enable media [ 611.540294][ T6783] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 611.728402][ T6783] usb 5-1: Using ep0 maxpacket: 32 [ 611.742484][ T6783] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 611.746404][ T6783] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 611.751308][ T6783] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 611.755993][ T6783] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 611.760092][ T6783] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 611.766003][ T6783] usb 5-1: config 0 interface 0 has no altsetting 0 [ 611.774232][ T6783] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 611.777950][ T6783] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 611.783554][ T6783] usb 5-1: Product: syz [ 611.785387][ T6783] usb 5-1: Manufacturer: syz [ 611.787419][ T6783] usb 5-1: SerialNumber: syz [ 611.794122][ T6783] usb 5-1: config 0 descriptor?? [ 611.798709][ T6783] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 611.805599][ T6783] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 612.002372][T16270] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 612.005851][ T59] usb 5-1: USB disconnect, device number 90 [ 612.020126][ T59] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 612.798931][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 613.041952][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 613.162627][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 613.330340][ T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 613.480308][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 613.484180][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 613.487690][ T24] usb 6-1: config 0 has no interface number 0 [ 613.492600][ T24] usb 6-1: config 0 interface 2 has no altsetting 0 [ 613.498322][ T24] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 613.503697][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.506877][ T24] usb 6-1: Product: syz [ 613.508752][ T24] usb 6-1: Manufacturer: syz [ 613.511165][ T24] usb 6-1: SerialNumber: syz [ 613.515607][ T24] usb 6-1: config 0 descriptor?? [ 613.798894][T16298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.803925][T16298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.817135][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.202238][ T24] usb 6-1: USB disconnect, device number 100 [ 615.830724][T16339] fuse: Bad value for 'fd' [ 615.836944][T16339] ipip0: entered promiscuous mode [ 615.838585][T16339] ipip0: entered allmulticast mode [ 616.168215][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 616.457761][T16333] Set syz1 is full, maxelem 65536 reached [ 618.550271][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 618.720414][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 618.725034][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 618.729439][ T24] usb 5-1: config 0 has no interface number 0 [ 618.732155][ T24] usb 5-1: config 0 interface 2 has no altsetting 0 [ 618.737532][ T24] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 618.741367][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.758821][ T24] usb 5-1: Product: syz [ 618.761334][ T24] usb 5-1: Manufacturer: syz [ 618.763102][ T24] usb 5-1: SerialNumber: syz [ 618.766284][ T24] usb 5-1: config 0 descriptor?? [ 619.052523][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.058303][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.069031][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.109243][ T24] usb 5-1: USB disconnect, device number 91 [ 619.200806][ T59] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 619.291073][T16388] udevd[16388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.353285][ T59] usb 6-1: config 16 has an invalid interface number: 168 but max is 0 [ 619.356737][ T59] usb 6-1: config 16 has no interface number 0 [ 619.359845][ T59] usb 6-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 619.375232][ T59] usb 6-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 619.385858][ T59] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 619.389644][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.416447][T16384] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 619.422896][ T59] HFC-S_USB 6-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 620.945885][T16415] fuse: Bad value for 'fd' [ 621.026025][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 622.023785][T13683] usb 6-1: USB disconnect, device number 101 [ 622.730257][T15425] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 622.940382][T15425] usb 8-1: Using ep0 maxpacket: 32 [ 622.950464][T15425] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 622.954057][T15425] usb 8-1: config 0 has no interface number 0 [ 622.956646][T15425] usb 8-1: config 0 interface 2 has no altsetting 0 [ 622.978194][T15425] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 623.014250][T15425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.024290][T15425] usb 8-1: Product: syz [ 623.026069][T15425] usb 8-1: Manufacturer: syz [ 623.040272][T15425] usb 8-1: SerialNumber: syz [ 623.100316][T15425] usb 8-1: config 0 descriptor?? [ 623.414898][T16441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.417961][T16441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.433660][T15425] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.485417][T15425] usb 8-1: USB disconnect, device number 101 [ 623.536182][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.574945][T16458] binfmt_misc: register: failed to install interpreter file ./file0 [ 623.824678][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.826760][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.150237][T13683] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 624.260272][ T24] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 624.311913][T13683] usb 7-1: config 16 has an invalid interface number: 168 but max is 0 [ 624.314650][T13683] usb 7-1: config 16 has no interface number 0 [ 624.316626][T13683] usb 7-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 624.321607][T13683] usb 7-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 624.326709][T13683] usb 7-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 624.330362][T13683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.336452][T16465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.342561][T13683] HFC-S_USB 