last executing test programs: 2m41.889617883s ago: executing program 0 (id=44): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) 2m41.85046377s ago: executing program 0 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 2m41.820546673s ago: executing program 0 (id=50): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000940)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x698680, 0x12345}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 2m41.730042488s ago: executing program 0 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) 2m41.683852916s ago: executing program 0 (id=56): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 2m40.45077887s ago: executing program 0 (id=106): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./bus\x00', r1, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2m40.390580961s ago: executing program 32 (id=106): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./bus\x00', r1, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 46.736116127s ago: executing program 3 (id=3296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x4, 0x0, 0x0, 0x42, 0x45, 0xc, 0x5886, 0x7, 0x1, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 45.908298202s ago: executing program 3 (id=3307): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 45.880172611s ago: executing program 3 (id=3309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0xffffff40, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 45.809197199s ago: executing program 3 (id=3312): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) 45.805133893s ago: executing program 3 (id=3313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0) 45.641836639s ago: executing program 3 (id=3315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f00000029c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "d19d8a", 0xd4b, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x2b, 0x1a4, '\x00', [@generic={0x9, 0xd1f, "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"}]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8299, 0x8, 0x1, 0x4e24, 0x4e20}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) 45.574332902s ago: executing program 33 (id=3315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f00000029c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "d19d8a", 0xd4b, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x2b, 0x1a4, '\x00', [@generic={0x9, 0xd1f, "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"}]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8299, 0x8, 0x1, 0x4e24, 0x4e20}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) 4.930801976s ago: executing program 1 (id=4168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 2.788724222s ago: executing program 1 (id=4189): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2026cc, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.787608143s ago: executing program 1 (id=4190): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f00000000c0)={0x20, "0f5dbf9b3c00000000c4f5f9c6974700510000000000000000000200"}}) 1.498117878s ago: executing program 2 (id=4212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.423563204s ago: executing program 2 (id=4213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd08, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 1.367335364s ago: executing program 2 (id=4215): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r0) 1.365834747s ago: executing program 4 (id=4216): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.31972345s ago: executing program 2 (id=4217): syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) 1.319490123s ago: executing program 4 (id=4218): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmmsg$sock(r1, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{}, 0x5}}, 0x80, 0x0}}], 0x41, 0x4000084) 1.260118446s ago: executing program 4 (id=4219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) writev(r2, 0x0, 0x0) 1.259673272s ago: executing program 4 (id=4220): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.213196278s ago: executing program 4 (id=4221): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.210646083s ago: executing program 1 (id=4222): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) 1.126844429s ago: executing program 1 (id=4223): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.114031653s ago: executing program 4 (id=4224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r1, r1, 0x0) 1.01904605s ago: executing program 1 (id=4228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x4, 0x0, 0x3ff}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xfffffffd, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x95, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0xffffff01, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 892.300808ms ago: executing program 34 (id=4228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x4, 0x0, 0x3ff}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xfffffffd, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x95, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0xffffff01, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 478.061613ms ago: executing program 2 (id=4235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 380.656ms ago: executing program 2 (id=4237): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000640)='\x00!', 0x2}], 0x1, 0x7, 0x7) 369.517597ms ago: executing program 5 (id=4239): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3", 0x13}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) bind(r0, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) 323.891556ms ago: executing program 5 (id=4240): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) 249.374297ms ago: executing program 5 (id=4241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) 71.437344ms ago: executing program 5 (id=4242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 70.960925ms ago: executing program 5 (id=4243): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) 0s ago: executing program 5 (id=4244): r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x8000006}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="f4e9"}) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): length. [ 89.615634][ T9366] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1408'. [ 89.642797][ T61] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 89.792804][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 89.795646][ T61] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 89.798089][ T61] usb 6-1: config 0 has no interface number 0 [ 89.801436][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 89.805314][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.807675][ T61] usb 6-1: Product: syz [ 89.808927][ T61] usb 6-1: Manufacturer: syz [ 89.810356][ T61] usb 6-1: SerialNumber: syz [ 89.813056][ T61] usb 6-1: config 0 descriptor?? [ 89.815980][ T61] hub 6-1:0.132: bad descriptor, ignoring hub [ 89.817849][ T61] hub 6-1:0.132: probe with driver hub failed with error -5 [ 89.821595][ T61] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input11 [ 90.152964][ T9] usb 6-1: USB disconnect, device number 4 [ 90.314129][ T6058] tipc: Node number set to 2886997007 [ 90.382779][ T5981] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 90.756764][ T9440] misc userio: Can't change port type on an already running userio instance [ 90.835967][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1451'. [ 91.276078][ T9470] mkiss: ax0: crc mode is auto. [ 91.358720][ T9478] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 91.361103][ T9478] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 91.363948][ T9478] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1467'. [ 91.366842][ T9478] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 91.369167][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 91.473603][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 91.513327][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.587959][ T9517] macvlan3: entered allmulticast mode [ 91.589666][ T9517] veth1_vlan: entered allmulticast mode [ 91.621724][ T9521] mkiss: ax0: crc mode is auto. [ 91.673015][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 91.676001][ T29] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 91.678487][ T29] usb 8-1: config 0 has no interface number 0 [ 91.680643][ T9528] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 91.688004][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.690381][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.694197][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 91.696933][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.699377][ T29] usb 8-1: Product: syz [ 91.700647][ T29] usb 8-1: Manufacturer: syz [ 91.702284][ T29] usb 8-1: SerialNumber: syz [ 91.713064][ T29] usb 8-1: config 0 descriptor?? [ 91.717775][ T29] hub 8-1:0.132: bad descriptor, ignoring hub [ 91.719773][ T29] hub 8-1:0.132: probe with driver hub failed with error -5 [ 91.724044][ T29] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input13 [ 92.144774][ T4258] usb 8-1: USB disconnect, device number 5 [ 93.817012][ T9602] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1513'. [ 93.819781][ T9602] bond_slave_0: entered promiscuous mode [ 93.821577][ T9602] bond_slave_1: entered promiscuous mode [ 93.863963][ T9604] mkiss: ax0: crc mode is auto. [ 94.212756][ T6058] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 94.222825][ T5981] Bluetooth: hci1: command 0xfc11 tx timeout [ 94.225003][ T5988] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 94.242978][ T9570] sp0: Synchronizing with TNC [ 94.358268][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 94.358279][ T40] audit: type=1326 audit(2000000044.524:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.3.1522" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e579 code=0x0 [ 94.383003][ T6058] usb 6-1: Using ep0 maxpacket: 16 [ 94.386498][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.391536][ T6058] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 94.396627][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.399273][ T6058] usb 6-1: Product: syz [ 94.400655][ T6058] usb 6-1: Manufacturer: syz [ 94.402183][ T6058] usb 6-1: SerialNumber: syz [ 94.405534][ T6058] usb 6-1: config 0 descriptor?? [ 94.408713][ T6058] hub 6-1:0.0: bad descriptor, ignoring hub [ 94.411249][ T6058] hub 6-1:0.0: probe with driver hub failed with error -5 [ 94.415622][ T6058] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 94.793027][ T9] usb 6-1: USB disconnect, device number 5 [ 94.985049][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.996727][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.097510][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.100354][ T60] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.103335][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.106702][ T60] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.109590][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.112444][ T60] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.115614][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.118495][ T60] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.413424][ T9670] bond_slave_0: left promiscuous mode [ 95.415273][ T9670] bond_slave_1: left promiscuous mode [ 95.504373][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.514684][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.611381][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.615633][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.619064][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.622538][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.629484][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.633195][ T60] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.636679][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.640273][ T60] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.104909][ T9705] netlink: 'syz.3.1562': attribute type 3 has an invalid length. [ 96.107406][ T9705] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1562'. [ 96.262789][ T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.413918][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 96.417432][ T59] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.420692][ T59] usb 6-1: config 7 has an invalid interface number: 88 but max is 0 [ 96.423422][ T59] usb 6-1: config 7 has no interface number 0 [ 96.425419][ T59] usb 6-1: config 7 interface 88 has no altsetting 0 [ 96.429840][ T59] usb 6-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 96.432669][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.437120][ T59] usb 6-1: Product: syz [ 96.438508][ T59] usb 6-1: Manufacturer: syz [ 96.440002][ T59] usb 6-1: SerialNumber: syz [ 96.631075][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 96.659015][ T59] usb-storage 6-1:7.88: USB Mass Storage device detected [ 96.663291][ T59] usb-storage 6-1:7.88: Quirks match for vid 0482 pid 0100: 8 [ 96.665714][ T59] usb-storage 6-1:7.88: This device (0482,0100,0100 S 05 P fe) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 96.665714][ T59] Please send a copy of this message to and [ 96.776734][ T59] usb 6-1: USB disconnect, device number 