last executing test programs: 4m18.955738654s ago: executing program 2 (id=730): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') 4m18.955681117s ago: executing program 2 (id=731): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x40000}, 0x20) 4m18.934269054s ago: executing program 2 (id=734): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x68000) 4m18.884731586s ago: executing program 2 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) 4m18.833614655s ago: executing program 2 (id=740): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='attr/current\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000002540)=[{0x6, 0x1, 0x5, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1, 0xfffffffd, 0x0) 4m18.635267522s ago: executing program 2 (id=748): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) 4m18.592420957s ago: executing program 32 (id=748): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) 4m5.673533922s ago: executing program 0 (id=1038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m5.594487149s ago: executing program 0 (id=1039): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 4m5.594370894s ago: executing program 0 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) 4m5.490828609s ago: executing program 0 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 4m5.42558811s ago: executing program 0 (id=1046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x401, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x8, 0x3, 0x0, 0x10000, 0x1a, "4415264a88b82c521113fb235902af2556c6b6"}) 4m5.213933882s ago: executing program 0 (id=1055): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 4m5.180655719s ago: executing program 33 (id=1055): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 3m47.277044965s ago: executing program 1 (id=1494): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchown(0xffffffffffffffff, 0x0, 0x0) 3m47.134264197s ago: executing program 1 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0xc008010) 3m47.13367075s ago: executing program 1 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) 3m47.086953377s ago: executing program 1 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 3m47.039016975s ago: executing program 1 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 3m46.73549076s ago: executing program 1 (id=1504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m46.713031548s ago: executing program 34 (id=1504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m42.925504859s ago: executing program 5 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m42.855245006s ago: executing program 5 (id=1620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, 0x0) 3m42.79422828s ago: executing program 5 (id=1624): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 3m42.745189886s ago: executing program 5 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) 3m42.74506622s ago: executing program 5 (id=1628): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 3m42.375679703s ago: executing program 5 (id=1636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m42.341959388s ago: executing program 35 (id=1636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23.761277417s ago: executing program 3 (id=6344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000100)=r0, 0x4) 23.760921756s ago: executing program 3 (id=6345): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x5000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x10000, 0x8}) 23.593440195s ago: executing program 3 (id=6346): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 23.507961805s ago: executing program 3 (id=6347): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) 23.505701995s ago: executing program 3 (id=6348): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000080)={0x0}) 23.263379226s ago: executing program 3 (id=6355): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 23.176734878s ago: executing program 36 (id=6355): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 2.112823237s ago: executing program 6 (id=6863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) 2.074285775s ago: executing program 8 (id=6865): r0 = syz_io_uring_setup(0x534, &(0x7f0000000180)={0x0, 0x7374, 0x0, 0x8200, 0xfd}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) io_uring_enter(r0, 0x68c0, 0x4646, 0x4, 0x0, 0x0) 1.990309519s ago: executing program 8 (id=6867): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000a6f000/0x3000)=nil, 0x3000}, 0x1}) 1.122930697s ago: executing program 8 (id=6868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000140)=0x8) 862.751259ms ago: executing program 6 (id=6869): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 852.849468ms ago: executing program 6 (id=6871): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 829.83978ms ago: executing program 6 (id=6873): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0}, 0x2020) r2 = epoll_create(0x749) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x20000005}) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xfffffffffffffff5, r1}, 0x10) 790.244725ms ago: executing program 6 (id=6876): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 315.478026ms ago: executing program 7 (id=6888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101800, 0x81) r0 = syz_io_uring_setup(0x1e1a, &(0x7f0000000440)={0x0, 0x430, 0x10100, 0x0, 0x83}, &(0x7f0000002000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r0, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 291.625169ms ago: executing program 8 (id=6890): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 290.951285ms ago: executing program 7 (id=6891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x80}) close(r1) 286.796393ms ago: executing program 4 (id=6892): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 255.31127ms ago: executing program 8 (id=6893): r0 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b0a, &(0x7f00000003c0)={0x0, 0xee28, 0x800, 0x0, 0x82f0, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 253.351286ms ago: executing program 4 (id=6894): r0 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5a, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 146.666859ms ago: executing program 7 (id=6895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) 145.838248ms ago: executing program 7 (id=6896): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 133.63692ms ago: executing program 8 (id=6897): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(r0) 117.101122ms ago: executing program 6 (id=6898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x14}, @mpls={[], @ipv6=@icmpv6={0xc, 0x6, "2c6eab", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x9}}}}}, 0x3e) 64.670598ms ago: executing program 4 (id=6899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)={0x30, r1, 0xf03, 0x70bd2d, 0xfffffffe, {}, [@NLBL_MGMT_A_DOMAIN={0x1a, 0x1, 'cpuset.effective_mems\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) 54.586808ms ago: executing program 4 (id=6900): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x6a}, 0x14) 51.866007ms ago: executing program 7 (id=6901): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2c020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f0000000580)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 388.439µs ago: executing program 4 (id=6902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 125.317µs ago: executing program 7 (id=6903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000380)=0x3) 0s ago: executing program 4 (id=6904): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): USB device number 6 using dummy_hcd [ 210.886006][ T53] usb 12-1: Using ep0 maxpacket: 8 [ 210.889204][ T53] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.892352][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.895490][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.900064][ T53] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.904226][ T53] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.907552][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.120336][ T53] usb 12-1: GET_CAPABILITIES returned 0 [ 211.122152][ T53] usbtmc 12-1:16.0: can't read capabilities [ 211.321689][ T840] usb 12-1: USB disconnect, device number 6 [ 211.547865][T15697] unknown channel width for channel at 909000KHz? [ 211.550009][T15697] unknown channel width for channel at 909000KHz? [ 211.552110][T15697] unknown channel width for channel at 909000KHz? [ 211.670206][T15703] netlink: 'syz.3.4313': attribute type 4 has an invalid length. [ 212.818063][T15743] input: syz1 as /devices/virtual/input/input32 [ 212.902872][T15750] kernel read not supported for file /eth0 (pid: 15750 comm: syz.3.4334) [ 213.031784][T15756] 9pnet: p9_errstr2errno: server reported unknown error @cF S+v3c/f [ 213.160076][T15767] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4343'. [ 213.211906][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4344'. [ 213.704304][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 213.762398][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4370'. [ 213.769897][T15825] team_slave_0: left promiscuous mode [ 213.772085][T15825] team_slave_1: left promiscuous mode [ 213.819720][ T53] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 213.886972][T15825] team0 (unregistering): Port device team_slave_0 removed [ 213.893895][T15825] team0 (unregistering): Port device team_slave_1 removed [ 213.921656][T15829] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 213.978178][ T53] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.982711][ T53] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.986793][ T53] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.989826][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.994914][T15808] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.999090][ T53] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.209552][ T2087] usb 12-1: USB disconnect, device number 7 [ 214.404679][T15855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4384'. [ 214.499345][T15866] syzkaller1: entered promiscuous mode [ 214.501641][T15866] syzkaller1: entered allmulticast mode [ 214.525730][T15871] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4392'. [ 214.775286][T15898] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4405'. [ 214.783535][T15900] mkiss: ax0: crc mode is auto. [ 214.817132][T15904] input: syz0 as /devices/virtual/input/input34 [ 214.885155][T15911] trusted_key: syz.3.4412 sent an empty control message without MSG_MORE. [ 214.887278][ T54] kernel write not supported for file [eventfd] (pid: 54 comm: kworker/3:1) [ 214.925083][T15916] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4414'. [ 215.214295][T15935] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4420'. [ 215.391442][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'. [ 216.559767][T15996] loop4: detected capacity change from 0 to 7 [ 216.562393][T15996] Dev loop4: unable to read RDB block 7 [ 216.564009][T15996] loop4: AHDI p1 [ 216.565164][T15996] loop4: partition table partially beyond EOD, truncated [ 216.596375][ T839] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 216.746040][ T839] usb 9-1: Using ep0 maxpacket: 16 [ 216.749986][ T839] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 216.758030][ T839] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.763007][ T839] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.767814][ T839] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.773415][ T839] usb 9-1: config 7 interface 0 has no altsetting 0 [ 216.776372][ T839] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 216.780040][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.197376][ T839] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:7.0/0003:0458:5010.000E/input/input36 [ 217.259853][ T839] kye 0003:0458:5010.000E: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 218.247851][ C2] kye 0003:0458:5010.000E: usb_submit_urb(ctrl) failed: -1 [ 218.540471][T16035] loop3: detected capacity change from 0 to 7 [ 218.800091][T16035] Dev loop3: unable to read RDB block 7 [ 218.801881][T16035] loop3: unable to read partition table [ 218.803756][T16035] loop3: partition table beyond EOD, truncated [ 218.805652][T16035] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 219.032611][ T840] usb 9-1: USB disconnect, device number 12 [ 219.365608][T16095] input: syz0 as /devices/virtual/input/input37 [ 219.855540][T16140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4515'. [ 219.927083][T16146] syzkaller1: entered promiscuous mode [ 219.929594][T16146] syzkaller1: entered allmulticast mode [ 220.045554][T16157] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.054902][T16157] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 220.306018][ T840] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 220.328151][ T5844] hid_parser_main: 5 callbacks suppressed [ 220.328170][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.333530][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.336800][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.339923][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.342857][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.346157][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.349180][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.353032][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.356170][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.359171][ T5844] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 220.369848][ T5844] hid-generic 0003:0004:0000.000F: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 220.457752][ T840] usb 12-1: Using ep0 maxpacket: 8 [ 220.461951][ T840] usb 12-1: config 0 interface 0 has no altsetting 0 [ 220.465296][ T840] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.469568][ T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.474766][ T840] usb 12-1: config 0 descriptor?? [ 220.875807][T16185] input: syz0 as /devices/virtual/input/input38 [ 220.889958][ T840] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 220.921557][T16190] netlink: zone id is out of range [ 220.923652][T16190] netlink: zone id is out of range [ 220.925783][T16190] netlink: zone id is out of range [ 220.928410][T16190] netlink: zone id is out of range [ 220.930656][T16190] netlink: zone id is out of range [ 220.951962][T16190] netlink: set zone limit has 4 unknown bytes [ 220.958682][T16190] netlink: del zone limit has 4 unknown bytes [ 221.087632][ T5844] usb 12-1: USB disconnect, device number 8 [ 222.608648][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 231.390148][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.421974][T16243] netlink: 'syz.4.4545': attribute type 16 has an invalid length. [ 231.424385][T16243] netlink: 'syz.4.4545': attribute type 17 