7-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 624.410235][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 624.415432][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 624.418827][ T24] usb 8-1: config 0 has no interface number 0 [ 624.421539][ T24] usb 8-1: config 0 interface 2 has no altsetting 0 [ 624.426159][ T24] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 624.429856][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.433309][ T24] usb 8-1: Product: syz [ 624.435183][ T24] usb 8-1: Manufacturer: syz [ 624.437147][ T24] usb 8-1: SerialNumber: syz [ 624.440929][ T24] usb 8-1: config 0 descriptor?? [ 624.723068][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.726838][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.737869][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.779630][ T24] usb 8-1: USB disconnect, device number 102 [ 624.813802][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.927821][T16475] Set syz1 is full, maxelem 65536 reached [ 625.900345][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 626.810916][ T5809] usb 7-1: USB disconnect, device number 118 [ 628.050275][ T6006] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 628.210246][ T6006] usb 6-1: Using ep0 maxpacket: 32 [ 628.213157][ T6006] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 628.216425][ T6006] usb 6-1: config 0 has no interface number 0 [ 628.219113][ T6006] usb 6-1: config 0 interface 2 has no altsetting 0 [ 628.224491][ T6006] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 628.228434][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.232128][ T6006] usb 6-1: Product: syz [ 628.233878][ T6006] usb 6-1: Manufacturer: syz [ 628.235828][ T6006] usb 6-1: SerialNumber: syz [ 628.241118][ T6006] usb 6-1: config 0 descriptor?? [ 628.350292][ T59] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 628.500246][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 628.507627][ T59] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 628.511610][ T59] usb 5-1: config 0 has no interface number 0 [ 628.514238][ T59] usb 5-1: config 0 interface 2 has no altsetting 0 [ 628.519438][ T59] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 628.522663][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.525284][ T59] usb 5-1: Product: syz [ 628.526602][ T59] usb 5-1: Manufacturer: syz [ 628.528075][ T59] usb 5-1: SerialNumber: syz [ 628.531633][ T59] usb 5-1: config 0 descriptor?? [ 628.543585][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.546518][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.553917][ T6006] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.578266][ T6006] usb 6-1: USB disconnect, device number 102 [ 628.746342][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.753394][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.774258][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.816855][ T59] usb 5-1: USB disconnect, device number 92 [ 628.902048][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 629.451070][T16544] Set syz1 is full, maxelem 65536 reached [ 629.510268][ T59] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 629.671456][ T59] usb 6-1: config 16 has an invalid interface number: 168 but max is 0 [ 629.674076][ T59] usb 6-1: config 16 has no interface number 0 [ 629.676150][ T59] usb 6-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 629.679844][ T59] usb 6-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 629.683576][ T59] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 629.686930][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.694932][T16541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.699036][ T59] HFC-S_USB 6-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 631.646030][T15425] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 631.883688][T15425] usb 8-1: Using ep0 maxpacket: 32 [ 631.886902][T15425] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 631.889498][T15425] usb 8-1: config 0 has no interface number 0 [ 631.891745][T15425] usb 8-1: config 0 interface 2 has no altsetting 0 [ 631.895681][T15425] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 631.898637][T15425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.901532][T15425] usb 8-1: Product: syz [ 631.903070][T15425] usb 8-1: Manufacturer: syz [ 631.904593][T15425] usb 8-1: SerialNumber: syz [ 631.907943][T15425] usb 8-1: config 0 descriptor?? [ 631.981566][T16579] fuse: Bad value for 'group_id' [ 631.983181][T16579] fuse: Bad value for 'group_id' [ 632.314541][T13063] usb 6-1: USB disconnect, device number 103 [ 632.369584][T16572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.372608][T16572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.381253][T15425] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.397706][T15425] usb 8-1: USB disconnect, device number 103 [ 632.470259][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 632.623958][ T24] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 632.626857][ T24] usb 5-1: config 160 has no interface number 0 [ 632.628955][ T24] usb 5-1: config 160 interface 200 has no altsetting 0 [ 632.633250][ T24] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 632.636335][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.639006][ T24] usb 5-1: Product: syz [ 632.640531][ T24] usb 5-1: Manufacturer: syz [ 632.642144][ T24] usb 5-1: SerialNumber: syz [ 633.362715][T16601] input: syz0 as /devices/virtual/input/input92 [ 634.630531][ T59] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 634.780267][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 634.783149][ T59] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 634.785646][ T59] usb 8-1: config 0 has no interface number 0 [ 634.787615][ T59] usb 8-1: config 0 interface 2 has no altsetting 0 [ 634.791639][ T59] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 634.794560][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.797043][ T59] usb 8-1: Product: syz [ 634.798375][ T59] usb 8-1: Manufacturer: syz [ 634.799915][ T59] usb 8-1: SerialNumber: syz [ 634.802654][ T59] usb 8-1: config 0 descriptor?? [ 635.065133][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.068946][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.084160][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.099694][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.103002][ T59] usb 8-1: USB disconnect, device number 104 [ 635.107284][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 635.168590][ T24] usb 5-1: USB disconnect, device number 93 [ 635.240257][ T6067] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 635.341174][T16370] udevd[16370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:160.200/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 635.391734][ T6067] usb 6-1: config 16 has an invalid interface number: 168 but max is 0 [ 635.394580][ T6067] usb 6-1: config 16 has no interface number 0 [ 635.396641][ T6067] usb 6-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 635.400979][ T6067] usb 6-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 635.404680][ T6067] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 635.407612][ T6067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.412318][T16619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 635.416904][ T6067] HFC-S_USB 6-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 635.609453][T16627] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2692'. [ 635.613745][T16627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2692'. [ 635.622751][T16627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2692'. [ 636.822729][T16637] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2695'. [ 636.827546][T16637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2695'. [ 636.831103][T16637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2695'. [ 637.122912][T16640] /dev/nullb0: Can't open blockdev [ 637.144902][T16640] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.201702][T16640] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.254334][T16640] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.314258][T16640] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.388618][T15052] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.396039][T15052] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.409689][T15052] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.419591][T15052] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.800073][ T6067] usb 6-1: USB disconnect, device number 104 [ 638.360522][T16661] fuse: Bad value for 'group_id' [ 638.365851][T16661] fuse: Bad value for 'group_id' [ 638.810328][ T6067] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 638.815811][T16673] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2703'. [ 638.819277][T16673] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2703'. [ 638.822187][T16673] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2703'. [ 638.983008][ T6067] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 638.986313][ T6067] usb 6-1: config 160 has no interface number 0 [ 638.988618][ T6067] usb 6-1: config 160 interface 200 has no altsetting 0 [ 638.994426][ T6067] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 638.997338][ T6067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.000020][ T6067] usb 6-1: Product: syz [ 639.001979][ T6067] usb 6-1: Manufacturer: syz [ 639.004056][ T6067] usb 6-1: SerialNumber: syz [ 639.503974][T16681] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2705'. [ 640.000245][ T5937] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 640.150473][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 640.155064][ T5937] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 640.158442][ T5937] usb 5-1: config 0 has no interface number 0 [ 640.161205][ T5937] usb 5-1: config 0 interface 2 has no altsetting 0 [ 640.172823][ T5937] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 640.176551][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.179824][ T5937] usb 5-1: Product: syz [ 640.182214][ T5937] usb 5-1: Manufacturer: syz [ 640.184135][ T5937] usb 5-1: SerialNumber: syz [ 640.192773][ T5937] usb 5-1: config 0 descriptor?? [ 640.493128][T16686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.499324][T16686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.508274][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.526284][ T5937] usb 5-1: USB disconnect, device number 94 [ 640.563040][T16370] udevd[16370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.916260][ T6067] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.919152][ T6067] usb 6-1: MIDIStreaming interface descriptor not found [ 640.940508][ T6067] usb 6-1: USB disconnect, device number 105 [ 640.966184][T16623] udevd[16623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.945443][T16711] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2714'. [ 642.734739][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2716'. [ 642.740051][T16718] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2716'. [ 642.743243][T16718] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2716'. [ 643.125053][T16730] syz_tun: entered allmulticast mode [ 643.342024][T16732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 643.360334][ T59] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 643.741140][ T59] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 643.743744][ T59] usb 6-1: config 160 has no interface number 0 [ 643.745874][ T59] usb 6-1: config 160 interface 200 has no altsetting 0 [ 643.750087][ T59] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 643.754268][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.756935][ T59] usb 6-1: Product: syz [ 643.758376][ T59] usb 6-1: Manufacturer: syz [ 643.759875][ T59] usb 6-1: SerialNumber: syz [ 645.570199][T13683] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 645.740719][T13683] usb 8-1: Using ep0 maxpacket: 32 [ 645.744381][T13683] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 645.747173][T13683] usb 8-1: config 0 has no interface number 0 [ 645.749576][T13683] usb 8-1: config 0 interface 2 has no altsetting 0 [ 645.754548][T13683] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 645.758105][T13683] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.761626][T13683] usb 8-1: Product: syz [ 645.763049][T13683] usb 8-1: Manufacturer: syz [ 645.764916][T13683] usb 8-1: SerialNumber: syz [ 645.877107][T13683] usb 8-1: config 0 descriptor?? [ 