6 [ 97.012587][ T40] audit: type=1326 audit(2000000047.174:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.4.1594" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 98.140513][ T908] kernel read not supported for file /usbmon9 (pid: 908 comm: kworker/2:2) [ 98.182810][ T1020] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 98.228254][ T29] hid_parser_main: 19 callbacks suppressed [ 98.228266][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.233296][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.235735][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.238066][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.240375][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.243004][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.245325][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.247625][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.249932][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.252234][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 98.257562][ T29] hid-generic 0001:0000:0000.0004: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 98.330539][ T9829] fido_id[9829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.336996][ T1020] usb 7-1: Using ep0 maxpacket: 16 [ 98.344789][ T1020] usb 7-1: unable to get BOS descriptor or descriptor too short [ 98.348031][ T1020] usb 7-1: config 7 has an invalid interface number: 88 but max is 0 [ 98.350925][ T1020] usb 7-1: config 7 has no interface number 0 [ 98.353826][ T1020] usb 7-1: config 7 interface 88 has no altsetting 0 [ 98.357779][ T1020] usb 7-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 98.360605][ T1020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.365225][ T1020] usb 7-1: Product: syz [ 98.366602][ T1020] usb 7-1: Manufacturer: syz [ 98.368076][ T1020] usb 7-1: SerialNumber: syz [ 98.446812][ T9842] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 98.449573][ T9842] SQUASHFS error: Failed to read block 0x0: -5 [ 98.590625][ T1020] usb-storage 7-1:7.88: USB Mass Storage device detected [ 98.604988][ T1020] usb-storage 7-1:7.88: Quirks match for vid 0482 pid 0100: 8 [ 98.607537][ T1020] usb-storage 7-1:7.88: This device (0482,0100,0100 S 05 P fe) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 98.607537][ T1020] Please send a copy of this message to and [ 98.689112][ T1020] usb 7-1: USB disconnect, device number 4 [ 98.757927][ T9872] block device autoloading is deprecated and will be removed. [ 98.760512][ T9872] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 98.764511][ T9872] SQUASHFS error: Failed to read block 0x0: -5 [ 98.864711][ T40] audit: type=1326 audit(2000000049.034:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 98.871368][ T40] audit: type=1326 audit(2000000049.034:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 98.879341][ T40] audit: type=1326 audit(2000000049.034:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 98.886331][ T40] audit: type=1326 audit(2000000049.034:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 98.894320][ T40] audit: type=1326 audit(2000000049.034:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 98.900853][ T40] audit: type=1326 audit(2000000049.034:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 98.908020][ T40] audit: type=1326 audit(2000000049.034:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 98.914829][ T40] audit: type=1326 audit(2000000049.034:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.1.1645" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.112109][ T9898] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 99.115371][ T9898] SQUASHFS error: Failed to read block 0x0: -5 [ 99.232844][ T908] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 99.346160][ T9912] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 99.382770][ T908] usb 9-1: Using ep0 maxpacket: 16 [ 99.385626][ T908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 99.390070][ T908] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 99.394004][ T908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.396539][ T908] usb 9-1: Product: syz [ 99.397859][ T908] usb 9-1: Manufacturer: syz [ 99.399304][ T908] usb 9-1: SerialNumber: syz [ 99.401859][ T908] usb 9-1: config 0 descriptor?? [ 99.404883][ T908] hub 9-1:0.0: bad descriptor, ignoring hub [ 99.406852][ T908] hub 9-1:0.0: probe with driver hub failed with error -5 [ 99.410662][ T908] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 99.713250][ T59] usb 9-1: USB disconnect, device number 8 [ 99.744506][ T6188] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 99.828283][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 99.828294][ T40] audit: type=1326 audit(2000000049.994:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.1.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.837073][ T40] audit: type=1326 audit(2000000049.994:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.1.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.844212][ T40] audit: type=1326 audit(2000000049.994:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.1.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.850912][ T40] audit: type=1326 audit(2000000049.994:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.1.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.858312][ T40] audit: type=1326 audit(2000000049.994:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.1.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 99.912869][ T6188] usb 8-1: Using ep0 maxpacket: 16 [ 99.916252][ T6188] usb 8-1: unable to get BOS descriptor or descriptor too short [ 99.919372][ T6188] usb 8-1: config 7 has an invalid interface number: 88 but max is 0 [ 99.921878][ T6188] usb 8-1: config 7 has no interface number 0 [ 99.923857][ T6188] usb 8-1: config 7 interface 88 has no altsetting 0 [ 99.927407][ T6188] usb 8-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 99.930199][ T6188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.932651][ T6188] usb 8-1: Product: syz [ 99.934130][ T6188] usb 8-1: Manufacturer: syz [ 99.935601][ T6188] usb 8-1: SerialNumber: syz [ 99.992788][ T4258] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 100.149450][ T6188] usb-storage 8-1:7.88: USB Mass Storage device detected [ 100.154258][ T6188] usb-storage 8-1:7.88: Quirks match for vid 0482 pid 0100: 8 [ 100.156698][ T6188] usb-storage 8-1:7.88: This device (0482,0100,0100 S 05 P fe) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 100.156698][ T6188] Please send a copy of this message to and [ 100.164615][ T4258] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 100.168956][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.171705][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.175235][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.178029][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.180771][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.184229][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.187002][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.189833][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.193365][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.196109][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.198936][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.202339][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.206944][ T6188] usb 8-1: USB disconnect, device number 6 [ 100.208854][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.212820][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.216787][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.220345][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.223319][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.226627][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.229370][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.232106][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.235576][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.238354][ T4258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.241095][ T4258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.244798][ T4258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.248664][ T4258] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 100.251442][ T4258] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.254188][ T4258] usb 7-1: Product: syz [ 100.255499][ T4258] usb 7-1: Manufacturer: syz [ 100.256955][ T4258] usb 7-1: SerialNumber: syz [ 100.259652][ T4258] usb 7-1: config 0 descriptor?? [ 100.264181][ T4258] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.523667][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 100.528018][ T6188] usb 7-1: USB disconnect, device number 5 [ 100.530876][ T6188] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 101.703274][T10009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1704'. [ 101.738704][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 101.744483][T10012] vlan2: entered allmulticast mode [ 102.113166][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 102.214385][T10057] loop6: detected capacity change from 0 to 63 [ 102.217079][T10057] buffer_io_error: 7 callbacks suppressed [ 102.217087][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.221465][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.225028][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.228052][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.230752][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.233596][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.236220][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.239748][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.242422][T10057] ldm_validate_partition_table(): Disk read failed. [ 102.244787][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.247394][T10057] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.249930][T10057] Dev loop6: unable to read RDB block 0 [ 102.251846][T10057] loop6: unable to read partition table [ 102.257430][T10057] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 103.273668][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 103.280661][ T40] audit: type=1326 audit(2000000053.444:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 103.287981][ T40] audit: type=1326 audit(2000000053.444:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 103.296665][ T40] audit: type=1326 audit(2000000053.444:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 103.305402][ T40] audit: type=1326 audit(2000000053.444:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 103.312148][ T40] audit: type=1326 audit(2000000053.444:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 104.278462][T10098] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 105.025015][T10126] hugetlbfs: syz.3.1757 (10126): Using mlock ulimits for SHM_HUGETLB is obsolete [ 105.127935][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 105.520846][ T59] kernel read not supported for file /dsp (pid: 59 comm: kworker/3:1) [ 115.509135][T10197] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 115.702834][ T1020] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.853619][ T1020] usb 6-1: Using ep0 maxpacket: 32 [ 115.856896][ T1020] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.859620][ T1020] usb 6-1: config 0 has no interface number 0 [ 115.863754][ T1020] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.866655][ T1020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.869429][ T1020] usb 6-1: Product: syz [ 115.870821][ T1020] usb 6-1: Manufacturer: syz [ 115.872330][ T1020] usb 6-1: SerialNumber: syz [ 115.876637][ T1020] usb 6-1: config 0 descriptor?? [ 115.880670][ T1020] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.883656][ T1020] usb 6-1: selecting invalid altsetting 1 [ 115.885522][ T1020] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.890211][ T1020] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.894061][ T1020] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.896726][ T1020] usb 6-1: media controller created [ 115.906828][ T1020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.943720][ T1020] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.947614][ T1020] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.964019][T10189] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 116.972536][ T1020] usb 6-1: USB disconnect, device number 7 [ 118.393939][T10337] syz.4.1839: vmalloc error: size 1835627655, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.398641][T10337] CPU: 3 UID: 0 PID: 10337 Comm: syz.4.1839 Not tainted syzkaller #0 PREEMPT(full) [ 118.398655][T10337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.398662][T10337] Call Trace: [ 118.398667][T10337] [ 118.398671][T10337] dump_stack_lvl+0x16c/0x1f0 [ 118.398689][T10337] warn_alloc+0x248/0x3a0 [ 118.398717][T10337] ? __pfx_warn_alloc+0x10/0x10 [ 118.398730][T10337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.398744][T10337] ? stack_trace_save+0x8e/0xc0 [ 118.398762][T10337] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 118.398772][T10337] ? kasan_save_stack+0x33/0x60 [ 118.398784][T10337] ? kasan_save_track+0x14/0x30 [ 118.398795][T10337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.398812][T10337] ? policy_nodemask+0xea/0x4e0 [ 