has an invalid length. [ 231.442066][T16243] dummy0: left promiscuous mode [ 231.445264][T16243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.515267][ T5335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.519838][ T5335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.525138][ T5335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.532192][ T5335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.537204][ T5335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.693467][T16246] chnl_net:caif_netlink_parms(): no params data found [ 231.765955][ T6058] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 231.816878][T16268] block nbd3: NBD_DISCONNECT [ 231.821137][T16268] block nbd3: Send disconnect failed -22 [ 231.824433][T16266] block nbd3: Disconnected due to user request. [ 231.827940][T16266] block nbd3: shutting down sockets [ 231.838787][T16246] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.841339][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.844121][T16246] bridge_slave_0: entered allmulticast mode [ 231.846965][T16246] bridge_slave_0: entered promiscuous mode [ 231.851341][T16246] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.854194][T16246] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.857702][T16246] bridge_slave_1: entered allmulticast mode [ 231.858310][T16275] loop7: detected capacity change from 0 to 7 [ 231.860368][T16246] bridge_slave_1: entered promiscuous mode [ 231.901601][T16246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.907202][T16246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.916019][ T6058] usb 9-1: Using ep0 maxpacket: 8 [ 231.919620][ T6058] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.923281][ T6058] usb 9-1: config 0 has no interface number 0 [ 231.925504][ T6058] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.929432][ T6058] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.934287][ T6058] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.938798][ T6058] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.944131][ T6058] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.954259][ T6058] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.960111][ T6058] usb 9-1: config 0 descriptor?? [ 231.970684][ T6058] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 231.971198][T16246] team0: Port device team_slave_0 added [ 231.980227][T16246] team0: Port device team_slave_1 added [ 232.017885][T16275] Dev loop7: unable to read RDB block 7 [ 232.020159][T16275] loop7: unable to read partition table [ 232.020482][ C3] blk_print_req_error: 5 callbacks suppressed [ 232.020498][ C3] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 232.022549][T16275] loop7: partition table beyond EOD, [ 232.024543][ C3] buffer_io_error: 5 callbacks suppressed [ 232.024556][ C3] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 232.037847][T16275] truncated [ 232.039275][T16275] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 232.045737][T16246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.048817][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.058344][T16246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.064143][T16246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.067089][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.079658][T16246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.151100][T16246] hsr_slave_0: entered promiscuous mode [ 232.154204][T16246] hsr_slave_1: entered promiscuous mode [ 232.159978][T16246] debugfs: 'hsr0' already exists in 'hsr' [ 232.162406][T16246] Cannot create hsr debugfs directory [ 232.170701][ T2087] usb 9-1: USB disconnect, device number 13 [ 232.178414][ T2087] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 232.328991][T16246] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.334448][T16246] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.356150][ T6058] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 232.441369][T16246] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.445631][T16246] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.516289][ T6058] usb 12-1: Using ep0 maxpacket: 8 [ 232.520017][ T6058] usb 12-1: config 0 interface 0 has no altsetting 0 [ 232.522459][ T6058] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 232.525839][ T6058] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.527538][T16246] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.529729][ T6058] usb 12-1: config 0 descriptor?? [ 232.531873][T16246] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.622019][T16246] netdevsim netdevsim6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.627051][T16246] netdevsim netdevsim6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.767784][T16246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 232.773609][T16246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.780630][T16246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.787576][T16246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.864838][T16246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.881109][T16246] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.890910][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.893927][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.904269][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.906710][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.945843][ T6058] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 233.013791][T16327] overlayfs: invalid origin (0000) [ 233.040916][T16246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.145023][ T6059] usb 12-1: USB disconnect, device number 9 [ 233.213203][T16246] veth0_vlan: entered promiscuous mode [ 233.220012][T16246] veth1_vlan: entered promiscuous mode [ 233.235060][T16246] veth0_macvtap: entered promiscuous mode [ 233.239452][T16246] veth1_macvtap: entered promiscuous mode [ 233.248534][T16246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.258313][T16246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.264149][ T1141] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.267930][ T1141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.271892][ T1141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.275635][ T1141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.316710][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.320290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.335487][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.338908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.508070][T16340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4578'. [ 233.566260][ T5980] Bluetooth: hci2: command tx timeout [ 233.817192][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 233.817216][ T40] audit: type=1326 audit(2000000143.281:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.828964][ T40] audit: type=1326 audit(2000000143.281:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.837202][ T40] audit: type=1326 audit(2000000143.281:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.845640][ T40] audit: type=1326 audit(2000000143.281:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.853370][ T40] audit: type=1326 audit(2000000143.281:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.860986][ T40] audit: type=1326 audit(2000000143.281:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.868529][ T40] audit: type=1326 audit(2000000143.281:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.875403][ T40] audit: type=1326 audit(2000000143.281:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.882630][ T40] audit: type=1326 audit(2000000143.281:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 233.890087][ T40] audit: type=1326 audit(2000000143.331:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.7.4582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 234.053699][T16361] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 234.156844][ T841] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 234.216020][ T2087] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 234.317291][ T841] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.321592][ T841] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.325482][ T841] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.329158][ T841] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.333068][ T841] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.336307][ T841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.339875][ T841] usb 12-1: config 0 descriptor?? [ 234.368242][ T2087] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 234.371234][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.375578][ T2087] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.381642][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.385810][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.392889][ T2087] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 234.395334][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.399870][ T2087] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.404517][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.409235][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.415110][ T2087] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 234.418948][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.423284][ T2087] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.428103][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.432428][ T2087] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.440337][ T2087] usb 11-1: string descriptor 0 read error: -22 [ 234.443040][ T2087] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.446951][ T2087] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.452897][ T2087] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 234.660984][ T840] usb 11-1: USB disconnect, device number 8 [ 234.750104][ T841] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 234.760161][ T841] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 235.229316][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4604'. [ 235.262820][T16400] input: syz1 as /devices/virtual/input/input39 [ 235.347344][ T6013] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 235.517773][ T6013] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 235.521234][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.525447][ T6013] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.530283][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.534617][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.540111][ T6013] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 235.543192][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.547476][ T6013] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.552355][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.557116][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.565925][ T6013] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 235.568941][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.573204][ T6013] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.578277][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.582539][ T6013] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.589708][ T6013] usb 9-1: string descriptor 0 read error: -22 [ 235.592235][ T6013] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.595796][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.603228][ T6013] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 235.645977][ T5980] Bluetooth: hci2: command tx timeout [ 235.821596][ T53] usb 9-1: USB disconnect, device number 14 [ 235.948016][T16426] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 236.019667][T16439] input: syz0 as /devices/virtual/input/input40 [ 236.768357][ T9793] usb 12-1: USB disconnect, device number 10 [ 236.978685][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4654'. [ 237.226203][T16557] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4666'. [ 237.230360][T16558] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 237.726062][ T5980] Bluetooth: hci2: command tx timeout [ 238.125983][ T5980] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.128644][ T2087] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 238.131426][ T2087] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 238.526703][T16613] [U] [ 238.527678][T16613] [U] [ 238.528597][T16613] [U] [ 238.529528][T16613] [U] [ 238.530549][T16613] [U] [ 238.531778][T16613] [U] [ 238.532961][T16613] [U] [ 238.534146][T16613] [U] [ 238.535423][T16613] [U] [ 238.536664][T16613] [U] [ 238.537823][T16613] [U] [ 238.538988][T16613] [U] [ 238.541302][T16613] [U] [ 238.542510][T16613] [U] [ 238.543735][T16613] [U] [ 238.544907][T16613] [U] [ 238.547532][T16613] [U] [ 238.548471][T16613] [U] [ 238.549368][T16613] [U] [ 238.550257][T16613] [U] [ 238.551155][T16613] [U] [ 238.552093][T16613] [U] [ 238.553055][T16613] [U] [ 238.553946][T16613] [U] [ 238.554935][T16613] [U] [ 238.555850][T16613] [U] [ 238.556791][T16613] [U] [ 238.557680][T16613] [U] [ 238.558709][T16613] [U] [ 238.559625][T16613] [U] [ 238.560553][T16613] [U] [ 238.561444][T16613] [U] [ 238.562521][T16613] [U] [ 238.563771][T16613] [U] [ 238.564727][T16613] [U] [ 238.565617][T16613] [U] [ 238.567063][T16613] [U] [ 238.568032][T16613] [U] [ 238.568926][T16613] [U] [ 238.569815][T16613] [U] [ 238.570791][T16613] [U] [ 238.571708][T16613] [U] [ 238.572658][T16613] [U] [ 238.573547][T16613] [U] [ 238.574505][T16613] [U] [ 238.575395][T16613] [U] [ 238.576330][T16613] [U] [ 238.577216][T16613] [U] [ 238.579078][T16613] [U] [ 238.580342][T16613] [U] [ 238.581531][T16613] [U] [ 238.582725][T16613] [U] [ 238.583951][T16613] [U] [ 238.585053][T16613] [U] [ 238.586290][T16613] [U] [ 238.587482][T16613] [U] [ 238.589147][T16613] [U] [ 238.590355][T16613] [U] [ 238.591878][T16613] [U] [ 238.593103][T16613] [U] [ 238.594294][T16613] [U] [ 238.595489][T16613] [U] [ 238.596777][T16613] [U] [ 238.597960][T16613] [U] [ 238.599414][T16613] [U] [ 238.600597][T16613] [U] [ 238.601752][T16613] [U] [ 238.602954][T16613] [U] [ 238.604205][T16613] [U] [ 238.605360][T16613] [U] [ 238.606579][T16613] [U] [ 238.607781][T16613] [U] [ 238.609188][T16613] [U] [ 238.610115][T16613] [U] [ 238.611207][T16613] [U] [ 238.612390][T16613] [U] [ 238.613756][T16613] [U] [ 238.614929][T16613] [U] [ 238.616221][T16613] [U] [ 238.617183][T16613] [U] [ 238.618259][T16613] [U] [ 238.619177][T16613] [U] [ 238.620126][T16613] [U] [ 238.621057][T16613] [U] [ 238.622009][T16613] [U] [ 238.623239][T16613] [U] [ 238.624473][T16613] [U] [ 238.625593][T16613] [U] [ 238.626606][T16613] [U] [ 238.627535][T16613] [U] [ 238.628435][T16613] [U] [ 238.629338][T16613] [U] [ 238.630251][T16613] [U] [ 238.631146][T16613] [U] [ 238.632072][T16613] [U] [ 238.633208][T16613] [U] [ 238.634248][T16613] [U] [ 238.635167][T16613] [U] [ 238.636098][T16613] [U] [ 