last executing test programs: 11m19.520150136s ago: executing program 32 (id=72): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r1}, 0x18) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4m44.516595481s ago: executing program 3 (id=9420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x3, 0x26, 0x27, 0x65, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @local}, "d5cd643dd44cc2b0d574f7a5cd1ea48350aee8"}}}, 0x35) 4m44.381850717s ago: executing program 3 (id=9425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 4m44.316677105s ago: executing program 3 (id=9428): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x16, 0x0, 0x0, 0x2724, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m44.31647264s ago: executing program 3 (id=9429): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m44.257382192s ago: executing program 3 (id=9430): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 4m44.147129175s ago: executing program 3 (id=9432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m44.146981109s ago: executing program 0 (id=9433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000140017"], 0x60}}, 0x0) 4m44.116062054s ago: executing program 33 (id=9432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m44.074142007s ago: executing program 0 (id=9435): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}]) io_destroy(r0) 4m43.620684894s ago: executing program 0 (id=9444): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010003"], 0x408100) 4m43.59194468s ago: executing program 0 (id=9439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m43.516730362s ago: executing program 0 (id=9440): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) 4m43.182566231s ago: executing program 0 (id=9441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8200}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 4m43.103538014s ago: executing program 34 (id=9441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8200}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 4m36.611847822s ago: executing program 2 (id=9531): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5a8}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 4m36.556812527s ago: executing program 2 (id=9533): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e0000000000200001000500000100000000000003"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 4m36.556652388s ago: executing program 2 (id=9535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x200a}) 4m36.556508839s ago: executing program 2 (id=9537): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 4m36.493320698s ago: executing program 2 (id=9538): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m36.357074728s ago: executing program 2 (id=9541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) 4m36.324220386s ago: executing program 35 (id=9541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) 1m58.197083862s ago: executing program 7 (id=12714): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m58.140485472s ago: executing program 7 (id=12716): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 1m58.091243789s ago: executing program 7 (id=12720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 1m58.091012813s ago: executing program 7 (id=12723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) 1m58.032243622s ago: executing program 7 (id=12724): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m54.590421528s ago: executing program 7 (id=12728): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m54.508166754s ago: executing program 36 (id=12728): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 40.250423461s ago: executing program 6 (id=14207): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 40.179940699s ago: executing program 6 (id=14211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r1, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 40.179694371s ago: executing program 6 (id=14213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 40.103975775s ago: executing program 6 (id=14214): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 40.103813006s ago: executing program 6 (id=14215): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 39.909456195s ago: executing program 6 (id=14223): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 39.867694093s ago: executing program 37 (id=14223): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 14.662392485s ago: executing program 5 (id=14846): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb7", 0x2}], 0x1}}], 0x1, 0x0) 14.612932455s ago: executing program 5 (id=14847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1084}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x22, 0x30, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @broadcast}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x29, 0x780, 0x64, 0x7ff, 0xc1, 0x89, 0x0, @empty, @loopback}}}}}}, 0x0) 14.612758571s ago: executing program 5 (id=14848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0xe0) 14.550894408s ago: executing program 5 (id=14853): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 14.500370084s ago: executing program 5 (id=14857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "67c3f71bb8188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 14.28268329s ago: executing program 5 (id=14865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 14.198051959s ago: executing program 38 (id=14865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2.329197478s ago: executing program 9 (id=15082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/6, 0x6}], 0x1}, 0x2001) 2.259221033s ago: executing program 9 (id=15083): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000001c0)={0x23, r3, r1}) 2.259014373s ago: executing program 9 (id=15084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.258863766s ago: executing program 9 (id=15085): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 2.19912373s ago: executing program 9 (id=15086): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) 2.198899818s ago: executing program 9 (id=15087): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x8, 0x8) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) 1.269507312s ago: executing program 4 (id=15096): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x5) 1.219596816s ago: executing program 4 (id=15097): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1.219288012s ago: executing program 4 (id=15098): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.169415825s ago: executing program 4 (id=15099): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.108900026s ago: executing program 8 (id=15101): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 1.049163791s ago: executing program 8 (id=15102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.049009248s ago: executing program 8 (id=15103): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x2d, 0x0, 0x6, 0x0, 0x0, 0xf, 0x68}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0xc}, 0x8) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 989.642366ms ago: executing program 8 (id=15104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 989.402562ms ago: executing program 8 (id=15105): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 989.241249ms ago: executing program 1 (id=15106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)="ebe3", 0x2}, {&(0x7f0000000a40)="e8700e444d50a969ff67347cff6127e6ef12ee381927149aa4975a52c1ab9b8b4db3945d1032", 0x26}], 0x2, 0x0, 0x0, 0x20004040}], 0x1, 0x40800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 929.700722ms ago: executing program 1 (id=15107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x60600, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1}) 929.44155ms ago: executing program 8 (id=15108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000003c0)=""/242) 929.285219ms ago: executing program 1 (id=15109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 878.311878ms ago: executing program 1 (id=15110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 878.13762ms ago: executing program 1 (id=15111): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 329.755113ms ago: executing program 4 (id=15112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x2, 0x7e, 0x4, 0xaf79, 0x73d0, 0x4972, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 250.137138ms ago: executing program 4 (id=15113): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 1 (id=15114): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000980)=ANY=[@ANYRESHEX], 0x58) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) kernel console output (not intermixed with test programs): 495][ T3600] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.13373'. [ 657.061678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.821251][ T29] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 657.972459][ T29] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 657.972480][ T29] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 657.972494][ T29] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 657.972512][ T29] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 657.972525][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.974165][ T3616] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 657.992555][ T29] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 658.091155][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.247278][ T34] usb 13-1: USB disconnect, device number 6 [ 658.571750][ T3641] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 658.573723][ T3642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 658.573905][ T3641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.580308][ T3641] vhci_hcd vhci_hcd.0: Device attached [ 658.650794][ T5977] Bluetooth: hci0: command 0x0c1a tx timeout [ 658.650846][T32429] Bluetooth: hci1: command 0x0c1a tx timeout [ 658.651738][T27058] Bluetooth: hci3: command 0x0c1a tx timeout [ 658.651791][T27058] Bluetooth: hci2: command 0x0406 tx timeout [ 658.820763][ T5327] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 658.823317][ T29] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 658.981676][ T5327] usb 11-1: Using ep0 maxpacket: 16 [ 658.984587][ T5327] usb 11-1: config 0 has no interfaces? [ 658.986425][ T5327] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 658.990050][ T5327] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.995408][ T5327] usb 11-1: config 0 descriptor?? [ 659.080386][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13406'. [ 659.130552][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.203683][ T5327] usb 11-1: USB disconnect, device number 17 [ 659.207926][ T3643] vhci_hcd: connection closed [ 659.208080][ T1139] vhci_hcd: stop threads [ 659.213289][ T1139] vhci_hcd: release socket [ 659.215168][ T1139] vhci_hcd: disconnect device [ 659.270510][ T29] vhci_hcd: vhci_device speed not set [ 659.611916][T32429] Bluetooth: hci4: command 0x1003 tx timeout [ 659.611949][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 660.084210][ T3719] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 660.086299][ T3719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.089421][ T3719] vhci_hcd vhci_hcd.0: Device attached [ 660.170088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.330032][ T67] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 660.349938][ T34] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 660.489886][ T67] usb 9-1: Using ep0 maxpacket: 16 [ 660.493821][ T67] usb 9-1: config 0 has no interfaces? [ 660.495676][ T67] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 660.499265][ T67] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.502978][ T67] usb 9-1: config 0 descriptor?? [ 660.707879][ T3720] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 660.709080][ T67] usb 9-1: USB disconnect, device number 59 [ 660.710789][ T225] vhci_hcd: stop threads [ 660.710805][ T225] vhci_hcd: release socket [ 660.710840][ T225] vhci_hcd: disconnect device [ 660.729817][T32429] Bluetooth: hci1: command 0x0c1a tx timeout [ 660.729894][ T5977] Bluetooth: hci2: command 0x0406 tx timeout [ 660.729972][ T3647] Bluetooth: hci3: command 0x0c1a tx timeout [ 660.739750][ T5977] Bluetooth: hci0: command 0x0c1a tx timeout [ 661.209626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 661.929281][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 662.033737][ T3734] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 662.249058][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.808727][ T5980] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.818871][ T5980] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.819591][ T5980] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.949663][ T3755] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 662.949679][ T3755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 662.949715][ T3755] vhci_hcd vhci_hcd.0: Device attached [ 663.053197][ T3763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 663.188507][ T5327] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 663.190935][ T29] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 663.288493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.348424][ T5327] usb 10-1: Using ep0 maxpacket: 16 [ 663.349712][ T5327] usb 10-1: config 0 has no interfaces? [ 663.351904][ T5327] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 663.351919][ T5327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.358775][ T5327] usb 10-1: config 0 descriptor?? [ 663.563748][ T6035] usb 10-1: USB disconnect, device number 22 [ 663.564940][ T3756] vhci_hcd: connection closed [ 663.566527][ T1139] vhci_hcd: stop threads [ 663.566540][ T1139] vhci_hcd: release socket [ 663.566583][ T1139] vhci_hcd: disconnect device [ 663.630110][ T29] vhci_hcd: vhci_device speed not set [ 664.097014][ T3807] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 664.097029][ T3807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 664.097277][ T3807] vhci_hcd vhci_hcd.0: Device attached [ 664.272812][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13467'. [ 664.328192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.332716][ T3825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13471'. [ 664.338235][T13610] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 664.340659][ T6035] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 664.377912][ T5327] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 664.403557][ T3833] netlink: 'syz.5.13475': attribute type 25 has an invalid length. [ 664.406216][ T3833] netlink: 'syz.5.13475': attribute type 7 has an invalid length. [ 664.497881][T13610] usb 13-1: Using ep0 maxpacket: 16 [ 664.506845][T13610] usb 13-1: config 0 has no interfaces? [ 664.508806][T13610] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 664.511652][T13610] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.515166][T13610] usb 13-1: config 0 descriptor?? [ 664.527903][ T5327] usb 9-1: Using ep0 maxpacket: 16 [ 664.531015][ T5327] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 664.534147][ T5327] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.537618][ T5327] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.540808][ T5327] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 664.545147][ T5327] usb 9-1: config 7 interface 0 has no altsetting 0 [ 664.547193][ T5327] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 664.550076][ T5327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.704675][ T3849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13480'. [ 664.722173][T13610] usb 13-1: USB disconnect, device number 7 [ 664.724698][ T3808] vhci_hcd: connection closed [ 664.728235][ T225] vhci_hcd: stop threads [ 664.732513][ T225] vhci_hcd: release socket [ 664.734401][ T225] vhci_hcd: disconnect device [ 664.762095][ T3853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13483'. [ 664.787718][ T6035] vhci_hcd: vhci_device speed not set [ 664.977113][ T5327] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:7.0/0003:0458:5010.0056/input/input145 [ 664.986222][ T5327] kye 0003:0458:5010.0056: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 665.367542][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 665.398556][ T3862] netlink: 'syz.6.13487': attribute type 25 has an invalid length. [ 665.401070][ T3862] netlink: 'syz.6.13487': attribute type 7 has an invalid length. [ 665.436968][ T3865] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 665.437388][ T34] vhci_hcd: vhci_device speed not set [ 665.439096][ T3865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.443750][ T3865] vhci_hcd vhci_hcd.0: Device attached [ 665.697476][ T5327] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 665.700781][ T29] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 665.839582][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13493'. [ 665.844521][ T3877] netlink: 'syz.5.13493': attribute type 1 has an invalid length. [ 665.847002][ T3877] netlink: 'syz.5.13493': attribute type 2 has an invalid length. [ 665.847256][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 665.852880][ T29] usb 11-1: config 0 has no interfaces? [ 665.854682][ T29] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 665.859448][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.862160][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13494'. [ 665.863470][ T29] usb 11-1: config 0 descriptor?? [ 665.929960][ T3887] netlink: 'syz.8.13498': attribute type 25 has an invalid length. [ 665.932574][ T3887] netlink: 'syz.8.13498': attribute type 7 has an invalid length. [ 665.965467][ T3889] syzkaller1: entered promiscuous mode [ 665.967280][ T3889] syzkaller1: entered allmulticast mode [ 666.027518][ C1] kye 0003:0458:5010.0056: usb_submit_urb(ctrl) failed: -1 [ 666.070766][ T3867] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 666.071298][T13567] usb 11-1: USB disconnect, device number 18 [ 666.076453][ T1187] vhci_hcd: stop threads [ 666.077959][ T1187] vhci_hcd: release socket [ 666.079482][ T1187] vhci_hcd: disconnect device [ 666.156794][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 666.406988][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.615649][ T3911] pim6reg1: entered promiscuous mode [ 666.617462][ T3911] pim6reg1: entered allmulticast mode [ 666.664435][ T3917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 666.808932][ T3925] syzkaller1: entered promiscuous mode [ 666.810186][ T67] usb 9-1: USB disconnect, device number 60 [ 666.810691][ T3925] syzkaller1: entered allmulticast mode [ 667.105831][ T29] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 667.267384][ T29] usb 13-1: Using ep0 maxpacket: 16 [ 667.275205][ T29] usb 13-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 667.278397][ T29] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.281764][ T29] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.284857][ T29] usb 13-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 667.290225][ T29] usb 13-1: config 7 interface 0 has no altsetting 0 [ 667.292334][ T29] usb 13-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 667.295255][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.446427][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 667.646440][ T34] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 667.723532][ T29] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:7.0/0003:0458:5010.0057/input/input146 [ 667.788604][ T29] kye 0003:0458:5010.0057: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 667.797542][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.801049][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 667.804440][ T34] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 667.807580][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 667.810355][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.814534][ T3966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 667.818341][ T34] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 668.082432][ T67] usb 9-1: USB disconnect, device number 61 [ 668.166157][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 668.166413][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 668.209614][ T3975] pim6reg1: entered promiscuous mode [ 668.211400][ T3975] pim6reg1: entered allmulticast mode [ 668.213880][ T3976] syzkaller1: entered promiscuous mode [ 668.215633][ T3976] syzkaller1: entered allmulticast mode [ 668.485923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.635112][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13555'. [ 668.785966][ C1] kye 0003:0458:5010.0057: usb_submit_urb(ctrl) failed: -1 [ 668.914014][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13568'. [ 669.005670][ T6035] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 669.158431][ T6035] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.161856][ T6035] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 669.165294][ T6035] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 669.168599][ T6035] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 669.171445][ T6035] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.176647][ T4026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 669.180390][ T6035] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.218997][ T5977] Bluetooth: hci4: sending frame failed (-49) [ 669.221647][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 669.417473][ T4076] vivid-001: disconnect [ 669.419583][ T4074] vivid-001: reconnect [ 669.439544][T30674] usb 11-1: USB disconnect, device number 19 [ 669.525406][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 669.577127][ T34] usb 13-1: USB disconnect, device number 8 [ 669.701625][ T4087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13587'. [ 669.704486][ T4087] netlink: 'syz.5.13587': attribute type 7 has an invalid length. [ 669.707432][ T4087] netlink: 'syz.5.13587': attribute type 8 has an invalid length. [ 669.710355][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13587'. [ 669.993839][ T4109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13599'. [ 669.997011][ T4109] netlink: 'syz.8.13599': attribute type 7 has an invalid length. [ 669.999635][ T4109] netlink: 'syz.8.13599': attribute type 8 has an invalid length. [ 670.002098][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13599'. [ 670.007888][ T4109] gretap0: entered promiscuous mode [ 670.010091][ T4109] batadv_slave_1: entered promiscuous mode [ 670.012645][ T4109] gretap0: left promiscuous mode [ 670.015544][ T4109] batadv_slave_1: left promiscuous mode [ 670.045104][T13610] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 670.195543][T13610] usb 10-1: Using ep0 maxpacket: 16 [ 670.199424][T13610] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 670.202677][T13610] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.206103][T13610] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.209119][T13610] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 670.213049][T13610] usb 10-1: config 7 interface 0 has no altsetting 0 [ 670.215208][T13610] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 670.218007][T13610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.564992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 670.634302][T13610] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:7.0/0003:0458:5010.0058/input/input147 [ 670.697142][T13610] kye 0003:0458:5010.0058: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 670.795220][ T5327] vhci_hcd: vhci_device speed not set [ 671.604326][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 671.664450][ C0] kye 0003:0458:5010.0058: usb_submit_urb(ctrl) failed: -1 [ 671.764376][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 671.764838][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 672.239228][ T4140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13609'. [ 672.242948][ T4140] netlink: 'syz.4.13609': attribute type 7 has an invalid length. [ 672.246269][ T4140] netlink: 'syz.4.13609': attribute type 8 has an invalid length. [ 672.249825][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13609'. [ 672.256809][ T4140] gretap0: entered promiscuous mode [ 672.259303][ T4140] batadv_slave_1: entered promiscuous mode [ 672.262798][ T4140] gretap0: left promiscuous mode [ 672.267768][ T4140] batadv_slave_1: left promiscuous mode [ 672.271745][ T4148] binder: 4147:4148 ioctl c0306201 800008c0 returned -14 [ 672.465649][ T4162] bridge: RTM_NEWNEIGH with invalid ether address [ 672.469943][ T4162] bridge: RTM_NEWNEIGH with invalid ether address [ 672.515119][T13610] usb 10-1: reset high-speed USB device number 23 using dummy_hcd [ 672.519068][T13610] usb 10-1: device reset changed ep0 maxpacket size! [ 672.527026][ T6035] usb 10-1: USB disconnect, device number 23 [ 672.579089][ T4171] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 672.583707][ T4171] macsec1: entered promiscuous mode [ 672.585584][ T4171] macsec1: entered allmulticast mode [ 672.587257][ T4171] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 672.643817][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 672.683854][ T6035] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 672.834878][ T6035] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.838294][ T6035] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 672.842688][ T6035] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 672.847347][ T6035] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.851097][ T6035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.857702][ T4132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 672.863198][ T6035] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.962868][ T4197] loop6: detected capacity change from 0 to 63 [ 672.968959][ T4197] buffer_io_error: 6 callbacks suppressed [ 672.968968][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.973240][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.975795][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.978248][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.980716][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.983173][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.987546][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.989973][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.992430][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.994971][ T4197] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.103633][ T4203] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.13640'. [ 673.114082][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13641'. [ 673.120691][ T34] usb 10-1: USB disconnect, device number 24 [ 673.120741][ T4205] pim6reg: entered allmulticast mode [ 673.131446][ T4205] pim6reg: left allmulticast mode [ 673.683340][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.732724][ T4249] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.13659'. [ 674.163049][ T4276] loop6: detected capacity change from 0 to 63 [ 674.488304][ T4311] netlink: 'syz.5.13687': attribute type 10 has an invalid length. [ 674.494759][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.497416][ T4311] bridge_slave_1: left allmulticast mode [ 674.499343][ T4311] bridge_slave_1: left promiscuous mode [ 674.501213][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.506712][ T4311] bridge_slave_1: entered promiscuous mode [ 674.509102][ T4311] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 674.572943][ T6035] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 674.732821][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 674.742788][ T6035] usb 11-1: Using ep0 maxpacket: 32 [ 674.745782][ T6035] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 674.748370][ T6035] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 674.751101][ T6035] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 674.753982][ T6035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.756964][ T6035] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 674.759946][ T6035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.763027][ T6035] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 674.766033][ T6035] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 674.769985][ T6035] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 674.772875][ T6035] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.776806][ T6035] usb 11-1: config 0 descriptor?? [ 674.985801][ T6035] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 674.990440][ T6035] usb 11-1: USB disconnect, device number 20 [ 674.994432][ T6035] usblp0: removed [ 675.280164][ T4335] binder: 4334:4335 ioctl c0306201 800008c0 returned -14 [ 675.365192][ T4341] binder: 4340:4341 ioctl c0306201 800003c0 returned -14 [ 675.422395][ T6035] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 675.572339][ T6035] usb 11-1: Using ep0 maxpacket: 32 [ 675.575392][ T6035] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 675.577994][ T6035] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 675.580759][ T6035] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 675.583700][ T6035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 675.586715][ T6035] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 675.589735][ T6035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.593809][ T6035] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 675.596826][ T6035] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 675.600811][ T6035] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 675.604962][ T6035] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.608638][ T6035] usb 11-1: config 0 descriptor?? [ 675.690004][ T4368] binder: 4367:4368 ioctl c0306201 800003c0 returned -14 [ 675.762328][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 675.806868][ T4379] binder: 4378:4379 ioctl c0306201 800003c0 returned -14 [ 675.814443][ T4302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.814868][ T6035] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 675.817206][ T4302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.829227][ T5327] usb 11-1: USB disconnect, device number 21 [ 675.833501][ T5327] usblp0: removed [ 676.308570][ T4391] ALSA: seq fatal error: cannot create timer (-16) [ 676.426611][ T4406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 676.502484][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13734'. [ 676.811724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 677.353342][ T6035] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 677.423653][T13610] kernel read not supported for file /audio1 (pid: 13610 comm: kworker/0:6) [ 677.458371][ T40] audit: type=1326 audit(2000001269.053:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.465328][ T40] audit: type=1326 audit(2000001269.053:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.474569][ T40] audit: type=1326 audit(2000001269.063:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.480239][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13751'. [ 677.481238][ T40] audit: type=1326 audit(2000001269.063:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.490628][ T40] audit: type=1326 audit(2000001269.063:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.501491][ T40] audit: type=1326 audit(2000001269.063:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.508233][ T6035] usb 10-1: Using ep0 maxpacket: 32 [ 677.511066][ T40] audit: type=1326 audit(2000001269.063:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.512432][ T6035] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 677.517662][ T40] audit: type=1326 audit(2000001269.063:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.520198][ T6035] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 677.526858][ T40] audit: type=1326 audit(2000001269.063:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.526882][ T40] audit: type=1326 audit(2000001269.063:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.8.13752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 677.542717][ T6035] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 677.545562][ T6035] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 677.548550][ T6035] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 677.551724][ T6035] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.554758][ T6035] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 677.557793][ T6035] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 677.562830][ T6035] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 677.565693][ T6035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.569323][ T6035] usb 10-1: config 0 descriptor?? [ 677.574877][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13754'. [ 677.587472][ T4459] vxlan0: entered promiscuous mode [ 677.592167][ T61] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.594863][ T61] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.597532][ T61] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.600214][ T61] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.705587][ T4469] loop8: detected capacity change from 0 to 79 [ 677.752055][ T4469] loop8: detected capacity change from 79 to 78 [ 677.775707][ T6035] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 677.781636][ T6035] usb 10-1: USB disconnect, device number 25 [ 677.781814][ T4474] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 677.784961][ T6035] usblp0: removed [ 677.786636][ T4474] veth0_to_bridge: entered promiscuous mode [ 677.789301][ T4474] debugfs: 'hsr1' already exists in 'hsr' [ 677.791488][ T4474] Cannot create hsr debugfs directory [ 677.793294][ T4474] hsr1: entered allmulticast mode [ 677.794889][ T4474] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 677.797198][ T4474] veth0_to_bridge: entered allmulticast mode [ 677.841266][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 678.220976][ T5327] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 678.380964][ T5327] usb 10-1: Using ep0 maxpacket: 32 [ 678.384002][ T5327] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 678.386627][ T5327] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 678.389310][ T5327] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 678.392377][ T5327] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 678.395461][ T5327] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 678.398461][ T5327] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 678.402374][ T5327] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 678.405397][ T5327] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 678.409467][ T5327] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 678.412829][ T5327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.416379][ T5327] usb 10-1: config 0 descriptor?? [ 678.588626][ T4490] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 678.592518][ T4490] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 678.625276][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.628272][ T5327] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 678.631127][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.636369][ T34] usb 10-1: USB disconnect, device number 26 [ 678.639687][ T34] usblp0: removed [ 678.767448][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13773'. [ 678.880698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 679.193308][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13778'. [ 679.217432][ T6035] kernel read not supported for file /audio1 (pid: 6035 comm: kworker/0:5) [ 679.507774][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13788'. [ 679.620364][T13554] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 679.625669][ T5327] kernel read not supported for file /audio1 (pid: 5327 comm: kworker/1:2) [ 679.770215][T13554] usb 13-1: Using ep0 maxpacket: 32 [ 679.773200][T13554] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 679.775894][T13554] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 679.778909][T13554] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 679.781922][T13554] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.784969][T13554] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 679.787953][T13554] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.791106][T13554] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 679.794149][T13554] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 679.798096][T13554] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 679.800991][T13554] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.804680][T13554] usb 13-1: config 0 descriptor?? [ 679.920291][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 680.012581][T13554] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 680.017250][T13554] usb 13-1: USB disconnect, device number 9 [ 680.020648][T13554] usblp0: removed [ 680.449944][ T5327] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 680.609845][ T5327] usb 13-1: Using ep0 maxpacket: 32 [ 680.613269][ T5327] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 680.616393][ T5327] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 680.619131][ T5327] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 680.622138][ T5327] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.625155][ T5327] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 680.628165][ T5327] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.631255][ T5327] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 680.634291][ T5327] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 680.638328][ T5327] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 680.641412][ T5327] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.645484][ T5327] usb 13-1: config 0 descriptor?? [ 680.852160][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.852337][ T5327] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 680.854899][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.866719][ T6035] usb 13-1: USB disconnect, device number 10 [ 680.870190][ T6035] usblp0: removed [ 680.959850][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.402897][ T4550] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 681.406032][ T4550] veth0_to_bridge: entered promiscuous mode [ 681.408300][ T4550] debugfs: 'hsr1' already exists in 'hsr' [ 681.410165][ T4550] Cannot create hsr debugfs directory [ 681.411911][ T4550] hsr1: entered allmulticast mode [ 681.413493][ T4550] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 681.415811][ T4550] veth0_to_bridge: entered allmulticast mode [ 681.495569][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13798'. [ 681.545023][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13799'. [ 681.899179][ T34] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 682.009131][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 682.049061][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 682.052086][ T34] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 682.054736][ T34] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 682.057437][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 682.060309][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 682.063333][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 682.066352][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.069413][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 682.072480][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 682.076668][ T34] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 682.079532][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.083094][ T34] usb 9-1: config 0 descriptor?? [ 682.290654][ T34] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 682.295536][ T34] usb 9-1: USB disconnect, device number 62 [ 682.298964][ T34] usblp0: removed [ 682.571298][ T4596] loop8: detected capacity change from 0 to 79 [ 682.572846][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13811'. [ 682.649599][ T4596] loop8: detected capacity change from 79 to 78 [ 682.740900][T13554] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 682.770182][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13819'. [ 682.773003][ T4608] bridge_slave_1: left allmulticast mode [ 682.774754][ T4608] bridge_slave_1: left promiscuous mode [ 682.776681][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.780677][ T4608] bridge_slave_0: left allmulticast mode [ 682.782450][ T4608] bridge_slave_0: left promiscuous mode [ 682.784285][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.898726][T13554] usb 9-1: Using ep0 maxpacket: 32 [ 682.902582][T13554] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 682.905437][T13554] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 682.908122][T13554] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 682.911024][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 682.913979][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 682.916998][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.920172][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 682.923162][T13554] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 682.927217][T13554] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 682.930153][T13554] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.937984][T13554] usb 9-1: config 0 descriptor?? [ 683.038634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.144265][ T4579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.144598][T13554] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 683.147132][ T4579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.162022][ T6035] usb 9-1: USB disconnect, device number 63 [ 683.165385][ T6035] usblp0: removed [ 684.046944][ T6035] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 684.088158][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 684.118165][T13554] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 684.210813][ T6035] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.214376][ T6035] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.217716][ T6035] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.221705][ T6035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.230593][ T4650] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 684.234404][ T6035] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.298160][T13554] usb 9-1: Using ep0 maxpacket: 32 [ 684.304258][T13554] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.306988][T13554] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 684.309768][T13554] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 684.312693][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.315738][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.318929][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 684.321952][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 684.325020][T13554] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 684.329492][T13554] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 684.332356][T13554] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.335977][T13554] usb 9-1: config 0 descriptor?? [ 684.439189][ T34] usb 10-1: USB disconnect, device number 27 [ 684.543620][T13554] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 684.549831][T13554] usb 9-1: USB disconnect, device number 64 [ 684.553249][T13554] usblp0: removed [ 684.997717][T13554] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 685.117683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 685.172469][T13554] usb 9-1: Using ep0 maxpacket: 32 [ 685.176873][T13554] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 685.179558][T13554] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 685.182210][T13554] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 685.187200][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.190762][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.193739][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.196733][T13554] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 685.201097][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.203224][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.206345][T13554] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 685.211362][T13554] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 685.214157][T13554] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.217933][T13554] usb 9-1: config 0 descriptor?? [ 685.425741][T13554] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 685.428185][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.432285][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.445473][ T5327] usb 9-1: USB disconnect, device number 65 [ 685.451349][ T5327] usblp0: removed [ 685.637316][ T6035] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 685.797313][ T6035] usb 13-1: Using ep0 maxpacket: 8 [ 685.800375][ T6035] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.803616][ T6035] usb 13-1: config 0 has no interfaces? [ 685.805437][ T6035] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 685.808352][ T6035] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.812128][ T6035] usb 