646.152491][T16754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.156610][T16754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.164886][T13683] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.191419][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.194419][ T59] usb 6-1: MIDIStreaming interface descriptor not found [ 646.199018][T13683] usb 8-1: USB disconnect, device number 105 [ 646.293420][ T59] usb 6-1: USB disconnect, device number 106 [ 646.563479][T16764] syz_tun: entered allmulticast mode [ 646.914915][T16764] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 647.000786][T16767] syz_tun: entered allmulticast mode [ 647.085371][T16771] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 647.103425][T16774] syz_tun: entered allmulticast mode [ 647.193301][T16774] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 647.949293][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2728'. [ 649.390372][T13683] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 649.540272][T13683] usb 8-1: Using ep0 maxpacket: 32 [ 649.543502][T13683] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 649.548715][T13683] usb 8-1: config 0 has no interface number 0 [ 649.558237][T13683] usb 8-1: config 0 interface 2 has no altsetting 0 [ 649.564971][T13683] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 649.568863][T13683] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.581180][T13683] usb 8-1: Product: syz [ 649.582958][T13683] usb 8-1: Manufacturer: syz [ 649.584988][T13683] usb 8-1: SerialNumber: syz [ 649.591950][T13683] usb 8-1: config 0 descriptor?? [ 649.876748][T16800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.886881][T16800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.901186][T13683] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.920577][T13683] usb 8-1: USB disconnect, device number 106 [ 650.230303][ T29] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 650.390261][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 650.394688][ T29] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 650.398175][ T29] usb 5-1: config 0 has no interface number 0 [ 650.401340][ T29] usb 5-1: config 0 interface 2 has no altsetting 0 [ 650.406629][ T29] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 650.410041][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.414032][ T29] usb 5-1: Product: syz [ 650.415900][ T29] usb 5-1: Manufacturer: syz [ 650.418734][ T29] usb 5-1: SerialNumber: syz [ 650.423417][ T29] usb 5-1: config 0 descriptor?? [ 650.700322][ T5993] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 650.732369][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.737865][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.745576][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.772767][ T29] usb 5-1: USB disconnect, device number 95 [ 650.803786][T16388] udevd[16388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.850204][ T5993] usb 8-1: Using ep0 maxpacket: 32 [ 650.855083][ T5993] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 650.857824][ T5993] usb 8-1: config 0 has no interface number 0 [ 650.859983][ T5993] usb 8-1: config 0 interface 2 has no altsetting 0 [ 650.869881][ T5993] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 650.873299][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.876028][ T5993] usb 8-1: Product: syz [ 650.877512][ T5993] usb 8-1: Manufacturer: syz [ 650.879133][ T5993] usb 8-1: SerialNumber: syz [ 650.909521][ T5993] usb 8-1: config 0 descriptor?? [ 651.131806][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.137387][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.148510][ T5993] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.175598][ T5993] usb 8-1: USB disconnect, device number 107 [ 651.199619][T16623] udevd[16623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.690418][T13683] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 651.861867][T13683] usb 6-1: config 16 has an invalid interface number: 168 but max is 0 [ 651.864652][T13683] usb 6-1: config 16 has no interface number 0 [ 651.867834][T13683] usb 6-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 651.872942][T13683] usb 6-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 651.877715][T13683] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 651.881519][T13683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.887787][T16830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.890094][T13683] HFC-S_USB 6-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 652.491441][T16842] fuse: Bad value for 'fd' [ 652.558233][T16846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2746'. [ 652.562489][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'. [ 653.628684][T16856] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 654.315516][T13683] usb 6-1: USB disconnect, device number 107 [ 654.470476][ T6067] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 654.641974][ T6067] usb 5-1: Using ep0 maxpacket: 32 [ 654.645802][ T6067] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.649326][ T6067] usb 5-1: config 0 has no interface number 0 [ 654.651551][ T6067] usb 5-1: config 0 interface 2 has no altsetting 0 [ 654.658220][ T6067] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 654.662550][ T6067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.666013][ T6067] usb 5-1: Product: syz [ 654.667657][ T6067] usb 5-1: Manufacturer: syz [ 654.669694][ T6067] usb 5-1: SerialNumber: syz [ 654.677662][ T6067] usb 5-1: config 0 descriptor?? [ 654.972334][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.975509][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.991347][ T6067] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.047422][ T6067] usb 5-1: USB disconnect, device number 96 [ 655.074197][T16623] udevd[16623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.272909][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2754'. [ 655.662193][T16888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 655.811667][T16891] binfmt_misc: register: failed to install interpreter file ./file0 [ 656.680226][T13683] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 656.831807][T13683] usb 7-1: config 16 has an invalid interface number: 168 but max is 0 [ 656.835325][T13683] usb 7-1: config 16 has no interface number 0 [ 656.838203][T13683] usb 7-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 656.843480][T13683] usb 