238.637013][T16613] [U] [ 238.639345][T16613] [U] [ 238.640645][T16613] [U] [ 238.641852][T16613] [U] [ 238.643067][T16613] [U] [ 238.644431][T16613] [U] [ 238.645658][T16613] [U] [ 238.646929][T16613] [U] [ 238.648124][T16613] [U] [ 238.649868][T16613] [U] [ 238.651095][T16613] [U] [ 238.652306][T16613] [U] [ 238.653501][T16613] [U] [ 238.654752][T16613] [U] [ 238.655970][T16613] [U] [ 238.657167][T16613] [U] [ 238.658367][T16613] [U] [ 238.659702][T16613] [U] [ 238.660913][T16613] [U] [ 238.662119][T16613] [U] [ 238.663428][T16613] [U] [ 238.666233][T16613] [U] [ 238.667449][T16613] [U] [ 238.668679][T16613] [U] [ 238.669915][T16613] [U] [ 238.671316][T16613] [U] [ 238.672604][T16613] [U] [ 238.673819][T16613] [U] [ 238.712220][T16612] [U] [ 239.125992][ T54] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 239.276271][ T54] usb 11-1: Using ep0 maxpacket: 8 [ 239.280234][ T54] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 239.283825][ T54] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.288169][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.292438][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.296936][ T54] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.302312][ T54] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.306498][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.519700][ T54] usb 11-1: usb_control_msg returned -32 [ 239.521605][ T54] usbtmc 11-1:16.0: can't read capabilities [ 239.816129][ T5980] Bluetooth: hci2: command tx timeout [ 239.932326][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4706'. [ 239.939154][T16647] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 239.942082][T16647] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 240.180597][T16670] overlayfs: failed lookup in lower (newroot/1195, name='file0', err=-40): overlapping layers [ 240.206046][ T5335] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.206130][ T2087] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 240.210007][ T2087] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 240.217290][ T53] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 240.367685][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.371047][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.373941][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.378268][ T53] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.381048][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.397381][ T53] usb 9-1: config 0 descriptor?? [ 240.661678][T16698] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.818835][ T53] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.019661][ T840] usb 9-1: USB disconnect, device number 15 [ 241.280786][T16726] netlink: 71 bytes leftover after parsing attributes in process `syz.7.4743'. [ 241.394701][T16733] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.4746'. [ 241.523984][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4749'. [ 241.728137][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 241.728147][ T40] audit: type=1326 audit(2000000151.191:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.737320][ T40] audit: type=1326 audit(2000000151.191:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.743918][ T40] audit: type=1326 audit(2000000151.191:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.751845][ T40] audit: type=1326 audit(2000000151.191:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.761978][ T40] audit: type=1326 audit(2000000151.191:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.770169][ T40] audit: type=1326 audit(2000000151.191:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.777794][ T40] audit: type=1326 audit(2000000151.191:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.784643][ T40] audit: type=1326 audit(2000000151.191:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.791559][ T40] audit: type=1326 audit(2000000151.191:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.798240][ T40] audit: type=1326 audit(2000000151.191:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.4736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 241.798751][T16758] tipc: Started in network mode [ 241.806540][T16758] tipc: Node identity ac1414bb, cluster identity 4711 [ 241.809885][T16758] tipc: Enabling of bearer rejected, failed to enable media [ 241.860310][T16764] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.896348][ T9793] usb 11-1: USB disconnect, device number 9 [ 241.926777][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4761'. [ 241.930385][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4761'. [ 241.934078][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4761'. [ 241.970345][T16772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 242.009163][ T10] kernel read not supported for file /vbi4 (pid: 10 comm: kworker/0:1) [ 242.206002][ T5335] Bluetooth: hci0: command 0x040f tx timeout [ 242.206282][ T5980] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 242.647182][ T54] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 242.714656][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4799'. [ 242.718446][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4799'. [ 242.819037][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.822880][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.826482][ T54] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.829372][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.833094][ T54] usb 9-1: config 0 descriptor?? [ 242.848349][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4806'. [ 242.890105][T16867] syzkaller1: entered promiscuous mode [ 242.891895][T16867] syzkaller1: entered allmulticast mode [ 243.140487][T16890] netlink: 'syz.7.4819': attribute type 16 has an invalid length. [ 243.143845][T16890] netlink: 'syz.7.4819': attribute type 17 has an invalid length. [ 243.152371][T16890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 243.248313][ T54] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 243.253004][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0926:3333.0014/input/input43 [ 243.313331][T16913] loop6: detected capacity change from 0 to 2560 [ 243.316958][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.319527][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.322055][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.324632][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.329311][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.331933][ T54] keytouch 0003:0926:3333.0014: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 243.333136][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.339713][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.342933][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.346331][T16913] ldm_validate_partition_table(): Disk read failed. [ 243.348472][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.350982][T16913] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.353608][T16913] Dev loop6: unable to read RDB block 0 [ 243.355563][T16913] loop6: unable to read partition table [ 243.357591][T16913] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 243.369929][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 243.370634][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 243.373034][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 243.376470][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 243.384888][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 243.388237][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 243.391393][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 243.394498][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 243.436238][ T841] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 243.449504][ T60] usb 9-1: USB disconnect, device number 16 [ 243.588146][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.591625][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.594710][ T841] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.601331][ T841] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.604178][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.607957][ T841] usb 11-1: config 0 descriptor?? [ 244.019519][ T841] hid_parser_main: 8 callbacks suppressed [ 244.019532][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.023768][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.026181][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.028741][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.031030][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.033315][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.035644][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.039185][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.041558][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.043915][ T841] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 244.049218][ T841] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 244.190404][T16935] input: syz1 as /devices/virtual/input/input44 [ 244.192416][T16935] input: failed to attach handler leds to device input44, error: -6 [ 244.278349][ T60] usb 11-1: USB disconnect, device number 10 [ 244.286046][ T5980] Bluetooth: hci0: command 0x040f tx timeout [ 244.288561][ T2087] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.290614][ T2087] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 245.855946][ T9793] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 246.005966][ T9793] usb 12-1: Using ep0 maxpacket: 16 [ 246.009622][ T9793] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.013012][ T9793] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.016606][ T9793] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.019636][ T9793] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.025007][ T9793] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.027960][ T9793] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.030488][ T9793] usb 12-1: SerialNumber: syz [ 246.035649][ T9793] hub 12-1:1.0: bad descriptor, ignoring hub [ 246.037734][ T9793] hub 12-1:1.0: probe with driver hub failed with error -5 [ 246.041532][ T9793] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22 [ 246.132060][T17011] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 246.136389][T17011] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 246.365957][ T2087] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 246.368074][ T2087] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 246.376174][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.990066][T17037] syzkaller1: entered promiscuous mode [ 246.991952][T17037] syzkaller1: entered allmulticast mode [ 247.129776][T17039] syzkaller1: entered promiscuous mode [ 247.132019][T17039] syzkaller1: entered allmulticast mode [ 247.600241][T17051] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4893'. [ 248.526103][ T53] usb 12-1: USB disconnect, device number 11 [ 248.958175][T17097] kvm: user requested TSC rate below hardware speed [ 249.710440][T17120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4922'. [ 249.713786][T17120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4922'. [ 249.989562][T17152] vlan3: entered allmulticast mode [ 250.295943][ T6013] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 250.455608][ T6013] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 250.457719][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.462617][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.462636][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.477939][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.477967][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.477981][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.479792][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.482930][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 250.482940][ T40] audit: type=1326 audit(2000000160.939:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.4.4963" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 250.485635][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.485678][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.517099][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.517125][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.517139][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.517844][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.528644][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.528661][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.530115][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.537298][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.537314][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.538305][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.545546][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.545563][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.546491][ T6013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.554512][ T6013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.554530][ T6013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.556027][ T6013] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 250.562929][ T6013] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 250.562943][ T6013] usb 11-1: Product: syz [ 250.562951][ T6013] usb 11-1: Manufacturer: syz [ 250.562959][ T6013] usb 11-1: SerialNumber: syz [ 250.564380][ T6013] usb 11-1: config 0 descriptor?? [ 250.574491][ T6013] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 251.194275][T17222] syzkaller1: entered promiscuous mode [ 251.196379][T17222] syzkaller1: entered allmulticast mode [ 251.309378][T17226] loop0: detected capacity change from 0 to 128 [ 251.366499][T17226] loop0: detected capacity change from 128 to 0 [ 251.635947][ T2087] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 251.788310][ T2087] usb 12-1: Using ep0 maxpacket: 8 [ 251.791152][ T2087] usb 12-1: config 0 interface 0 has no altsetting 0 [ 251.793554][ T2087] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 251.796532][ T2087] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.800054][ T2087] usb 12-1: config 0 descriptor?? [ 252.018187][T17271] bridge_slave_0: left allmulticast mode [ 252.020007][T17271] bridge_slave_0: left promiscuous mode [ 252.021873][T17271] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.026446][T17271] bridge_slave_1: left allmulticast mode [ 252.028252][T17271] bridge_slave_1: left promiscuous mode [ 252.031002][T17271] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.038989][T17271] bond0: (slave bond_slave_0): Releasing backup interface [ 252.042450][T17271] bond_slave_0: left allmulticast mode [ 252.047676][T17271] bond0: (slave bond_slave_1): Releasing backup interface [ 252.050644][T17271] bond_slave_1: left allmulticast mode [ 