last executing test programs: 5.535277835s ago: executing program 3 (id=489): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 5.458249787s ago: executing program 3 (id=492): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0xa8, 0xa8, 0xffffffff, 0x150, 0xa8, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@private=0xa010100, @empty, 0xff, 0x0, 'batadv_slave_1\x00', 'dvmrp0\x00', {0xff}, {}, 0x16, 0x6, 0x11}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @rand_addr=0x64010100, @private=0xa010100, @icmp_id=0x65, @port=0x4e23}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'wlan0\x00', 'syzkaller1\x00', {}, {}, 0x5c, 0x2, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2}, @port=0x4e21, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @multicast2, @icmp_id=0x65, @port=0x7}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010102, @loopback, @icmp_id=0x65, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 5.033465184s ago: executing program 2 (id=494): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @void, @mpls={[], @generic="b849b7b54ab478beab2f1431c247ac4b3a4e04f604"}}, 0x19) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 4.16831166s ago: executing program 1 (id=497): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000300)=""/87, 0x57}], 0x3, &(0x7f00000006c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000013c0)) read$dsp(r6, &(0x7f0000000440)=""/171, 0xab) 3.905098411s ago: executing program 2 (id=500): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000001000010ac05440200000000000109022400010000000009040000000300020009210000000122000009058103000000000032b0a0f8"], 0x0) r0 = gettid() socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) io_uring_setup(0x2cdb, &(0x7f0000001580)={0x0, 0x800068a, 0x8, 0x0, 0x3fffffd}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240)="585aa931c1953e3d6577a0f5ceb814f3ab167e93c415d57d1b50105f40c245cdc91a7c22b6f89c431367ec73ca149533f78d825966964edb6195c3b07faa2729bba455ad17421cbaffcc2f85165d83add607b41ba89c073187803bff8ba307ceb995b147fccaca2c3d0543791b1b169893122fe2d34e41f3f4f2f12275bf62ce51d7678ff4729aaaa6c2171ed692499452ac92a21edda48e4904686d01ba97e1fbfcb70d92f4d87ec5c744412802fc11b625424ddcec4053434bd71f5f65b7fe35b2d50ac60192ec5f26db9db3c2ba78afc5d4bbba05ee181e259b813102783cf12a589d64589ae41aa75102135b751f5e10eafde0c4ae46b45cc4947cb1e03e4aa32e253640faced78c7b3cdd38cc3f096c17b5ce1f92ba18a40fd54eb4afd79fd0e554db8c2be574a56cb803e1826dab558aec7446305ec523763431c9f1063b1086a6a6ddf1551937e7b1d836678ca1f75e6069a9bdf7a604224fa46100fb24f1dda6713da52ff9cc6261bbf895c2ac278e975397f3ad70892905ca2a893f522137876908309decdc6c7840d7a8618a82229bfc6c3a2438c142d501d40e1f5d816fd2dd38ee5e351afc4a7c50b2df64758ba30111bf17c284e3fa3b02926f4b1dea0be762db31b2797e8de009ab7d6a19358b688cea3ff64f18fa6a625f05857e5766653c2dcb869bf863db0b7e3bdb8bcaf9b44742e9501bebe582bbe87c8a794d1d28787587b085484e6fdf3120f7dfbdb8c492efeec38015d382cd668d625712889e506ce2617b3c70920b734644bfe3790839933738281aa46abefd610c09fa7c4ac19a86882f156d129283d9c55c1d2b03f7c963ed8c4f2b24bd79c0e64b2820f6a8e6236e46f9f008b855ab12a284a1bc47bbc17f0a2ca22301c65fdc294a4490efdb06145dfdf31a5f5e80ccd47a9d1eb8e49132af8ceb2368016405df303add18273af1684759328582e427129c176fe46975de711a87ee831e6b7415bd886ecc3dfd1d05fdfe15529b25817affbd5a2855d023a39bf44c43d7fc54d1a82afe023791020e6eee8db3f7b2b21820754409ca77cfef08f91d72ec7a3793985dee8dc607b0955c14e87fcd9fa1cdc62a0a68ccb8d387a5a7b327dd66d2cce983ba577e4f149f1ec8963c4615533713cd8e8d688b08fdfd6d730a4765719d5c48d1a21daddf892b2dffdfde5c71f607da41f8074fe34dc3921ef3d0ce7cf382546bfec5a1f069c82c64f1fd822cfe01f6408962fec77d1c48a4b890f47bf7f6602de82d2f66ebc22f83a56e72b46616be8bc04da0298b912fbc0b669990537b217a0f0efdc91a6064218bf4a25c643f99e39b0fce3e13b8ebba3281a6d605b90e551414634141d2d5808445cb9202ad101f6179ae86460bc8299e91ed47b90269c68ac541ac8f1cdbccf5a4627f776ca5973827705244e370c39bd3553321eafead32680091cb39854acf5150f0c3379a6fada4888b948f97167aef18bc8bd8ad8ce6997f31521486b15ea4487f08575110a497759f2c9a882bf542cc93ab9d7809bb58ef260060d878f14622f03c971190148b6ec9ca6eade9e85b69d5bf142f53b680b7d42b9b33714f13c8ad3aac47e65bec8922053d4bfaca7e60d93f87a046ac6bc47a04edae5318fed4b35e70fe99c11f655881902dee81067b7bafe2607f2547d6cf3ef8a4c140e52bf6ae7f7e194473fb8a184685229a4bdbee85853641c9be7e153803c0a40fde93485ba6765510d5946d6ee4f6d646e321f5dd473dfffa678e0b84392627881f5ec2c2562021aa1cf8f0397b3f43cd5aaa41afb24abdbf7318d89a9d16f64680fb68d0395ae317a74672ab532809693ac566ad4ba566acaac18e8993a4e9b2a07193bb4932d5e1b6bd22cd4661c9885bf91a28325554483599830e1b273c23a8f4e4b420e282d43328de2ffa7e4b656c7eb6899a859e561b3c0325df572db687fc369ce91f971f6f543f7ad34f5a4fb6e69497be669f65ab002840ced38740dfd297ed0c152daf3774c1787161b99b7d707210a742a0b76efeee83ae8f0dcdde78728389235987752a2493d01797920e621f7803eb7ddfe563655245aa76201d78d9ef7bc5bfa4c886fb3180a8783403598b3fbbd45e83403c7f2f9d679c45b898880c9bd2fe4d9b90199cb3f6318e22b0b13de3d1302fa8e513519d9dcb3870b60e814995e5cd8db12c9085584978ed560022de8f6ef77ae9884581d3ac4f35cdc813bd6b06e05b31089a51bd437ba0e72a95250fbd9b22624d3fa812566eebda7186ceca8e7bb888de677edec30f78db16cfb2ce14ead4c4f318b5454d9db55c41ed24093343dfa7d092bdf5d11ccf44880f497505319fa1a6540084adff9836eeebe8ce0b36db4b2dc2c9f9c9ca0c737d356515d1869f5e752250ea5200be6eac092137562b2538c95d3198776836b43886b2dddad93f4956bfc74267ab5abb9ccbc0ea4669680769a29d4075f580f7b7608fc2712b68438ae9e0d4c17709b7b8fc3d55957ee898bd105d8be9a3c034476b6d1bf845246bcf1140753617ba195f31bcfc15a32b32fe59d7c03716135e3b93b88b5fa34ba3e930502a68270b36b1a798349f448be7576c3b581a90712baa1050bd666e6e66b641c0794563d962a980b646bad994139bc87fece0b0182d8a23d18b89019490237c7e7524430be1ab502995e6bc3146704741beaf88621b098c928bb6de056e306337a7a8728d6200d1421f57bbefc16eedb5c90d09f8b25f21413d1741d05f5948e9051c71bff1289e17e7e904ae7e8e70a09c4fbf7e74f8468ec08d7268295ea8b45e4eff656d5021a54afd492e7fc3290e22921d91ee525a325f50f26a90483776258055c818e4c375bc72a99f2abbfc4a9a6f3ee77bc75f3ede0d047dd71c6c9f6a59c81b32b7d18ec6a36d7048ffa029d8074579da92621c39dbfb07908544044de0558eec4db759772f282a47d46ad9c95f6c8197756d7bf7b7e0800b17f5d4d79dd328f93846e34f0b01ff87036938f20868138aa08d51e67662bfa76539654a24506726afd4b9b65917b3c021a8d4c7ed119a0c038adf988d61a5b98bf21bee0ee5562b2fc7f7996b110f0d0882217b22485ab8f825e1ffbb791e3c0017000c37f8e46a392debcfb9d0caaec7d826ac15954dd6c0db6d2bd1bec9a29743b5ee39051bbf611c4fc2036d1938bb1b9e867b1d44ee7c9997ab7b9cead4d3c4adbc212a547fda3b293e952b3d9852113140f08dc8454d4ad947431107154c0ce69d9a2ead9385e997950a333c46354d0417d38f7c54b96aae69a0e3b7c608c6e29083610016a6524c62a34402713322847943604c454cdd7acaa2976bb431b53f9a4068233a93b2c31075a0783d1b7581bd7a5e087064a562db942f6dce9943de6e09c38172bb5d8a678aa195be013cfa9d6137aea3ba675f195aa5ba9df172d33deef9474cb39bbe7fdc1848fd25c74b367f7f10003c80855e07d978c54ec8fc66defbab0438ae6c9cd94f8dba057f04e1bd50256e8e0ab974d04e60ed2a454d4bef2076f926ea7153e703053aead80265779c21254cf4a706a008db4a9cf3c346f9098044c0beb8ee676a5e59c2898dbbc51addb3a11b79407f658a97e03c164db1b07ef0e46431c34bf2909685eda8365c19a2a5d914a92508725c9aefeaab531739fccc765fb4abb3ce627bf016e874ae14505371d8b19c550ed44ba9aa4805ce0b783009c299ed7442c227b07c4fafd928e4eb99d290d114f27895aabbdfda859690c041f36b064905786d6ec21ce6b3829d13d5d897666292321a03058adaf2f024fc5a13de8e4184ec8f07ca3b32a97090bdb92e93755f5d2360f2f99fe809a87948471fcf906007617b2f86ba04cff2864c918a95e2ff99f7f2f46bca28312477d44247c1128c830f8296ff0c3a5d8a2d7a830582feb48dbc912c05c6104acdc850ec448d1317b015e4cdbd6fe68f53c1786aa2be736885a75f70c396c5b3a98516e18ceb32114914516f07e82ce3ff863fcc518f0381159427d93bdce23b78d803c129d6ac9222ab18b68d7127715b2779650d0a2f489ea3363f9ed30a9f02942a8e9a1747c892a6275cdaea39929751c67ae209ddff7c580e33961aeadd86bb69d431679a045139ade2aed2b36902eb4a2aef5c0ce901cb803451539f47b4994366213a3baa6503653d877ecd3b3e3570d9d5de8126ad391e4447647c9bcdaa23707d3f0816d89b3fd673b71a471118ddeea9fb64c0cdd5fbbf0ef5c4c7506542a91cf220839458f82fee082b60e0c7313ba2601cb7462000f4693cfb33a5d6e01641845f17fd8be258783b468f5bce04d071a295ec8f7664adc9244de23b58f927d63e97c3f640acdf74a45315d91813219a01bc8071373e97bc53d84d59f8ac293da57706874f7e00dba0547e5c9d25f7692f77b56e6c480c7ad46a30f1a0e7381efc719aa6f765c0cd5999257cb6354607db96ac5329876373279ce91188352aaca655cf8f12ddfcdccd76037f2b957e7d56700d61ec28988e01eaec66ce61a9de9b10da4c7cbc971cc601b498070a1c17be90497eb0ac10868d4dd9b46f3f3273c252c4e8d4e99a94f73ea47fb844f5004e54fb8e6d45fab54e3db0d8d259d159af4569383b44bddbf4a94764643a1a418254b2b5ae5bfdb9c8fb1b85dd22451a30a2a1a4d628ca2f9be66bc4628f0fa9b7e3bc3b5e7ddbf76044ee08a316239f02029c4e0ba5eb68cdf3406987ea84bdb83d31bae83517a99dd5788cad5b5ae3ad8d408ff4cd3ea3f7b0627ad37bb1ac3b5905c3187c84c7ecea2246ad896a857c4727ca533a067b6064bef16a0b89f69265f74105672856930d43aa9397c2323aece0c0a5998f4ca00a9b6f515487bab0276a64b7ec18d9be08efdc83edbf542ae892b879a2b609b5724513e0336fb40ee4ae7d82bb5b6b27650349c395a5335e8622f0a60d86fabf20e42a7aea223c51c2cf1cf70880b47ed4c460e98c755d9b52a6343c4ff3cd69b73f9c22fc492e65994635b96f95117a3c5de0a8ca5c557c2cbab61bebe37c86043a51f5b7f8239c574fdac21a702fab36b316e7d20d4fb2cebc577a34f19311a85606e691bf1e04c2d07249cab4e02c9544a5ac310676de3cd289b3182320d5feb63fbee9fdbbff65d46190e8367a9f2b56385be9bd350b525790a571f4bf0d7c45f04a7dfb0c1a68d79e2f00032ac9429f16eb91e1c88e565b38eee4dbcdaaa9e65cbdb532c3eebb5e18ff3c56e225ed64941b7a912c31b7afbae3b7c8b92d3d658c017b56eecbdf57ff00851c8a73e664e6fb18526b26a88aa5e24388b4044ce2ba7f099d80ca0bd94c780981ae96a8326d60a497c8912051e1faf3e54d2b8254f0f6670acbcda9b3925dd4def5b7551e0efdccdae53e40e5c2f1518c5c122fd465eac4e21ae5c6ab6a622b7170ca5fb8a991282bba76603f24c35daf676d50b66b5adcd35ca3ae5c299c74ea3fd1c280295fb7eb6f636dfb0bb607a5a88973faa9e0c67289cb90f181e5b1d1ec1bf083936203042e5da10aaa895b18d2610aefb9c86a937519c78db50e81695504fb84e9066e1dfd0fb7b7e2441a68d11e09ab2701704f9a05bf11446d058e78a3223593b71898df512e4b52e53ddf4d938768380fcd27cd86367bc737677eb4a44f8412166b00d236f3aaaa3906017cef32d7cef1840ee5d11eea900c0b9a1cc148f67651413bd86daacc7ee5075521b9321883c1e75e48f0fb8408cd12cca4561a5ed8ddb5", &(0x7f0000001240)=""/201}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x10, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) 3.340630091s ago: executing program 3 (id=501): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.302815155s ago: executing program 3 (id=502): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) 3.290268744s ago: executing program 1 (id=503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote, 0xb27}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x40, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x31) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, 0x0, 0x20000081) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0', @ANYRES16=r7, @ANYBLOB="050000000000000000002e000000080003006e995f7333bd64437500d2fde21a53112068f897c520853a5e848df2ab560dcb", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000400cc0004001501"], 0x30}}, 0x0) 2.385525176s ago: executing program 0 (id=505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) 2.38536376s ago: executing program 2 (id=506): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.385180173s ago: executing program 3 (id=507): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000000)) r1 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x34) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x410082, 0x80) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() r7 = socket(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4$inet6(r7, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.268517572s ago: executing program 2 (id=508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[], 0x74}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) read$hiddev(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x4000}) 1.798493829s ago: executing program 1 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001ac0)=0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x220000) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001, 0x6, 0x8}}]}]}]}, 0x38}}, 0x0) 1.460235949s ago: executing program 0 (id=510): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.366533948s ago: executing program 0 (id=511): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x42902) r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x7d4, 0x4, {{0x4a, 0x4, 0x2, 0x37, 0x128, 0x67, 0x0, 0xa, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x34, 0xa4, 0x1, 0x9, [{@empty, 0x40}, {@loopback}, {@empty, 0xa}, {@multicast1, 0x10001}, {@rand_addr=0x64010100, 0x2}, {@multicast2}]}, @timestamp={0x44, 0x28, 0x34, 0x0, 0x5, [0x40, 0x1, 0x6, 0x3, 0x1ff, 0x3, 0xffff, 0x6, 0x8]}, @timestamp_prespec={0x44, 0x54, 0x39, 0x3, 0x2, [{@private=0xa010101, 0x9}, {@rand_addr=0x64010100, 0x3}, {@local, 0x1}, {@loopback, 0xd69}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@private=0xa010102, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x200}]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x7, 0x9, "b94685bb0814fa"}, {0x7, 0x3, "b7"}, {0x0, 0xa, "1c42fb96843c40b7"}, {0x5, 0xb, "c1691d6484406dd38c"}, {0x2, 0x3, "fa"}, {0x1, 0xa, "fbd05e82f67e124c"}, {0x0, 0xe, "2f2f2bf3c4d2b4612a184a99"}, {0x1, 0x8, "c1aa35383442"}]}, @cipso={0x86, 0x17, 0x2, [{0x5, 0xd, "1a09a5426beffc6c1d3d0e"}, {0x2, 0x4, "5b1e"}]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@report={0xc8, 0x20, 0x20, 0x70bd26, 