7-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 656.848087][T13683] usb 7-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 656.852222][T13683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.858313][T16900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.864891][T13683] HFC-S_USB 7-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 657.252475][T16906] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 659.180829][T16930] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 659.288131][T13683] usb 7-1: USB disconnect, device number 119 [ 659.936007][T16940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2766'. [ 660.150260][ T5993] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 660.300702][ T5993] usb 8-1: Using ep0 maxpacket: 32 [ 660.306383][ T5993] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 660.309598][ T5993] usb 8-1: config 0 has no interface number 0 [ 660.311610][ T5993] usb 8-1: config 0 interface 2 has no altsetting 0 [ 660.315336][ T5993] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 660.318609][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.322201][ T5993] usb 8-1: Product: syz [ 660.340340][ T5993] usb 8-1: Manufacturer: syz [ 660.342383][ T5993] usb 8-1: SerialNumber: syz [ 660.361297][ T5993] usb 8-1: config 0 descriptor?? [ 660.669753][T16938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.673429][T16938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.775579][ T5993] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.881245][ T5993] usb 8-1: USB disconnect, device number 108 [ 661.041670][T16960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2773'. [ 661.743307][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 663.038882][T16967] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 663.377777][T16987] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 663.699688][T16991] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 664.742749][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2783'. [ 665.748543][T17009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2785'. [ 666.520254][T15425] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 666.850374][T15425] usb 5-1: Using ep0 maxpacket: 32 [ 667.537408][T15425] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 667.553660][T15425] usb 5-1: config 0 has no interface number 0 [ 667.556178][T15425] usb 5-1: config 0 interface 2 has no altsetting 0 [ 667.566639][T15425] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 667.571017][T15425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.574666][T15425] usb 5-1: Product: syz [ 667.576540][T15425] usb 5-1: Manufacturer: syz [ 667.578495][T15425] usb 5-1: SerialNumber: syz [ 667.590915][T15425] usb 5-1: config 0 descriptor?? [ 667.817031][T17036] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 667.880371][T17012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.884579][T17012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.893037][T15425] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.974195][T15425] usb 5-1: USB disconnect, device number 97 [ 668.132067][T17042] udevd[17042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.900287][ T5809] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 669.124428][T17061] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 669.181821][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 669.754013][ T5809] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 669.756702][ T5809] usb 7-1: config 0 has no interface number 0 [ 669.758766][ T5809] usb 7-1: config 0 interface 2 has no altsetting 0 [ 669.763173][ T5809] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 669.766162][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.768780][ T5809] usb 7-1: Product: syz [ 669.770293][ T5809] usb 7-1: Manufacturer: syz [ 669.771880][ T5809] usb 7-1: SerialNumber: syz [ 669.778705][ T5809] usb 7-1: config 0 descriptor?? [ 670.092557][T17049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.095855][T17049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.105911][ T5809] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.135498][ T5809] usb 7-1: USB disconnect, device number 120 [ 670.178892][T17040] udevd[17040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.731277][T17097] Driver unsupported XDP return value 0 on prog (id 305) dev N/A, expect packet loss! [ 672.254626][T17110] fuse: Bad value for 'fd' [ 672.316199][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'. [ 672.575409][T17115] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 674.937210][T17142] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 676.527968][T17166] fuse: Bad value for 'fd' [ 676.591531][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 676.690483][ T59] usb 6-1: new low-speed USB device number 108 using dummy_hcd [ 676.841632][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 676.844101][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 676.847471][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.851515][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 676.855082][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 676.859493][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 676.862111][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 676.865679][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.869350][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 676.873214][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 676.877642][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 676.880081][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 676.883706][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.887550][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 676.892529][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 676.898321][ T59] usb 6-1: string descriptor 0 read error: -22 [ 676.900605][ T59] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 676.903564][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.911557][ T59] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 677.102958][T17179] binfmt_misc: register: failed to install interpreter file ./file0 [ 678.850242][ T5809] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 679.012039][ T5809] usb 7-1: config 16 has an invalid interface number: 168 but max is 0 [ 679.014435][ T5809] usb 7-1: config 16 has no interface number 0 [ 679.017804][ T5809] usb 7-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 679.042227][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.084824][ T5809] HFC-S_USB 7-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 679.608276][T17214] fuse: Bad value for 'fd' [ 679.632711][T17215] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 679.637559][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 679.641141][T17215] netlink: 'syz.3.2833': attribute type 5 has an invalid length. [ 679.644262][T17215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2833'. [ 679.675229][T17215] geneve2: entered promiscuous mode [ 679.677327][T17215] geneve2: entered allmulticast mode [ 679.684585][ T4761] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 679.688256][ T4761] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 679.699284][ T4761] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 679.714728][ T4761] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 679.721218][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'. [ 680.382477][T17226] input: syz1 as /devices/virtual/input/input93 [ 681.270873][ T5809] usb 6-1: USB disconnect, device number 108 [ 681.470945][ T5809] usb 7-1: USB disconnect, device number 121 [ 681.576101][T17240] input: syz1 as /devices/virtual/input/input94 [ 681.670404][T14643] Bluetooth: hci0: command tx timeout [ 681.857070][T17243] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 681.927145][T17244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 682.868503][T17253] input: syz1 as /devices/virtual/input/input95 [ 683.030477][T17259] fuse: Bad value for 'fd' [ 683.067426][T17259] ipip0: entered promiscuous mode [ 683.069503][T17259] ipip0: entered allmulticast mode [ 683.098074][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 683.451950][T17261] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 684.220352][T13683] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 684.372792][T13683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 684.375892][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 684.382247][T13683] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.387002][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 684.393517][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 684.399572][T13683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 684.402843][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 684.407240][T13683] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.412865][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 684.417386][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 684.423979][T13683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 684.427468][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 684.432609][ T59] usb 8-1: new full-speed USB device number 109 using dummy_hcd [ 684.437871][T13683] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.443192][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 684.447959][T13683] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 684.463841][T13683] usb 5-1: string descriptor 0 read error: -22 [ 684.466570][T13683] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 684.472193][T13683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.494408][T13683] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 684.581990][ T59] usb 8-1: config 16 has an invalid interface number: 168 but max is 0 [ 684.585219][ T59] usb 8-1: config 16 has no interface number 0 [ 684.587706][ T59] usb 8-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 684.594680][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.602023][ T59] HFC-S_USB 8-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 684.666864][T17279] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 685.016562][T17283] input: syz1 as /devices/virtual/input/input96 [ 685.262323][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.264462][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.647472][T17290] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 686.038824][T17292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2854'. [ 686.175434][T17298] input: syz1 as /devices/virtual/input/input97 [ 686.483419][T17300] input: syz1 as /devices/virtual/input/input98 [ 687.042131][ T6006] usb 8-1: USB disconnect, device number 109 [ 687.776155][T17317] input: syz1 as /devices/virtual/input/input99 [ 688.286392][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 688.290120][T17322] netlink: 'syz.3.2861': attribute type 5 has an invalid length. [ 688.294455][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2861'. [ 688.791227][T15425] usb 5-1: USB disconnect, device number 98 [ 688.851817][T17332] input: syz1 as /devices/virtual/input/input100 [ 689.106352][T17343] ================================================================== [ 689.109236][T17343] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 689.112474][T17343] Read of size 8 at addr ffff888077abd630 by task syz.3.2866/17343 [ 689.117593][T17343] [ 689.118662][T17343] CPU: 0 UID: 0 PID: 17343 Comm: syz.3.2866 Not tainted syzkaller #0 PREEMPT(full) [ 689.118686][T17343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 689.118700][T17343] Call Trace: [ 689.118709][T17343] [ 689.118717][T17343] dump_stack_lvl+0x116/0x1f0 [ 689.118756][T17343] print_report+0xcd/0x630 [ 689.118783][T17343] ? __virt_addr_valid+0x81/0x610 [ 689.118806][T17343] ? __phys_addr+0xe8/0x180 [ 689.118834][T17343] ? sysfs_remove_file_ns+0x63/0x70 [ 689.118853][T17343] kasan_report+0xe0/0x110 [ 689.118885][T17343] ? sysfs_remove_file_ns+0x63/0x70 [ 689.118910][T17343] sysfs_remove_file_ns+0x63/0x70 [ 689.118931][T17343] driver_remove_file+0x4a/0x60 [ 689.118971][T17343] bus_remove_driver+0x224/0x2c0 [ 689.118994][T17343] driver_unregister+0x76/0xb0 [ 689.119037][T17343] comedi_device_detach_locked+0x12f/0xa50 [ 689.119073][T17343] do_devconfig_ioctl+0x555/0x710 [ 689.119097][T17343] ? __mutex_lock+0x1c5/0x1060 [ 689.119121][T17343] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 689.119149][T17343] ? kasan_save_stack+0x42/0x60 [ 689.119171][T17343] ? kasan_save_stack+0x33/0x60 [ 689.119193][T17343] ? kasan_save_track+0x14/0x30 [ 689.119215][T17343] ? __kasan_save_free_info+0x3b/0x60 [ 689.119232][T17343] ? __kasan_slab_free+0x5f/0x80 [ 689.119254][T17343] ? kfree+0x2b8/0x6d0 [ 689.119270][T17343] ? tomoyo_path_number_perm+0x470/0x580 [ 689.119299][T17343] ? security_file_ioctl_compat+0x9b/0x240 [ 689.119322][T17343] comedi_unlocked_ioctl+0x165d/0x2f00 [ 689.119351][T17343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 689.119383][T17343] ? kasan_quarantine_put+0x10a/0x240 [ 689.119406][T17343] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.119430][T17343] ? find_held_lock+0x2b/0x80 [ 689.119450][T17343] ? tomoyo_path_number_perm+0x295/0x580 [ 689.119481][T17343] ? tomoyo_path_number_perm+0x18d/0x580 [ 689.119512][T17343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.119542][T17343] comedi_compat_ioctl+0x1d0/0x990 [ 689.119568][T17343] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 689.119594][T17343] ? __sanitizer_cov_trace_switch+0x54/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 689.119623][T17343] ? do_vfs_ioctl+0x128/0x14f0 [ 689.119673][T17343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 689.119707][T17343] ? find_held_lock+0x2b/0x80 [ 689.119727][T17343] ? hook_file_ioctl_common+0x145/0x410 [ 689.119750][T17343] ? __fget_files+0x20e/0x3c0 [ 689.119769][T17343] ? __ia32_compat_sys_openat+0xf0/0x210 [ 689.119800][T17343] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 689.119825][T17343] __ia32_compat_sys_ioctl+0x242/0x370 [ 689.119854][T17343] __do_fast_syscall_32+0x7c/0x300 [ 689.119886][T17343] do_fast_syscall_32+0x32/0x80 [ 689.119913][T17343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.119938][T17343] RIP: 0023:0xf7f57579 [ 689.119953][T17343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 689.119971][T17343] RSP: 002b:00000000f542555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 689.119989][T17343] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 689.120001][T17343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.120012][T17343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.120023][T17343] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 689.120035][T17343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.120053][T17343] [ 689.120060][T17343] [ 689.231342][T17343] Allocated by task 17062: [ 689.232702][T17343] kasan_save_stack+0x33/0x60 [ 689.234197][T17343] kasan_save_track+0x14/0x30 [ 689.235647][T17343] __kasan_kmalloc+0xaa/0xb0 [ 689.237083][T17343] ip_set_create+0x346/0x14d0 [ 689.238553][T17343] nfnetlink_rcv_msg+0x9fc/0x1200 [ 689.240141][T17343] netlink_rcv_skb+0x158/0x420 [ 689.241662][T17343] nfnetlink_rcv+0x1b3/0x430 [ 689.243125][T17343] netlink_unicast+0x5aa/0x870 [ 689.244633][T17343] netlink_sendmsg+0x8c8/0xdd0 [ 689.246104][T17343] ____sys_sendmsg+0xa98/0xc70 [ 689.247586][T17343] ___sys_sendmsg+0x134/0x1d0 [ 689.249039][T17343] __sys_sendmsg+0x16d/0x220 [ 689.250517][T17343] __do_fast_syscall_32+0x7c/0x300 [ 689.252106][T17343] do_fast_syscall_32+0x32/0x80 [ 689.253803][T17343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.256082][T17343] [ 689.257068][T17343] Freed by task 17062: [ 689.258612][T17343] kasan_save_stack+0x33/0x60 [ 689.260132][T17343] kasan_save_track+0x14/0x30 [ 689.261612][T17343] __kasan_save_free_info+0x3b/0x60 [ 689.263208][T17343] __kasan_slab_free+0x5f/0x80 [ 689.264672][T17343] kfree+0x2b8/0x6d0 [ 689.265849][T17343] ip_set_create+0x857/0x14d0 [ 689.267314][T17343] nfnetlink_rcv_msg+0x9fc/0x1200 [ 689.268900][T17343] netlink_rcv_skb+0x158/0x420 [ 689.270366][T17343] nfnetlink_rcv+0x1b3/0x430 [ 689.271854][T17343] netlink_unicast+0x5aa/0x870 [ 689.273359][T17343] netlink_sendmsg+0x8c8/0xdd0 [ 689.274834][T17343] ____sys_sendmsg+0xa98/0xc70 [ 689.276337][T17343] ___sys_sendmsg+0x134/0x1d0 [ 689.277791][T17343] __sys_sendmsg+0x16d/0x220 [ 689.279237][T17343] __do_fast_syscall_32+0x7c/0x300 [ 689.280882][T17343] do_fast_syscall_32+0x32/0x80 [ 689.282393][T17343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.284357][T17343] [ 689.285136][T17343] The buggy address belongs to the object at ffff888077abd600 [ 689.285136][T17343] which belongs to the cache kmalloc-256 of size 256 [ 689.289413][T17343] The buggy address is located 48 bytes inside of [ 689.289413][T17343] freed 256-byte region [ffff888077abd600, ffff888077abd700) [ 689.293553][T17343] [ 689.294321][T17343] The buggy address belongs to the physical page: [ 689.296285][T17343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077abd200 pfn:0x77abc [ 689.299320][T17343] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 689.301895][T17343] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 689.304476][T17343] page_type: f5(slab) [ 689.305721][T17343] raw: 04fff00000000240 ffff88801b442b40 ffffea00012d0890 ffffea0001984f90 [ 689.308335][T17343] raw: ffff888077abd200 000000000010000d 00000000f5000000 0000000000000000 [ 689.310956][T17343] head: 04fff00000000240 ffff88801b442b40 ffffea00012d0890 ffffea0001984f90 [ 689.313570][T17343] head: ffff888077abd200 000000000010000d 00000000f5000000 0000000000000000 [ 689.316194][T17343] head: 04fff00000000001 ffffea0001deaf01 00000000ffffffff 00000000ffffffff [ 689.318814][T17343] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 689.321481][T17343] page dumped because: kasan: bad access detected [ 689.323422][T17343] page_owner tracks the page as allocated [ 689.325174][T17343] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9308, tgid 9303 (syz.2.889), ts 176535584674, free_ts 176491230543 [ 689.331423][T17343] post_alloc_hook+0x1c0/0x230 [ 689.332872][T17343] get_page_from_freelist+0x10a3/0x3a30 [ 689.334539][T17343] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 689.336334][T17343] alloc_pages_mpol+0x1fb/0x550 [ 689.337830][T17343] new_slab+0x24a/0x360 [ 689.339106][T17343] ___slab_alloc+0xd79/0x1a50 [ 689.340578][T17343] __slab_alloc.constprop.0+0x63/0x110 [ 689.342308][T17343] __kmalloc_noprof+0x501/0x880 [ 689.343872][T17343] io_cache_alloc_new+0x45/0xf0 [ 689.345780][T17343] __io_prep_rw+0x21d/0x1090 [ 689.347401][T17343] io_prep_rw+0x76/0x2c0 [ 689.348725][T17343] io_prep_readv+0x20/0xa0 [ 689.350084][T17343] io_submit_sqes+0x855/0x2710 [ 689.351560][T17343] __do_sys_io_uring_enter+0xd69/0x1630 [ 689.353285][T17343] __do_fast_syscall_32+0x7c/0x300 [ 689.354866][T17343] do_fast_syscall_32+0x32/0x80 [ 689.356380][T17343] page last free pid 28 tgid 28 stack trace: [ 689.358193][T17343] __free_frozen_pages+0x7df/0x1160 [ 