252.054488][T17271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.058082][T17271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.061580][T17271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.064010][T17271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.211395][ T2087] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 252.410781][T17240] i2c i2c-2: unsupported multi-msg i2c transaction [ 252.411977][ T2087] usb 12-1: USB disconnect, device number 12 [ 252.684680][T17279] netfs: Couldn't get user pages (rc=-14) [ 252.846167][ C3] usb 11-1: yurex_control_callback - control failed: -2 [ 252.848159][ T54] usb 11-1: USB disconnect, device number 11 [ 252.851942][ T54] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 253.351405][T17310] loop6: detected capacity change from 0 to 63 [ 253.355797][T17310] buffer_io_error: 6 callbacks suppressed [ 253.355811][T17310] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.362937][T17310] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.974731][T17359] syzkaller1: entered promiscuous mode [ 253.978755][T17359] syzkaller1: entered allmulticast mode [ 255.002405][T17372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.064668][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5042'. [ 255.068906][T17383] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 255.072619][T17383] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 255.110299][T17385] input: syz1 as /devices/virtual/input/input46 [ 255.167252][ T40] audit: type=1326 audit(2000000165.629:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 255.175717][ T40] audit: type=1326 audit(2000000165.629:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 255.183391][ T40] audit: type=1326 audit(2000000165.629:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 255.196569][ T40] audit: type=1326 audit(2000000165.629:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 255.205214][ T40] audit: type=1326 audit(2000000165.639:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 255.213601][ T40] audit: type=1326 audit(2000000165.639:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 255.222974][ T40] audit: type=1326 audit(2000000165.649:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 255.231699][ T40] audit: type=1326 audit(2000000165.649:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 255.240923][ T40] audit: type=1326 audit(2000000165.649:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.6.5045" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 255.258771][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.558957][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5058'. [ 255.561750][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5058'. [ 255.572076][ T185] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.575810][ T185] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.583850][ T185] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.593924][ T185] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.854573][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5068'. [ 255.946875][ T53] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 256.117273][ T53] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 256.119934][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.123730][ T53] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 256.126965][ T53] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 256.129487][ T53] usb 11-1: Manufacturer: syz [ 256.131997][ T53] usb 11-1: config 0 descriptor?? [ 256.176121][ T53] rc_core: IR keymap rc-hauppauge not found [ 256.177970][ T53] Registered IR keymap rc-empty [ 256.181421][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 256.185826][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input47 [ 256.281345][T17466] smc: net device bond0 applied user defined pnetid SYZ2 [ 256.345459][ T53] usb 11-1: USB disconnect, device number 12 [ 256.585949][ T6058] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 256.736045][ T6058] usb 12-1: Using ep0 maxpacket: 8 [ 256.742203][ T6058] usb 12-1: config 0 interface 0 has no altsetting 0 [ 256.744276][ T6058] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 256.747570][ T6058] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.751221][ T6058] usb 12-1: config 0 descriptor?? [ 256.946343][T17502] tipc: Started in network mode [ 256.947924][T17502] tipc: Node identity ac1414bb, cluster identity 4711 [ 256.950206][T17502] tipc: Enabling of bearer rejected, failed to enable media [ 257.165260][ T6058] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 257.201388][T17515] pim6reg1: entered promiscuous mode [ 257.203068][T17515] pim6reg1: entered allmulticast mode [ 257.293487][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5103'. [ 257.365183][ T10] usb 12-1: USB disconnect, device number 13 [ 257.522133][T17535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 258.136057][ T53] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 258.296184][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 258.301046][ T53] usb 11-1: config 0 has no interfaces? [ 258.313387][ T53] usb 11-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 258.315672][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 258.315694][ T40] audit: type=1326 audit(2000000168.769:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.324765][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.330396][ T40] audit: type=1326 audit(2000000168.769:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.330442][ T40] audit: type=1326 audit(2000000168.779:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.340235][ T53] usb 11-1: Product: syz [ 258.348858][ T40] audit: type=1326 audit(2000000168.779:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.350374][ T53] usb 11-1: Manufacturer: syz [ 258.360733][ T53] usb 11-1: SerialNumber: syz [ 258.360780][ T40] audit: type=1326 audit(2000000168.779:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.364691][ T53] usb 11-1: config 0 descriptor?? [ 258.369341][ T40] audit: type=1326 audit(2000000168.779:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 258.369366][ T40] audit: type=1326 audit(2000000168.779:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 258.369387][ T40] audit: type=1326 audit(2000000168.779:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 258.369408][ T40] audit: type=1326 audit(2000000168.779:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 258.400127][ T40] audit: type=1326 audit(2000000168.779:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.7.5124" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 258.468753][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'. [ 258.471545][T17569] netlink: 'syz.4.5125': attribute type 7 has an invalid length. [ 258.473981][T17569] netlink: 'syz.4.5125': attribute type 8 has an invalid length. [ 258.476544][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5125'. [ 258.482285][T17569] gretap0: entered promiscuous mode [ 258.488811][T17569] batadv_slave_1: entered promiscuous mode [ 258.491444][T17569] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.558605][T17573] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 258.580531][ T6013] usb 11-1: USB disconnect, device number 13 [ 258.598219][T17577] kvm: user requested TSC rate below hardware speed [ 258.802848][T17589] syzkaller1: entered promiscuous mode [ 258.805114][T17589] syzkaller1: entered allmulticast mode [ 259.181440][T17607] overlayfs: upper fs does not support tmpfile. [ 259.429625][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5151'. [ 259.543217][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5155'. [ 259.545979][T17638] netlink: 'syz.6.5155': attribute type 7 has an invalid length. [ 259.548975][T17638] netlink: 'syz.6.5155': attribute type 8 has an invalid length. [ 259.551420][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5155'. [ 259.557978][T17638] gretap0: entered promiscuous mode [ 259.560297][T17638] batadv_slave_1: entered promiscuous mode [ 259.562819][T17638] debugfs: 'hsr1' already exists in 'hsr' [ 259.564572][T17638] Cannot create hsr debugfs directory [ 259.924968][T17664] 9pnet: p9_errstr2errno: server reported unknown error @΂00000000000000000005 [ 260.219175][T17684] tap0: tun_chr_ioctl cmd 1074025675 [ 260.220852][T17684] tap0: persist enabled [ 260.222324][T17684] tap0: tun_chr_ioctl cmd 1074025675 [ 260.224037][T17684] tap0: persist enabled [ 260.267959][T17690] input: syz1 as /devices/virtual/input/input48 [ 260.270285][T17690] input: failed to attach handler leds to device input48, error: -6 [ 260.436002][ T840] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 260.566004][ T6013] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 260.587355][ T840] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.590846][ T840] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.594165][ T840] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.598773][ T840] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.601573][ T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.605304][ T840] usb 12-1: config 0 descriptor?? [ 260.717290][ T6013] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 260.721160][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.724864][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.728137][ T6013] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 260.732991][ T6013] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 260.736522][ T6013] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 260.739309][ T6013] usb 9-1: Manufacturer: syz [ 260.744152][ T6013] usb 9-1: config 0 descriptor?? [ 261.018642][ T840] hid_parser_main: 5 callbacks suppressed [ 261.018660][ T840] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 261.027339][ T840] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 261.154580][ T6013] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 261.159027][ T6013] appleir 0003:05AC:8243.0019: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 262.230300][ T6013] usb 9-1: USB disconnect, device number 17 [ 262.907544][T17719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.306934][ T10] usb 12-1: reset high-speed USB device number 14 using dummy_hcd [ 263.465334][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5210'. [ 263.476732][ T10] usb 12-1: device firmware changed [ 263.481920][ T839] usb 12-1: USB disconnect, device number 14 [ 263.616109][ T839] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 263.777713][ T839] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.781310][ T839] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.785264][ T839] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.789066][ T839] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.793637][ T40] kauditd_printk_skb: 692 callbacks suppressed [ 263.793636][ T839] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 263.793648][ T40] audit: type=1326 audit(2000000174.249:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.3.5216" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75579 code=0x0 [ 263.811250][ T839] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.814591][ T839] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.817849][ T839] usb 12-1: Product: syz [ 263.819570][ T839] usb 12-1: Manufacturer: syz [ 263.825688][ T839] cdc_wdm 12-1:1.0: skipping garbage [ 263.828655][ T839] cdc_wdm 12-1:1.0: skipping garbage [ 263.832319][ T839] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 263.834256][ T839] cdc_wdm 12-1:1.0: Unknown control protocol [ 264.031597][ T839] usb 12-1: USB disconnect, device number 15 [ 265.469777][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5249'. [ 265.546679][T17863] syzkaller1: entered promiscuous mode [ 265.548898][T17863] syzkaller1: entered allmulticast mode [ 266.239612][ T6058] kernel write not supported for file /sequencer2 (pid: 6058 comm: kworker/0:3) [ 266.326094][ T840] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 266.476051][ T840] usb 12-1: Using ep0 maxpacket: 8 [ 266.479074][ T840] usb 12-1: config 0 interface 0 has no altsetting 0 [ 266.481681][ T840] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 266.484452][ T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.491430][ T840] usb 12-1: config 0 descriptor?? [ 266.706292][ T40] audit: type=1326 audit(2000000178.174:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.6.5288" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0 [ 266.784623][T17966] macsec1: entered allmulticast mode [ 266.903893][ T840] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 267.023871][T17970] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 267.027321][T17970] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 267.102624][T17913] i2c i2c-2: unsupported multi-msg i2c transaction [ 267.109816][ T6013] usb 12-1: USB disconnect, device number 16 [ 267.816334][T18011] macsec1: entered allmulticast mode [ 268.406090][ T839] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 268.576133][ T839] usb 11-1: Using ep0 maxpacket: 8 [ 268.579366][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 268.581775][ T839] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.585346][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.590562][ T839] usb 11-1: config 0 descriptor?? [ 268.917768][T18039] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 268.922229][T18039] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 268.998047][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'. [ 269.004776][ T839] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 269.202972][T18035] i2c i2c-2: unsupported multi-msg i2c transaction [ 269.206522][ T6013] usb 11-1: USB disconnect, device number 14 [ 269.786179][T18059] overlay: filesystem on ./bus not supported as upperdir [ 270.908082][T18114] overlay: filesystem on ./bus not supported as upperdir [ 271.099617][T18135] syzkaller1: entered promiscuous mode [ 271.101354][T18135] syzkaller1: entered allmulticast mode [ 271.470273][T18167] netfs: Couldn't get user pages (rc=-14) [ 272.481486][T18204] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.686830][T18227] input: syz1 as /devices/virtual/input/input49 [ 272.728766][T18233] bond0: entered promiscuous mode [ 272.730952][T18233] bond_slave_0: entered promiscuous mode [ 272.733263][T18233] bond_slave_1: entered promiscuous mode [ 272.736765][T18233] batadv0: entered promiscuous mode [ 272.739358][T18233] debugfs: 'hsr1' already exists in 'hsr' [ 272.741359][T18233] Cannot create hsr debugfs directory [ 272.743393][T18233] hsr1: entered allmulticast mode [ 272.745440][T18233] bond0: entered allmulticast mode [ 272.749631][T18233] bond_slave_0: entered allmulticast mode [ 272.751409][T18233] bond_slave_1: entered allmulticast mode [ 272.753469][T18233] batadv0: entered allmulticast mode [ 272.756093][T18233] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 