0x25dfdbfd, {0x32, {@in=@broadcast, @in6=@empty, 0x4e20, 0x1, 0x4e22, 0x9811, 0x2, 0xe0, 0x0, 0x3, r3, r4}}, [@replay_thresh={0x8, 0xb, 0xb16}, @tmpl={0x44, 0x5, [{{@in=@local, 0x4d5, 0x6c}, 0x346765e5d784cf43, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3, 0x1, 0x6, 0x8001, 0x9, 0x400}]}, @lastused={0xc, 0xf, 0x7}, @mark={0xc, 0x15, {0x35075d, 0xfffffffc}}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @policy_type={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1b0000001a005f0414f9f40700090400810000000000342580d200", 0x1b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x841023, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) splice(r1, &(0x7f0000000100)=0x401, r0, &(0x7f0000000140)=0x800, 0x1, 0xc) 1.274326982s ago: executing program 2 (id=512): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x1, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="5fa213", 0x3, 0xffffffff) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x81b) read$char_usb(r1, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 968.489771ms ago: executing program 3 (id=513): socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap$usbfs(&(0x7f0000398000/0x2000)=nil, 0x2000, 0x5, 0x110, r2, 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) 959.423067ms ago: executing program 1 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) fsopen(0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00', @ANYBLOB], 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x100}, 0x24}}, 0x0) recvmsg$can_raw(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/16, 0xf000}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 476.584596ms ago: executing program 0 (id=515): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x6}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0xf3ff00000000) 78.595362ms ago: executing program 0 (id=516): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 45.193134ms ago: executing program 0 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote, 0xb27}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x40, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x31) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, 0x0, 0x20000081) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0', @ANYRES16=r7, @ANYBLOB="050000000000000000002e000000080003006e995f7333bd64437500d2fde21a53112068f897c520853a5e848df2ab560dcb", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000400cc0004001501"], 0x30}}, 0x0) 44.832152ms ago: executing program 2 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x509b, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000380)=@req={0x20, &(0x7f00000002c0)={'veth0_to_bridge\x00', @ifru_names='dvmrp1\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee98"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000600)={r7, 0xffffffffffffffff, 0x32, 0x7, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x7, 0x0, 0xf1a78add0439488a}}, 0x3c) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r8, 0x4068aea3, &(0x7f0000000180)) 39.946026ms ago: executing program 1 (id=519): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9264}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=520): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:13155' (ED25519) to the list of known hosts. [ 32.622478][ T5854] cgroup: Unknown subsys name 'net' [ 32.785356][ T5854] cgroup: Unknown subsys name 'cpuset' [ 32.788422][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.546284][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.953572][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.956621][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.959626][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.962297][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.965223][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.970247][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.973035][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.975168][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.976246][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.977723][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.978897][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.979769][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.980479][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.981185][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.981296][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.981788][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.981980][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.982082][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.984187][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.986250][ T63] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.987960][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.990088][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.993588][ T5938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.006272][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.166568][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 36.181755][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 36.257954][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 36.308121][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.310028][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.312095][ T5931] bridge_slave_0: entered allmulticast mode [ 36.314684][ T5931] bridge_slave_0: entered promiscuous mode [ 36.341814][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.345753][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.347918][ T5931] bridge_slave_1: entered allmulticast mode [ 36.350817][ T5931] bridge_slave_1: entered promiscuous mode [ 36.368138][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.370737][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.373463][ T5943] bridge_slave_0: entered allmulticast mode [ 36.376355][ T5943] bridge_slave_0: entered promiscuous mode [ 36.408065][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.410728][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.413013][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.415043][ T5943] bridge_slave_1: entered allmulticast mode [ 36.417546][ T5943] bridge_slave_1: entered promiscuous mode [ 36.420722][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 36.439624][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.468894][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.470817][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.472714][ T5934] bridge_slave_0: entered allmulticast mode [ 36.475468][ T5934] bridge_slave_0: entered promiscuous mode [ 36.495240][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.498649][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.509862][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.511881][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.514892][ T5934] bridge_slave_1: entered allmulticast mode [ 36.516847][ T5934] bridge_slave_1: entered promiscuous mode [ 36.520390][ T5931] team0: Port device team_slave_0 added [ 36.541960][ T5931] team0: Port device team_slave_1 added [ 36.545300][ T5943] team0: Port device team_slave_0 added [ 36.592462][ T5943] team0: Port device team_slave_1 added [ 36.604859][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.606728][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.608581][ T5937] bridge_slave_0: entered allmulticast mode [ 36.610562][ T5937] bridge_slave_0: entered promiscuous mode [ 36.612875][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.615385][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.617255][ T5937] bridge_slave_1: entered allmulticast mode [ 36.619225][ T5937] bridge_slave_1: entered promiscuous mode [ 36.622593][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.626466][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.629159][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.630968][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.637839][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.670159][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.672028][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678804][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.681941][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.683899][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.690383][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.694323][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.696145][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.702717][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.707401][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.733030][ T5934] team0: Port device team_slave_0 added [ 36.735822][ T5934] team0: Port device team_slave_1 added [ 36.738117][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.749323][ T5943] hsr_slave_0: entered promiscuous mode [ 36.751407][ T5943] hsr_slave_1: entered promiscuous mode [ 36.775297][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.777121][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.783827][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.809235][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.811066][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.818495][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.823762][ T5937] team0: Port device team_slave_0 added [ 36.845126][ T5937] team0: Port device team_slave_1 added [ 36.848102][ T5931] hsr_slave_0: entered promiscuous mode [ 36.849969][ T5931] hsr_slave_1: entered promiscuous mode [ 36.851758][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.854218][ T5931] Cannot create hsr debugfs directory [ 36.910441][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.912278][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.920111][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.925236][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.927044][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.933726][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.938179][ T5934] hsr_slave_0: entered promiscuous mode [ 36.940387][ T5934] hsr_slave_1: entered promiscuous mode [ 36.942310][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.945435][ T5934] Cannot create hsr debugfs directory [ 37.027617][ T5937] hsr_slave_0: entered promiscuous mode [ 37.029670][ T5937] hsr_slave_1: entered promiscuous mode [ 37.031472][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.033609][ T5937] Cannot create hsr debugfs directory [ 37.125091][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.131792][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.141750][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.146512][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.171451][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.175821][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.178805][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.183536][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.200471][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.203801][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.208351][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.211482][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.236983][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.240062][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.243564][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.250172][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.285962][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.305495][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.322243][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.324727][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.333023][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.335518][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.341304][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.358562][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.364034][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.381470][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.383534][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.387442][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.389714][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.400716][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.414728][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.419865][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.442684][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444534][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.448286][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.450143][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.453921][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.455804][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.466931][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.469532][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.485663][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.503543][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.522425][ T5943] veth0_vlan: entered promiscuous mode [ 37.527316][ T5943] veth1_vlan: entered promiscuous mode [ 37.534708][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.544950][ T5943] veth0_macvtap: entered promiscuous mode [ 37.556871][ T5943] veth1_macvtap: entered promiscuous mode [ 37.567459][ T5934] veth0_vlan: entered promiscuous mode [ 37.570767][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.574981][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.581709][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.585458][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.587786][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.589903][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.592200][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.598503][ T5934] veth1_vlan: entered promiscuous mode [ 37.609336][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.640934][ T5934] veth0_macvtap: entered promiscuous mode [ 37.643587][ T5931] veth0_vlan: entered promiscuous mode [ 37.647641][ T5934] veth1_macvtap: entered promiscuous mode [ 37.647778][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.651344][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.653001][ T5931] veth1_vlan: entered promiscuous mode [ 37.665482][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.668466][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.671549][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.675754][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.678513][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.681574][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.690852][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.691016][ T5937] veth0_vlan: entered promiscuous mode [ 37.692915][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.698528][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.700880][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.703678][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.706760][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.716966][ T5937] veth1_vlan: entered promiscuous mode [ 37.726054][ T5931] veth0_macvtap: entered promiscuous mode [ 37.735379][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.735676][ T5931] veth1_macvtap: entered promiscuous mode [ 37.744280][ T5937] veth0_macvtap: entered promiscuous mode [ 37.752895][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.757044][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.761685][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.765640][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.768260][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.771198][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.774571][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.781212][ T5937] veth1_macvtap: entered promiscuous mode [ 37.787729][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.790579][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.793094][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.796009][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.798505][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.801163][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.804589][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.806914][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.809858][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.814974][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.817818][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.821371][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.826159][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.826267][ T5931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.828390][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.830499][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.835060][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.837347][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.843866][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.846794][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.849339][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.852141][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.855146][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.857847][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.861332][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.866734][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.869010][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.871314][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.873801][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.912066][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.914492][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.926436][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.928875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.936721][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.938819][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.949767][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.951851][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.024594][ T5942] Bluetooth: hci1: command tx timeout [ 38.024598][ T5938] Bluetooth: hci0: command tx timeout [ 38.028843][ T5295] Bluetooth: hci3: command tx timeout [ 38.033603][ T5942] Bluetooth: hci2: command tx timeout [ 38.052788][ T6011] No control pipe specified [ 38.117361][ T6014] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6'. [ 38.168188][ T72] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 38.170621][ T72] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 38.443523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.445774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.523515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.525992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.528320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.531004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.663498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.665805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.668125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.670430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.375972][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 39.381131][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.103711][ T5942] Bluetooth: hci2: command tx timeout [ 40.103794][ T5295] Bluetooth: hci1: command tx timeout [ 40.105151][ T5942] Bluetooth: hci3: command tx timeout [ 40.113575][ T5295] Bluetooth: hci0: command tx timeout [ 40.170512][ T6067] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 40.883793][ T6082] No control pipe specified [ 40.966381][ T6085] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16'. [ 41.319883][ T71] hid-generic 0005:046D:FFF9.0003: item fetching failed at offset 0/1 [ 41.322265][ T71] hid-generic 0005:046D:FFF9.0003: probe with driver hid-generic failed with error -22 [ 42.183333][ T5295] Bluetooth: hci0: command tx timeout [ 42.184935][ T5295] Bluetooth: hci1: command tx timeout [ 42.186385][ T5295] Bluetooth: hci3: command tx timeout [ 42.187816][ T5295] Bluetooth: hci2: command tx timeout [ 42.336420][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 42.338819][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 42.936215][ T6127] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 44.263713][ T5938] Bluetooth: hci2: command tx timeout [ 44.263748][ T5295] Bluetooth: hci3: command tx timeout [ 44.263832][ T5942] Bluetooth: hci1: command tx timeout [ 44.263854][ T5942] Bluetooth: hci0: command tx timeout [ 44.863886][ T6162] No control pipe specified [ 44.931902][ T6168] netlink: 256 bytes leftover after parsing attributes in process `syz.0.31'. [ 45.656395][ T6198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 45.658208][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.663432][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 45.667904][ T6201] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 45.670517][ T67] vhci_hcd: stop threads [ 45.671861][ T67] vhci_hcd: release socket [ 45.673076][ T67] vhci_hcd: disconnect device [ 45.826329][ T6207] warning: `syz.1.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.267684][ T40] audit: type=1326 audit(1734390893.661:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.274788][ T40] audit: type=1326 audit(1734390893.661:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.281676][ T40] audit: type=1326 audit(1734390893.661:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.287326][ T40] audit: type=1326 audit(1734390893.661:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.292784][ T40] audit: type=1326 audit(1734390893.661:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.298336][ T40] audit: type=1326 audit(1734390893.661:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.304496][ T40] audit: type=1326 audit(1734390893.661:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.309893][ T40] audit: type=1326 audit(1734390893.661:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.315601][ T40] audit: type=1326 audit(1734390893.661:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 46.321146][ T40] audit: type=1326 audit(1734390893.681:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.38" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 47.295247][ T6234] No control pipe specified [ 47.353571][ T6235] netlink: 256 bytes leftover after parsing attributes in process `syz.3.47'. [ 47.370256][ T6236] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 47.370256][ T6236] program syz.1.44 not setting count and/or reply_len properly [ 48.098967][ T6261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 48.100676][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.103132][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 48.106130][ T6263] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 48.108447][ T39] vhci_hcd: stop threads [ 48.109588][ T39] vhci_hcd: release socket [ 48.110776][ T39] vhci_hcd: disconnect device [ 49.467441][ T6288] bridge_slave_0: left allmulticast mode [ 49.468963][ T6288] bridge_slave_0: left promiscuous mode [ 49.471021][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.477856][ T6288] bridge_slave_1: left allmulticast mode [ 49.479384][ T6288] bridge_slave_1: left promiscuous mode [ 49.480917][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.486042][ T6288] bond0: (slave bond_slave_0): Releasing backup interface [ 49.490793][ T6288] bond0: (slave bond_slave_1): Releasing backup interface [ 49.506537][ T6288] team0: Port device team_slave_0 removed [ 49.512181][ T6288] team0: Port device team_slave_1 removed [ 49.514943][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.517206][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.520712][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.522762][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.538488][ T6289] team0: Mode changed to "broadcast" [ 49.560634][ T6288] vlan0: entered promiscuous mode [ 49.571834][ T6288] team0: Port device vlan0 added [ 49.930514][ T6301] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 49.930514][ T6301] program syz.3.58 not setting count and/or reply_len properly [ 50.460066][ T6311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 50.461795][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.464942][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 50.467202][ T6312] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 50.469418][ T104] vhci_hcd: stop threads [ 50.470608][ T104] vhci_hcd: release socket [ 50.471783][ T104] vhci_hcd: disconnect device [ 50.576235][ T6316] No control pipe specified [ 50.635100][ T6318] netlink: 256 bytes leftover after parsing attributes in process `syz.3.61'. [ 50.690928][ T6322] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 50.692698][ T6322] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.695794][ T6322] vhci_hcd vhci_hcd.0: Device attached [ 50.915068][ T1322] vhci_hcd: vhci_device speed not set [ 50.973348][ T8] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 50.977300][ T1322] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 51.031488][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.034342][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.036893][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.039393][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.041293][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.046512][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.049178][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.051585][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.053865][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.055795][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.057813][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.059767][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.062308][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.066419][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.068356][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.070280][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.084899][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.086864][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.088781][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.090728][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.092668][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.096306][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.098246][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.100199][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.102097][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.106131][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.108086][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.110000][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.111961][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.114211][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.124027][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.125964][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.132228][ T25] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 51.145638][ T8] usb 5-1: config 0 has no interfaces? [ 51.147107][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 51.149430][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.152630][ T8] usb 5-1: config 0 descriptor?? [ 51.263344][ T71] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.356670][ T6323] vhci_hcd: connection closed [ 51.357564][ T11] vhci_hcd: stop threads [ 51.358513][ T8] usb 5-1: USB disconnect, device number 2 [ 51.359133][ T11] vhci_hcd: release socket [ 51.367488][ T11] vhci_hcd: disconnect device [ 51.423325][ T1322] vhci_hcd: vhci_device speed not set [ 51.435843][ T71] usb 7-1: config 0 has no interfaces? [ 51.437368][ T71] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 51.439708][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.444038][ T71] usb 7-1: config 0 descriptor?? [ 51.712184][ T72] usb 7-1: USB disconnect, device number 2 [ 52.572043][ T6377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 52.573796][ T6377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.576245][ T6377] vhci_hcd vhci_hcd.0: Device attached [ 52.754831][ T71] vhci_hcd: vhci_device speed not set [ 52.813513][ T71] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 52.824557][ T72] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 52.861346][ T6383] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 52.861346][ T6383] program syz.2.69 not setting count and/or reply_len properly [ 52.996750][ T72] usb 5-1: config 0 has no interfaces? [ 52.998391][ T72] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 53.003715][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.028672][ T72] usb 5-1: config 0 descriptor?? [ 53.235373][ T72] usb 5-1: USB disconnect, device number 3 [ 53.242111][ T6378] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 53.244222][ T76] vhci_hcd: stop threads [ 53.247260][ T76] vhci_hcd: release socket [ 53.249900][ T76] vhci_hcd: disconnect device [ 53.592990][ T6399] No control pipe specified [ 53.652459][ T6401] netlink: 256 bytes leftover after parsing attributes in process `syz.3.78'. [ 53.743306][ T5939] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 53.895337][ T5939] usb 6-1: config 0 has no interfaces? [ 53.896837][ T5939] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 53.899258][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.902160][ T5939] usb 6-1: config 0 descriptor?? [ 54.115805][ T5939] usb 6-1: USB disconnect, device number 2 [ 55.261014][ T6451] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 55.261014][ T6451] program syz.0.85 not setting count and/or reply_len properly [ 55.299935][ T6453] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 55.301673][ T6453] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.303941][ T6453] vhci_hcd vhci_hcd.0: Device attached [ 55.493324][ T25] vhci_hcd: vhci_device speed not set [ 55.553308][ T6350] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 55.555333][ T25] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 55.651734][ T6461] No control pipe specified [ 55.714424][ T6350] usb 7-1: config 0 has no interfaces? [ 55.715939][ T6350] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 55.718265][ T6350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.721158][ T6350] usb 7-1: config 0 descriptor?? [ 55.812249][ T6462] netlink: 256 bytes leftover after parsing attributes in process `syz.3.89'. [ 55.926906][ T72] usb 7-1: USB disconnect, device number 3 [ 55.934687][ T6454] vhci_hcd: connection reset by peer [ 55.937288][ T104] vhci_hcd: stop threads [ 55.938426][ T104] vhci_hcd: release socket [ 55.940051][ T104] vhci_hcd: disconnect device [ 56.243521][ T6350] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 56.414538][ T6350] usb 5-1: config 0 has no interfaces? [ 56.416007][ T6350] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.418331][ T6350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.422826][ T6350] usb 5-1: config 0 descriptor?? [ 56.630663][ T6350] usb 5-1: USB disconnect, device number 4 [ 57.857674][ T6530] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 57.857674][ T6530] program syz.1.99 not setting count and/or reply_len properly [ 58.100686][ T71] vhci_hcd: vhci_device speed not set [ 58.224925][ T6534] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 58.227288][ T6534] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.231304][ T6534] vhci_hcd vhci_hcd.0: Device attached [ 58.483438][ T8] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 58.652699][ T8] usb 5-1: config 0 has no interfaces? [ 58.654636][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.657602][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.663135][ T8] usb 5-1: config 0 descriptor?? [ 58.665875][ T6544] veth1_macvtap: left promiscuous mode [ 58.667903][ T6544] macsec0: entered promiscuous mode [ 58.669702][ T6544] macsec0: entered allmulticast mode [ 58.833386][ T71] vhci_hcd: vhci_device speed not set [ 58.874866][ T6537] vhci_hcd: connection closed [ 58.875071][ T39] vhci_hcd: stop threads [ 58.875370][ T8] usb 5-1: USB disconnect, device number 5 [ 58.876563][ T39] vhci_hcd: release socket [ 58.881305][ T39] vhci_hcd: disconnect device [ 58.893396][ T71] usb 37-1: device descriptor read/64, error -110 [ 58.997774][ T6550] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.083485][ T71] vhci_hcd: vhci_device speed not set [ 59.223355][ T1017] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 59.304803][ T6556] syz.3.107 uses obsolete (PF_INET,SOCK_PACKET) [ 59.375078][ T1017] usb 7-1: config 0 has no interfaces? [ 59.377271][ T1017] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.380463][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.385124][ T1017] usb 7-1: config 0 descriptor?? [ 59.591497][ T1017] usb 7-1: USB disconnect, device number 4 [ 59.874458][ T6565] random: crng reseeded on system resumption [ 60.510073][ T6580] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 60.510073][ T6580] program syz.2.112 not setting count and/or reply_len properly [ 60.673323][ T25] vhci_hcd: vhci_device speed not set [ 60.726820][ T8] hid-generic 0005:7FFF:0008.0005: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 60.804672][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 60.807138][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 60.859593][ T6592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 60.861878][ T6592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.865495][ T6592] vhci_hcd vhci_hcd.0: Device attached [ 61.053756][ T6499] vhci_hcd: vhci_device speed not set [ 61.113354][ T56] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 61.115406][ T6499] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 61.325455][ T56] usb 8-1: config 0 has no interfaces? [ 61.326925][ T56] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.347895][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.381339][ T56] usb 8-1: config 0 descriptor?? [ 61.549203][ T6603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 61.550949][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.553153][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 61.683457][ T30] usb 8-1: USB disconnect, device number 2 [ 61.704888][ T6593] vhci_hcd: connection reset by peer [ 61.706800][ T104] vhci_hcd: stop threads [ 61.707846][ T104] vhci_hcd: release socket [ 61.709306][ T104] vhci_hcd: disconnect device [ 61.753743][ T56] vhci_hcd: vhci_device speed not set [ 61.813333][ T5939] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 61.815429][ T56] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 61.964503][ T5939] usb 6-1: config 0 has no interfaces? [ 61.966006][ T5939] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.968341][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.974278][ T5939] usb 6-1: config 0 descriptor?? [ 62.179515][ T1017] usb 6-1: USB disconnect, device number 3 [ 62.182338][ T6604] vhci_hcd: connection closed [ 62.183964][ T11] vhci_hcd: stop threads [ 62.186439][ T11] vhci_hcd: release socket [ 62.187666][ T11] vhci_hcd: disconnect device [ 62.243323][ T56] vhci_hcd: vhci_device speed not set [ 62.543372][ T72] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 62.718130][ T72] usb 7-1: config 0 has no interfaces? [ 62.719602][ T72] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.721960][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.725286][ T72] usb 7-1: config 0 descriptor?? [ 62.966595][ T25] usb 7-1: USB disconnect, device number 5 [ 63.188711][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 63.853175][ T8] hid-generic 0005:046D:FFF9.0006: item fetching failed at offset 0/1 [ 63.855976][ T8] hid-generic 0005:046D:FFF9.0006: probe with driver hid-generic failed with error -22 [ 63.880121][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 63.883678][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 64.222239][ T6672] syz.1.132: attempt to access beyond end of device [ 64.222239][ T6672] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 64.223661][ T6671] nbd1: detected capacity change from 0 to 20 [ 64.229782][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 64.231491][ T5946] block nbd1: Send control failed (result -89) [ 64.234379][ T5946] block nbd1: Request send failed, requeueing [ 64.239572][ T5295] block nbd1: Receive control failed (result -32) [ 64.245942][ T54] block nbd1: Dead connection, failed to find a fallback [ 64.248141][ T54] block nbd1: shutting down sockets [ 64.249774][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.252322][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 64.254966][ T54] I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 64.258075][ T5946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.260723][ T5946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 64.263310][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 64.264178][ T5946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.268059][ T5946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 64.275332][ T54] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 64.279615][ T5946] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.282550][ T5946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 64.283271][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 64.284846][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.289538][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 64.292190][ T5946] I/O error, dev nbd1, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 64.295936][ T5946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.298429][ T5946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 64.300740][ T5946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.303297][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 64.303303][ T5946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 64.303352][ T5946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 64.305767][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 64.308102][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 64.314448][ T5946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 64.317454][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 64.317830][ T5946] ldm_validate_partition_table(): Disk read failed. [ 64.321411][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 64.322035][ T5946] Dev nbd1: unable to read RDB block 0 [ 64.326741][ T5946] nbd1: unable to read partition table [ 64.327785][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 64.328273][ T5946] nbd1: partition table beyond EOD, truncated [ 64.335182][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 64.335567][ T5946] ldm_validate_partition_table(): Disk read failed. [ 64.340803][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 64.341112][ T5946] Dev nbd1: unable to read RDB block 0 [ 64.345774][ T5946] nbd1: unable to read partition table [ 64.347300][ T5946] nbd1: partition table beyond EOD, truncated [ 64.347310][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 64.351482][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 64.355773][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 64.363392][ T6672] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 64.366119][ T6672] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 64.379423][ T6674] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 64.381005][ T6674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.384057][ T6674] vhci_hcd vhci_hcd.0: Device attached [ 64.563699][ T1017] vhci_hcd: vhci_device speed not set [ 64.623344][ T72] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 64.626665][ T1017] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 64.794656][ T72] usb 7-1: config 0 has no interfaces? [ 64.796139][ T72] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.798481][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.805285][ T72] usb 7-1: config 0 descriptor?? [ 65.009352][ T6675] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 65.011578][ T76] vhci_hcd: stop threads [ 65.012521][ T72] usb 7-1: USB disconnect, device number 6 [ 65.012795][ T76] vhci_hcd: release socket [ 65.017677][ T76] vhci_hcd: disconnect device [ 66.254985][ T6499] vhci_hcd: vhci_device speed not set [ 69.773352][ T1017] vhci_hcd: vhci_device speed not set [ 70.667487][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.669975][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.034442][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 74.138647][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 74.197686][ T6727] Bluetooth: MGMT ver 1.23 [ 74.263339][ T25] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 74.415182][ T25] usb 6-1: config 0 has no interfaces? [ 74.417748][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.421099][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.435023][ T25] usb 6-1: config 0 descriptor?? [ 74.659040][ T25] usb 6-1: USB disconnect, device number 4 [ 75.080319][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.124151][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.273325][ T6745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 75.275058][ T6745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.278166][ T6745] vhci_hcd vhci_hcd.0: Device attached [ 75.473345][ T5978] vhci_hcd: vhci_device speed not set [ 75.490110][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 75.500376][ T1017] hid-generic 0005:7FFF:0008.0007: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 75.533314][ T5978] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 75.534654][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 75.535405][ T8] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 75.537874][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 75.694498][ T8] usb 7-1: config 0 has no interfaces? [ 75.695972][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.700289][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.716402][ T8] usb 7-1: config 0 descriptor?? [ 75.786280][ T1330] cfg80211: failed to load regulatory.db [ 75.936333][ T71] usb 7-1: USB disconnect, device number 7 [ 75.977194][ T6746] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 75.981847][ T76] vhci_hcd: stop threads [ 75.983080][ T76] vhci_hcd: release socket [ 75.986951][ T76] vhci_hcd: disconnect device [ 76.207016][ T6764] ======================================================= [ 76.207016][ T6764] WARNING: The mand mount option has been deprecated and [ 76.207016][ T6764] and is ignored by this kernel. Remove the mand [ 76.207016][ T6764] option from the mount to silence this warning. [ 76.207016][ T6764] ======================================================= [ 76.263580][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.265684][ T5295] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.603337][ T1330] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.707528][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 76.710711][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 76.923342][ T1330] usb 8-1: Using ep0 maxpacket: 16 [ 76.926675][ T1330] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.929455][ T1330] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.932024][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.935984][ T1330] usb 8-1: config 0 descriptor?? [ 77.003387][ T8] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 77.174559][ T8] usb 7-1: config 0 has no interfaces? [ 77.176021][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.178370][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.203541][ T8] usb 7-1: config 0 descriptor?? [ 77.407945][ T8] usb 7-1: USB disconnect, device number 8 [ 77.876249][ T6783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.880497][ T6783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.884243][ T6783] bond0 (unregistering): Released all slaves [ 78.988263][ T1017] usb 8-1: USB disconnect, device number 3 [ 79.356231][ T6798] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 79.357949][ T6798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.360033][ T6798] vhci_hcd vhci_hcd.0: Device attached [ 79.523014][ T71] hid-generic 0005:7FFF:0008.0008: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 79.556602][ T8] vhci_hcd: vhci_device speed not set [ 79.613372][ T8] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 79.719632][ T1330] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.771915][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 79.775013][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 79.823424][ T1017] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 79.975809][ T1017] usb 8-1: config 0 has no interfaces? [ 79.977455][ T1017] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.980038][ T1017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.983935][ T1017] usb 8-1: config 0 descriptor?? [ 80.195311][ T6800] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 80.198644][ T1017] usb 8-1: USB disconnect, device number 4 [ 80.206264][ T39] vhci_hcd: stop threads [ 80.207302][ T39] vhci_hcd: release socket [ 80.208539][ T39] vhci_hcd: disconnect device [ 80.515341][ T6842] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 80.517021][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.520129][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 80.553315][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 80.653543][ T5978] vhci_hcd: vhci_device speed not set [ 80.694061][ T1322] vhci_hcd: vhci_device speed not set [ 80.704910][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 80.707724][ T5976] usb 6-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 80.710269][ T5976] usb 6-1: config 1 interface 0 has no altsetting 0 [ 80.713439][ T5976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.716088][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.718175][ T5976] usb 6-1: Product: syz [ 80.719299][ T5976] usb 6-1: Manufacturer: syz [ 80.720559][ T5976] usb 6-1: SerialNumber: syz [ 80.724566][ T6839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.753312][ T1322] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 80.773302][ T6845] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 80.935338][ T6845] usb 5-1: config 0 has no interfaces? [ 80.937218][ T6845] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.940185][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.953139][ T6845] usb 5-1: config 0 descriptor?? [ 80.959262][ T5976] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 80.968616][ T5976] usb 6-1: USB disconnect, device number 5 [ 81.163550][ T6843] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 81.165528][ T1164] vhci_hcd: stop threads [ 81.166601][ T1017] usb 5-1: USB disconnect, device number 6 [ 81.169445][ T1164] vhci_hcd: release socket [ 81.177577][ T1164] vhci_hcd: disconnect device [ 81.263063][ T6856] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.267330][ T6856] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.733654][ T8] vhci_hcd: vhci_device speed not set [ 85.853722][ T1322] vhci_hcd: vhci_device speed not set [ 90.499100][ T6893] netlink: 'syz.3.176': attribute type 20 has an invalid length. [ 90.549103][ T6897] capability: warning: `syz.3.177' uses deprecated v2 capabilities in a way that may be insecure [ 91.197998][ T6895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 91.199770][ T6895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.237790][ T6895] vhci_hcd vhci_hcd.0: Device attached [ 91.413402][ T1330] vhci_hcd: vhci_device speed not set [ 91.483380][ T1330] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 91.763349][ T6908] vhci_hcd: connection reset by peer [ 91.765927][ T12] vhci_hcd: stop threads [ 91.767088][ T12] vhci_hcd: release socket [ 91.768313][ T12] vhci_hcd: disconnect device [ 91.802624][ T6930] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 91.804372][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.806906][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 91.816589][ T6925] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 91.819230][ T6925] cramfs: wrong magic [ 92.053457][ T1322] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 92.142796][ T71] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 92.202163][ T6946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 92.203890][ T6946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.207225][ T6946] vhci_hcd vhci_hcd.0: Device attached [ 92.214895][ T1322] usb 7-1: config 0 has no interfaces? [ 92.216344][ T1322] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.218690][ T1322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.222128][ T1322] usb 7-1: config 0 descriptor?? [ 92.391379][ T6955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 92.393154][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.393480][ T8] vhci_hcd: vhci_device speed not set [ 92.397203][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 92.425653][ T6931] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 92.427760][ T1222] vhci_hcd: stop threads [ 92.428477][ T35] usb 7-1: USB disconnect, device number 9 [ 92.430404][ T1222] vhci_hcd: release socket [ 92.431746][ T1222] vhci_hcd: disconnect device [ 92.453387][ T8] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 92.456155][ T5976] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 92.573512][ T5939] vhci_hcd: vhci_device speed not set [ 92.604716][ T5976] usb 5-1: config 0 has no interfaces? [ 92.606289][ T5976] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.608678][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.611653][ T5976] usb 5-1: config 0 descriptor?? [ 92.634522][ T5939] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 92.643369][ T1322] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 92.648916][ T35] hid-generic 0005:7FFF:0008.0009: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 92.670271][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 92.673338][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 92.814648][ T1322] usb 6-1: config 0 has no interfaces? [ 92.817912][ T1322] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.821056][ T1322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.823830][ T6947] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 92.824030][ T12] vhci_hcd: stop threads [ 92.825506][ T35] usb 5-1: USB disconnect, device number 7 [ 92.828989][ T12] vhci_hcd: release socket [ 92.830201][ T12] vhci_hcd: disconnect device [ 92.831963][ T1322] usb 6-1: config 0 descriptor?? [ 93.036161][ T6956] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 93.037840][ T1322] usb 6-1: USB disconnect, device number 6 [ 93.038773][ T12] vhci_hcd: stop threads [ 93.041164][ T12] vhci_hcd: release socket [ 93.042443][ T12] vhci_hcd: disconnect device [ 96.575389][ T1330] vhci_hcd: vhci_device speed not set [ 97.533422][ T8] vhci_hcd: vhci_device speed not set [ 97.773404][ T5939] vhci_hcd: vhci_device speed not set [ 98.990430][ T6999] Zero length message leads to an empty skb [ 99.849407][ T40] kauditd_printk_skb: 740 callbacks suppressed [ 99.849420][ T40] audit: type=1326 audit(1734390947.241:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.863336][ T40] audit: type=1326 audit(1734390947.241:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.868816][ T40] audit: type=1326 audit(1734390947.241:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.875332][ T40] audit: type=1326 audit(1734390947.241:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.881258][ T40] audit: type=1326 audit(1734390947.241:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.888367][ T40] audit: type=1326 audit(1734390947.241:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.895336][ T40] audit: type=1326 audit(1734390947.241:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.902457][ T40] audit: type=1326 audit(1734390947.241:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.907999][ T40] audit: type=1326 audit(1734390947.241:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 99.920347][ T40] audit: type=1326 audit(1734390947.241:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 100.588131][ T7029] binder: 7027:7029 ioctl c0306201 0 returned -14 [ 103.006655][ T5295] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 103.670774][ T7083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.216'. [ 103.998772][ T7098] syz.2.218[7098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.998987][ T7098] syz.2.218[7098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.002125][ T7098] syz.2.218[7098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.785353][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.791450][ T7121] vlan2: entered promiscuous mode [ 104.793047][ T7121] vlan2: entered allmulticast mode [ 104.794535][ T7121] hsr_slave_1: entered allmulticast mode [ 