118.398825][T10337] ? drm_property_create_blob+0x74/0x330 [ 118.398840][T10337] ? alloc_pages_mpol+0x25a/0x550 [ 118.398853][T10337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.398867][T10337] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.398879][T10337] ? ___kmalloc_large_node+0xed/0x160 [ 118.398896][T10337] __kvmalloc_node_noprof+0x30a/0x620 [ 118.398908][T10337] ? drm_property_create_blob+0x74/0x330 [ 118.398922][T10337] ? drm_property_create_blob+0x74/0x330 [ 118.398938][T10337] ? drm_property_create_blob+0x74/0x330 [ 118.398950][T10337] drm_property_create_blob+0x74/0x330 [ 118.398963][T10337] ? find_held_lock+0x2b/0x80 [ 118.398975][T10337] drm_mode_createblob_ioctl+0x10d/0x450 [ 118.398991][T10337] drm_ioctl_kernel+0x1f1/0x3e0 [ 118.399005][T10337] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 118.399020][T10337] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 118.399039][T10337] drm_ioctl+0x5c9/0xc30 [ 118.399055][T10337] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 118.399070][T10337] ? __pfx_drm_ioctl+0x10/0x10 [ 118.399095][T10337] drm_compat_ioctl+0x327/0x460 [ 118.399107][T10337] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 118.399119][T10337] __ia32_compat_sys_ioctl+0x23f/0x370 [ 118.399137][T10337] __do_fast_syscall_32+0x7c/0x3a0 [ 118.399152][T10337] do_fast_syscall_32+0x32/0x80 [ 118.399166][T10337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.399178][T10337] RIP: 0023:0xf70ce579 [ 118.399187][T10337] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 118.399196][T10337] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 118.399206][T10337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 118.399212][T10337] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.399218][T10337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.399223][T10337] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 118.399229][T10337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.399242][T10337] [ 118.399303][T10337] Mem-Info: [ 118.489346][T10337] active_anon:5534 inactive_anon:752 isolated_anon:0 [ 118.489346][T10337] active_file:2784 inactive_file:41128 isolated_file:0 [ 118.489346][T10337] unevictable:1768 dirty:387 writeback:0 [ 118.489346][T10337] slab_reclaimable:8031 slab_unreclaimable:53713 [ 118.489346][T10337] mapped:23133 shmem:2289 pagetables:1459 [ 118.489346][T10337] sec_pagetables:299 bounce:0 [ 118.489346][T10337] kernel_misc_reclaimable:0 [ 118.489346][T10337] free:51116 free_pcp:13565 free_cma:0 [ 118.503526][T10337] Node 0 active_anon:472kB inactive_anon:2448kB active_file:1056kB inactive_file:2808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1888kB dirty:16kB writeback:0kB shmem:4384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8216kB pagetables:1620kB sec_pagetables:1120kB all_unreclaimable? no Balloon:0kB [ 118.513091][T10337] Node 1 active_anon:21664kB inactive_anon:560kB active_file:10080kB inactive_file:161704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90644kB dirty:1532kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5368kB pagetables:4116kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB [ 118.522659][T10337] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:432kB local_pcp:228kB free_cma:0kB [ 118.531568][T10337] lowmem_reserve[]: 0 288 288 288 288 [ 118.533382][T10337] Node 0 DMA32 free:17552kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1064KB active_anon:472kB inactive_anon:2436kB active_file:1056kB inactive_file:2808kB unevictable:3536kB writepending:16kB present:1032196kB managed:295120kB mlocked:0kB bounce:0kB free_pcp:11616kB local_pcp:3880kB free_cma:0kB [ 118.543641][T10337] lowmem_reserve[]: 0 0 0 0 0 [ 118.545391][T10337] Node 1 DMA32 free:184468kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21464kB inactive_anon:560kB active_file:10080kB inactive_file:161704kB unevictable:3536kB writepending:1532kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:42648kB local_pcp:7492kB free_cma:0kB [ 118.555393][T10337] lowmem_reserve[]: 0 0 0 0 0 [ 118.557032][T10337] Node 0 DMA: 51*4kB (U) 28*8kB (U) 16*16kB (U) 4*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2092kB [ 118.561389][T10337] Node 0 DMA32: 0*4kB 18*8kB (UMEH) 126*16kB (UME) 71*32kB (UMEH) 27*64kB (UMEH) 21*128kB (UMEH) 12*256kB (UMH) 9*512kB (UMEH) 1*1024kB (U) 0*2048kB 0*4096kB = 17552kB [ 118.567072][T10337] Node 1 DMA32: 975*4kB (UME) 509*8kB (UME) 156*16kB (UME) 526*32kB (UME) 432*64kB (UME) 145*128kB (UME) 43*256kB (UME) 37*512kB (UME) 21*1024kB (UM) 5*2048kB (UM) 12*4096kB (U) = 184356kB [ 118.572927][T10337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.575866][T10337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.578725][T10337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.581713][T10337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.585024][T10337] 46268 total pagecache pages [ 118.586511][T10337] 71 pages in swap cache [ 118.587846][T10337] Free swap = 122040kB [ 118.589163][T10337] Total swap = 124996kB [ 118.590471][T10337] 524155 pages RAM [ 118.591691][T10337] 0 pages HighMem/MovableOnly [ 118.593632][T10337] 209480 pages reserved [ 118.594942][T10337] 0 pages cma reserved [ 118.601808][T10343] tipc: Enabling of bearer rejected, failed to enable media [ 118.669754][T10351] loop4: detected capacity change from 0 to 524255232 [ 118.723905][T10351] loop4: detected capacity change from 524255232 to 524287956 [ 118.752294][T10354] netlink: 'syz.4.1847': attribute type 10 has an invalid length. [ 118.762204][T10354] team0: Port device netdevsim0 added [ 118.854702][T10372] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.366868][T10398] sg_write: data in/out 489/14 bytes for SCSI command 0xb-- guessing data in; [ 119.366868][T10398] program syz.1.1867 not setting count and/or reply_len properly [ 119.561357][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1876'. [ 119.670797][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 119.670808][ T40] audit: type=1326 audit(2000000069.834:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.679957][ T40] audit: type=1326 audit(2000000069.834:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.687064][ T40] audit: type=1326 audit(2000000069.834:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 119.694088][ T40] audit: type=1326 audit(2000000069.834:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 119.700612][ T40] audit: type=1326 audit(2000000069.834:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.707948][ T40] audit: type=1326 audit(2000000069.834:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.714570][ T40] audit: type=1326 audit(2000000069.834:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.721069][ T40] audit: type=1326 audit(2000000069.834:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.727634][ T40] audit: type=1326 audit(2000000069.834:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.734185][ T40] audit: type=1326 audit(2000000069.834:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.1.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 119.876726][T10447] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 119.905988][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'. [ 119.948603][T10459] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1895'. [ 120.163077][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 120.166116][T10484] netlink: 'syz.1.1907': attribute type 20 has an invalid length. [ 120.168506][T10484] netlink: 'syz.1.1907': attribute type 21 has an invalid length. [ 120.419973][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1921'. [ 120.425837][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1921'. [ 120.524306][T10524] netlink: 'syz.1.1926': attribute type 2 has an invalid length. [ 120.526737][T10524] netlink: 'syz.1.1926': attribute type 8 has an invalid length. [ 120.529126][T10524] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1926'. [ 120.942854][ T5988] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 121.013887][T10561] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 121.041396][T10567] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 121.045387][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.048067][T10567] batadv0: entered promiscuous mode [ 121.050066][T10567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.056625][T10567] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 121.059077][T10567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1945'. [ 121.062087][T10567] batadv0: entered allmulticast mode [ 121.069017][T10567] bond0: (slave batadv0): Releasing backup interface [ 121.072370][T10567] bridge0: port 3(batadv0) entered blocking state [ 121.075426][T10567] bridge0: port 3(batadv0) entered disabled state [ 121.133895][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 121.136898][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 121.399227][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 121.822974][ T5988] Bluetooth: hci4: command 0x041b tx timeout [ 121.828936][T10640] overlayfs: missing 'workdir' [ 122.656370][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1984'. [ 122.952871][ T1020] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 123.124708][ T1020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.128101][ T1020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.131081][ T1020] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.135094][ T1020] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 123.137900][ T1020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.141528][ T1020] usb 6-1: config 0 descriptor?? [ 123.492857][T10731] can0: slcan on ttyS3. [ 123.555504][ T1020] hid_parser_main: 19 callbacks suppressed [ 123.555517][ T1020] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0 [ 123.562219][ T1020] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0005/input/input17 [ 123.564114][T10731] can0 (unregistered): slcan off ttyS3. [ 123.647242][ T1020] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0005/input/input18 [ 123.662957][ T1020] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0005/input/input19 [ 123.691134][ T1020] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0005/input/input20 [ 123.717415][ T1020] hid-udraw 0003:20D6:CB17.0005: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 123.785565][ T6188] usb 6-1: USB disconnect, device number 8 [ 124.787051][T10840] loop7: detected capacity change from 0 to 7 [ 124.791817][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.794726][ C2] buffer_io_error: 20 callbacks suppressed [ 124.794734][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.799523][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.802381][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.805531][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.808377][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.810965][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.813871][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.816369][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.819252][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.821869][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.825283][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.830734][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.834490][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.837313][T10170] ldm_validate_partition_table(): Disk read failed. [ 124.839870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.842821][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.845342][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.848105][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.850633][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.853574][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.858319][T10170] Dev loop7: unable to read RDB block 0 [ 124.860406][T10170] loop7: unable to read partition table [ 124.862452][T10170] loop7: partition table beyond EOD, truncated [ 124.867660][T10840] ldm_validate_partition_table(): Disk read failed. [ 124.873902][T10840] Dev loop7: unable to read RDB block 0 [ 124.875983][T10840] loop7: unable to read partition table [ 124.877845][T10840] loop7: partition table beyond EOD, truncated [ 124.879844][T10840] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 124.968647][T10854] kvm: kvm [10853]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x10001 [ 125.144009][T10859] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 125.147322][T10859] __nla_validate_parse: 3 callbacks suppressed [ 125.147332][T10859] netlink: 186932 bytes leftover after parsing attributes in process `syz.1.2079'. [ 125.203194][T10867] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.273892][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 125.279860][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 125.914361][ T59] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 125.938993][ T40] kauditd_printk_skb: 451 callbacks suppressed [ 125.939003][ T40] audit: type=1800 audit(2000000076.104:1248): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2121" name="cgroup.controllers" dev="tmpfs" ino=3111 res=0 errno=0 [ 126.075048][ T59] usb 9-1: config 0 has no interfaces? [ 126.076849][ T59] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.083454][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.087047][ T59] usb 9-1: config 0 descriptor?? [ 126.187945][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 126.293213][ T59] usb 9-1: USB disconnect, device number 9 [ 126.510899][T11003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2145'. [ 126.522844][T11003] netlink: 'syz.3.2145': attribute type 12 has an invalid length. [ 126.525849][T11003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2145'. [ 126.563173][T11007] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2146'. [ 126.893141][ T59] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 127.067960][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.071875][ T59] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 127.075421][ T59] usb 7-1: can't read configurations, error -71 [ 127.333274][T11057] block nbd1: server does not support multiple connections per device. [ 127.336244][T11057] block nbd1: shutting down sockets [ 127.921830][T11114] netlink: 'syz.3.2198': attribute type 9 has an invalid length. [ 127.927943][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 127.935199][T11114] macvlan2: entered promiscuous mode [ 127.937097][T11114] hsr0: entered promiscuous mode [ 127.939164][T11114] macvlan2: entered allmulticast mode [ 127.940801][T11114] hsr0: entered allmulticast mode [ 127.942424][T11114] hsr_slave_0: entered allmulticast mode [ 127.945788][T11114] hsr_slave_1: entered allmulticast mode [ 128.097183][T11142] random: crng reseeded on system resumption [ 128.128284][T11146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'. [ 128.272550][T11171] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.395581][T11196] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 128.441588][T11200] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.628300][T11227] netlink: 'syz.1.2251': attribute type 9 has an invalid length. [ 128.763556][T11240] kvm: apic: phys broadcast and lowest prio [ 129.299668][ T40] audit: type=1326 audit(2000000079.464:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.307484][ T40] audit: type=1326 audit(2000000079.464:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 129.314414][ T40] audit: type=1326 audit(2000000079.464:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 129.321083][ T40] audit: type=1326 audit(2000000079.474:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.329010][ T40] audit: type=1326 audit(2000000079.474:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.335879][ T40] audit: type=1326 audit(2000000079.474:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.342579][ T40] audit: type=1326 audit(2000000079.474:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.350872][ T40] audit: type=1326 audit(2000000079.474:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.357728][ T40] audit: type=1326 audit(2000000079.474:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 129.905736][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 129.970107][T11293] netlink: zone id is out of range [ 129.971777][T11293] netlink: zone id is out of range [ 129.973991][T11293] netlink: zone id is out of range [ 129.975607][T11293] netlink: zone id is out of range [ 129.977221][T11293] netlink: zone id is out of range [ 129.978816][T11293] netlink: zone id is out of range [ 129.980411][T11293] netlink: zone id is out of range [ 129.982042][T11293] netlink: zone id is out of range [ 129.984425][T11293] netlink: zone id is out of range [ 129.986056][T11293] netlink: zone id is out of range [ 130.304603][T11319] netlink: 'syz.2.2292': attribute type 19 has an invalid length. [ 130.603801][ T59] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 130.610716][ T59] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.974139][T11378] binder: 11377:11378 ioctl c0306201 80000540 returned -14 [ 131.416662][ T6058] kernel write not supported for file /input/event2 (pid: 6058 comm: kworker/0:4) [ 131.590573][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 131.590584][ T40] audit: type=1326 audit(2000000081.754:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.599773][ T40] audit: type=1326 audit(2000000081.754:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.607530][ T40] audit: type=1326 audit(2000000081.754:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.614932][ T40] audit: type=1326 audit(2000000081.754:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000 [ 131.621500][ T40] audit: type=1326 audit(2000000081.754:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.628892][ T40] audit: type=1326 audit(2000000081.754:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000 [ 131.635786][ T40] audit: type=1326 audit(2000000081.754:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.645216][ T40] audit: type=1326 audit(2000000081.754:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000 [ 131.651856][ T40] audit: type=1326 audit(2000000081.754:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.658604][ T40] audit: type=1326 audit(2000000081.754:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.3.2342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 131.880318][ T5384] udevd[5384]: worker [10258] terminated by signal 33 (Unknown signal 33) [ 131.884558][ T5384] udevd[5384]: worker [10258] failed while handling '/devices/virtual/block/loop4' [ 131.970985][T11470] gretap0: entered promiscuous mode [ 131.977476][T11470] __nla_validate_parse: 1 callbacks suppressed [ 131.977486][T11470] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2362'. [ 132.306597][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.309233][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.391815][ T29] kernel write not supported for file /input/mouse0 (pid: 29 comm: kworker/1:0) [ 134.113105][T11566] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2404'. [ 134.837647][T11599] macvlan2: entered allmulticast mode [ 134.839376][T11599] veth1_vlan: entered allmulticast mode [ 134.842182][T11599] veth1_vlan: left allmulticast mode [ 134.893338][ T908] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 135.058169][T11616] netlink: 'syz.1.2428': attribute type 4 has an invalid length. [ 135.060623][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 135.085120][ T29] kernel write not supported for file /media0 (pid: 29 comm: kworker/1:0) [ 135.086078][ T908] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.091531][ T908] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.097366][ T908] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.101086][ T908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.111887][T11585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.116824][ T908] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.326436][ T9] usb 9-1: USB disconnect, device number 10 [ 135.429499][T11658] sp0: Synchronizing with TNC [ 135.434486][T11658] sp0: Found TNC [ 135.906032][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 135.909566][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2479'. [ 135.919094][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.921963][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.926051][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.928769][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.069782][T11750] macvtap0: refused to change device tx_queue_len [ 136.207619][T11778] netlink: 'syz.4.2502': attribute type 25 has an invalid length. [ 136.517139][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 136.520022][T11826] bridge_slave_1: left promiscuous mode [ 136.521891][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.535825][T11826] bridge_slave_0: left allmulticast mode [ 136.537715][T11826] bridge_slave_0: left promiscuous mode [ 136.539553][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.268867][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 137.271310][ T29] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 137.275029][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.277514][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.280178][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.282487][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.285967][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.288261][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.290612][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.292978][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.295273][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.298394][ T29] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 137.326319][T11905] fido_id[11905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.638863][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 137.783887][T11917] sch_fq: defrate 0 ignored. [ 137.830253][T11923] overlayfs: conflicting lowerdir path [ 137.874031][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 137.926894][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 137.929506][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 137.932010][T11938] netlink: 'syz.4.2573': attribute type 12 has an invalid length. [ 138.161993][T11976] netlink: 'syz.4.2588': attribute type 9 has an invalid length. [ 138.165574][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 138.171260][T11976] hsr0: entered promiscuous mode [ 138.173684][T11976] macvlan4: entered promiscuous mode [ 138.175514][T11976] macvlan4: entered allmulticast mode [ 138.177244][T11976] hsr0: entered allmulticast mode [ 138.178844][T11976] hsr_slave_0: entered allmulticast mode [ 138.180995][T11976] hsr_slave_1: entered allmulticast mode [ 138.315222][T11998] program syz.2.2599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.330549][ T908] kernel write not supported for file /audio1 (pid: 908 comm: kworker/2:2) [ 138.343662][T11990] block nbd1: server does not support multiple connections per device. [ 138.346849][T11990] block nbd1: shutting down sockets [ 138.553253][ T908] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 139.745836][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 140.376954][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2657'. [ 140.382005][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2657'. [ 140.730445][T12159] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 140.732313][T12159] pim6reg1: linktype set to 780 [ 140.771585][T12163] vlan3: entered allmulticast mode [ 140.774907][T12163] veth0_to_bond: entered allmulticast mode [ 140.801474][T12165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2677'. [ 140.804599][T12165] netem: unknown loss type 12 [ 140.806359][T12165] netem: change failed [ 141.410568][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 141.498276][T12261] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 142.077213][T12285] dlm: non-version read from control device 34 [ 142.100803][ C3] vkms_vblank_simulate: vblank timer overrun [ 142.924639][T12306] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2739'. [ 143.593201][ T5981] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 143.593430][ T5988] Bluetooth: hci1: command 0x1003 tx timeout [ 143.631731][ T9] hid_parser_main: 12 callbacks suppressed [ 143.631750][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 143.636185][ T9] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 143.639089][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.641683][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.645045][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.647829][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.650122][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.652479][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.655231][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.657567][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.661081][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.665115][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 143.693496][T12341] fido_id[12341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.737631][T12352] netlink: 'syz.4.2761': attribute type 6 has an invalid length. [ 143.741736][T12352] netlink: 'syz.4.2761': attribute type 6 has an invalid length. [ 144.004078][T12364] sp0: Synchronizing with TNC [ 144.009017][T12364] sp0: Found TNC [ 144.138545][T12373] nbd1: detected capacity change from 0 to 127 [ 144.142671][ T5981] block nbd1: Receive control failed (result -104) [ 144.259855][T12395] sp0: Synchronizing with TNC [ 144.266335][T12395] sp0: Found TNC [ 144.421922][T12407] binder: 12406:12407 ioctl c0306201 80000540 returned -14 [ 145.015650][T12425] fuse: Bad value for 'fd' [ 145.073634][T12391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.076237][T12391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.078664][T12391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.083828][T12391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.289257][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2808'. [ 145.318892][T12463] input: syz0 as /devices/virtual/input/input22 [ 145.342495][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 145.342506][ T40] audit: type=1326 audit(2000000095.504:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.2815" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x0 [ 145.577324][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 