272.759741][T18233] bond0: left promiscuous mode [ 272.761308][T18233] bond_slave_0: left promiscuous mode [ 272.763154][T18233] bond_slave_1: left promiscuous mode [ 272.765853][T18233] batadv0: left promiscuous mode [ 273.226099][ T6041] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 273.375978][ T6041] usb 9-1: Using ep0 maxpacket: 8 [ 273.383264][ T6041] usb 9-1: config 0 interface 0 has no altsetting 0 [ 273.389556][ T6041] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.393236][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.398400][ T6041] usb 9-1: config 0 descriptor?? [ 273.564714][T18267] bond0: entered promiscuous mode [ 273.566888][T18267] bond_slave_0: entered promiscuous mode [ 273.569379][T18267] bond_slave_1: entered promiscuous mode [ 273.573467][T18267] batadv0: entered promiscuous mode [ 273.576591][T18267] hsr2: entered allmulticast mode [ 273.578688][T18267] bond0: entered allmulticast mode [ 273.580799][T18267] bond_slave_0: entered allmulticast mode [ 273.582963][T18267] bond_slave_1: entered allmulticast mode [ 273.584699][T18267] batadv0: entered allmulticast mode [ 273.586774][T18267] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 273.596035][T18267] bond0: left promiscuous mode [ 273.597937][T18267] bond_slave_0: left promiscuous mode [ 273.599710][T18267] bond_slave_1: left promiscuous mode [ 273.603528][T18267] batadv0: left promiscuous mode [ 273.811241][ T6041] mcp2221 0003:04D8:00DD.001C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 274.009241][ T6041] usb 9-1: USB disconnect, device number 18 [ 276.206259][ T54] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 276.341123][T18369] input: syz1 as /devices/virtual/input/input50 [ 276.366401][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 276.369592][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 276.369612][ T54] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.369624][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.370659][ T54] usb 9-1: config 0 descriptor?? [ 276.703159][T18386] gre0: entered allmulticast mode [ 276.703443][T18386] gre0: left allmulticast mode [ 276.790315][ T54] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 276.990445][ T54] usb 9-1: USB disconnect, device number 19 [ 277.613129][T18405] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 277.836011][ T6013] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 278.016101][ T6013] usb 9-1: Using ep0 maxpacket: 16 [ 278.019038][ T6013] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 278.023079][ T6013] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 278.025997][ T6013] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.030221][ T6013] usb 9-1: config 0 descriptor?? [ 278.034144][ T6013] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input51 [ 278.247740][ T5370] bcm5974 9-1:0.0: could not read from device [ 278.254104][ T6013] bcm5974 9-1:0.0: could not read from device [ 278.260812][ T5370] bcm5974 9-1:0.0: could not read from device [ 278.265161][ T6013] input: failed to attach handler mousedev to device input51, error: -5 [ 278.270974][ T5370] bcm5974 9-1:0.0: could not read from device [ 278.271169][ T6013] usb 9-1: USB disconnect, device number 20 [ 278.277994][ T5370] bcm5974 9-1:0.0: could not read from device [ 278.369705][T18413] pim6reg1: entered promiscuous mode [ 278.371662][T18413] pim6reg1: entered allmulticast mode [ 278.453687][T18419] [U]  [ 278.454958][T18419] [U] K{ [ 278.456690][T18419] [U] t 1ŠFfˊ`GJgo/mC [ 278.466010][T18419] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 278.471006][T18419] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 278.481419][T18419] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 278.496504][T18419] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 278.507752][T18419] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 278.513444][T18426] autofs: Invalid uid '0x00000000ffffffff' [ 278.515319][T18419] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 278.516738][T18427] loop2: detected capacity change from 0 to 7 [ 278.519281][T18419] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 278.541040][T18419] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 278.541073][T18419] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 278.541089][T18419] [U] 22Ʃx?0;3u [ 278.541137][T18419] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 278.541168][T18419] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 278.541190][T18419] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 278.541203][T18419] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 278.541227][T18419] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 278.541267][T18419] [U] ec [ 278.541279][T18419] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 278.545285][T18417] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 278.559283][T18427] loop2: partition table beyond EOD, truncated [ 278.597330][T18427] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 279.162467][T18476] sit0: entered promiscuous mode [ 279.168491][T18476] netlink: 'syz.4.5525': attribute type 1 has an invalid length. [ 279.171040][T18476] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5525'. [ 279.996322][ T839] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 280.073597][ T5335] Bluetooth: hci4: sending frame failed (-49) [ 280.078580][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 280.147685][ T839] usb 11-1: Using ep0 maxpacket: 16 [ 280.151900][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.156592][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.160591][ T839] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.165701][ T839] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 280.169018][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.172678][ T839] usb 11-1: config 0 descriptor?? [ 280.444061][T18606] syzkaller1: entered promiscuous mode [ 280.446796][T18606] syzkaller1: entered allmulticast mode [ 280.584124][ T839] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 280.586736][ T839] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 280.589065][ T839] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 280.591311][ T839] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 280.594052][ T839] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 280.602597][ T839] input: HID 0955:7214 Haptics as /devices/virtual/input/input52 [ 280.614851][ T839] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 280.618120][ T839] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 280.787380][T18552] random: crng reseeded on system resumption [ 280.804231][ T54] usb 11-1: USB disconnect, device number 15 [ 280.806051][ T839] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 280.807390][T18621] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.810535][ T839] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 280.816990][ T839] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 280.820962][ T839] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.372366][T18638] tipc: Enabled bearer , priority 17 [ 281.521281][ T54] IPVS: starting estimator thread 0... [ 281.606224][T18653] IPVS: using max 43 ests per chain, 103200 per kthread [ 282.366179][ T839] tipc: Node number set to 2886997179 [ 283.570831][T18690] syzkaller1: entered promiscuous mode [ 283.572582][T18690] syzkaller1: entered allmulticast mode [ 283.808139][T18718] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 283.909514][T18730] syzkaller1: entered promiscuous mode [ 283.911842][T18730] syzkaller1: entered allmulticast mode [ 284.773864][T18795] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 285.236973][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 285.387050][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 285.390543][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.394171][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.397279][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.401353][ T10] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 285.404277][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.409665][ T10] usb 9-1: config 0 descriptor?? [ 285.821838][ T10] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 285.824160][ T10] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 285.826469][ T10] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 285.828705][ T10] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 285.831038][ T10] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 285.834538][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input53 [ 285.844238][ T10] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 285.846882][ T10] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 286.022645][T18818] random: crng reseeded on system resumption [ 286.032153][ T2087] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 286.032848][ T839] usb 9-1: USB disconnect, device number 21 [ 286.035712][ T2087] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.041599][ T2087] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.044973][ T2087] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.357557][ T40] audit: type=1326 audit(2000000197.824:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.366848][ T40] audit: type=1326 audit(2000000197.824:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.375795][ T40] audit: type=1326 audit(2000000197.824:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.384960][ T40] audit: type=1326 audit(2000000197.824:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.393874][ T40] audit: type=1326 audit(2000000197.824:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 286.401234][ T40] audit: type=1326 audit(2000000197.824:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.407948][ T40] audit: type=1326 audit(2000000197.824:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 286.409895][T18853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.414597][ T40] audit: type=1326 audit(2000000197.824:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.419540][T18853] batadv_slave_0: entered promiscuous mode [ 286.424282][ T40] audit: type=1326 audit(2000000197.824:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 286.433386][ T40] audit: type=1326 audit(2000000197.824:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.7.5692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 286.716434][T18879] bond1: entered allmulticast mode [ 286.718369][T18879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.726022][T18882] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5713'. [ 287.164122][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.168965][T18921] batadv_slave_0: entered promiscuous mode [ 287.223269][T18927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.228863][T18927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.232789][T18927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.236051][T18927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.662772][T18948] batadv_slave_0: entered promiscuous mode [ 288.652015][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5766'. [ 289.297598][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'. [ 289.546554][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5800'. [ 290.085987][ T60] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 290.246777][ T60] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 290.249329][ T60] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.252492][ T60] usb 12-1: config 0 interface 0 has no altsetting 0 [ 290.257081][ T60] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.260073][ T60] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.263494][ T60] usb 12-1: Product: syz [ 290.265181][ T60] usb 12-1: Manufacturer: syz [ 290.266769][ T60] usb 12-1: SerialNumber: syz [ 290.269599][ T60] usb 12-1: config 0 descriptor?? [ 290.277189][ T60] hub 12-1:0.0: bad descriptor, ignoring hub [ 290.279086][ T60] hub 12-1:0.0: probe with driver hub failed with error -5 [ 290.283225][ T60] usb 12-1: selecting invalid altsetting 0 [ 291.176012][T19101] usb 12-1: reset high-speed USB device number 17 using dummy_hcd [ 291.328462][T19101] usb 12-1: device firmware changed [ 291.331962][ T839] usb 12-1: USB disconnect, device number 17 [ 291.466183][ T839] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 291.568572][T19171] input: syz0 as /devices/virtual/input/input54 [ 291.633528][T19176] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 291.638812][ T839] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.641688][ T839] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.644212][ T839] usb 12-1: Product: syz [ 291.645552][ T839] usb 12-1: Manufacturer: syz [ 291.647737][ T839] usb 12-1: SerialNumber: syz [ 291.661442][ T839] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.685156][ T839] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.889187][ T6013] usb 12-1: USB disconnect, device number 18 [ 292.657249][T19223] vivid-003: disconnect [ 292.664770][T19218] vivid-003: reconnect [ 292.701868][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5857'. [ 292.704804][T19225] netlink: 'syz.6.5857': attribute type 7 has an invalid length. [ 292.707788][T19225] netlink: 'syz.6.5857': attribute type 8 has an invalid length. [ 292.710398][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5857'. [ 292.752916][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5858'. [ 292.778744][ T839] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 292.781482][ T839] ath9k_htc: Failed to initialize the device [ 292.784416][ T6013] usb 12-1: ath9k_htc: USB layer deinitialized [ 293.151065][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 293.151077][ T40] audit: type=1326 audit(2000000204.614:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19255 comm="syz.6.5872" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0 [ 293.410617][ T40] audit: type=1326 audit(2000000204.874:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.417793][ T40] audit: type=1326 audit(2000000204.874:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.425146][ T40] audit: type=1326 audit(2000000204.874:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.432933][ T40] audit: type=1326 audit(2000000204.874:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 293.439976][ T40] audit: type=1326 audit(2000000204.874:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.446957][ T40] audit: type=1326 audit(2000000204.874:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.453674][ T40] audit: type=1326 audit(2000000204.874:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 293.460637][ T40] audit: type=1326 audit(2000000204.874:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 293.467869][ T40] audit: type=1326 