13-1: config 0 descriptor?? [ 686.033021][ T6035] usb 13-1: USB disconnect, device number 11 [ 686.157041][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 687.026590][ T6035] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 687.186480][ T6035] usb 10-1: Using ep0 maxpacket: 8 [ 687.189348][ T6035] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.192686][ T6035] usb 10-1: config 0 has no interfaces? [ 687.202669][ T6035] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 687.205524][ T6035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.208230][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 687.212477][ T6035] usb 10-1: config 0 descriptor?? [ 687.420669][ T6035] usb 10-1: USB disconnect, device number 28 [ 687.624102][ T4813] "syz.8.13904" (4813) uses obsolete ecb(arc4) skcipher [ 687.912159][ T4823] input: syz1 as /devices/virtual/input/input148 [ 688.236120][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 688.657147][ T5327] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 688.805724][ T5327] usb 11-1: Using ep0 maxpacket: 8 [ 688.809129][ T5327] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.812346][ T5327] usb 11-1: config 0 has no interfaces? [ 688.814104][ T5327] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 688.817106][ T5327] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.820730][ T5327] usb 11-1: config 0 descriptor?? [ 689.032823][T13554] usb 11-1: USB disconnect, device number 22 [ 689.125876][ T4870] input: syz1 as /devices/virtual/input/input149 [ 689.275507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 689.300349][ T4880] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13932'. [ 689.609408][ T4896] input: syz1 as /devices/virtual/input/input150 [ 689.703715][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.303761][ T4928] "syz.6.13952" (4928) uses obsolete ecb(arc4) skcipher [ 690.315050][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 691.354440][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 691.716190][ T4986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.225034][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13981'. [ 692.321616][ T4994] hsr_slave_0 (unregistering): left promiscuous mode [ 692.393906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 692.451367][ T5016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.987250][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13997'. [ 693.105308][ T5033] hsr_slave_0 (unregistering): left promiscuous mode [ 693.331347][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14013'. [ 693.422692][ T5054] hsr_slave_0 (unregistering): left promiscuous mode [ 693.433478][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 693.445520][ T5062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.416970][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14024'. [ 694.482979][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 694.554450][ T5098] hsr_slave_0 (unregistering): left promiscuous mode [ 694.732810][ T5107] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 694.820244][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14031'. [ 694.827093][ T5121] vxlan1: entered promiscuous mode [ 695.116285][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 695.116297][ T40] audit: type=1326 audit(2000001286.722:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.5.14038" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 695.445070][ T5144] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 695.512385][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 696.178526][ T40] audit: type=1326 audit(2000001287.783:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5199 comm="syz.8.14066" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5579 code=0x0 [ 696.535616][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14068'. [ 696.552670][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 696.624503][ T5208] hsr_slave_1 (unregistering): left promiscuous mode [ 696.802175][ T5232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 696.844637][ T5239] netlink: 'syz.4.14088': attribute type 2 has an invalid length. [ 696.848265][ T5239] netlink: 532 bytes leftover after parsing attributes in process `syz.4.14088'. [ 697.086896][ T5254] tipc: Started in network mode [ 697.089900][ T5254] tipc: Node identity 2, cluster identity 2 [ 697.091959][ T5254] tipc: Node number set to 2 [ 697.176514][ T5257] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 697.407977][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14092'. [ 697.534040][ T40] audit: type=1326 audit(2000001289.143:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.6.14093" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48579 code=0x0 [ 697.591380][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 698.334206][ T5297] netlink: 'syz.5.14103': attribute type 2 has an invalid length. [ 698.337967][ T5297] netlink: 532 bytes leftover after parsing attributes in process `syz.5.14103'. [ 698.384008][ T5299] tipc: Started in network mode [ 698.385601][ T5299] tipc: Node identity 2, cluster identity 2 [ 698.387513][ T5299] tipc: Node number set to 2 [ 698.489621][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14113'. [ 698.573635][ T5315] hsr_slave_1 (unregistering): left promiscuous mode [ 698.630947][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 698.729703][ T5326] tipc: Started in network mode [ 698.732261][ T5326] tipc: Node identity 2, cluster identity 2 [ 698.734473][ T5326] tipc: Node number set to 2 [ 698.814750][ T5339] Invalid ELF header len 8 [ 699.120569][ T67] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 699.255081][ T5374] Invalid ELF header len 8 [ 699.271434][ T93] wlan1: Trigger new scan to find an IBSS to join [ 699.280716][ T67] usb 10-1: Using ep0 maxpacket: 32 [ 699.285656][ T67] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 699.290649][ T67] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 699.293542][ T67] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 699.296187][ T67] usb 10-1: Product: syz [ 699.297527][ T67] usb 10-1: Manufacturer: syz [ 699.299029][ T67] usb 10-1: SerialNumber: syz [ 699.304388][ T67] usb 10-1: config 0 descriptor?? [ 699.306470][ T5350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 699.307784][ T225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.309287][ T67] hub 10-1:0.0: bad descriptor, ignoring hub [ 699.314141][ T67] hub 10-1:0.0: probe with driver hub failed with error -5 [ 699.397276][ T225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.472299][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.475406][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.479268][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 699.483755][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 699.486342][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 699.532189][ T225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.582045][ T225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.592844][ T5378] chnl_net:caif_netlink_parms(): no params data found [ 699.620406][ T67] usb 10-1: USB disconnect, device number 29 [ 699.662080][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.664461][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.666843][ T5378] bridge_slave_0: entered allmulticast mode [ 699.669510][ T5378] bridge_slave_0: entered promiscuous mode [ 699.670289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 699.673156][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.675820][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.678138][ T5378] bridge_slave_1: entered allmulticast mode [ 699.680913][ T5378] bridge_slave_1: entered promiscuous mode [ 699.722569][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.731937][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.770004][ T5378] team0: Port device team_slave_0 added [ 699.772267][ T225] veth0_to_bridge: left allmulticast mode [ 699.774042][ T225] veth0_to_bridge: left promiscuous mode [ 699.775842][ T225] bridge0: port 3(veth0_to_bridge) entered disabled state [ 699.778973][ T225] bridge_slave_1: left allmulticast mode [ 699.780891][ T225] bridge_slave_1: left promiscuous mode [ 699.782792][ T225] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.787322][ T225] bridge_slave_0: left allmulticast mode [ 699.789055][ T225] bridge_slave_0: left promiscuous mode [ 699.790899][ T225] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.950117][ T6502] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 700.010229][ T225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.014090][ T225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.017436][ T225] bond0 (unregistering): Released all slaves [ 700.024679][ T5378] team0: Port device team_slave_1 added [ 700.056054][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.058220][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.066183][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.070189][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.072809][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.081037][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.092625][ T225] tipc: Left network mode [ 700.112511][ T6502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 700.119358][ T6502] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 700.122835][ T6502] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 700.125372][ T6502] usb 10-1: Product: syz [ 700.126721][ T6502] usb 10-1: Manufacturer: syz [ 700.128219][ T6502] usb 10-1: SerialNumber: syz [ 700.131071][ T6502] usb 10-1: config 0 descriptor?? [ 700.133113][ T5350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 700.135820][ T6502] hub 10-1:0.0: bad descriptor, ignoring hub [ 700.137677][ T6502] hub 10-1:0.0: probe with driver hub failed with error -5 [ 700.147232][ T5378] hsr_slave_0: entered promiscuous mode [ 700.149428][ T5378] hsr_slave_1: entered promiscuous mode [ 700.151935][ T5378] debugfs: 'hsr0' already exists in 'hsr' [ 700.153699][ T5378] Cannot create hsr debugfs directory [ 700.256129][ T225] mac80211_hwsim hwsim21 wlan0 (unregistering): left allmulticast mode [ 700.359933][ T225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.362233][ T225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.364795][ T225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.367102][ T225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.383781][ T225] veth1_macvtap: left promiscuous mode [ 700.385544][ T225] veth0_macvtap: left promiscuous mode [ 700.387303][ T225] veth1_vlan: left promiscuous mode [ 700.388934][ T225] veth0_vlan: left promiscuous mode [ 700.449984][ T6035] usb 10-1: USB disconnect, device number 30 [ 700.709769][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 700.859119][ T225] team0 (unregistering): Port device team_slave_1 removed [ 700.934631][ T225] team0 (unregistering): Port device team_slave_0 removed [ 700.973953][ T5405] syz.6.14146: attempt to access beyond end of device [ 700.973953][ T5405] loop13: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 700.979702][ T5405] SQUASHFS error: Failed to read block 0x0: -5 [ 701.005426][ T5408] Invalid ELF header len 8 [ 701.189936][T27096] wlan1: Trigger new scan to find an IBSS to join [ 701.509455][ T5980] Bluetooth: hci3: command tx timeout [ 701.744727][ T5378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.748608][ T5378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 701.749244][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 701.754468][ T5378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.762328][ T5378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 701.808894][ T5378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.817526][ T5378] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.822586][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.824892][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.830587][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.832876][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.936574][ T5378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.065905][ T5378] veth0_vlan: entered promiscuous mode [ 702.071009][ T5378] veth1_vlan: entered promiscuous mode [ 702.083669][ T5378] veth0_macvtap: entered promiscuous mode [ 702.087762][ T5378] veth1_macvtap: entered promiscuous mode [ 702.101857][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.108403][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.115095][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.117890][ T1139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.122069][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.124797][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.158368][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.160907][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.175006][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.177444][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.447716][ T5454] "syz.6.14159" (5454) uses obsolete ecb(arc4) skcipher [ 702.625651][ T5479] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 702.748728][ T6022] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 702.788804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 702.898625][ T6022] usb 13-1: Using ep0 maxpacket: 8 [ 702.901530][ T6022] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 702.905113][ T6022] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 702.908226][ T6022] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 702.913812][ T6022] usb 13-1: string descriptor 0 read error: -71 [ 702.915965][ T6022] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.918941][ T6022] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.922678][ T6022] usb 13-1: rejected 1 configuration due to insufficient available bus power [ 702.925480][ T6022] usb 13-1: no configuration chosen from 1 choice [ 702.928122][ T6022] usb 13-1: USB disconnect, device number 12 [ 703.518595][ T6022] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 703.588751][ T5980] Bluetooth: hci3: command tx timeout [ 703.678291][ T6022] usb 10-1: Using ep0 maxpacket: 32 [ 703.681546][ T6022] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.684888][ T6022] usb 10-1: config 0 has no interfaces? [ 703.686766][ T6022] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 703.689742][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.693578][ T6022] usb 10-1: config 0 descriptor?? [ 703.828294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 703.901087][ T5327] usb 10-1: USB disconnect, device number 31 [ 704.228367][ T1187] wlan1: Trigger new scan to find an IBSS to join [ 704.228431][T27096] wlan1: Trigger new scan to find an IBSS to join [ 704.517045][ T5543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.853263][ T5581] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 704.867699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.141636][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.145025][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.187688][ T93] wlan1: Trigger new scan to find an IBSS to join [ 705.253412][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.256674][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.267989][ T93] wlan1: Trigger new scan to find an IBSS to join [ 705.334403][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.335443][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.340062][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.340327][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.343558][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.348711][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.351744][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.430868][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 705.432234][ T5645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input151 [ 705.433831][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.441519][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.502041][ T5633] chnl_net:caif_netlink_parms(): no params data found [ 705.511584][ T5653] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.14242'. [ 705.537452][T13610] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 705.678285][ T5977] Bluetooth: hci3: command tx timeout [ 705.707276][T13610] usb 13-1: Using ep0 maxpacket: 32 [ 705.709712][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.713756][T13610] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 705.716436][T13610] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 705.716820][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.719835][T13610] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 705.725620][T13610] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.727480][ T61] bond0 (unregistering): Released all slaves [ 705.728686][T13610] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 705.734095][T13610] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 705.738752][T13610] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 705.741573][T13610] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.745190][T13610] usb 13-1: config 0 descriptor?? [ 705.783042][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.785406][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.787848][ T5633] bridge_slave_0: entered allmulticast mode [ 705.792413][ T5633] bridge_slave_0: entered promiscuous mode [ 705.796258][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.798630][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.800879][ T5633] bridge_slave_1: entered allmulticast mode [ 705.803483][ T5633] bridge_slave_1: entered promiscuous mode [ 705.828075][ T61] tipc: Left network mode [ 705.861617][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.866032][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.912578][ T5633] team0: Port device team_slave_0 added [ 705.914550][ T5672] @: renamed from vlan0 (while UP) [ 705.917163][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.918196][ T5633] team0: Port device team_slave_1 added [ 705.951667][T13610] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 705.956565][T13610] usb 13-1: USB disconnect, device number 13 [ 705.961518][T13610] usblp0: removed [ 705.978335][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.980540][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.989317][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.993543][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.995717][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.004260][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.042173][ T5633] hsr_slave_0: entered promiscuous mode [ 706.044595][ T5633] hsr_slave_1: entered promiscuous mode [ 706.046860][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 706.049521][ T5633] Cannot create hsr debugfs directory [ 706.052007][ T61] veth0_to_bridge: left promiscuous mode [ 706.056979][ T61] hsr_slave_1: left promiscuous mode [ 706.059880][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.062982][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.066632][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.071307][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.101136][ T61] veth1_macvtap: left promiscuous mode [ 706.102950][ T61] veth0_macvtap: left promiscuous mode [ 706.104727][ T61] veth1_vlan: left promiscuous mode [ 706.106398][ T61] veth0_vlan: left promiscuous mode [ 706.407820][ T6035] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 706.544678][ T5707] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14262'. [ 706.576936][ T6035] usb 13-1: Using ep0 maxpacket: 32 [ 706.579847][ T6035] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 706.582467][ T6035] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 706.585299][ T6035] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 706.588270][ T6035] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 706.591408][ T6035] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 706.594418][ T6035] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 706.598613][ T6035] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 706.601529][ T6035] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.605107][ T6035] usb 13-1: config 0 descriptor?? [ 706.768083][ T61] team0 (unregistering): Port device team_slave_1 removed [ 706.815602][ T6035] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 706.848580][ T61] team0 (unregistering): Port device team_slave_0 removed [ 706.948644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 707.012949][T13567] usb 13-1: USB disconnect, device number 14 [ 707.016419][T13567] usblp0: removed [ 707.187041][ T225] wlan1: Trigger new scan to find an IBSS to join [ 707.436411][ T5977] Bluetooth: hci1: command tx timeout [ 707.559676][ T5633] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 707.563899][ T5633] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 707.568672][ T5633] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 707.572504][ T5633] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 707.618377][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.632402][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.639759][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.642009][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.650787][ T67] Process accounting resumed [ 707.651328][T27096] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.654355][T27096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.757538][ T5977] Bluetooth: hci3: command tx timeout [ 707.765630][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.890042][ T5633] veth0_vlan: entered promiscuous mode [ 707.894734][ T5633] veth1_vlan: entered promiscuous mode [ 707.908249][ T5633] veth0_macvtap: entered promiscuous mode [ 707.914140][ T5633] veth1_macvtap: entered promiscuous mode [ 707.923258][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.930048][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.936252][ T225] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.939549][ T225] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.942358][ T225] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.945448][ T225] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.976742][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.979270][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.990726][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.993138][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.996471][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 708.099783][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14294'. [ 708.257783][ T5816] tls_set_device_offload_rx: netdev not found [ 708.735748][ T29] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 708.883644][ T5880] input: syz1 as /devices/virtual/input/input152 [ 708.911122][ T29] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 708.918264][ T29] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 708.922273][ T29] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.928314][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.934340][ T5848] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 708.941660][ T29] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 708.992245][ T5980] Bluetooth: hci4: sending frame failed (-49) [ 708.995476][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 709.025669][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 709.142129][ T6502] usb 13-1: USB disconnect, device number 15 [ 709.195573][ T34] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 709.275626][ T67] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 709.345561][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 709.348475][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.351910][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.354916][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.359210][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.362012][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.366384][ T34] usb 10-1: config 0 descriptor?? [ 709.435528][ T67] usb 9-1: Using ep0 maxpacket: 8 [ 709.440329][ T67] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 709.443014][ T67] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.446145][ T67] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.449163][ T67] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 709.452199][ T67] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 709.455350][ T67] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.459371][ T67] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.462173][ T67] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.467092][ T67] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 709.515385][ T5977] Bluetooth: hci1: command tx timeout [ 709.747287][ T67] usb 9-1: USB disconnect, device number 66 [ 709.773100][ T34] HID 045e:07da: Invalid code 65791 type 1 [ 709.778192][ T34] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0059/input/input153 [ 709.783674][ T34] microsoft 0003:045E:07DA.0059: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 709.976296][ T67] usb 10-1: USB disconnect, device number 32 [ 710.067496][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 710.229442][ T12] wlan1: Trigger new scan to find an IBSS to join [ 710.270246][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14347'. [ 710.315025][ T12] wlan1: Trigger new scan to find an IBSS to join [ 710.497676][ T5939] input: syz0 as /devices/virtual/input/input154 [ 710.604867][ T6022] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 710.691664][ T5957] bridge0: entered allmulticast mode [ 710.695613][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14361'. [ 710.698524][ T5957] bridge_slave_1: left allmulticast mode [ 710.700305][ T5957] bridge_slave_1: left promiscuous mode [ 710.702156][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.706342][ T5957] bridge_slave_0: left allmulticast mode [ 710.708125][ T5957] bridge_slave_0: left promiscuous mode [ 710.710072][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.723850][ T5957] bridge0 (unregistering): left allmulticast mode [ 710.756025][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.759436][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.762483][ T6022] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 710.765603][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.769159][ T6022] usb 9-1: config 0 descriptor?? [ 710.799938][ T5960] syzkaller1: entered promiscuous mode [ 710.801752][ T5960] syzkaller1: entered allmulticast mode [ 710.997312][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14368'. [ 711.079228][ T5977] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 711.104621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 711.139805][T27096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.176946][ T6022] cm6533_jd 0003:0D8C:0022.005A: unknown main item tag 0x0 [ 711.179294][ T6022] cm6533_jd 0003:0D8C:0022.005A: unknown main item tag 0x0 [ 711.182891][ T6022] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.005A/input/input155 [ 711.189528][ T6022] cm6533_jd 0003:0D8C:0022.005A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 711.225907][T27096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.253877][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 711.257032][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 711.376360][ T6022] usb 9-1: USB disconnect, device number 67 [ 711.516811][T30674] libceph: connect (1)[c::]:6789 error -101 [ 711.518831][T30674] libceph: mon0 (1)[c::]:6789 connect error [ 711.584304][ T5977] Bluetooth: hci1: command tx timeout [ 711.766497][ T5996] netlink: 'syz.9.14374': attribute type 5 has an invalid length. [ 711.768926][ T5996] netlink: 'syz.9.14374': attribute type 11 has an invalid length. [ 712.025285][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 712.028511][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 712.033892][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 712.035966][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 712.062848][ T6029] block device autoloading is deprecated and will be removed. [ 712.072994][ T5988] ceph: No mds server is up or the cluster is laggy [ 712.092219][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 712.094311][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 712.140333][ T6038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 712.143020][ T6038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 712.145700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 712.296102][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 712.298076][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 712.364142][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 712.366116][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 712.460156][ T6070] netlink: 'syz.9.14403': attribute type 1 has an invalid length. [ 712.462595][ T6070] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.14403'. [ 712.750813][ T6082] all: renamed from bridge_slave_0 (while UP) [ 712.804089][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 712.806056][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 712.862036][ T6030] ceph: No mds server is up or the cluster is laggy [ 712.862443][ T6025] ceph: No mds server is up or the cluster is laggy [ 712.917170][ T5977] Bluetooth: hci2: Unable to find connection for big 0x00 [ 712.943691][ T6022] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 713.115118][ T6022] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.118531][ T6022] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.121520][ T6022] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.125574][ T6022] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.128420][ T6022] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.132047][ T6022] usb 13-1: config 0 descriptor?? [ 713.183548][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 