104.802372][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 104.865649][ T7121] hsr_slave_1 (unregistering): left allmulticast mode [ 104.884402][ T7121] hsr_slave_1 (unregistering): left promiscuous mode [ 107.064593][ T5295] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 107.066875][ T5295] Bluetooth: hci1: Injecting HCI hardware error event [ 107.069469][ T5295] Bluetooth: hci1: hardware error 0x00 [ 107.390506][ T7182] netlink: 168 bytes leftover after parsing attributes in process `syz.2.238'. [ 108.681990][ T7201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.688963][ T7201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.695760][ T7201] bond0 (unregistering): Released all slaves [ 108.934470][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 108.934485][ T40] audit: type=1326 audit(1734390956.331:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.947254][ T40] audit: type=1326 audit(1734390956.331:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.954826][ T40] audit: type=1326 audit(1734390956.331:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.961981][ T40] audit: type=1326 audit(1734390956.331:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.973736][ T40] audit: type=1326 audit(1734390956.331:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.982320][ T40] audit: type=1326 audit(1734390956.331:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.987935][ T40] audit: type=1326 audit(1734390956.331:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.993288][ T40] audit: type=1326 audit(1734390956.331:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 108.994295][ T6350] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 108.998614][ T40] audit: type=1326 audit(1734390956.341:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 109.006274][ T40] audit: type=1326 audit(1734390956.341:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 109.143510][ T5295] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 117.793379][ T6350] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 117.943377][ T6350] usb 6-1: Using ep0 maxpacket: 8 [ 117.950866][ T6350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.954482][ T6350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.957671][ T6350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 117.961467][ T6350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 117.968053][ T6350] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.972462][ T6350] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.975650][ T6350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.184395][ T6350] usb 6-1: GET_CAPABILITIES returned 0 [ 118.185988][ T6350] usbtmc 6-1:16.0: can't read capabilities [ 118.389948][ T6350] usb 6-1: USB disconnect, device number 7 [ 118.778174][ T7255] bridge0: port 1(hsr_slave_1) entered blocking state [ 118.780641][ T7255] bridge0: port 1(hsr_slave_1) entered disabled state [ 118.783204][ T7255] hsr_slave_1: entered allmulticast mode [ 118.789975][ T7255] hsr_slave_1: left allmulticast mode [ 120.014088][ T6350] e1000 0000:00:06.0 eth0: Reset adapter [ 120.395086][ T7274] netlink: 168 bytes leftover after parsing attributes in process `syz.0.256'. [ 121.409807][ T6350] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 130.022325][ T7331] usb 1-1: USB disconnect, device number 2 [ 130.089481][ T40] kauditd_printk_skb: 564 callbacks suppressed [ 130.089496][ T40] audit: type=1800 audit(1734390977.481:1356): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="bus" dev="9p" ino=36574853 res=0 errno=0 [ 130.138416][ T7331] nvme_fabrics: missing parameter 'transport=%s' [ 130.140428][ T7331] nvme_fabrics: missing parameter 'nqn=%s' [ 130.159981][ T7345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.241867][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.262869][ T7339] veth3: entered promiscuous mode [ 130.863500][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 131.013566][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 131.016472][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.020187][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.027690][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.030365][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.042699][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.045207][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.263170][ T7368] mac80211_hwsim hwsim3 : renamed from wlan1 [ 131.344684][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 131.346205][ T35] usbtmc 8-1:16.0: can't read capabilities [ 131.626082][ T6350] usb 8-1: USB disconnect, device number 5 [ 132.106007][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.109128][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.379398][ T7384] No control pipe specified [ 132.699415][ T7387] netlink: 256 bytes leftover after parsing attributes in process `syz.3.279'. [ 133.353400][ T6350] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.536897][ T6350] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 133.539331][ T6350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.542293][ T6350] usb 7-1: config 0 descriptor?? [ 133.756464][ T7403] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 133.759694][ T7425] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.287'. [ 133.762721][ T7425] netlink: zone id is out of range [ 133.763135][ T7403] PKCS7: Only support pkcs7_signedData type [ 133.764488][ T7425] netlink: zone id is out of range [ 133.768254][ T7425] netlink: zone id is out of range [ 133.769606][ T7425] netlink: zone id is out of range [ 133.771339][ T7425] netlink: zone id is out of range [ 133.776536][ T7425] netlink: zone id is out of range [ 133.778899][ T7425] netlink: zone id is out of range [ 133.780573][ T7425] netlink: zone id is out of range [ 133.782634][ T7425] netlink: zone id is out of range [ 133.975124][ T6350] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f [ 133.977020][ T6350] hackrf 7-1:0.0: Could not detect board [ 133.978568][ T6350] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 133.981150][ T6350] usb 7-1: USB disconnect, device number 10 [ 134.565716][ T7449] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 135.274805][ T7459] tipc: Failed to remove unknown binding: 66,1,1/0:3543925628/3543925630 [ 135.459411][ T7459] tipc: Failed to remove unknown binding: 66,1,1/0:3543925628/3543925630 [ 135.462148][ T7459] tipc: Failed to remove unknown binding: 66,1,1/0:3543925628/3543925630 [ 135.590152][ T7469] Invalid logical block size (768) [ 137.960249][ T7504] syz.2.304: attempt to access beyond end of device [ 137.960249][ T7504] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 137.967358][ T7504] XFS (nbd2): SB validate failed with error -5. [ 138.386986][ T72] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.419319][ T7522] process 'syz.1.308' launched './file0' with NULL argv: empty string added [ 138.554481][ T72] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.557114][ T72] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.560446][ T72] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.567083][ T72] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 138.570528][ T7527] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 138.572762][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.574924][ T72] usb 5-1: Product: syz [ 138.576009][ T72] usb 5-1: Manufacturer: syz [ 138.577343][ T72] usb 5-1: SerialNumber: syz [ 138.584082][ T7527] team0: Device hsr_slave_0 failed to register rx_handler [ 138.673377][ T1322] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 138.788158][ T72] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.834583][ T1322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.837387][ T1322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.840820][ T1322] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.843140][ T1322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.846419][ T1322] usb 6-1: config 0 descriptor?? [ 139.007726][ T8] usb 5-1: USB disconnect, device number 8 [ 139.014751][ T8] usblp0: removed [ 139.421273][ T1322] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 139.423438][ T1322] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 139.425751][ T1322] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 139.431173][ T1322] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 139.526487][ T8] usb 6-1: USB disconnect, device number 8 [ 139.576776][ T7540] 9pnet_virtio: no channels available for device syz [ 139.592766][ T7540] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.595921][ T7540] overlayfs: failed to set xattr on upper [ 139.597975][ T7540] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.599781][ T7540] overlayfs: ...falling back to index=off. [ 139.601344][ T7540] overlayfs: ...falling back to uuid=null. [ 139.851444][ T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.005892][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.008318][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.011097][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.013557][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.017491][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.019916][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.022118][ T56] usb 5-1: Product: syz [ 140.023318][ T56] usb 5-1: Manufacturer: syz [ 140.031735][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 140.033209][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 140.037492][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 140.041183][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 140.549132][ T7544] Set syz1 is full, maxelem 65536 reached [ 142.676057][ T1322] usb 5-1: USB disconnect, device number 9 [ 142.904825][ T7581] orangefs_mount: mount request failed with -4 [ 143.216615][ T7606] overlay: ./file0 is not a directory [ 143.286440][ T7613] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 143.760359][ T7597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.762927][ T7597] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.775660][ T7597] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.784559][ T7597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.786821][ T7597] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.791436][ T7597] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.795967][ T7597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.799745][ T7597] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.804637][ T7597] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.925241][ T7639] batman_adv: batadv0: Adding interface: vxlan0 [ 144.927041][ T7639] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.935068][ T7639] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 144.994233][ T5295] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.997281][ T7597] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.323330][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.500151][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.503036][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.510938][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.514528][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.519865][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.522957][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.525789][ T35] usb 5-1: Product: syz [ 145.527305][ T35] usb 5-1: Manufacturer: syz [ 145.532682][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 145.534962][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 145.537756][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.539863][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.740125][ T72] usb 5-1: USB disconnect, device number 10 [ 145.863378][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.863392][ T5295] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.926325][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 146.094780][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.097644][ T35] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.100274][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.102613][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 146.105617][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 146.109879][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.112231][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.114476][ T35] usb 7-1: Product: syz [ 146.115578][ T35] usb 7-1: Manufacturer: syz [ 146.118919][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 146.120291][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 146.122116][ T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 146.123719][ T35] cdc_wdm 7-1:1.0: Unknown control protocol [ 146.352063][ T35] usb 7-1: USB disconnect, device number 11 [ 147.064565][ T5295] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.943350][ T5295] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.943444][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.358811][ T7691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 148.361168][ T7691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.366179][ T7691] vhci_hcd vhci_hcd.0: Device attached [ 148.426730][ T5938] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 148.555135][ T72] vhci_hcd: vhci_device speed not set [ 148.623866][ T35] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 148.626967][ T72] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 148.794724][ T35] usb 7-1: config 0 has no interfaces? [ 148.796300][ T35] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.798916][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.803682][ T35] usb 7-1: config 0 descriptor?? [ 149.006747][ T7692] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 149.009372][ T12] vhci_hcd: stop threads [ 149.010510][ T35] usb 7-1: USB disconnect, device number 12 [ 149.010738][ T12] vhci_hcd: release socket [ 149.014374][ T12] vhci_hcd: disconnect device [ 149.256033][ T7713] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 149.264602][ T7713] team0: Device hsr_slave_0 failed to register rx_handler [ 149.428932][ T7714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.472742][ T7716] nvme_fabrics: missing parameter 'transport=%s' [ 149.476690][ T7716] nvme_fabrics: missing parameter 'nqn=%s' [ 149.749695][ T7719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.795200][ T7731] bridge0: port 3(hsr_slave_1) entered blocking state [ 149.797411][ T7731] bridge0: port 3(hsr_slave_1) entered disabled state [ 149.799663][ T7731] hsr_slave_1: entered allmulticast mode [ 149.804075][ T7731] hsr_slave_1: left allmulticast mode [ 150.023365][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.023633][ T5295] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.034657][ T7719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.093971][ T7719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.211517][ T7719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.353667][ T7719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.359941][ T7719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.366754][ T7719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.371426][ T7719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.251809][ T7751] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.365'. [ 151.257326][ T7751] netlink: zone id is out of range [ 151.259253][ T7751] netlink: zone id is out of range [ 151.261225][ T7751] netlink: zone id is out of range [ 151.262859][ T7751] netlink: zone id is out of range [ 151.267227][ T7751] netlink: zone id is out of range [ 151.269365][ T7751] netlink: zone id is out of range [ 151.271476][ T7751] netlink: zone id is out of range [ 151.275953][ T7751] netlink: zone id is out of range [ 151.277408][ T7751] netlink: zone id is out of range [ 151.855267][ T7762] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 151.857646][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.861254][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 152.033367][ T6350] vhci_hcd: vhci_device speed not set [ 152.103602][ T25] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 152.113656][ T6350] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 152.376379][ T25] usb 6-1: config 0 has no interfaces? [ 152.378378][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.381374][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.397864][ T25] usb 6-1: config 0 descriptor?? [ 152.604741][ T7765] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 152.605856][ T25] usb 6-1: USB disconnect, device number 9 [ 152.607300][ T1141] vhci_hcd: stop threads [ 152.609886][ T1141] vhci_hcd: release socket [ 152.611293][ T1141] vhci_hcd: disconnect device [ 152.981316][ T7784] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.376'. [ 152.986282][ T7784] netlink: zone id is out of range [ 153.783341][ T72] vhci_hcd: vhci_device speed not set [ 154.784685][ T7816] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 154.786576][ T7816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.788609][ T7816] vhci_hcd vhci_hcd.0: Device attached [ 155.035607][ T25] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 155.184623][ T25] usb 6-1: config 0 has no interfaces? [ 155.186242][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.188710][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.191935][ T25] usb 6-1: config 0 descriptor?? [ 155.417916][ T7820] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 155.421727][ T1164] vhci_hcd: stop threads [ 155.422427][ T8] usb 6-1: USB disconnect, device number 10 [ 155.437154][ T1164] vhci_hcd: release socket [ 155.438414][ T1164] vhci_hcd: disconnect device [ 156.257388][ T40] audit: type=1326 audit(1734391003.651:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.263542][ T40] audit: type=1326 audit(1734391003.651:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.270896][ T40] audit: type=1326 audit(1734391003.651:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.281668][ T40] audit: type=1326 audit(1734391003.651:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.290233][ T40] audit: type=1326 audit(1734391003.651:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.295835][ T40] audit: type=1326 audit(1734391003.651:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.301330][ T40] audit: type=1326 audit(1734391003.651:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.306843][ T40] audit: type=1326 audit(1734391003.651:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.312414][ T40] audit: type=1326 audit(1734391003.651:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 156.317869][ T40] audit: type=1326 audit(1734391003.651:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 157.213428][ T6350] vhci_hcd: vhci_device speed not set [ 158.565466][ T7882] vlan2: entered promiscuous mode [ 158.567109][ T7882] vlan2: entered allmulticast mode [ 158.568480][ T7882] hsr_slave_1: entered allmulticast mode [ 158.611083][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 158.707309][ T7882] hsr_slave_1 (unregistering): left allmulticast mode [ 158.716946][ T7886] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 158.718704][ T7886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.721061][ T7886] vhci_hcd vhci_hcd.0: Device attached [ 158.738791][ T7882] hsr_slave_1 (unregistering): left promiscuous mode [ 158.745964][ T7883] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.405'. [ 158.748452][ T7883] net_ratelimit: 8 callbacks suppressed [ 158.748460][ T7883] netlink: zone id is out of range [ 158.751296][ T7883] netlink: zone id is out of range [ 158.752896][ T7883] netlink: zone id is out of range [ 158.754553][ T7883] netlink: zone id is out of range [ 158.755984][ T7883] netlink: zone id is out of range [ 158.757452][ T7883] netlink: zone id is out of range [ 158.758932][ T7883] netlink: zone id is out of range [ 158.760364][ T7883] netlink: zone id is out of range [ 158.761777][ T7883] netlink: zone id is out of range [ 159.114426][ T1322] vhci_hcd: vhci_device speed not set [ 159.213355][ T1322] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 160.021783][ T7887] vhci_hcd: connection reset by peer [ 160.025294][ T104] vhci_hcd: stop threads [ 160.026838][ T104] vhci_hcd: release socket [ 160.029382][ T104] vhci_hcd: disconnect device [ 161.168104][ T7928] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.422'. [ 161.174983][ T7928] netlink: zone id is out of range [ 161.366059][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 161.366069][ T40] audit: type=1326 audit(1734391008.761:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.376923][ T40] audit: type=1326 audit(1734391008.761:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.385092][ T40] audit: type=1326 audit(1734391008.761:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.393560][ T40] audit: type=1326 audit(1734391008.761:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.400123][ T40] audit: type=1326 audit(1734391008.761:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.406083][ T40] audit: type=1326 audit(1734391008.771:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.411619][ T40] audit: type=1326 audit(1734391008.771:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.422828][ T40] audit: type=1326 audit(1734391008.771:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.429845][ T40] audit: type=1326 audit(1734391008.771:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.443408][ T40] audit: type=1326 audit(1734391008.771:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 161.704900][ T7942] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.707617][ T7942] overlayfs: failed to set xattr on upper [ 161.709465][ T7942] overlayfs: ...falling back to redirect_dir=nofollow. [ 161.711627][ T7942] overlayfs: ...falling back to index=off. [ 161.714141][ T7942] overlayfs: ...falling back to uuid=null. [ 161.818410][ T7942] evm: overlay not supported [ 162.524113][ T7952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 162.526322][ T7952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.528763][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 164.083962][ T7953] vhci_hcd: connection closed [ 164.089283][ T1222] vhci_hcd: stop threads [ 164.092490][ T1222] vhci_hcd: release socket [ 164.102589][ T1222] vhci_hcd: disconnect device [ 164.149026][ T7980] overlay: ./file0 is not a directory [ 164.231914][ T7972] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 164.333321][ T1322] vhci_hcd: vhci_device speed not set [ 165.384150][ T8043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 165.993926][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.233288][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.313917][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.824557][ T8102] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.444'. [ 166.830291][ T8102] net_ratelimit: 8 callbacks suppressed [ 166.830299][ T8102] netlink: zone id is out of range [ 166.833064][ T8102] netlink: zone id is out of range [ 166.837633][ T8102] netlink: zone id is out of range [ 166.839025][ T8102] netlink: zone id is out of range [ 166.842483][ T8102] netlink: zone id is out of range [ 166.844201][ T8102] netlink: zone id is out of range [ 166.845690][ T8102] netlink: zone id is out of range [ 166.847201][ T8102] netlink: zone id is out of range [ 166.848567][ T8102] netlink: zone id is out of range [ 167.969402][ T8173] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 167.971045][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.973709][ T8173] vhci_hcd vhci_hcd.0: Device attached [ 168.155817][ T56] vhci_hcd: vhci_device speed not set [ 168.213328][ T1330] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 168.215433][ T56] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 168.367346][ T1330] usb 5-1: config 0 has no interfaces? [ 168.368876][ T1330] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.371216][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.374674][ T1330] usb 5-1: config 0 descriptor?? [ 168.596752][ T8174] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 168.599206][ T12] vhci_hcd: stop threads [ 168.603461][ T12] vhci_hcd: release socket [ 168.604880][ T12] vhci_hcd: disconnect device [ 168.617264][ T1322] usb 5-1: USB disconnect, device number 11 [ 169.218729][ T8204] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.458'. [ 169.221876][ T8204] netlink: zone id is out of range [ 169.570886][ T8205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.903703][ T8211] binder: 8207:8211 ioctl c0306201 0 returned -14 [ 170.609192][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 171.433346][ T1322] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.584671][ T1322] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.586850][ T1322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.589271][ T1322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.592130][ T1322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.624597][ T1322] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.627733][ T1322] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.630469][ T1322] usb 5-1: Product: syz [ 171.631908][ T1322] usb 5-1: Manufacturer: syz [ 171.644939][ T1322] cdc_wdm 5-1:1.0: skipping garbage [ 171.646797][ T1322] cdc_wdm 5-1:1.0: skipping garbage [ 171.651237][ T1322] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 171.656724][ T1322] cdc_wdm 5-1:1.0: Unknown control protocol [ 172.830511][ T8276] binder: 8275:8276 ioctl c0306201 0 returned -14 [ 173.343374][ T56] vhci_hcd: vhci_device speed not set [ 174.033946][ T6350] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 174.184623][ T6350] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.186963][ T6350] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.189698][ T6350] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.192112][ T6350] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.195227][ T6350] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.199629][ T6350] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.201910][ T6350] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.205016][ T6350] usb 8-1: Product: syz [ 174.206178][ T6350] usb 8-1: Manufacturer: syz [ 174.211460][ T6350] cdc_wdm 8-1:1.0: skipping garbage [ 174.212872][ T6350] cdc_wdm 8-1:1.0: skipping garbage [ 174.216561][ T6350] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 174.218271][ T6350] cdc_wdm 8-1:1.0: Unknown control protocol [ 174.247770][ T1322] usb 5-1: USB