audit(2000000204.874:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.4.5873" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 293.747667][ T839] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 293.898114][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.902605][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.907063][ T839] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.911678][ T839] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.915365][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.920367][ T839] usb 9-1: config 0 descriptor?? [ 294.009141][T19290] 9pnet: p9_errstr2errno: server reported unknown error (cF S+v3qf [ 294.112002][T19297] syzkaller1: entered promiscuous mode [ 294.113831][T19297] syzkaller1: entered allmulticast mode [ 294.330669][ T839] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 294.335766][ T839] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 294.394225][T19322] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5902'. [ 294.590493][T19339] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.590550][ T9793] usb 9-1: USB disconnect, device number 22 [ 295.125002][T19345] netlink: 'syz.4.5912': attribute type 11 has an invalid length. [ 295.246143][ T6059] page_pool_release_retry() stalled pool shutdown: id 88, 1 inflight 60 sec [ 295.311841][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5917'. [ 295.660992][T19376] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 296.005953][T19395] sp0: Synchronizing with TNC [ 296.012958][T19394] [U] [ 297.768595][ T34] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 297.772649][T19493] binder: 19492:19493 ioctl c0306201 0 returned -14 [ 297.917815][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.922251][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.925401][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.929546][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.932316][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.935989][ T34] usb 9-1: config 0 descriptor?? [ 298.347137][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.349498][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.351964][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.354162][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.356834][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.359086][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.361327][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.363740][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.366157][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.368472][ T34] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 298.373515][ T34] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 298.543442][T19514] input: syz0 as /devices/virtual/input/input56 [ 298.609739][ T34] usb 9-1: USB disconnect, device number 23 [ 299.369177][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 299.369189][ T40] audit: type=1326 audit(2000000210.834:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.3.5987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 299.383536][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6001'. [ 299.573155][T19575] io-wq is not configured for unbound workers [ 299.705265][T19588] tipc: Resetting bearer [ 299.714454][T19588] tipc: Resetting bearer [ 299.716683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 299.746070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 300.013527][T19613] netlink: 'syz.4.6033': attribute type 2 has an invalid length. [ 300.016373][T19613] netlink: 85376 bytes leftover after parsing attributes in process `syz.4.6033'. [ 300.123883][T19621] input: syz0 as /devices/virtual/input/input57 [ 301.090344][T19684] netlink: 'syz.4.6066': attribute type 10 has an invalid length. [ 301.210810][ T6013] kernel write not supported for file /sg0 (pid: 6013 comm: kworker/3:3) [ 301.643706][T19766] dummy0: entered promiscuous mode [ 301.648689][T19766] bond0: entered promiscuous mode [ 301.650329][T19766] bond_slave_0: entered promiscuous mode [ 301.652125][T19766] bond_slave_1: entered promiscuous mode [ 301.654991][T19766] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 301.658773][T19766] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 301.661810][T19766] hsr2: entered allmulticast mode [ 301.663349][T19766] bond0: entered allmulticast mode [ 301.664973][T19766] bond_slave_0: entered allmulticast mode [ 301.669122][T19766] bond_slave_1: entered allmulticast mode [ 302.267159][ T60] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 302.360336][T19829] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6130'. [ 302.428966][ T60] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.432679][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.436395][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.439610][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.443884][ T60] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.447342][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.452615][ T60] usb 9-1: config 0 descriptor?? [ 302.673602][T19861] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 302.685835][T19865] batadv_slave_1: entered promiscuous mode [ 302.689441][T19864] batadv_slave_1: left promiscuous mode [ 302.863035][ T60] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 302.868472][ T60] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 302.956307][ T9793] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 303.106034][ T9793] usb 11-1: Using ep0 maxpacket: 8 [ 303.109244][ T9793] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 303.112667][ T9793] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 303.115994][ T9793] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.119377][ T9793] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.123410][ T9793] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.126649][ T9793] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.140582][ T60] usb 9-1: USB disconnect, device number 24 [ 303.171904][T19892] vxcan1: tx address claim with different name [ 303.336046][ T9793] usb 11-1: GET_CAPABILITIES returned 0 [ 303.338402][ T9793] usbtmc 11-1:16.0: can't read capabilities [ 303.341380][T19898] dummy0: entered promiscuous mode [ 303.343895][T19898] macsec0: entered promiscuous mode [ 303.345657][T19898] macsec0: entered allmulticast mode [ 303.347861][T19898] dummy0: entered allmulticast mode [ 303.351346][T19898] dummy0: left allmulticast mode [ 303.353417][T19898] dummy0: left promiscuous mode [ 303.537759][ T6013] usb 11-1: USB disconnect, device number 16 [ 303.686025][ T10] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 303.690293][T19908] syzkaller1: entered promiscuous mode [ 303.692572][T19908] syzkaller1: entered allmulticast mode [ 303.855973][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 303.859929][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.864234][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.867443][ T10] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.871349][ T10] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 303.874873][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.880449][ T10] usb 12-1: config 0 descriptor?? [ 304.290323][ T10] hid_parser_main: 5 callbacks suppressed [ 304.290336][ T10] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 304.294524][ T10] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 304.297392][ T10] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 304.299566][ T10] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 304.301742][ T10] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 304.305233][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 304.314014][ T10] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 304.317325][ T10] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 304.490425][ T10] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 304.490467][ T60] usb 12-1: USB disconnect, device number 19 [ 304.495197][ T10] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 304.502240][ T10] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 304.507694][ T10] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 305.028561][T19963] input: syz1 as /devices/virtual/input/input59 [ 305.755178][T19991] netlink: 'syz.6.6202': attribute type 4 has an invalid length. [ 305.864061][T19998] dummy0: entered promiscuous mode [ 305.867519][T19998] bond0: entered promiscuous mode [ 305.869906][T19998] bond_slave_0: entered promiscuous mode [ 305.872474][T19998] bond_slave_1: entered promiscuous mode [ 305.875802][T19998] debugfs: 'hsr1' already exists in 'hsr' [ 305.878092][T19998] Cannot create hsr debugfs directory [ 305.880163][T19998] hsr1: entered allmulticast mode [ 305.881837][T19998] dummy0: entered allmulticast mode [ 306.056619][T20008] can0: slcan on ptm0. [ 306.196275][T20007] can0 (unregistered): slcan off ptm0. [ 306.247787][T20016] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6214'. [ 306.345421][T20025] binder: 20024:20025 ioctl c0306201 800003c0 returned -14 [ 306.440120][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 306.445314][T20033] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6223'. [ 306.867699][T20080] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 307.128927][T20092] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 307.133382][T20092] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 307.135946][ T10] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 307.138542][T20092] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 307.285992][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 307.290185][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.293727][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.296821][ T10] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 307.300871][ T10] usb 12-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 307.303744][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.307463][ T10] usb 12-1: config 0 descriptor?? [ 307.405999][ T6041] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 307.558001][ T6041] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.562008][ T6041] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.567633][ T6041] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.571358][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.723900][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5011.0024/input/input60 [ 307.730162][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5011.0024/input/input61 [ 307.740827][ T10] kye 0003:0458:5011.0024: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 307.781036][ T6041] usb 9-1: usb_control_msg returned -32 [ 307.782968][ T6041] usbtmc 9-1:16.0: can't read capabilities [ 308.746272][ C0] kye 0003:0458:5011.0024: usb_submit_urb(ctrl) failed: -1 [ 309.517457][ T10] usb 12-1: USB disconnect, device number 20 [ 310.181603][ T10] usb 9-1: USB disconnect, device number 25 [ 310.221453][T20109] netlink: 'syz.3.6258': attribute type 19 has an invalid length. [ 310.253536][T20114] vivid-004: disconnect [ 310.255630][T20103] vivid-004: reconnect [ 310.530989][T20137] netlink: 360 bytes leftover after parsing attributes in process `syz.4.6271'. [ 310.564342][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6273'. [ 310.790400][ T40] audit: type=1326 audit(2000000222.254:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.4.6277" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 311.151844][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6283'. [ 311.613734][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6301'. [ 311.617657][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6301'. [ 311.638564][T20202] : Can't lookup blockdev [ 312.862136][T20304] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6349'. [ 313.248294][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 313.252457][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 313.290003][ T5335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.294898][ T5335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.298935][ T5335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.303610][ T5335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.308479][ T5335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.317175][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.322698][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.325116][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.330405][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.334209][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.474730][T20333] chnl_net:caif_netlink_parms(): no params data found [ 313.563735][T20359] binder: 20358:20359 ioctl c0306201 80000540 returned -22 [ 313.644476][T20333] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.647579][T20333] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.649950][T20333] bridge_slave_0: entered allmulticast mode [ 313.652647][T20333] bridge_slave_0: entered promiscuous mode [ 313.655754][T20333] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.658464][T20333] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.660778][T20333] bridge_slave_1: entered allmulticast mode [ 313.663773][T20333] bridge_slave_1: entered promiscuous mode [ 313.730868][T20333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.735598][T20333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.753523][ T1233] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 313.761798][T20376] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 313.767169][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 313.803602][T20333] team0: Port device team_slave_0 added [ 313.810435][T20333] team0: Port device team_slave_1 added [ 313.853472][T20333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.855670][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.865531][T20333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.870120][T20333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.872334][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.884023][T20333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.947168][T20386] netlink: 348 bytes leftover after parsing attributes in process `syz.6.6386'. [ 313.958184][T20333] hsr_slave_0: entered promiscuous mode [ 313.960482][T20333] hsr_slave_1: entered promiscuous mode [ 313.962667][T20333] debugfs: 'hsr0' already exists in 'hsr' [ 313.964925][T20333] Cannot create hsr debugfs directory [ 314.159382][T20333] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 314.165573][T20333] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 314.173224][T20333] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 314.183102][T20333] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 