713.541563][ T6022] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 713.673313][ T5977] Bluetooth: hci1: command tx timeout [ 713.690926][ T6109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 714.109223][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14431'. [ 714.223068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 714.239508][ T6154] input: syz0 as /devices/virtual/input/input156 [ 715.262848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 715.643471][ T67] usb 13-1: USB disconnect, device number 16 [ 716.054651][ T6241] input: syz1 as /devices/virtual/input/input157 [ 716.071161][ T6200] Set syz1 is full, maxelem 65536 reached [ 716.084903][ T6243] Bluetooth: hci0: too big key_count value 34945 [ 716.217124][ T6249] netlink: 64 bytes leftover after parsing attributes in process `syz.9.14477'. [ 716.224053][ T6249] netlink: 64 bytes leftover after parsing attributes in process `syz.9.14477'. [ 716.288192][ T6232] overlayfs: statfs failed on './file0' [ 716.301977][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 717.341482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 717.363209][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14491'. [ 717.367296][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14491'. [ 717.370491][ T6280] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 717.500378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c06ec00: rx timeout, send abort [ 717.503207][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c06ec00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 717.917322][ T6328] netlink: 51 bytes leftover after parsing attributes in process `syz.9.14511'. [ 718.380971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 718.473796][ T6362] hsr0: entered promiscuous mode [ 718.475988][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14526'. [ 718.479062][ T6362] hsr_slave_0: left promiscuous mode [ 718.482885][ T6362] hsr_slave_1: left promiscuous mode [ 718.496334][ T6362] hsr0 (unregistering): left promiscuous mode [ 718.784950][ T6381] nullb0: AHDI p1 [ 718.877679][ T6397] input: syz0 as /devices/virtual/input/input158 [ 719.392924][ T6440] overlayfs: failed to set uuid (403/file0, err=-1); falling back to uuid=null. [ 719.395890][ T6440] overlayfs: failed to verify upper root origin [ 719.420406][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 719.660321][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14568'. [ 720.050062][T30674] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 720.212831][ T6505] dvmrp0: entered allmulticast mode [ 720.220032][T30674] usb 9-1: Using ep0 maxpacket: 16 [ 720.223009][T30674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.226812][T30674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.231266][T30674] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 720.235889][T30674] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 720.239078][T30674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.243655][T30674] usb 9-1: config 0 descriptor?? [ 720.278068][ T6514] batadv_slave_0: entered allmulticast mode [ 720.280898][ T6513] batadv_slave_0: left allmulticast mode [ 720.395070][ T6525] netlink: 'syz.5.14594': attribute type 12 has an invalid length. [ 720.397606][ T6525] netlink: 'syz.5.14594': attribute type 29 has an invalid length. [ 720.400215][ T6525] netlink: 148 bytes leftover after parsing attributes in process `syz.5.14594'. [ 720.403038][ T6525] netlink: 'syz.5.14594': attribute type 2 has an invalid length. [ 720.405740][ T6525] netlink: 23 bytes leftover after parsing attributes in process `syz.5.14594'. [ 720.430491][ T6527] netlink: 'syz.5.14595': attribute type 1 has an invalid length. [ 720.440607][ T6527] bond0: entered promiscuous mode [ 720.442263][ T6527] bond0: entered allmulticast mode [ 720.451773][ T6527] bond0: (slave erspan1): making interface the new active one [ 720.454097][ T6527] erspan1: entered promiscuous mode [ 720.455803][ T6527] erspan1: entered allmulticast mode [ 720.457974][ T6527] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 720.460773][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 720.652236][T30674] HID 045e:07da: Invalid code 65791 type 1 [ 720.656628][T30674] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.005C/input/input159 [ 720.662685][T30674] microsoft 0003:045E:07DA.005C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 720.851428][T30674] usb 9-1: USB disconnect, device number 68 [ 721.302992][ T6545] Bluetooth: MGMT ver 1.23 [ 721.341198][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14604'. [ 721.482041][ T61] Bluetooth: (null): Invalid header checksum [ 721.484073][ T61] Bluetooth: (null): Invalid header checksum [ 721.509381][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 721.594663][ T61] Bluetooth: (null): Invalid header checksum [ 721.619309][T13567] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 721.713677][ T61] Bluetooth: (null): Invalid header checksum [ 721.790418][T13567] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.793633][T13567] usb 10-1: config 0 has no interfaces? [ 721.796971][T13567] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 721.799915][T13567] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.802407][T13567] usb 10-1: Product: syz [ 721.803767][T13567] usb 10-1: Manufacturer: syz [ 721.805245][T13567] usb 10-1: SerialNumber: syz [ 721.807848][T13567] usb 10-1: config 0 descriptor?? [ 721.820120][ T61] Bluetooth: (null): Invalid header checksum [ 721.930888][ T61] Bluetooth: (null): Invalid header checksum [ 722.012499][ T6035] usb 10-1: USB disconnect, device number 33 [ 722.538848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 722.708745][T13567] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 722.748983][T13554] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 722.860717][T13567] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 722.864205][T13567] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.867600][T13567] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.870694][T13567] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 722.875639][T13567] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 722.878505][T13567] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 722.881147][T13567] usb 14-1: Manufacturer: syz [ 722.884129][T13567] usb 14-1: config 0 descriptor?? [ 722.909255][T13554] usb 9-1: Using ep0 maxpacket: 32 [ 722.912255][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 722.915716][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 722.918748][T13554] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 722.922254][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 722.925618][T13554] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 722.931049][T13554] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 722.933872][T13554] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.936325][T13554] usb 9-1: Product: syz [ 722.937631][T13554] usb 9-1: Manufacturer: syz [ 722.939155][T13554] usb 9-1: SerialNumber: syz [ 722.941737][T13554] usb 9-1: config 0 descriptor?? [ 722.944005][ T6578] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 722.948607][T13554] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input160 [ 722.954458][ T5368] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 722.958740][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 722.964493][ T5368] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 722.969608][ T5368] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 722.973323][ T5368] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 723.149950][ T6035] usb 9-1: USB disconnect, device number 69 [ 723.293333][T13567] appleir 0003:05AC:8243.005D: unknown main item tag 0x0 [ 723.297507][T13567] appleir 0003:05AC:8243.005D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 723.481855][ T6591] netlink: 'syz.8.14623': attribute type 2 has an invalid length. [ 723.486379][ T6591] netlink: 532 bytes leftover after parsing attributes in process `syz.8.14623'. [ 723.588350][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 723.899801][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14631'. [ 723.961082][ T6612] vxlan0: entered promiscuous mode [ 723.963898][ T93] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.966753][ T93] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.970743][ T93] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.973615][ T93] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.241513][ T6617] syz.8.14635 (6617) used greatest stack depth: 20360 bytes left [ 724.494846][ T6598] syz.5.14628: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 724.500567][ T6598] CPU: 3 UID: 0 PID: 6598 Comm: syz.5.14628 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 724.500584][ T6598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 724.500591][ T6598] Call Trace: [ 724.500596][ T6598] [ 724.500601][ T6598] dump_stack_lvl+0x16c/0x1f0 [ 724.500616][ T6598] warn_alloc+0x248/0x3a0 [ 724.500632][ T6598] ? __pfx_warn_alloc+0x10/0x10 [ 724.500651][ T6598] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 724.500667][ T6598] ? __vmalloc_node_noprof+0xad/0xf0 [ 724.500681][ T6598] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 724.500697][ T6598] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 724.500716][ T6598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 724.500732][ T6598] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 724.500748][ T6598] vmalloc_user_noprof+0x9e/0xe0 [ 724.500764][ T6598] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 724.500781][ T6598] vb2_vmalloc_alloc+0x135/0x3f0 [ 724.500798][ T6598] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 724.500814][ T6598] __vb2_queue_alloc+0x8c6/0x1280 [ 724.500837][ T6598] vb2_core_reqbufs+0xa90/0xfe0 [ 724.500855][ T6598] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 724.500871][ T6598] ? __pfx___might_resched+0x10/0x10 [ 724.500886][ T6598] ? __mutex_lock+0x1c4/0x10b0 [ 724.500902][ T6598] vb2_reqbufs+0x1a3/0x1f0 [ 724.500916][ T6598] ? __pfx_vb2_reqbufs+0x10/0x10 [ 724.500930][ T6598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 724.500949][ T6598] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 724.500965][ T6598] v4l_reqbufs+0x14f/0x1e0 [ 724.500985][ T6598] __video_do_ioctl+0xb40/0xfc0 [ 724.500999][ T6598] ? __might_fault+0xe3/0x190 [ 724.501012][ T6598] ? __pfx___video_do_ioctl+0x10/0x10 [ 724.501029][ T6598] video_usercopy+0x47f/0x1440 [ 724.501042][ T6598] ? __pfx___video_do_ioctl+0x10/0x10 [ 724.501054][ T6598] ? __pfx_video_usercopy+0x10/0x10 [ 724.501072][ T6598] ? hook_file_ioctl_common+0x145/0x410 [ 724.501089][ T6598] v4l2_ioctl+0x1bd/0x250 [ 724.501099][ T6598] ? __ia32_compat_sys_openat+0x101/0x210 [ 724.501112][ T6598] v4l2_compat_ioctl32+0x217/0x2c0 [ 724.501130][ T6598] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 724.501148][ T6598] __ia32_compat_sys_ioctl+0x23f/0x370 [ 724.501168][ T6598] __do_fast_syscall_32+0x7c/0x3a0 [ 724.501183][ T6598] do_fast_syscall_32+0x32/0x80 [ 724.501196][ T6598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 724.501210][ T6598] RIP: 0023:0xf7fc6579 [ 724.501219][ T6598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 724.501230][ T6598] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 724.501241][ T6598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 724.501248][ T6598] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.501254][ T6598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 724.501261][ T6598] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 724.501267][ T6598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.501281][ T6598] [ 724.501285][ T6598] Mem-Info: [ 724.595759][ T6598] active_anon:1264 inactive_anon:10267 isolated_anon:0 [ 724.595759][ T6598] active_file:4222 inactive_file:13344 isolated_file:0 [ 724.595759][ T6598] unevictable:1768 dirty:7 writeback:15 [ 724.595759][ T6598] slab_reclaimable:6441 slab_unreclaimable:62714 [ 724.595759][ T6598] mapped:22423 shmem:11461 pagetables:1570 [ 724.595759][ T6598] sec_pagetables:326 bounce:0 [ 724.595759][ T6598] kernel_misc_reclaimable:0 [ 724.595759][ T6598] free:22700 free_pcp:341 free_cma:0 [ 724.609293][ T6598] Node 0 active_anon:68kB inactive_anon:12kB active_file:100kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1508kB dirty:4kB writeback:0kB shmem:6736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8336kB pagetables:1452kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB [ 724.618683][ T6598] Node 1 active_anon:4988kB inactive_anon:41056kB active_file:16788kB inactive_file:53456kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88184kB dirty:24kB writeback:60kB shmem:39108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:5152kB pagetables:4828kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB [ 724.627803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 724.628356][ T6598] Node 0 DMA free:1876kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.639129][ T6598] lowmem_reserve[]: 0 288 288 288 288 [ 724.640861][ T6598] Node 0 DMA32 free:12980kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:4096KB free_highatomic:960KB active_anon:236kB inactive_anon:0kB active_file:100kB inactive_file:0kB unevictable:3536kB writepending:4kB present:1032196kB managed:295208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.650217][ T6598] lowmem_reserve[]: 0 0 0 0 0 [ 724.651680][ T6598] Node 1 DMA32 free:76184kB boost:28672kB min:75812kB low:87596kB high:99380kB reserved_highatomic:2048KB free_highatomic:44KB active_anon:4988kB inactive_anon:41056kB active_file:16788kB inactive_file:53456kB unevictable:3536kB writepending:84kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1244kB local_pcp:0kB free_cma:0kB [ 724.661202][ T6598] lowmem_reserve[]: 0 0 0 0 0 [ 724.662682][ T6598] Node 0 DMA: 1*4kB (U) 0*8kB 3*16kB (UM) 5*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1876kB [ 724.666851][ T6598] Node 0 DMA32: 349*4kB (UMEH) 227*8kB (MEH) 91*16kB (UMEH) 116*32kB (MH) 39*64kB (MH) 15*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12796kB [ 724.672209][ T6598] Node 1 DMA32: 1553*4kB (UMEH) 1288*8kB (UMEH) 675*16kB (UME) 367*32kB (UMEH) 161*64kB (UME) 33*128kB (UME) 15*256kB (UME) 20*512kB (UME) 8*1024kB (UM) 0*2048kB 0*4096kB = 75860kB [ 724.678297][ T6598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.681251][ T6598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 724.684032][ T6598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.687000][ T6598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 724.689897][ T6598] 28991 total pagecache pages [ 724.691370][ T6598] 130 pages in swap cache [ 724.692714][ T6598] Free swap = 103516kB [ 724.694034][ T6598] Total swap = 124996kB [ 724.695346][ T6598] 524155 pages RAM [ 724.696567][ T6598] 0 pages HighMem/MovableOnly [ 724.698115][ T6598] 209458 pages reserved [ 724.699428][ T6598] 0 pages cma reserved [ 724.706827][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14646'. [ 