disconnect, device number 12 [ 174.367476][ T8300] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 174.369219][ T8300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.372488][ T8300] vhci_hcd vhci_hcd.0: Device attached [ 174.420516][ T5978] usb 8-1: USB disconnect, device number 6 [ 174.553335][ T8] vhci_hcd: vhci_device speed not set [ 174.613327][ T8] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 174.703431][ T1322] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 174.855094][ T1322] usb 5-1: config 0 has no interfaces? [ 174.856526][ T1322] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.858795][ T1322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.863376][ T1322] usb 5-1: config 0 descriptor?? [ 175.070032][ T8301] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 175.072555][ T8313] binder: 8309:8313 ioctl c0306201 0 returned -14 [ 175.073142][ T1322] usb 5-1: USB disconnect, device number 13 [ 175.077406][ T1141] vhci_hcd: stop threads [ 175.078954][ T1141] vhci_hcd: release socket [ 175.086127][ T1141] vhci_hcd: disconnect device [ 176.833333][ T1322] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 176.993411][ T1322] usb 7-1: Using ep0 maxpacket: 16 [ 177.000835][ T1322] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.007134][ T1322] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 177.010002][ T1322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.022546][ T1322] usb 7-1: config 0 descriptor?? [ 177.044406][ T1322] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 177.223370][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.223716][ T8353] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 177.226718][ T8353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.229032][ T8353] vhci_hcd vhci_hcd.0: Device attached [ 177.243511][ T1322] bcm5974 7-1:0.0: could not read from device [ 177.248008][ T5341] bcm5974 7-1:0.0: could not read from device [ 177.250883][ T5341] bcm5974 7-1:0.0: could not read from device [ 177.255982][ T1322] input: failed to attach handler mousedev to device input6, error: -5 [ 177.259586][ T5341] bcm5974 7-1:0.0: could not read from device [ 177.262270][ T5341] bcm5974 7-1:0.0: could not read from device [ 177.267984][ T1322] usb 7-1: USB disconnect, device number 13 [ 177.413414][ T1017] vhci_hcd: vhci_device speed not set [ 177.473354][ T1017] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 177.723366][ T5978] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 177.799661][ T8362] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.504'. [ 177.802925][ T8362] net_ratelimit: 8 callbacks suppressed [ 177.802932][ T8362] netlink: zone id is out of range [ 177.806705][ T8362] netlink: zone id is out of range [ 177.808568][ T8362] netlink: zone id is out of range [ 177.810378][ T8362] netlink: zone id is out of range [ 177.811816][ T8362] netlink: zone id is out of range [ 177.813618][ T8362] netlink: zone id is out of range [ 177.815092][ T8362] netlink: zone id is out of range [ 177.816505][ T8362] netlink: zone id is out of range [ 177.817997][ T8362] netlink: zone id is out of range [ 177.885497][ T5978] usb 6-1: config 0 has no interfaces? [ 177.887018][ T5978] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.889470][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.893054][ T5978] usb 6-1: config 0 descriptor?? [ 178.100388][ T8356] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 178.102840][ T12] vhci_hcd: stop threads [ 178.104176][ T12] vhci_hcd: release socket [ 178.115049][ T6350] usb 6-1: USB disconnect, device number 11 [ 178.120234][ T12] vhci_hcd: disconnect device [ 179.348917][ T8384] 9pnet_virtio: no channels available for device syz [ 179.473413][ T1322] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 179.634588][ T1322] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.636894][ T1322] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.639533][ T1322] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.642278][ T1322] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.647164][ T1322] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.649533][ T1322] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.651822][ T1322] usb 7-1: Product: syz [ 179.654246][ T1322] usb 7-1: Manufacturer: syz [ 179.658973][ T1322] cdc_wdm 7-1:1.0: skipping garbage [ 179.660383][ T1322] cdc_wdm 7-1:1.0: skipping garbage [ 179.662394][ T1322] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 179.664732][ T1322] cdc_wdm 7-1:1.0: Unknown control protocol [ 179.709050][ T8] vhci_hcd: vhci_device speed not set [ 179.861522][ T72] usb 7-1: USB disconnect, device number 14 [ 180.325664][ T8389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.330642][ T8389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.336676][ T8389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.433787][ T8402] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 180.435977][ T8402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.445066][ T8402] vhci_hcd vhci_hcd.0: Device attached [ 180.683386][ T72] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 180.724269][ T8] vhci_hcd: vhci_device speed not set [ 180.783356][ T8] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 180.844785][ T72] usb 5-1: config 0 has no interfaces? [ 180.846826][ T72] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.850014][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.884359][ T72] usb 5-1: config 0 descriptor?? [ 181.097338][ T8403] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 181.102777][ T1141] vhci_hcd: stop threads [ 181.104013][ T1141] vhci_hcd: release socket [ 181.105454][ T8415] [ 181.105794][ T72] usb 5-1: USB disconnect, device number 14 [ 181.106135][ T8415] ============================= [ 181.109002][ T8415] [ BUG: Invalid wait context ] [ 181.109063][ T1141] vhci_hcd: disconnect device [ 181.110316][ T8415] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted [ 181.115313][ T8415] ----------------------------- [ 181.116577][ T8415] iou-wrk-8413/8415 is trying to lock: [ 181.118054][ T8415] ffff88802352c0d8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 181.120728][ T8415] other info that might help us debug this: [ 181.122726][ T8415] context-{5:5} [ 181.123919][ T8415] 3 locks held by iou-wrk-8413/8415: [ 181.125287][ T8415] #0: ffff88801ec55128 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0 [ 181.127661][ T8415] #1: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 181.130158][ T8415] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 181.132847][ T8415] stack backtrace: [ 181.133920][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: iou-wrk-8413 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 181.136720][ T8415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.140025][ T8415] Call Trace: [ 181.140896][ T8415] [ 181.141752][ T8415] dump_stack_lvl+0x116/0x1f0 [ 181.142983][ T8415] __lock_acquire+0x878/0x3c40 [ 181.144232][ T8415] ? __pfx___lock_acquire+0x10/0x10 [ 181.145604][ T8415] ? __pfx___lock_acquire+0x10/0x10 [ 181.146979][ T8415] lock_acquire.part.0+0x11b/0x380 [ 181.148331][ T8415] ? __lock_task_sighand+0xc2/0x340 [ 181.149733][ T8415] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.151233][ T8415] ? rcu_is_watching+0x12/0xc0 [ 181.152492][ T8415] ? trace_lock_acquire+0x14e/0x1f0 [ 181.153868][ T8415] ? trace_lock_acquire+0x14e/0x1f0 [ 181.155224][ T8415] ? __lock_task_sighand+0xc2/0x340 [ 181.156560][ T8415] ? lock_acquire+0x2f/0xb0 [ 181.157761][ T8415] ? __lock_task_sighand+0xc2/0x340 [ 181.159138][ T8415] _raw_spin_lock_irqsave+0x3a/0x60 [ 181.160520][ T8415] ? __lock_task_sighand+0xc2/0x340 [ 181.161899][ T8415] __lock_task_sighand+0xc2/0x340 [ 181.163214][ T8415] group_send_sig_info+0x290/0x300 [ 181.164552][ T8415] ? __pfx_group_send_sig_info+0x10/0x10 [ 181.166034][ T8415] ? __pfx___lock_acquire+0x10/0x10 [ 181.167396][ T8415] bpf_send_signal_common+0x415/0x520 [ 181.168820][ T8415] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 181.170408][ T8415] ? trace_lock_acquire+0x14e/0x1f0 [ 181.171815][ T8415] ? bpf_trace_run2+0x1c2/0x590 [ 181.173082][ T8415] bpf_send_signal+0x1d/0x30 [ 181.174303][ T8415] bpf_prog_631417f49dd64198+0x25/0x48 [ 181.175722][ T8415] bpf_trace_run2+0x231/0x590 [ 181.176939][ T8415] ? __pfx_bpf_trace_run2+0x10/0x10 [ 181.178307][ T8415] ? __lock_acquire+0x15a9/0x3c40 [ 181.179638][ T8415] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 181.181298][ T8415] __traceiter_contention_end+0x5a/0xa0 [ 181.182769][ T8415] trace_contention_end.constprop.0+0xf0/0x170 [ 181.184370][ T8415] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 181.185966][ T8415] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 181.187584][ T8415] ? lock_acquire.part.0+0x11b/0x380 [ 181.188934][ T8415] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.190309][ T8415] do_raw_spin_lock+0x210/0x2c0 [ 181.191519][ T8415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.192840][ T8415] ? lock_acquire+0x2f/0xb0 [ 181.194014][ T8415] ? io_wq_worker+0x34c/0xdf0 [ 181.195179][ T8415] io_wq_worker+0x34c/0xdf0 [ 181.196310][ T8415] ? __pfx_io_wq_worker+0x10/0x10 [ 181.197648][ T8415] ? ret_from_fork+0x23/0x80 [ 181.198862][ T8415] ? __pfx_lock_release+0x10/0x10 [ 181.200173][ T8415] ? do_raw_spin_lock+0x12d/0x2c0 [ 181.201509][ T8415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.202809][ T8415] ? __pfx_io_wq_worker+0x10/0x10 [ 181.204074][ T8415] ret_from_fork+0x45/0x80 [ 181.205237][ T8415] ? __pfx_io_wq_worker+0x10/0x10 [ 181.206536][ T8415] ret_from_fork_asm+0x1a/0x30 [ 181.207763][ T8415] [ 181.220997][ T8413] cgroup: fork rejected by pids controller in /syz1 [ 181.633403][ T5295] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.635619][ T8389] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.353407][ T5295] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.353428][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.573600][ T1017] vhci_hcd: vhci_device speed not set [ 183.703442][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.783414][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.933338][ T8] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 23:17:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff203a19a RDX=ffff888022684880 RSI=ffffffff81484a34 RDI=ffffffff81484a21 RBP=ffff88801ec55110 RSP=ffffc90003b77b28 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cd9d7 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b43fc40 R15=ffffed1003d8aa22 RIP=ffffffff81484a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000049c46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90003b87200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000007a R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000049c46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=1ffff920006f2e57 RCX=ffffffff81764799 RDX=fffffbfff2039b3b RSI=0000000000000008 RDI=ffffffff901cd9d0 RBP=0000000000000002 RSP=ffffc90003797288 R8 =0000000000000000 R9 =fffffbfff2039b3a R10=ffffffff901cd9d7 R11=000000000000a4c5 R12=ffffffff8ddba940 R13=ffffc90003797488 R14=0000000000000000 R15=ffff888025c44880 RIP=ffffffff8b1a2020 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0ec0761280 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5194ffe CR3=0000000029ebc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000020020 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccd719900 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 591932290ddc41fb 64643194d2cfb89c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64646464646464f5 6464646464646454 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000302e 7465676461672f30 2e6364755f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f5e9f61760 000055f5e9f59be0 0000000000000041 0000000000000032 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08615a111e1c1240 6d2f2689c5869927 7373616c632f7349 732f002f7375626f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7fffdeffffef 7f7f3ffffff6ffff 7f7f7fffefffffeb 776f7bbfffffff7f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f5e9f59010 0000000000000071 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000030 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000fb8f RBX=0000000000000001 RCX=000000000000fb8f RDX=dffffc0000000000 RSI=00000000000a4001 RDI=0000000000000001 RBP=ffffc900005cf920 RSP=ffffc900005cf868 R8 =ffffc900005cf90c R9 =ffffffff90b2a1d2 R10=ffffc900005cf8d8 R11=000000000000fb8f R12=ffffc900005cf928 R13=ffffc900005cf8d8 R14=ffffc900005cf90d R15=ffffffff81fb8ff2 RIP=ffffffff8148f034 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000001e9de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000fbfffffe Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f5e9f8d730 000055f5e9f658a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e0e253e1acb56ec 73732683c5d8af8b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752f302e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752f302e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 000000000000312d 352f356273752f30 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d7d564d69b8259f 000000055f5e9f58 00000000000000b1 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000000 00000033746e6500 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000