314.200828][T20333] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.203144][T20333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.206123][T20333] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.208777][T20333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.244366][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.258267][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.262062][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.286774][T20333] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.296813][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.299778][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.311528][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.314633][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.426666][T20333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.586502][T20333] veth0_vlan: entered promiscuous mode [ 314.591324][T20333] veth1_vlan: entered promiscuous mode [ 314.606131][T20333] veth0_macvtap: entered promiscuous mode [ 314.610107][T20333] veth1_macvtap: entered promiscuous mode [ 314.622988][T20333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.634643][T20333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.645271][ T1140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.650239][ T1140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.654072][ T1140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.657116][ T1140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.715580][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.721498][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.737995][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.740534][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.026027][ T9793] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 315.187699][ T9793] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 315.189299][ T9793] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.195779][ T9793] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.195793][ T9793] usb 13-1: Product: syz [ 315.195801][ T9793] usb 13-1: Manufacturer: syz [ 315.195809][ T9793] usb 13-1: SerialNumber: syz [ 315.197439][ T9793] usb 13-1: config 0 descriptor?? [ 315.407542][ T5980] Bluetooth: hci3: command tx timeout [ 315.621345][ T9793] usb 13-1: USB disconnect, device number 2 [ 315.802692][T20471] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 315.806207][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 315.806281][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 315.954570][ T2087] IPVS: starting estimator thread 0... [ 315.957935][T20485] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.960497][T20485] tipc: Enabled bearer , priority 10 [ 316.046408][T20486] IPVS: using max 43 ests per chain, 103200 per kthread [ 316.096313][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.149600][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6430'. [ 316.366216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.688975][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.862128][T20548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.896255][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.355044][T20587] evm: overlay not supported [ 317.495996][ T5335] Bluetooth: hci3: command tx timeout [ 317.529587][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6473'. [ 317.568565][T20600] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 317.659812][T20612] netlink: 27 bytes leftover after parsing attributes in process `syz.8.6481'. [ 317.703312][ T40] audit: type=1326 audit(2000000229.164:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20617 comm="syz.4.6483" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 317.751455][T20622] pim6reg1: entered promiscuous mode [ 317.753594][T20622] pim6reg1: entered allmulticast mode [ 317.966300][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.416070][ T9793] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 318.566009][ T9793] usb 11-1: Using ep0 maxpacket: 8 [ 318.568949][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 318.571225][ T9793] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.574562][ T9793] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.578664][ T9793] usb 11-1: config 0 descriptor?? [ 318.993740][ T9793] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 319.015969][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.192862][ T34] usb 11-1: USB disconnect, device number 17 [ 319.248235][T20689] loop2: detected capacity change from 0 to 7 [ 319.251655][T20689] Dev loop2: unable to read RDB block 7 [ 319.253337][T20689] loop2: unable to read partition table [ 319.255233][T20689] loop2: partition table beyond EOD, truncated [ 319.257312][T20689] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 319.579058][ T5980] Bluetooth: hci3: command tx timeout [ 319.737030][T20694] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 320.047346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.136439][ T9793] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 320.287139][ T9793] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 320.291440][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.295169][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.299973][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.304045][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.307965][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.309678][T20714] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 320.312538][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.319693][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.323211][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.328143][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.331853][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.335506][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.339433][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.343710][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.347838][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.352248][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.356091][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.359694][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.363955][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.367760][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.371316][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.375368][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.379501][ T9793] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.382344][ T9793] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.385724][ T9793] usb 11-1: config 0 interface 0 has no altsetting 0 [ 320.392819][ T9793] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.396703][ T9793] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.400507][ T9793] usb 11-1: Product: syz [ 320.402353][ T9793] usb 11-1: Manufacturer: syz [ 320.404584][ T9793] usb 11-1: SerialNumber: syz [ 320.416936][ T9793] usb 11-1: config 0 descriptor?? [ 320.424786][ T9793] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 320.463160][T20725] overlayfs: workdir and upperdir must reside under the same mount [ 320.638413][ T34] usb 11-1: USB disconnect, device number 18 [ 320.642006][ T34] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 320.766267][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 321.086007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.091492][T20766] syzkaller1: entered promiscuous mode [ 321.093381][T20766] syzkaller1: entered allmulticast mode [ 321.207169][T20774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.487864][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.490953][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.493251][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.500897][T20803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 321.508568][T20802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.512109][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.515515][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.519187][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.521867][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.524541][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.527440][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.531489][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.534219][T20803] syzkaller0 speed is unknown, defaulting to 1000 [ 321.645993][ T5980] Bluetooth: hci3: command tx timeout [ 322.125964][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.577341][T20831] siw: device registration error -23 [ 323.175958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.326186][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 323.326607][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 323.517759][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6595'. [ 323.691602][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6606'. [ 323.720482][T20891] overlayfs: conflicting lowerdir path [ 323.726498][T20891] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 324.206072][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.317800][T20919] batadv_slave_1 (unregistering): left promiscuous mode [ 324.445108][T20928] bond0: entered promiscuous mode [ 324.447023][T20928] bond_slave_0: entered promiscuous mode [ 324.448901][T20928] bond_slave_1: entered promiscuous mode [ 324.451724][T20928] batadv0: entered promiscuous mode [ 324.453817][T20928] debugfs: 'hsr1' already exists in 'hsr' [ 324.456428][T20928] Cannot create hsr debugfs directory [ 324.459400][T20928] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 325.098994][T20982] binder: 20981:20982 ioctl c0306201 80000540 returned -22 [ 325.246035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.296068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.346868][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 326.348958][ T1110] ata1: failed to read log page 10h (errno=-5) [ 326.351064][ T1110] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 326.353378][ T1110] ata1.00: irq_stat 0x40000000 [ 326.354969][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 326.356992][ T1110] ata1.00: cmd 61/18:18:ae:0f:10/00:00:00:00:00/40 tag 3 ncq dma 12288 out [ 326.356992][ T1110] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 326.362591][ T1110] ata1.00: status: { DRDY } [ 326.364077][ T1110] ata1.00: error: { ABRT } [ 326.370306][ T1110] ata1.00: configured for UDMA/100 [ 326.372170][ T1110] ata1: EH complete [ 326.686064][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 326.690206][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.326044][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.630023][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 327.966725][T21075] bond0: option mode: unable to set because the bond device has slaves [ 328.065085][T21086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input64 [ 328.375944][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.675303][T21125] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6717'. [ 328.884980][T21146] loop7: detected capacity change from 0 to 7 [ 328.889691][T21146] Dev loop7: unable to read RDB block 7 [ 328.891481][T21146] loop7: unable to read partition table [ 328.893474][T21146] loop7: partition table beyond EOD, truncated [ 328.895410][T21146] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 329.406034][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.646042][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 329.650488][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 329.985787][T21217] overlayfs: upper fs does not support file handles, falling back to index=off. [ 329.989925][T21217] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 330.033874][T21221] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6760'. [ 330.057385][T21225] 9pnet_virtio: no channels available for device syz [ 330.087396][T21227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.093131][T21227] bond0: (slave rose0): Enslaving as an active interface with an up link [ 330.095734][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6765'. [ 330.219451][T21245] syzkaller0 speed is unknown, defaulting to 1000 [ 330.289647][T21245] netlink: 'syz.8.6769': attribute type 1 has an invalid length. [ 330.295679][T21245] netlink: 'syz.8.6769': attribute type 2 has an invalid length. [ 330.446062][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.536088][ T6041] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 330.697547][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.700931][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.703883][ T6041] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.707956][ C3] ata1: illegal qc_active transition (00000000->00800000) [ 330.711595][ T6041] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.716866][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.720497][ T6041] usb 9-1: config 0 descriptor?? [ 331.040577][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 331.044883][ T1110] ata1.00: configured for UDMA/100 [ 331.100228][ T5335] Bluetooth: hci3: unexpected subevent 0x01 length: 6 < 18 [ 331.133467][ T6041] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 331.138723][ T6041] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 331.496083][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.561438][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6798'. [ 331.566124][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6798'. [ 331.798035][T21338] syzkaller0 speed is unknown, defaulting to 1000 [ 331.857054][T21338] netlink: 'syz.7.6802': attribute type 1 has an invalid length. [ 331.859521][T21338] netlink: 'syz.7.6802': attribute type 2 has an invalid length. [ 332.261083][T21361] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 332.265100][T21361] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 332.526003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.958746][ T40] audit: type=1326 audit(2000000500.416:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21402 comm="syz.4.6833" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 333.137483][ T53] usb 9-1: USB disconnect, device number 26 [ 333.576122][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.818568][T21425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6844'. [ 333.897759][T21432] syzkaller1: entered promiscuous mode [ 333.899638][T21432] syzkaller1: entered allmulticast mode [ 334.120448][T21457] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.6859'. [ 334.616077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.412974][T21480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6870'. [ 335.519717][T21493] input: syz0 as /devices/virtual/input/input65 [ 335.528301][ T5980] Bluetooth: hci4: sending frame failed (-49) [ 335.531820][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 