724.915491][ T6598] syz.5.14628 (6598) used greatest stack depth: 20240 bytes left [ 725.167124][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14647'. [ 725.173567][ T6654] vxlan0: entered promiscuous mode [ 725.175979][ T12] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.180147][ T225] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.182885][ T225] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.185534][ T225] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.358062][ T67] usb 14-1: USB disconnect, device number 2 [ 725.601602][ T6678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.657403][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 725.841642][ T6700] input: syz1 as /devices/virtual/input/input161 [ 725.998623][ T40] audit: type=1326 audit(2000001573.617:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.9.14676" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 726.344996][ T6731] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 726.444701][ T6737] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.14685'. [ 726.696770][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 727.048113][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14714'. [ 727.109470][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14716'. [ 727.282854][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.300851][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.384545][ T6831] syzkaller1: entered promiscuous mode [ 727.386298][ T6831] syzkaller1: entered allmulticast mode [ 727.388951][ T93] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.391520][ T93] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.394109][ T93] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.396769][ T93] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.400935][ T93] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.405154][ T93] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.409260][ T93] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.411975][ T93] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.560156][ T6857] input: syz1 as /devices/virtual/input/input162 [ 727.641398][ T40] audit: type=1326 audit(2000001575.258:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.648110][ T40] audit: type=1326 audit(2000001575.258:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.654733][ T40] audit: type=1326 audit(2000001575.258:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.663594][ T40] audit: type=1326 audit(2000001575.258:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.670241][ T40] audit: type=1326 audit(2000001575.258:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.676856][ T40] audit: type=1326 audit(2000001575.258:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.683375][ T40] audit: type=1326 audit(2000001575.258:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.690103][ T40] audit: type=1326 audit(2000001575.258:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.698031][ T40] audit: type=1326 audit(2000001575.258:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.8.14735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 727.736299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 727.972576][ T6892] netlink: 'syz.8.14751': attribute type 12 has an invalid length. [ 727.974972][ T6892] netlink: 'syz.8.14751': attribute type 29 has an invalid length. [ 727.977948][ T6892] netlink: 148 bytes leftover after parsing attributes in process `syz.8.14751'. [ 727.980839][ T6892] netlink: 59 bytes leftover after parsing attributes in process `syz.8.14751'. [ 728.096130][ T67] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 728.245988][ T67] usb 10-1: Using ep0 maxpacket: 8 [ 728.248782][ T67] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 728.251440][ T67] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 728.254810][ T67] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 728.258140][ T67] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 728.261685][ T67] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 728.264852][ T67] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.268982][ T67] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 728.271897][ T67] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.432987][ T6924] netlink: 'syz.8.14766': attribute type 1 has an invalid length. [ 728.446333][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14766'. [ 728.468659][ T6924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.472488][ T6924] bond1: (slave bond2): making interface the new active one [ 728.475168][ T6924] bond1: (slave bond2): Enslaving as an active interface with an up link [ 728.479267][ T67] usb 10-1: GET_CAPABILITIES returned 0 [ 728.481061][ T67] usbtmc 10-1:16.0: can't read capabilities [ 728.681337][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.684215][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.687486][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.690304][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.693467][T13567] usb 10-1: USB disconnect, device number 34 [ 728.775874][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 728.855772][T30674] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 729.027818][T30674] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 729.030382][T30674] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.033949][T30674] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.037413][T30674] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.040829][T30674] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.044791][T30674] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.047708][T30674] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.051344][T30674] usb 13-1: config 0 descriptor?? [ 729.053401][ T6937] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 729.459958][T30674] plantronics 0003:047F:FFFF.005E: reserved main item tag 0xd [ 729.464556][T30674] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 729.530258][ T6983] veth0: entered promiscuous mode [ 729.532040][ T6982] veth0: left promiscuous mode [ 729.726933][T13554] usb 13-1: USB disconnect, device number 17 [ 729.825215][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 730.233622][ T7071] netlink: 830 bytes leftover after parsing attributes in process `syz.5.14832'. [ 730.308921][ T7083] Invalid/unusable pipe [ 730.372015][ T7095] bridge1: entered allmulticast mode [ 730.379501][ T7097] pim6reg1: entered promiscuous mode [ 730.381189][ T7097] pim6reg1: entered allmulticast mode [ 730.405447][T30674] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 730.556019][ T7124] netlink: 'syz.8.14856': attribute type 1 has an invalid length. [ 730.570630][ T7124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 730.571382][T30674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.579183][T30674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.582240][T30674] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.584940][ T7124] bond3: (slave geneve2): making interface the new active one [ 730.587019][T30674] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.589352][ T7124] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 730.591400][T30674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.602982][T30674] usb 9-1: config 0 descriptor?? [ 730.796379][ T7140] netlink: 'syz.8.14864': attribute type 32 has an invalid length. [ 730.799795][ T7140] netlink: 'syz.8.14864': attribute type 32 has an invalid length. [ 730.854742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 730.930763][ T7155] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 730.999225][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 731.003627][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 731.007707][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 731.013780][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.018146][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.021630][T30674] plantronics 0003:047F:FFFF.005F: reserved main item tag 0xd [ 731.026345][T30674] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 731.139196][ T1139] veth0_to_bridge: left allmulticast mode [ 731.141024][ T1139] veth0_to_bridge: left promiscuous mode [ 731.143030][ T1139] bridge0: port 3(veth0_to_bridge) entered disabled state [ 731.147058][ T1139] bridge_slave_0: left allmulticast mode [ 731.148909][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.241275][ T1139] bond0 (unregistering): (slave erspan1): Releasing active interface [ 731.243845][ T1139] erspan1 (unregistering): left promiscuous mode [ 731.250220][ T1139] erspan1 (unregistering): left allmulticast mode [ 731.265949][ T1139] gretap0 (unregistering): left promiscuous mode [ 731.277347][T13619] usb 9-1: USB disconnect, device number 70 [ 731.290259][ T1139] dvmrp0 (unregistering): left allmulticast mode [ 731.488884][ T1139]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.491581][ T1139] bond_slave_0: left promiscuous mode [ 731.493887][ T1139]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.496643][ T1139] bond_slave_1: left promiscuous mode [ 731.498995][ T1139]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 731.501777][ T1139] bridge_slave_1: left promiscuous mode [ 731.503994][ T1139]  (unregistering): Released all slaves [ 731.510013][ T1139] bond0 (unregistering): Released all slaves [ 731.518288][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 731.570843][ T7186] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.14881'. [ 731.589759][ T1139] tipc: Disabling bearer [ 731.592144][ T1139] tipc: Left network mode [ 731.592949][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.596126][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.598408][ T7159] bridge_slave_0: entered allmulticast mode [ 731.601044][ T7159] bridge_slave_0: entered promiscuous mode [ 731.605217][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.607500][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.609821][ T7159] bridge_slave_1: entered allmulticast mode [ 731.612419][ T7159] bridge_slave_1: entered promiscuous mode [ 731.647347][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.651819][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.683431][ T7159] team0: Port device team_slave_0 added [ 731.688045][ T7159] team0: Port device team_slave_1 added [ 731.746355][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.748566][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.757867][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.761960][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.764097][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.775300][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.837466][ T7159] hsr_slave_0: entered promiscuous mode [ 731.840270][ T7159] hsr_slave_1: entered promiscuous mode [ 731.896853][ T1139] batadv_slave_1: left promiscuous mode [ 731.905658][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.908226][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.348566][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 732.436675][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 733.046921][ T7259] netlink: 'syz.4.14909': attribute type 13 has an invalid length. [ 733.093605][ T5977] Bluetooth: hci2: command tx timeout [ 733.782642][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14928'. [ 733.845247][ T7319] netlink: 'syz.8.14930': attribute type 1 has an invalid length. [ 733.922111][ T1139] IPVS: stop unused estimator thread 0... [ 733.962048][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14933'. [ 734.124786][ T7159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.130258][ T7159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.134862][ T7159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.138658][ T7159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.189500][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.202313][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.209705][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.212023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.224806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.227093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.341857][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.372151][ T7159] veth0_vlan: entered promiscuous mode [ 734.381183][ T7159] veth1_vlan: entered promiscuous mode [ 734.398252][ T7159] veth0_macvtap: entered promiscuous mode [ 734.402143][ T7159] veth1_macvtap: entered promiscuous mode [ 734.411087][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.419829][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.426615][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.432102][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.437646][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.445103][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.471429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.474924][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.485292][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.487659][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.672828][ T7310] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 734.822782][ T7310] usb 14-1: Using ep0 maxpacket: 8 [ 734.825628][ T7310] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.830162][ T7310] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.834136][ T7310] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.837655][ T7310] usb 14-1: config 0 descriptor?? [ 734.881687][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 734.881698][ T40] audit: type=1326 audit(2000001582.501:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.890290][ T40] audit: type=1326 audit(2000001582.501:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.899141][ T40] audit: type=1326 audit(2000001582.501:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.907533][ T40] audit: type=1326 audit(2000001582.501:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.914122][ T40] audit: type=1326 audit(2000001582.501:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.920548][ T40] audit: type=1326 audit(2000001582.501:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.927136][ T40] audit: type=1326 audit(2000001582.501:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.944489][ T40] audit: type=1326 audit(2000001582.501:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.950987][ T40] audit: type=1326 audit(2000001582.501:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 734.961588][ T40] audit: type=1326 audit(2000001582.501:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.14935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 735.048772][ T7310] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 735.138778][ T7458] binder: 7456:7458 ioctl c0306201 80000380 returned -14 [ 735.172644][ T5977] Bluetooth: hci2: command tx timeout [ 735.250332][ T7310] usb 14-1: USB disconnect, device number 3 [ 735.262106][ T7480] syzkaller1: entered promiscuous mode [ 735.265428][ T7480] syzkaller1: entered allmulticast mode [ 735.367294][ T7492] overlayfs: workdir and upperdir must reside under the same mount [ 736.045225][ T7554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 736.047495][ T7554] IPv6: NLM_F_CREATE should be set when creating new route [ 737.251514][ T5977] Bluetooth: hci2: command tx timeout [ 738.866797][ T7557] syz_tun: entered promiscuous mode [ 738.875399][ T7557] batadv_slave_0: entered promiscuous mode [ 738.877582][ T7557] debugfs: 'hsr0' already exists in 'hsr' [ 738.879480][ T7557] Cannot create hsr debugfs directory [ 738.882681][ T7557] hsr0: entered allmulticast mode [ 738.884427][ T7557] syz_tun: entered allmulticast mode [ 738.886104][ T7557] batadv_slave_0: entered allmulticast mode [ 738.935155][ T7583] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15000'. [ 739.246871][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15016'. [ 739.340691][ T5977] Bluetooth: hci2: command tx timeout [ 739.823007][ T7688] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 739.930191][ T6068] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 740.081903][ T6068] usb 14-1: config 0 has no interfaces? [ 740.083707][ T6068] usb 14-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 740.086575][ T6068] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.090198][ T6068] usb 14-1: config 0 descriptor?? [ 740.229993][ T29] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 740.297015][ T6068] usb 14-1: USB disconnect, device number 4 [ 740.379902][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 740.383040][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 740.386112][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.389333][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.392765][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.396173][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.400682][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 740.403516][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.612743][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 740.614466][ T29] usbtmc 9-1:16.0: can't read capabilities [ 740.815020][ T7310] usb 9-1: USB disconnect, device number 71 [ 741.590352][ T2088] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 741.593288][ T2088] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 742.163281][ T7752] netlink: 'syz.4.15064': attribute type 8 has an invalid length. [ 742.718816][T13563] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 742.871073][T13563] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 742.874342][T13563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.877727][T13563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.880784][T13563] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 742.885408][T13563] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 742.888217][T13563] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 742.890737][T13563] usb 6-1: Manufacturer: syz [ 742.893159][T13563] usb 6-1: config 0 descriptor?? [ 743.301395][T13563] appleir 0003:05AC:8243.0061: unknown main item tag 0x0 [ 743.306967][T13563] appleir 0003:05AC:8243.0061: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 743.418801][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.559824][T13563] usb 6-1: USB disconnect, device number 2 [ 743.574973][ T7828] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 743.607689][ T7830] syzkaller1: entered promiscuous mode [ 743.609547][ T7830] syzkaller1: entered allmulticast mode [ 743.737739][ T7834] netlink: 'syz.4.15094': attribute type 1 has an invalid length. [ 743.740921][ T7834] netlink: 'syz.4.15094': attribute type 4 has an invalid length. [ 743.743469][ T7834] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15094'. [ 743.816809][T13563] IPVS: starting estimator thread 0... [ 743.818485][ T7840] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 743.896131][ T7826] Invalid source name [ 743.897468][ T7826] UBIFS error (pid: 7826): cannot open "./file0", error -22 [ 743.938470][ T7841] IPVS: using max 42 ests per chain, 100800 per kthread [ 744.377912][T13610] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 744.527939][T13610] usb 13-1: Using ep0 maxpacket: 8 [ 744.530826][T13610] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 744.533406][T13610] usb 13-1: config 179 has no interface number 0 [ 744.535402][T13610] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 744.538870][T13610] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 744.542302][T13610] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 744.545732][T13610] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 744.549822][T13610] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 744.553195][T13610] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.557304][ T7864] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 744.768116][T13610] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input165 [ 744.964702][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 744.967347][ C0] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 744.970356][T13610] usb 13-1: USB disconnect, device number 18 [ 745.103805][ T7881] ================================================================== [ 745.106317][ T7881] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.108980][ T7881] Write of size 360 at addr ffffc90002ae6ea0 by task vivid-000-vid-c/7881 [ 745.112854][ T7881] [ 745.113633][ T7881] CPU: 2 UID: 0 PID: 7881 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 745.113649][ T7881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 745.113656][ T7881] Call Trace: [ 745.113661][ T7881] [ 745.113666][ T7881] dump_stack_lvl+0x116/0x1f0 [ 745.113682][ T7881] print_report+0xcd/0x630 [ 745.113697][ T7881] ? __virt_addr_valid+0x81/0x610 [ 745.113713][ T7881] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.113727][ T7881] kasan_report+0xe0/0x110 [ 745.113741][ T7881] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.113757][ T7881] kasan_check_range+0x100/0x1b0 [ 745.113778][ T7881] __asan_memcpy+0x3c/0x60 [ 745.113789][ T7881] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.113810][ T7881] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 745.113827][ T7881] vivid_fillbuff+0x8d2/0x4250 [ 745.113845][ T7881] ? __pfx_vivid_fillbuff+0x10/0x10 [ 745.113861][ T7881] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 745.113877][ T7881] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.113890][ T7881] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 745.113902][ T7881] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 745.113917][ T7881] vivid_thread_vid_cap+0x454/0xda0 [ 745.113932][ T7881] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 745.113945][ T7881] ? do_raw_spin_lock+0x12c/0x2b0 [ 745.113962][ T7881] ? find_held_lock+0x2b/0x80 [ 745.113974][ T7881] ? rcu_is_watching+0x12/0xc0 [ 745.113985][ T7881] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 745.113997][ T7881] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.114008][ T7881] ? __kthread_parkme+0x19e/0x250 [ 745.114023][ T7881] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 745.114036][ T7881] kthread+0x3c5/0x780 [ 745.114051][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.114067][ T7881] ? rcu_is_watching+0x12/0xc0 [ 745.114078][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.114094][ T7881] ret_from_fork+0x5d7/0x6f0 [ 745.114111][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.114126][ T7881] ret_from_fork_asm+0x1a/0x30 [ 745.114143][ T7881] [ 745.114147][ T7881] [ 745.175599][ T7881] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc90002ae6000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 745.179667][ T7881] The buggy address belongs to the physical page: [ 745.181650][ T7881] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x81d pfn:0x63f64 [ 745.184408][ T7881] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 745.186651][ T7881] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 745.189313][ T7881] raw: 000000000000081d 0000000000000000 00000001ffffffff 0000000000000000 [ 745.191968][ T7881] page dumped because: kasan: bad access detected [ 745.193960][ T7881] page_owner tracks the page as allocated [ 745.195740][ T7881] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7880, tgid 7879 (syz.1.15115), ts 745102954906, free_ts 745102941244 [ 745.201565][ T7881] post_alloc_hook+0x1c0/0x230 [ 745.203078][ T7881] get_page_from_freelist+0x132b/0x38e0 [ 745.204805][ T7881] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 745.206657][ T7881] alloc_pages_bulk_noprof+0x71c/0x1410 [ 745.208384][ T7881] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 745.210387][ T7881] __vmalloc_node_range_noprof+0x526/0x14b0 [ 745.212229][ T7881] vmalloc_user_noprof+0x9e/0xe0 [ 745.213784][ T7881] vb2_vmalloc_alloc+0x135/0x3f0 [ 745.215360][ T7881] __vb2_queue_alloc+0x8c6/0x1280 [ 745.216938][ T7881] vb2_core_reqbufs+0xa90/0xfe0 [ 745.218469][ T7881] __vb2_init_fileio+0x3f1/0x1100 [ 745.220041][ T7881] vb2_core_poll+0x5ec/0x700 [ 745.221776][ T7881] vb2_poll+0x33/0x150 [ 745.223120][ T7881] vb2_fop_poll+0x10f/0x2c0 [ 745.224561][ T7881] v4l2_poll+0x160/0x320 [ 745.225895][ T7881] do_sys_poll+0x55c/0xdf0 [ 745.227309][ T7881] page last free pid 7880 tgid 7879 stack trace: [ 745.229275][ T7881] __free_frozen_pages+0x7d5/0x10f0 [ 745.230918][ T7881] kasan_populate_vmalloc+0x13d/0x1f0 [ 745.232593][ T7881] alloc_vmap_area+0x959/0x29c0 [ 745.234124][ T7881] __get_vm_area_node+0x1ca/0x330 [ 745.235708][ T7881] __vmalloc_node_range_noprof+0x271/0x14b0 [ 745.237542][ T7881] vmalloc_user_noprof+0x9e/0xe0 [ 745.239117][ T7881] vb2_vmalloc_alloc+0x135/0x3f0 [ 745.240673][ T7881] __vb2_queue_alloc+0x8c6/0x1280 [ 745.242253][ T7881] vb2_core_reqbufs+0xa90/0xfe0 [ 745.243801][ T7881] __vb2_init_fileio+0x3f1/0x1100 [ 745.245377][ T7881] vb2_core_poll+0x5ec/0x700 [ 745.246849][ T7881] vb2_poll+0x33/0x150 [ 745.248135][ T7881] vb2_fop_poll+0x10f/0x2c0 [ 745.249567][ T7881] v4l2_poll+0x160/0x320 [ 745.250910][ T7881] do_sys_poll+0x55c/0xdf0 [ 745.252310][ T7881] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 745.254204][ T7881] [ 745.254975][ T7881] Memory state around the buggy address: [ 745.256719][ T7881] ffffc90002ae6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 745.259198][ T7881] ffffc90002ae6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 745.261665][ T7881] >ffffc90002ae7000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 745.264153][ T7881] ^ [ 745.265433][ T7881] ffffc90002ae7080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 745.267918][ T7881] ffffc90002ae7100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 745.270419][ T7881] ================================================================== [ 745.273957][ T7881] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 745.276254][ T7881] CPU: 3 UID: 0 PID: 7881 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 745.280125][ T7881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 745.283644][ T7881] Call Trace: [ 745.284710][ T7881] [ 745.285654][ T7881] dump_stack_lvl+0x3d/0x1f0 [ 745.287146][ T7881] vpanic+0x6e8/0x7a0 [ 745.288424][ T7881] ? __pfx_vpanic+0x10/0x10 [ 745.289883][ T7881] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.291656][ T7881] panic+0xca/0xd0 [ 745.292858][ T7881] ? __pfx_panic+0x10/0x10 [ 745.294274][ T7881] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.296156][ T7881] ? preempt_schedule_common+0x44/0xc0 [ 745.297892][ T7881] ? preempt_schedule_thunk+0x16/0x30 [ 745.299594][ T7881] ? check_panic_on_warn+0x1f/0xb0 [ 745.301214][ T7881] check_panic_on_warn+0xab/0xb0 [ 745.302786][ T7881] end_report+0x107/0x170 [ 745.304171][ T7881] kasan_report+0xee/0x110 [ 745.305590][ T7881] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.307364][ T7881] kasan_check_range+0x100/0x1b0 [ 745.308940][ T7881] __asan_memcpy+0x3c/0x60 [ 745.310366][ T7881] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 745.312092][ T7881] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 745.313974][ T7881] vivid_fillbuff+0x8d2/0x4250 [ 745.315503][ T7881] ? __pfx_vivid_fillbuff+0x10/0x10 [ 745.317143][ T7881] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 745.318934][ T7881] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.320579][ T7881] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 745.322458][ T7881] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 745.324258][ T7881] vivid_thread_vid_cap+0x454/0xda0 [ 745.325904][ T7881] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 745.327706][ T7881] ? do_raw_spin_lock+0x12c/0x2b0 [ 745.329311][ T7881] ? find_held_lock+0x2b/0x80 [ 745.330815][ T7881] ? rcu_is_watching+0x12/0xc0 [ 745.332326][ T7881] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 745.334156][ T7881] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.335805][ T7881] ? __kthread_parkme+0x19e/0x250 [ 745.337398][ T7881] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 745.339205][ T7881] kthread+0x3c5/0x780 [ 745.340508][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.341975][ T7881] ? rcu_is_watching+0x12/0xc0 [ 745.343499][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.344969][ T7881] ret_from_fork+0x5d7/0x6f0 [ 745.346445][ T7881] ? __pfx_kthread+0x10/0x10 [ 745.347917][ T7881] ret_from_fork_asm+0x1a/0x30 [ 745.349448][ T7881] [ 745.351044][ T7881] Kernel Offset: disabled [ 745.352408][ T7881] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:08:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000007bf8a3 RBX=0000000000000000 RCX=ffffffff8b8f9bf9 RDX=0000000000000000 RSI=ffffffff8de4901c RDI=ffffffff8c161580 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b8f875f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d1da8 CR3=000000005d484000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000007e590b RBX=0000000000000001 RCX=ffffffff8b8f9bf9 RDX=0000000000000000 RSI=ffffffff8de4901c RDI=ffffffff8c161580 RBP=ffffed1003bdd488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deea440 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b8f875f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7431500 CR3=000000004dd44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85609a95 RDI=ffffffff9b0f07c0 RBP=ffffffff9b0f0780 RSP=ffffc900038ff158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0f0780 R15=ffffffff85609a30 RIP=ffffffff85609abf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74235f4 CR3=000000004f693000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000007971fd RBX=0000000000000003 RCX=ffffffff8b8f9bf9 RDX=0000000000000000 RSI=ffffffff8de4901c RDI=ffffffff8c161580 RBP=ffffed1003862000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c310000 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b8f875f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057db04c0 CR3=0000000071667000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000