145.625408][ T40] audit: type=1800 audit(2000000095.794:1445): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2829" name="file1" dev="tmpfs" ino=3137 res=0 errno=0 [ 145.965834][T12544] dlm: no local IP address has been set [ 145.965856][T12544] dlm: cannot start dlm midcomms -107 [ 146.043675][T12555] ref_ctr_offset mismatch. inode: 0xa21 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 146.236872][ T61] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 146.389077][ T5988] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.394096][ T61] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.406512][ T61] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.406578][ T61] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.406623][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.422975][T12550] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.433078][ T61] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.568185][ T29] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.591639][ T40] audit: type=1326 audit(2000000096.754:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.2.2868" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83579 code=0x0 [ 146.630400][ T6188] usb 6-1: USB disconnect, device number 9 [ 146.738582][T12596] netlink: 'syz.3.2871': attribute type 25 has an invalid length. [ 146.791650][T12606] macvtap0: refused to change device tx_queue_len [ 146.885545][T12613] binder: 12612:12613 ioctl c018620c 80000000 returned -1 [ 147.102885][ T5988] Bluetooth: hci2: command 0x0406 tx timeout [ 147.112956][ T5988] Bluetooth: hci4: command 0x041b tx timeout [ 147.170053][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 147.172983][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 147.608797][T12677] syz.1.2908 (12677): drop_caches: 2 [ 147.631634][T12688] smc: net device bond0 applied user defined pnetid SYZ2 [ 147.759306][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 147.845566][T12711] netlink: 'syz.2.2924': attribute type 4 has an invalid length. [ 147.848089][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'. [ 147.883329][ T6188] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 148.042771][ T6188] usb 6-1: Using ep0 maxpacket: 8 [ 148.045747][ T6188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.048247][ T6188] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.051481][ T6188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.056118][ T6188] usb 6-1: config 0 descriptor?? [ 148.467579][ T6188] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 148.667448][ T6188] usb 6-1: USB disconnect, device number 10 [ 149.192841][ T5988] Bluetooth: hci2: command 0x0406 tx timeout [ 149.325124][T12730] macvlan5: entered allmulticast mode [ 149.639444][T12747] syzkaller1: entered promiscuous mode [ 149.641232][T12747] syzkaller1: entered allmulticast mode [ 150.046207][T12770] input: syz1 as /devices/virtual/input/input23 [ 150.425637][T12805] netlink: 'syz.2.2969': attribute type 2 has an invalid length. [ 150.428253][T12805] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.2969'. [ 150.538279][T12822] vlan1: entered allmulticast mode [ 150.539926][T12822] bond0: entered allmulticast mode [ 150.541631][T12822] bond_slave_0: entered allmulticast mode [ 150.546405][T12822] bond_slave_1: entered allmulticast mode [ 150.701509][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 151.816549][T12859] tun0: tun_chr_ioctl cmd 1074025675 [ 151.818337][T12859] tun0: persist enabled [ 151.819989][T12859] tun0: tun_chr_ioctl cmd 1074025675 [ 151.821665][T12859] tun0: persist disabled [ 151.995216][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 151.995642][T12877] sp0: Synchronizing with TNC [ 152.134318][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3011'. [ 152.305681][T12911] bond2: entered allmulticast mode [ 152.307724][T12911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.308617][T10170] udevd[10170]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.367086][T12926] evm: overlay not supported [ 152.730862][T12950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.737079][T12950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.882882][ T1020] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 153.033979][ T1020] usb 9-1: Using ep0 maxpacket: 16 [ 153.037863][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.042146][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.045904][ T1020] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.050716][ T1020] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 153.054231][ T1020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.059023][ T1020] usb 9-1: config 0 descriptor?? [ 153.296526][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3044'. [ 153.340863][T12982] syzkaller1: entered promiscuous mode [ 153.343226][T12982] syzkaller1: entered allmulticast mode [ 153.362772][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 153.468187][ T1020] hid_parser_main: 13 callbacks suppressed [ 153.468200][ T1020] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 153.473567][ T1020] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 153.475789][ T1020] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 153.477979][ T1020] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 153.480073][ T1020] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 153.487556][ T1020] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 153.520832][ T1020] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 153.524602][ T1020] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 153.536250][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.539782][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.543560][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.546410][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.550161][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.553275][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.557228][ T9] usb 7-1: config 0 descriptor?? [ 153.673913][ T6021] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 153.677859][ T29] usb 9-1: USB disconnect, device number 11 [ 153.681615][ T6021] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.686577][ T6021] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.690009][ T6021] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.768313][T12996] sp0: Synchronizing with TNC [ 153.776400][T12995] [U] è [ 153.964082][ T9] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 153.976580][ T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 154.145247][T13011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 154.209537][T13018] syzkaller1: entered promiscuous mode [ 154.211663][T13018] syzkaller1: entered allmulticast mode [ 154.276650][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 154.341151][T13030] input: syz0 as /devices/virtual/input/input25 [ 154.388467][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 154.669164][T13074] sctp: [Deprecated]: syz.4.3084 (pid 13074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.669164][T13074] Use struct sctp_sack_info instead [ 154.699749][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 154.702919][T13078] netdevsim netdevsim4 netdevsim0: Device is already in use. [ 154.740014][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 154.801873][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 154.829179][T13097] input: syz0 as /devices/virtual/input/input26 [ 155.501918][T13115] net_ratelimit: 4052 callbacks suppressed [ 155.501933][T13115] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 155.979021][ T61] usb 7-1: USB disconnect, device number 8 [ 156.162783][ T6021] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 156.229144][T13183] overlayfs: upper fs does not support tmpfile. [ 156.312968][ T6021] usb 8-1: Using ep0 maxpacket: 8 [ 156.318208][ T6021] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 156.321347][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.324984][ T6021] usb 8-1: Product: syz [ 156.326315][ T6021] usb 8-1: Manufacturer: syz [ 156.327884][ T6021] usb 8-1: SerialNumber: syz [ 156.330851][ T6021] usb 8-1: config 0 descriptor?? [ 156.540149][ T6021] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.546781][ T6021] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 156.552528][ T6021] usb 8-1: USB disconnect, device number 7 [ 157.096556][T13225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.101077][T13225] bond0: (slave rose0): Enslaving as an active interface with an up link [ 157.146758][T13196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.148767][T13196] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.155660][T13196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.157776][T13196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.732852][ T6188] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 157.882768][ T6188] usb 7-1: Using ep0 maxpacket: 16 [ 157.886041][ T6188] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.889473][ T6188] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.893808][ T6188] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.897046][ T6188] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.901945][ T6188] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.905930][ T6188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.908848][ T6188] usb 7-1: SerialNumber: syz [ 157.914277][ T6188] hub 7-1:1.0: bad descriptor, ignoring hub [ 157.916223][ T6188] hub 7-1:1.0: probe with driver hub failed with error -5 [ 157.918880][ T6188] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.398336][T13271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.400276][T13271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.402248][T13271] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.404440][T13271] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.412106][ T5981] Bluetooth: hci1: sending frame failed (-49) [ 158.416787][ T5988] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 158.505449][T13306] overlay: filesystem on ./bus not supported as upperdir [ 158.594742][T13322] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 158.632961][T13325] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3184'. [ 158.937583][T13357] netlink: 'syz.4.3198': attribute type 23 has an invalid length. [ 159.613016][T13395] netlink: 'syz.3.3214': attribute type 1 has an invalid length. [ 159.672861][ T5981] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.203202][ T6188] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 160.353100][ T6188] usb 8-1: Using ep0 maxpacket: 16 [ 160.357727][ T6188] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.362140][ T6188] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 160.366381][ T6188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.369960][ T6188] usb 8-1: config 0 descriptor?? [ 160.413303][ T59] usb 7-1: USB disconnect, device number 9 [ 160.463697][ T5981] Bluetooth: hci4: command 0x041b tx timeout [ 160.463820][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 160.779957][ T6188] kye 0003:0458:5016.000D: control desc unexpectedly large [ 160.785796][ T6188] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.000D/input/input27 [ 160.847029][ T6188] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.000D/input/input28 [ 160.867789][ T40] audit: type=1326 audit(2000000111.034:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="syz.2.3234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.874383][ T40] audit: type=1326 audit(2000000111.034:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="syz.2.3234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.880747][ T40] audit: type=1326 audit(2000000111.034:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="syz.2.3234" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.887841][ T40] audit: type=1326 audit(2000000111.034:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.894163][ T40] audit: type=1326 audit(2000000111.034:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.900491][ T40] audit: type=1326 audit(2000000111.034:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.907864][ T40] audit: type=1326 audit(2000000111.034:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.912321][ T6188] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 160.922756][ T40] audit: type=1326 audit(2000000111.034:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.929664][ T40] audit: type=1326 audit(2000000111.034:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.936258][ T40] audit: type=1326 audit(2000000111.034:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 160.980506][ T61] usb 8-1: USB disconnect, device number 8 [ 161.033545][T13455] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 161.314557][T13478] KVM: debugfs: duplicate directory 13478-4 [ 161.521892][ T5988] Bluetooth: hci1: sending frame failed (-49) [ 161.526395][ T63] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 161.662266][T13507] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 161.668001][T13507] netlink: 'syz.2.3264': attribute type 2 has an invalid length. [ 161.752815][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.543793][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 