335.646129][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.104786][T21534] netlink: 188 bytes leftover after parsing attributes in process `syz.7.6895'. [ 336.151131][T21537] input: syz0 as /devices/virtual/input/input66 [ 336.191791][T21542] netlink: 'syz.4.6899': attribute type 1 has an invalid length. [ 336.291038][T21554] ================================================================== [ 336.293549][T21554] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x7401/0x84c0 [ 336.295997][T21554] Read of size 1 at addr ffff888020530330 by task syz.4.6904/21554 [ 336.299383][T21554] [ 336.300391][T21554] CPU: 1 UID: 0 PID: 21554 Comm: syz.4.6904 Not tainted syzkaller #0 PREEMPT(full) [ 336.300405][T21554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.300413][T21554] Call Trace: [ 336.300418][T21554] [ 336.300423][T21554] dump_stack_lvl+0x116/0x1f0 [ 336.300441][T21554] print_report+0xcd/0x630 [ 336.300492][T21554] ? __virt_addr_valid+0x81/0x610 [ 336.300508][T21554] ? __phys_addr+0xe8/0x180 [ 336.300522][T21554] ? xfrm_state_find+0x7401/0x84c0 [ 336.300537][T21554] kasan_report+0xe0/0x110 [ 336.300553][T21554] ? xfrm_state_find+0x7401/0x84c0 [ 336.300569][T21554] xfrm_state_find+0x7401/0x84c0 [ 336.300587][T21554] ? __pfx_xfrm_state_find+0x10/0x10 [ 336.300604][T21554] ? dst_release+0x8d/0x340 [ 336.300617][T21554] ? xfrm4_get_saddr+0xe5/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 336.300631][T21554] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 336.300646][T21554] ? find_held_lock+0x2b/0x80 [ 336.300659][T21554] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 336.300681][T21554] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 336.300705][T21554] ? dst_alloc+0xc0/0x1a0 [ 336.300717][T21554] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 336.300735][T21554] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 336.300751][T21554] ? find_held_lock+0x2b/0x80 [ 336.300762][T21554] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 336.300779][T21554] ? ip_route_output_key_hash+0x16b/0x2e0 [ 336.300794][T21554] xfrm_lookup_route+0x3b/0x200 [ 336.300811][T21554] ip_route_output_flow+0x11e/0x150 [ 336.300823][T21554] udp_sendmsg+0x1af9/0x2870 [ 336.300839][T21554] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 336.300855][T21554] ? __pfx_udp_sendmsg+0x10/0x10 [ 336.300875][T21554] ? aa_sk_perm+0x2f4/0xb10 [ 336.300893][T21554] ? __pfx_udp_sendmsg+0x10/0x10 [ 336.300908][T21554] inet_sendmsg+0x105/0x140 [ 336.300919][T21554] ____sys_sendmsg+0x973/0xc70 [ 336.300930][T21554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.300939][T21554] ? get_compat_msghdr+0x11a/0x170 [ 336.300954][T21554] ? futex_unqueue+0x133/0x2c0 [ 336.300968][T21554] ___sys_sendmsg+0x134/0x1d0 [ 336.300983][T21554] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.301006][T21554] __sys_sendmmsg+0x2f9/0x420 [ 336.301021][T21554] ? __pfx___sys_sendmmsg+0x10/0x10 [ 336.301034][T21554] ? udp_connect+0x4a/0x70 [ 336.301050][T21554] ? __pfx_do_futex+0x10/0x10 [ 336.301074][T21554] ? xfd_validate_state+0x61/0x180 [ 336.301090][T21554] ? __sys_setsockopt+0x140/0x1a0 [ 336.301106][T21554] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 336.301121][T21554] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 336.301140][T21554] __do_fast_syscall_32+0x7c/0x3a0 [ 336.301156][T21554] do_fast_syscall_32+0x32/0x80 [ 336.301171][T21554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.301185][T21554] RIP: 0023:0xf705e579 [ 336.301194][T21554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.301204][T21554] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 336.301215][T21554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 336.301222][T21554] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 336.301228][T21554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.301234][T21554] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.301241][T21554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.301251][T21554] [ 336.301254][T21554] [ 336.405152][T21554] Allocated by task 12420: [ 336.406502][T21554] kasan_save_stack+0x33/0x60 [ 336.407958][T21554] kasan_save_track+0x14/0x30 [ 336.409375][T21554] __kasan_slab_alloc+0x89/0x90 [ 336.410833][T21554] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 336.412521][T21554] xfrm_state_alloc+0x23/0x5c0 [ 336.413987][T21554] __find_acq_core+0xb59/0x2900 [ 336.415542][T21554] xfrm_find_acq+0x7b/0xa0 [ 336.416914][T21554] xfrm_alloc_userspi+0x58e/0xbb0 [ 336.418485][T21554] xfrm_user_rcv_msg+0x4fb/0xb60 [ 336.419996][T21554] netlink_rcv_skb+0x155/0x420 [ 336.421424][T21554] xfrm_netlink_rcv+0x71/0x90 [ 336.422895][T21554] netlink_unicast+0x5aa/0x870 [ 336.424357][T21554] netlink_sendmsg+0x8d1/0xdd0 [ 336.425835][T21554] ____sys_sendmsg+0xa95/0xc70 [ 336.427313][T21554] ___sys_sendmsg+0x134/0x1d0 [ 336.428735][T21554] __sys_sendmsg+0x16d/0x220 [ 336.430142][T21554] __do_fast_syscall_32+0x7c/0x3a0 [ 336.431723][T21554] do_fast_syscall_32+0x32/0x80 [ 336.433162][T21554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.435113][T21554] [ 336.435877][T21554] Freed by task 5844: [ 336.437096][T21554] kasan_save_stack+0x33/0x60 [ 336.438501][T21554] kasan_save_track+0x14/0x30 [ 336.439920][T21554] kasan_save_free_info+0x3b/0x60 [ 336.441478][T21554] __kasan_slab_free+0x60/0x70 [ 336.442989][T21554] kmem_cache_free+0x2d1/0x4d0 [ 336.444475][T21554] xfrm_state_gc_task+0x50a/0x770 [ 336.446076][T21554] process_one_work+0x9cf/0x1b70 [ 336.447646][T21554] worker_thread+0x6c8/0xf10 [ 336.449102][T21554] kthread+0x3c5/0x780 [ 336.450385][T21554] ret_from_fork+0x5d7/0x6f0 [ 336.451858][T21554] ret_from_fork_asm+0x1a/0x30 [ 336.453373][T21554] [ 336.454144][T21554] The buggy address belongs to the object at ffff888020530000 [ 336.454144][T21554] which belongs to the cache xfrm_state of size 928 [ 336.458395][T21554] The buggy address is located 816 bytes inside of [ 336.458395][T21554] freed 928-byte region [ffff888020530000, ffff8880205303a0) [ 336.462598][T21554] [ 336.463368][T21554] The buggy address belongs to the physical page: [ 336.465373][T21554] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020532200 pfn:0x20530 [ 336.468391][T21554] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 336.470914][T21554] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 336.473156][T21554] page_type: f5(slab) [ 336.474374][T21554] raw: 00fff00000000040 ffff8880416b7e00 dead000000000122 0000000000000000 [ 336.476969][T21554] raw: ffff888020532200 00000000801e0019 00000000f5000000 0000000000000000 [ 336.479476][T21554] head: 00fff00000000040 ffff8880416b7e00 dead000000000122 0000000000000000 [ 336.482100][T21554] head: ffff888020532200 00000000801e0019 00000000f5000000 0000000000000000 [ 336.484677][T21554] head: 00fff00000000003 ffffea0000814c01 00000000ffffffff 00000000ffffffff [ 336.487336][T21554] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 336.489879][T21554] page dumped because: kasan: bad access detected [ 336.491835][T21554] page_owner tracks the page as allocated [ 336.493625][T21554] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12420, tgid 12418 (syz.4.2811), ts 160410422074, free_ts 157606024788 [ 336.499435][T21554] post_alloc_hook+0x1c0/0x230 [ 336.500924][T21554] get_page_from_freelist+0x132b/0x38e0 [ 336.502642][T21554] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 336.504489][T21554] alloc_pages_mpol+0x1fb/0x550 [ 336.506030][T21554] new_slab+0x247/0x330 [ 336.507328][T21554] ___slab_alloc+0xcf2/0x1740 [ 336.508821][T21554] __slab_alloc.constprop.0+0x56/0xb0 [ 336.510464][T21554] kmem_cache_alloc_noprof+0xef/0x3b0 [ 336.512096][T21554] xfrm_state_alloc+0x23/0x5c0 [ 336.513583][T21554] __find_acq_core+0xb59/0x2900 [ 336.515116][T21554] xfrm_find_acq+0x7b/0xa0 [ 336.516489][T21554] xfrm_alloc_userspi+0x58e/0xbb0 [ 336.518034][T21554] xfrm_user_rcv_msg+0x4fb/0xb60 [ 336.519572][T21554] netlink_rcv_skb+0x155/0x420 [ 336.521022][T21554] xfrm_netlink_rcv+0x71/0x90 [ 336.522461][T21554] netlink_unicast+0x5aa/0x870 [ 336.523953][T21554] page last free pid 0 tgid 0 stack trace: [ 336.525729][T21554] __free_frozen_pages+0x7d5/0x10f0 [ 336.527326][T21554] __folio_put+0x329/0x450 [ 336.528739][T21554] skb_release_data+0x81a/0x9e0 [ 336.530273][T21554] __kfree_skb+0x4f/0x70 [ 336.531622][T21554] tcp_ack+0x19b2/0x5bf0 [ 336.532967][T21554] tcp_rcv_established+0xda2/0x23f0 [ 336.534599][T21554] tcp_v4_do_rcv+0x5ca/0xa90 [ 336.536080][T21554] tcp_v4_rcv+0x2ee1/0x4640 [ 336.537504][T21554] ip_protocol_deliver_rcu+0xba/0x4c0 [ 336.539189][T21554] ip_local_deliver_finish+0x3f2/0x720 [ 336.540826][T21554] ip_local_deliver+0x18e/0x1f0 [ 336.542365][T21554] ip_rcv+0x2e0/0x600 [ 336.543570][T21554] __netif_receive_skb_one_core+0x197/0x1e0 [ 336.545451][T21554] __netif_receive_skb+0x1d/0x160 [ 336.547011][T21554] process_backlog+0x442/0x15e0 [ 336.548493][T21554] __napi_poll.constprop.0+0xb7/0x550 [ 336.550120][T21554] [ 336.550892][T21554] Memory state around the buggy address: [ 336.552606][T21554] ffff888020530200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.555042][T21554] ffff888020530280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.557559][T21554] >ffff888020530300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.560026][T21554] ^ [ 336.561761][T21554] ffff888020530380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 336.564242][T21554] ffff888020530400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 336.566758][T21554] ================================================================== [ 336.572441][T21554] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.574712][T21554] CPU: 0 UID: 0 PID: 21554 Comm: syz.4.6904 Not tainted syzkaller #0 PREEMPT(full) [ 336.577532][T21554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.580819][T21554] Call Trace: [ 336.581854][T21554] [ 336.582818][T21554] dump_stack_lvl+0x3d/0x1f0 [ 336.584303][T21554] vpanic+0x6e8/0x7a0 [ 336.585656][T21554] ? __pfx_vpanic+0x10/0x10 [ 336.587098][T21554] ? __pfx_vprintk_emit+0x10/0x10 [ 336.588669][T21554] ? xfrm_state_find+0x7401/0x84c0 [ 336.590256][T21554] panic+0xca/0xd0 [ 336.591442][T21554] ? __pfx_panic+0x10/0x10 [ 336.592849][T21554] ? xfrm_state_find+0x7401/0x84c0 [ 336.594485][T21554] ? preempt_schedule_common+0x44/0xc0 [ 336.596217][T21554] ? preempt_schedule_thunk+0x16/0x30 [ 336.597895][T21554] check_panic_on_warn+0xab/0xb0 [ 336.599460][T21554] end_report+0x107/0x170 [ 336.600801][T21554] kasan_report+0xee/0x110 [ 336.602149][T21554] ? xfrm_state_find+0x7401/0x84c0 [ 336.603584][T21554] xfrm_state_find+0x7401/0x84c0 [ 336.605109][T21554] ? __pfx_xfrm_state_find+0x10/0x10 [ 336.606796][T21554] ? dst_release+0x8d/0x340 [ 336.608185][T21554] ? xfrm4_get_saddr+0xe5/0x140 [ 336.609654][T21554] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 336.611319][T21554] ? find_held_lock+0x2b/0x80 [ 336.612786][T21554] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 336.614646][T21554] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 336.616700][T21554] ? dst_alloc+0xc0/0x1a0 [ 336.618057][T21554] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 336.620075][T21554] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 336.621770][T21554] ? find_held_lock+0x2b/0x80 [ 336.623274][T21554] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 336.625101][T21554] ? ip_route_output_key_hash+0x16b/0x2e0 [ 336.626892][T21554] xfrm_lookup_route+0x3b/0x200 [ 336.628433][T21554] ip_route_output_flow+0x11e/0x150 [ 336.630070][T21554] udp_sendmsg+0x1af9/0x2870 [ 336.631550][T21554] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 336.633244][T21554] ? __pfx_udp_sendmsg+0x10/0x10 [ 336.634734][T21554] ? aa_sk_perm+0x2f4/0xb10 [ 336.636131][T21554] ? __pfx_udp_sendmsg+0x10/0x10 [ 336.637676][T21554] inet_sendmsg+0x105/0x140 [ 336.639104][T21554] ____sys_sendmsg+0x973/0xc70 [ 336.640591][T21554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.642219][T21554] ? get_compat_msghdr+0x11a/0x170 [ 336.643796][T21554] ? futex_unqueue+0x133/0x2c0 [ 336.645276][T21554] ___sys_sendmsg+0x134/0x1d0 [ 336.646818][T21554] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.648458][T21554] __sys_sendmmsg+0x2f9/0x420 [ 336.649972][T21554] ? __pfx___sys_sendmmsg+0x10/0x10 [ 336.651602][T21554] ? udp_connect+0x4a/0x70 [ 336.653042][T21554] ? __pfx_do_futex+0x10/0x10 [ 336.654550][T21554] ? xfd_validate_state+0x61/0x180 [ 336.656189][T21554] ? __sys_setsockopt+0x140/0x1a0 [ 336.657778][T21554] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 336.659548][T21554] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 336.661599][T21554] __do_fast_syscall_32+0x7c/0x3a0 [ 336.663253][T21554] do_fast_syscall_32+0x32/0x80 [ 336.664768][T21554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.666692][T21554] RIP: 0023:0xf705e579 [ 336.667950][T21554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.673743][T21554] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 336.676244][T21554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 336.678612][T21554] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 336.680964][T21554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.683336][T21554] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.685729][T21554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.688118][T21554] [ 336.689588][T21554] Kernel Offset: disabled [ 336.690910][T21554] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:43:04 Registers: info registers vcpu 0 CPU#0 EAX=81f0ab8a EBX=00000003 ECX=ffffffff EDX=81f0ab8a ESI=f7394ff4 EDI=81f0ab8e EBP=f7ef5610 ESP=ffaaffa8 EIP=f703e699 EFL=00000282 [--S----] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57985440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2439a6 CR3=0000000068c7c000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617a35 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900063dea80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b0fc6c0 R15=ffffffff856179d0 RIP=ffffffff85617a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007fc0 CR3=0000000068b92000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341d40 RCX=ffffffff81af1441 RDX=ffff888023a92440 RSI=ffffffff81af141b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002d4f4b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056683a9 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af141d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7484ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801b87ed60 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b92d8fe RDI=ffffed100370fdac RBP=ffff88801b87ed60 RSP=ffffc9000631efe0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8b92d8fe R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff82206b98 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff807f90 CR3=0000000068d94000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000