689.359840][T17343] rcu_core+0x79c/0x1530 [ 689.361181][T17343] handle_softirqs+0x219/0x8e0 [ 689.362653][T17343] run_ksoftirqd+0x3a/0x60 [ 689.364033][T17343] smpboot_thread_fn+0x3f7/0xae0 [ 689.365605][T17343] kthread+0x3c5/0x780 [ 689.366912][T17343] ret_from_fork+0x675/0x7d0 [ 689.368425][T17343] ret_from_fork_asm+0x1a/0x30 [ 689.369963][T17343] [ 689.370754][T17343] Memory state around the buggy address: [ 689.372531][T17343] ffff888077abd500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 689.375036][T17343] ffff888077abd580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 689.377557][T17343] >ffff888077abd600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 689.380072][T17343] ^ [ 689.381869][T17343] ffff888077abd680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 689.384387][T17343] ffff888077abd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 689.386879][T17343] ================================================================== [ 689.480268][T17343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.483138][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.3.2866 Not tainted syzkaller #0 PREEMPT(full) [ 689.486774][T17343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 689.490982][T17343] Call Trace: [ 689.492297][T17343] [ 689.493434][T17343] dump_stack_lvl+0x3d/0x1f0 [ 689.495201][T17343] vpanic+0x640/0x6f0 [ 689.496779][T17343] panic+0xca/0xd0 [ 689.498257][T17343] ? __pfx_panic+0x10/0x10 [ 689.500002][T17343] ? sysfs_remove_file_ns+0x63/0x70 [ 689.502082][T17343] ? preempt_schedule_common+0x44/0xc0 [ 689.504153][T17343] ? preempt_schedule_thunk+0x16/0x30 [ 689.506168][T17343] check_panic_on_warn+0xab/0xb0 [ 689.508085][T17343] end_report+0x107/0x170 [ 689.509737][T17343] kasan_report+0xee/0x110 [ 689.511472][T17343] ? sysfs_remove_file_ns+0x63/0x70 [ 689.513443][T17343] sysfs_remove_file_ns+0x63/0x70 [ 689.515347][T17343] driver_remove_file+0x4a/0x60 [ 689.517208][T17343] bus_remove_driver+0x224/0x2c0 [ 689.519140][T17343] driver_unregister+0x76/0xb0 [ 689.521026][T17343] comedi_device_detach_locked+0x12f/0xa50 [ 689.523395][T17343] do_devconfig_ioctl+0x555/0x710 [ 689.525476][T17343] ? __mutex_lock+0x1c5/0x1060 [ 689.527502][T17343] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 689.529802][T17343] ? kasan_save_stack+0x42/0x60 [ 689.531861][T17343] ? kasan_save_stack+0x33/0x60 [ 689.533876][T17343] ? kasan_save_track+0x14/0x30 [ 689.535891][T17343] ? __kasan_save_free_info+0x3b/0x60 [ 689.538087][T17343] ? __kasan_slab_free+0x5f/0x80 [ 689.540141][T17343] ? kfree+0x2b8/0x6d0 [ 689.541865][T17343] ? tomoyo_path_number_perm+0x470/0x580 [ 689.544167][T17343] ? security_file_ioctl_compat+0x9b/0x240 [ 689.546493][T17343] comedi_unlocked_ioctl+0x165d/0x2f00 [ 689.548763][T17343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 689.551196][T17343] ? kasan_quarantine_put+0x10a/0x240 [ 689.553035][T17343] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.554848][T17343] ? find_held_lock+0x2b/0x80 [ 689.556324][T17343] ? tomoyo_path_number_perm+0x295/0x580 [ 689.559091][T17343] ? tomoyo_path_number_perm+0x18d/0x580 [ 689.561072][T17343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.562917][T17343] comedi_compat_ioctl+0x1d0/0x990 [ 689.564718][T17343] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 689.566819][T17343] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 689.570022][T17343] ? do_vfs_ioctl+0x128/0x14f0 [ 689.571515][T17343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 689.573314][T17343] ? find_held_lock+0x2b/0x80 [ 689.574764][T17343] ? hook_file_ioctl_common+0x145/0x410 [ 689.576860][T17343] ? __fget_files+0x20e/0x3c0 [ 689.579489][T17343] ? __ia32_compat_sys_openat+0xf0/0x210 [ 689.581416][T17343] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 689.583334][T17343] __ia32_compat_sys_ioctl+0x242/0x370 [ 689.585084][T17343] __do_fast_syscall_32+0x7c/0x300 [ 689.586859][T17343] do_fast_syscall_32+0x32/0x80 [ 689.589048][T17343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.590931][T17343] RIP: 0023:0xf7f57579 [ 689.592417][T17343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 689.599234][T17343] RSP: 002b:00000000f542555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 689.602102][T17343] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 689.604691][T17343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.608096][T17343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.612180][T17343] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 689.614639][T17343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.618005][T17343] [ 689.620683][T17343] Kernel Offset: disabled [ 689.622920][T17343] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:16:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85268e75 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc9000e1df1f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3730383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9adc5da0 R15=ffffffff85268e10 RIP=ffffffff85268e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809780d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007000 CR3=000000004f4e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000216b0cd RBX=0000000000000001 RCX=ffffffff8b5d72a9 RDX=0000000000000000 RSI=ffffffff8da28539 RDI=ffffffff8bf075c0 RBP=ffffed1003b5b490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dada480 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3c9ae2 CR3=00000000678c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100a2cfba7 RBX=00000000000000b0 RCX=ffffffff820889e7 RDX=ffff888022bd2480 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88805167dd38 RSP=ffffc90003247800 R8 =0000000000000004 R9 =0000000000000109 R10=00000000000000b0 R11=0000000000000001 R12=00000000000000b0 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bc53f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000004c175000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7486ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000014cab3b RBX=0000000000000003 RCX=ffffffff8b5d72a9 RDX=0000000000000000 RSI=ffffffff8da28539 RDI=ffffffff8bf075c0 RBP=ffffed10037e4000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf20000 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080521000 CR3=000000006cfb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000