162.622752][ T29] kernel read not supported for file /dsp1 (pid: 29 comm: kworker/1:0) [ 163.052079][T13573] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.241975][T13586] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 163.583681][ T5981] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 163.633464][T13607] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 164.316991][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.320116][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.403441][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.406619][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.496927][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.500038][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.586340][ T5981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.590322][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.594933][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.604378][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.607181][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.607645][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.610501][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.777403][T13630] chnl_net:caif_netlink_parms(): no params data found [ 164.804927][ T12] bridge0: port 3(batadv0) entered disabled state [ 164.809637][ T12] bridge_slave_1: left allmulticast mode [ 164.811965][ T12] bridge_slave_1: left promiscuous mode [ 164.814682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.818931][ T12] bridge_slave_0: left allmulticast mode [ 164.820954][ T12] bridge_slave_0: left promiscuous mode [ 164.823637][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.094183][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.098138][ T12] bond_slave_0: left promiscuous mode [ 165.101757][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.106512][ T12] bond_slave_1: left promiscuous mode [ 165.109168][ T12] bond0 (unregistering): Released all slaves [ 165.217875][ T12] tipc: Left network mode [ 165.220760][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.224278][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.227282][T13630] bridge_slave_0: entered allmulticast mode [ 165.231188][T13630] bridge_slave_0: entered promiscuous mode [ 165.236239][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.239233][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.242276][T13630] bridge_slave_1: entered allmulticast mode [ 165.246638][T13630] bridge_slave_1: entered promiscuous mode [ 165.313511][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.318006][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.384226][T13630] team0: Port device team_slave_0 added [ 165.402259][T13630] team0: Port device team_slave_1 added [ 165.438799][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.441086][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.449326][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.454052][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.456729][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.465641][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.499921][ T12] hsr_slave_0: left promiscuous mode [ 165.504251][ T12] hsr_slave_1: left promiscuous mode [ 165.506998][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.510693][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.526623][ T12] hsr0: left allmulticast mode [ 165.528530][ T12] hsr0: left promiscuous mode [ 166.133378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 166.220654][ T12] team0 (unregistering): Port device team_slave_0 removed [ 166.626576][ T63] Bluetooth: hci1: command tx timeout [ 166.872564][T13630] hsr_slave_0: entered promiscuous mode [ 166.875824][T13630] hsr_slave_1: entered promiscuous mode [ 166.878657][T13630] debugfs: 'hsr0' already exists in 'hsr' [ 166.881028][T13630] Cannot create hsr debugfs directory [ 167.096171][T13630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.104176][T13630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.111277][T13630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.117438][T13630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.185143][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.203603][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.210974][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.214064][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.228609][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.232000][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.415674][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.637495][T13630] veth0_vlan: entered promiscuous mode [ 167.645835][T13630] veth1_vlan: entered promiscuous mode [ 167.669116][T13630] veth0_macvtap: entered promiscuous mode [ 167.674846][T13630] veth1_macvtap: entered promiscuous mode [ 167.691265][T13630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.700111][T13630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.708847][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.711907][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.717516][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.720228][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.763861][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.767133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.785520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.787934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.837990][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 167.844257][T13692] netlink: 'syz.5.3316': attribute type 2 has an invalid length. [ 167.847598][T13692] netlink: 85376 bytes leftover after parsing attributes in process `syz.5.3316'. [ 168.027590][T13715] netlink: 'syz.1.3328': attribute type 2 has an invalid length. [ 168.030911][T13715] netlink: 85376 bytes leftover after parsing attributes in process `syz.1.3328'. [ 168.265229][T13730] syzkaller1: entered promiscuous mode [ 168.267584][T13730] syzkaller1: entered allmulticast mode [ 168.379733][T13733] sp0: Synchronizing with TNC [ 168.712887][ T5981] Bluetooth: hci1: command tx timeout [ 168.973924][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 168.978805][T13747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3340'. [ 169.902883][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 170.686276][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3366'. [ 170.782866][ T63] Bluetooth: hci1: command tx timeout [ 171.052935][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 171.174321][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3384'. [ 171.212752][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 171.215959][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.219986][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 171.224099][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.227738][ T9] usb 9-1: config 0 descriptor?? [ 171.283068][T13856] bond2: entered allmulticast mode [ 171.285021][T13856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.637104][ T9] kye 0003:0458:5016.000E: control desc unexpectedly large [ 171.642522][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.000E/input/input29 [ 171.649475][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.000E/input/input30 [ 171.708009][ T9] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 171.844363][ T6188] usb 9-1: USB disconnect, device number 12 [ 172.670353][T13869] loop7: detected capacity change from 0 to 7 [ 172.737910][T13879] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.789370][T13869] Dev loop7: unable to read RDB block 7 [ 172.791145][T13869] loop7: unable to read partition table [ 172.792867][ C2] blk_print_req_error: 25 callbacks suppressed [ 172.792882][ C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 172.793437][T13869] loop7: partition table beyond EOD, [ 172.795531][ C2] buffer_io_error: 25 callbacks suppressed [ 172.795543][ C2] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 172.798499][T13869] truncated [ 172.798506][T13869] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 172.863539][ T63] Bluetooth: hci1: command tx timeout [ 173.104864][ T6188] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 173.265506][ T6188] usb 6-1: Using ep0 maxpacket: 16 [ 173.268385][ T6188] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.271592][ T6188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.275235][ T6188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.278397][ T6188] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.283676][ T6188] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.286541][ T6188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.289112][ T6188] usb 6-1: SerialNumber: syz [ 173.293142][ T6188] hub 6-1:1.0: bad descriptor, ignoring hub [ 173.295107][ T6188] hub 6-1:1.0: probe with driver hub failed with error -5 [ 173.297724][ T6188] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 173.754716][T13911] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.543849][ T5399] block nbd1: Possible stuck request ffff888026245080: control (read@0,1024B). Runtime 30 seconds [ 174.548142][ T5399] block nbd1: Possible stuck request ffff888026245240: control (read@1024,1024B). Runtime 30 seconds [ 174.551406][ T5399] block nbd1: Possible stuck request ffff888026245400: control (read@2048,1024B). Runtime 30 seconds [ 174.554764][ T5399] block nbd1: Possible stuck request ffff8880262455c0: control (read@3072,1024B). Runtime 30 seconds [ 174.798422][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3420'. [ 174.804450][T13934] ipvlan2: entered allmulticast mode [ 174.806368][T13934] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 174.968592][T13942] input: syz0 as /devices/virtual/input/input31 [ 175.016947][T13948] input: syz1 as /devices/virtual/input/input32 [ 175.068832][T13950] input: syz1 as /devices/virtual/input/input33 [ 175.099668][T13953] binder: 13952:13953 ioctl c0306201 800005c0 returned -14 [ 175.229209][T13967] ptrace attach of "/syz-executor exec"[8093] was attempted by ""[13967] [ 175.254834][T13969] input: syz1 as /devices/virtual/input/input34 [ 175.382812][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 175.544143][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.547604][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.550574][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.554590][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.557405][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.561138][ T29] usb 7-1: config 0 descriptor?? [ 175.694799][T13975] input: syz1 as /devices/virtual/input/input35 [ 175.783173][ T6058] usb 6-1: USB disconnect, device number 11 [ 175.786055][T13978] syz_tun: Device is already in use. [ 175.970831][ T29] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 175.976288][ T29] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 176.219860][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'. [ 176.235231][ T6058] usb 7-1: USB disconnect, device number 10 [ 176.248024][T14017] overlayfs: upper fs does not support tmpfile. [ 176.275673][T14022] input: syz1 as /devices/virtual/input/input37 [ 177.095758][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 177.362890][ T6058] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 177.514852][ T6058] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 177.517566][ T6058] usb 10-1: config 0 has no interface number 0 [ 177.519589][ T6058] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 177.523393][ T6058] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.526797][ T6058] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.531448][ T6058] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 177.534437][ T6058] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 177.536990][ T6058] usb 10-1: Product: syz [ 177.538349][ T6058] usb 10-1: SerialNumber: syz [ 177.540951][ T6058] usb 10-1: config 0 descriptor?? [ 177.544844][ T6058] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 177.547741][ T6058] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input38 [ 177.672834][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 177.747926][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 177.822821][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 177.825770][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.829115][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.832117][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.836696][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 177.839475][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.843043][ T29] usb 7-1: config 0 descriptor?? [ 177.977995][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.978000][ T6058] usb 10-1: USB disconnect, device number 2 [ 177.982054][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 177.985973][ T6058] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 178.253066][ T29] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 178.255253][ T29] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 178.257506][ T29] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 178.259729][ T29] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 178.261898][ T29] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 178.265842][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 178.275003][ T29] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 178.277552][ T29] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 178.453774][ T1020] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 178.455138][ T6058] usb 7-1: USB disconnect, device number 11 [ 178.457749][ T1020] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.463429][ T1020] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.468781][ T1020] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.879692][T14149] bond0: entered promiscuous mode [ 178.881416][T14149] bond_slave_0: entered promiscuous mode [ 178.883722][T14149] bond_slave_1: entered promiscuous mode [ 178.886385][T14149] batadv0: entered promiscuous mode [ 178.888810][T14149] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 178.998389][T14160] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3514'. [ 179.169722][T14181] bond0: entered promiscuous mode [ 179.171372][T14181] bond_slave_0: entered promiscuous mode [ 179.174182][T14181] bond_slave_1: entered promiscuous mode [ 179.176663][T14181] batadv0: entered promiscuous mode [ 179.178844][T14181] debugfs: 'hsr1' already exists in 'hsr' [ 179.180774][T14181] Cannot create hsr debugfs directory [ 179.182584][T14181] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 179.185905][T14181] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 179.190636][T14181] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 179.332745][ T6021] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 179.502873][ T6021] usb 10-1: Using ep0 maxpacket: 16 [ 179.506612][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.509903][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.515043][ T6021] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.519003][ T6021] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 179.521806][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.526760][ T6021] usb 10-1: config 0 descriptor?? [ 179.593110][ T59] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 179.763116][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 179.775548][ T59] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 179.778412][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.780879][ T59] usb 9-1: Product: syz [ 179.782200][ T59] usb 9-1: Manufacturer: syz [ 179.783908][ T59] usb 9-1: SerialNumber: syz [ 179.787394][ T59] usb 9-1: config 0 descriptor?? [ 179.935987][ T6021] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 179.938244][ T6021] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 179.940451][ T6021] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 179.942615][ T6021] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 179.945142][ T6021] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 179.948407][ T6021] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 179.956732][ T6021] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 179.959235][ T6021] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 179.995504][ T59] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.998814][ T59] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 180.002547][ T59] usb 9-1: USB disconnect, device number 13 [ 180.082601][T14207] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.145479][ T29] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 180.145584][ T4258] usb 10-1: USB disconnect, device number 3 [ 180.149040][ T29] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.154420][ T29] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.158476][ T29] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 181.212816][ T29] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 181.373961][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.377457][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.380561][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.384620][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.387448][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.391147][ T29] usb 9-1: config 0 descriptor?? [ 181.776565][T14254] sctp: [Deprecated]: syz.2.3551 (pid 14254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.776565][T14254] Use struct sctp_sack_info instead [ 181.801887][ T29] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 181.807909][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 182.054547][ T6058] usb 9-1: USB disconnect, device number 14 [ 183.073204][ T59] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 183.224084][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.227408][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.230409][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.234643][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.237403][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.240925][ T59] usb 10-1: config 0 descriptor?? [ 183.653952][ T59] hid_parser_main: 15 callbacks suppressed [ 183.653965][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.658231][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.660432][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.664238][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.666472][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.668700][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.670973][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.673294][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.675478][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.677680][ T59] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 183.681772][ T59] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 183.723128][ T4258] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.872822][ T4258] usb 6-1: Using ep0 maxpacket: 16 [ 183.876034][ T4258] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 183.879042][ T4258] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.882235][ T4258] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.885558][ T4258] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.889322][ T4258] usb 6-1: config 7 interface 0 has no altsetting 0 [ 183.891358][ T4258] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 183.894279][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.914936][ T908] usb 10-1: USB disconnect, device number 4 [ 184.312373][ T4258] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:7.0/0003:0458:5010.0014/input/input41 [ 184.376216][ T4258] kye 0003:0458:5010.0014: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 185.334081][ C3] kye 0003:0458:5010.0014: usb_submit_urb(ctrl) failed: -1 [ 185.908450][T14375] syzkaller1: entered promiscuous mode [ 185.910337][T14375] syzkaller1: entered allmulticast mode [ 185.993484][T14383] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3606'. [ 186.106381][ T24] usb 6-1: USB disconnect, device number 12 [ 186.663485][T14467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3644'. [ 186.671323][T14471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.797041][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 186.797054][ T40] audit: type=1326 audit(2000000136.954:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.4.3656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 186.807904][ T40] audit: type=1326 audit(2000000136.964:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.4.3656" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 186.819529][ T40] audit: type=1326 audit(2000000136.964:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.4.3656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 186.828380][ T40] audit: type=1326 audit(2000000136.964:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.4.3656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 186.850137][T14499] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3655'. [ 186.856288][T14491] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3655'. [ 186.860115][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3660'. [ 186.863143][T14501] netlink: 'syz.2.3660': attribute type 7 has an invalid length. [ 186.865429][T14501] netlink: 'syz.2.3660': attribute type 8 has an invalid length. [ 186.867693][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 186.873881][T14501] gretap0: entered promiscuous mode [ 186.876006][T14501] gretap0: left promiscuous mode [ 187.091014][T14528] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3670'. [ 187.095615][T14524] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3670'. [ 187.153447][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3677'. [ 187.157027][T14540] netlink: 'syz.4.3677': attribute type 7 has an invalid length. [ 187.159534][T14540] netlink: 'syz.4.3677': attribute type 8 has an invalid length. [ 187.162209][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 187.420693][T14559] vlan4: entered allmulticast mode [ 187.422321][T14559] bond0: entered allmulticast mode [ 187.424486][T14559] bond_slave_0: entered allmulticast mode [ 187.426395][T14559] bond_slave_1: entered allmulticast mode [ 187.440143][T14562] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3685'. [ 187.443911][T14557] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3685'. [ 187.825912][T14575] netlink: 'syz.5.3691': attribute type 7 has an invalid length. [ 187.829066][T14575] netlink: 'syz.5.3691': attribute type 8 has an invalid length. [ 187.837734][T14575] gretap0: entered promiscuous mode [ 187.840865][T14575] batadv_slave_1: entered promiscuous mode [ 188.033408][ T59] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 188.137844][T14602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.193424][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 188.200332][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.202627][ T59] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 188.206267][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.213668][ T59] usb 7-1: config 0 descriptor?? [ 188.627251][ T59] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 188.835065][ T9] usb 7-1: USB disconnect, device number 12 [ 189.156569][T14630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.161526][T14630] batadv_slave_0: entered promiscuous mode [ 189.655956][T14684] kvm: user requested TSC rate below hardware speed [ 189.852241][T14717] kvm: user requested TSC rate below hardware speed [ 190.178010][T14760] kvm: user requested TSC rate below hardware speed [ 191.219542][T14790] input: syz0 as /devices/virtual/input/input42 [ 191.375980][T14801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.875536][T14833] syzkaller1: entered promiscuous mode [ 191.877379][T14833] syzkaller1: entered allmulticast mode [ 191.919738][T14840] __nla_validate_parse: 8 callbacks suppressed [ 191.919751][T14840] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3808'. [ 192.077883][T14856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3814'. [ 192.420720][T14909] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3837'. [ 192.484307][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3842'. [ 192.487301][T14920] netlink: 'syz.5.3842': attribute type 5 has an invalid length. [ 192.498727][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.502341][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.508630][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.511789][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.778218][T14943] syzkaller1: entered promiscuous mode [ 192.780618][T14943] syzkaller1: entered allmulticast mode [ 193.166940][T14960] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3858'. [ 193.203964][T14962] syzkaller1: entered promiscuous mode [ 193.216106][T14962] syzkaller1: entered allmulticast mode [ 193.466850][T14991] syzkaller1: entered promiscuous mode [ 193.468629][T14991] syzkaller1: entered allmulticast mode [ 193.748509][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.751215][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.622887][ T908] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 195.773124][ T908] usb 7-1: Using ep0 maxpacket: 16 [ 195.777124][ T908] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 195.781857][ T908] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.786355][ T908] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.790258][ T908] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.797779][ T908] usb 7-1: config 7 interface 0 has no altsetting 0 [ 195.814374][ T908] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 195.818052][ T908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.244003][ T908] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:7.0/0003:0458:5010.0016/input/input44 [ 196.309102][ T908] kye 0003:0458:5010.0016: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 196.895555][T15172] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 197.076011][T15186] input: syz1 as /devices/virtual/input/input45 [ 197.265139][ C2] kye 0003:0458:5010.0016: usb_submit_urb(ctrl) failed: -1 [ 198.033992][ T59] usb 7-1: USB disconnect, device number 13 [ 198.810664][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4021'. [ 198.814055][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 198.817814][T15314] netlink: 'syz.4.4021': attribute type 18 has an invalid length. [ 198.865315][ T6021] kernel read not supported for file /rfkill (pid: 6021 comm: kworker/1:3) [ 199.168704][ T40] audit: type=1326 audit(2000000149.334:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.177441][ T40] audit: type=1326 audit(2000000149.334:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.186747][ T40] audit: type=1326 audit(2000000149.334:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.200870][T15361] pim6reg1: entered promiscuous mode [ 199.202948][ T40] audit: type=1326 audit(2000000149.334:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.203799][T15361] pim6reg1: entered allmulticast mode [ 199.216602][ T40] audit: type=1326 audit(2000000149.334:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.226824][ T40] audit: type=1326 audit(2000000149.364:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.236018][ T40] audit: type=1326 audit(2000000149.364:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.245446][ T40] audit: type=1326 audit(2000000149.364:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.254768][ T40] audit: type=1326 audit(2000000149.364:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.265208][ T40] audit: type=1326 audit(2000000149.364:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.2.4041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 199.419441][T15380] syzkaller1: entered promiscuous mode [ 199.421730][T15380] syzkaller1: entered allmulticast mode [ 199.476478][T15388] input: syz1 as /devices/virtual/input/input46 [ 199.478447][T15388] input: failed to attach handler leds to device input46, error: -6 [ 199.482975][ T4258] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 199.654967][ T4258] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 199.659426][ T4258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.666415][ T4258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.670549][ T4258] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 199.683681][ T4258] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 199.687294][ T4258] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 199.690588][ T4258] usb 9-1: Manufacturer: syz [ 199.697541][ T4258] usb 9-1: config 0 descriptor?? [ 200.070046][T15443] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4070'. [ 200.109728][ T4258] hid_parser_main: 5 callbacks suppressed [ 200.109741][ T4258] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 200.121577][ T4258] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 200.178463][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4074'. [ 200.366749][ T4258] usb 9-1: USB disconnect, device number 15 [ 200.906979][T15491] loop8: detected capacity change from 0 to 8 [ 200.913470][T15491] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 200.915452][T15491] loop8: partition table partially beyond EOD, truncated [ 200.918140][T15491] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 200.970775][T15495] syzkaller1: entered promiscuous mode [ 200.973280][T15495] syzkaller1: entered allmulticast mode [ 201.174384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.209180][T15504] team_slave_0: entered promiscuous mode [ 201.211156][T15504] team_slave_1: entered promiscuous mode [ 201.213124][T15504] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 201.216643][T15504] macsec3: entered promiscuous mode [ 201.218460][T15504] team0: entered promiscuous mode [ 201.220568][T15504] macsec3: entered allmulticast mode [ 201.222400][T15504] team0: entered allmulticast mode [ 201.225455][T15504] team_slave_0: entered allmulticast mode [ 201.227252][T15504] team_slave_1: entered allmulticast mode [ 201.229054][T15504] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 201.279785][T15513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4104'. [ 201.288390][T15513] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4104'. [ 201.292346][T15513] netlink: 'syz.2.4104': attribute type 6 has an invalid length. [ 201.296360][T15513] netlink: 'syz.2.4104': attribute type 5 has an invalid length. [ 201.299669][T15513] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4104'. [ 201.424235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.783109][ T6058] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 201.842886][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 201.938145][ T6058] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 201.941942][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 201.946537][ T6058] usb 7-1: Product: syz [ 201.948375][ T6058] usb 7-1: Manufacturer: syz [ 201.950309][ T6058] usb 7-1: SerialNumber: syz [ 201.956812][ T6058] usb 7-1: config 0 descriptor?? [ 201.961586][ T6058] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 201.965970][ T6058] dvb-usb: bulk message failed: -22 (2/0) [ 201.973565][ T6058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.978235][ T6058] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 201.981498][ T6058] usb 7-1: media controller created [ 201.999698][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.014479][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.018514][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.023019][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.027021][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.033135][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.035964][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.038881][ T24] usb 9-1: Manufacturer: syz [ 202.042849][ T24] usb 9-1: config 0 descriptor?? [ 202.166397][T15539] dvb-usb: bulk message failed: -22 (3/0) [ 202.453093][ T24] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 202.458967][ T24] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 202.693853][ T6058] cxusb: set interface failed [ 202.697300][ T6058] dvb-usb: bulk message failed: -22 (1/0) [ 202.708650][ T29] usb 9-1: USB disconnect, device number 16 [ 202.724837][ T6058] DVB: Unable to find symbol mt352_attach() [ 202.727471][ T6058] dvb-usb: bulk message failed: -22 (5/0) [ 202.731376][ T6058] zl10353_read_register: readreg error (reg=127, ret==-121) [ 202.734836][ T6058] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 202.787651][ T6058] rc_core: IR keymap rc-dvico-mce not found [ 202.788530][T15563] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4123'. [ 202.790193][ T6058] Registered IR keymap rc-empty [ 202.791860][ T6058] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 202.804592][ T6058] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input47 [ 202.818114][ T6058] dvb-usb: schedule remote query interval to 100 msecs. [ 202.821371][ T6058] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 202.826824][ T6058] usb 7-1: USB disconnect, device number 14 [ 202.858295][ T6058] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 203.357886][T15588] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 204.625048][ T5399] block nbd1: Possible stuck request ffff888026245080: control (read@0,1024B). Runtime 60 seconds [ 204.629529][ T5399] block nbd1: Possible stuck request ffff888026245240: control (read@1024,1024B). Runtime 60 seconds [ 204.642805][ T5399] block nbd1: Possible stuck request ffff888026245400: control (read@2048,1024B). Runtime 60 seconds [ 204.647840][ T5399] block nbd1: Possible stuck request ffff8880262455c0: control (read@3072,1024B). Runtime 60 seconds [ 204.769341][T15640] netlink: 'syz.5.4159': attribute type 19 has an invalid length. [ 204.953420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 204.967130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 204.971811][T15654] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 204.988004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.462327][T15673] netlink: 'syz.5.4174': attribute type 29 has an invalid length. [ 205.551244][ T5334] Bluetooth: hci5: sending frame failed (-49) [ 205.554686][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 205.568907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 206.410075][T15698] kvm: user requested TSC rate below hardware speed [ 206.862889][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 207.012789][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 207.016996][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 207.019724][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.023545][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.028801][ T29] usb 7-1: config 0 descriptor?? [ 207.102924][ T5981] Bluetooth: hci2: command 0x1003 tx timeout [ 207.102947][ T63] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 207.372993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 207.443443][ T29] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 207.463209][ T1020] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 207.614027][ T1020] usb 6-1: Using ep0 maxpacket: 8 [ 207.618650][ T1020] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.621441][ T1020] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.625639][ T1020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.632267][ T1020] usb 6-1: config 0 descriptor?? [ 207.642286][ T4258] usb 7-1: USB disconnect, device number 15 [ 208.048249][ T1020] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 208.247256][ T4258] usb 6-1: USB disconnect, device number 13 [ 208.613104][T15768] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4216'. [ 208.697393][T15775] vivid-004: disconnect [ 208.879532][ T8207] syz_tun (unregistering): left allmulticast mode [ 208.882408][ T8207] syz_tun (unregistering): left promiscuous mode [ 208.885326][ T8207] bridge0: port 3(syz_tun) entered disabled state [ 208.984236][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.091855][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.112845][ T1020] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 209.180442][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.241286][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.246431][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.259676][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.266859][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.269286][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.272772][ T1020] usb 9-1: Using ep0 maxpacket: 16 [ 209.277877][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.284491][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.288676][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.292542][ T1020] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.298902][ T1020] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 209.302950][ T1020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.325100][ T1020] usb 9-1: config 0 descriptor?? [ 209.431674][ T60] bridge_slave_1: left allmulticast mode [ 209.434410][ T60] bridge_slave_1: left promiscuous mode [ 209.436965][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.442580][ T60] bridge_slave_0: left allmulticast mode [ 209.445124][ T60] bridge_slave_0: left promiscuous mode [ 209.447706][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.475689][T15770] vivid-004: reconnect [ 209.753590][ T1020] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 209.756490][ T1020] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 209.759328][ T1020] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 209.763176][ T1020] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 209.765919][ T1020] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 209.766364][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.771028][ T1020] input: HID 0955:7214 Haptics as /devices/virtual/input/input48 [ 209.776923][ T60] bond_slave_0: left allmulticast mode [ 209.783492][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.786159][ T1020] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 209.789522][ T1020] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 209.789833][ T60] bond_slave_1: left allmulticast mode [ 209.795729][ T60] bond0 (unregistering): Released all slaves [ 209.805637][ T60] bond1 (unregistering): Released all slaves [ 209.900464][ T60] bond2 (unregistering): Released all slaves [ 209.953789][T15783] random: crng reseeded on system resumption [ 209.965187][T15793] chnl_net:caif_netlink_parms(): no params data found [ 209.972901][ T6021] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 209.975610][ T908] usb 9-1: USB disconnect, device number 17 [ 209.977338][ T6021] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 209.983694][ T908] ------------[ cut here ]------------ [ 209.986311][ T908] workqueue: work disable count underflowed [ 209.988842][ T908] WARNING: CPU: 2 PID: 908 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 209.989836][T15829] binder: 15828:15829 ioctl c0306201 0 returned -14 [ 209.992569][ T908] Modules linked in: [ 209.992602][ T908] CPU: 2 UID: 0 PID: 908 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 209.992623][ T908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.006725][ T908] Workqueue: usb_hub_wq hub_event [ 210.008880][ T908] RIP: 0010:enable_work+0x2f8/0x340 [ 210.011060][ T908] Code: 89 ee e8 db 2b 38 00 45 84 ed 0f 85 29 fe ff ff e8 ed 30 38 00 c6 05 56 08 11 0f 01 90 48 c7 c7 60 01 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 17 98 9d 00 e9 aa fe ff ff [ 210.018122][ T908] RSP: 0018:ffffc900064d73c0 EFLAGS: 00010086 [ 210.020765][ T908] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02f8 [ 210.024145][ T908] RDX: ffff88802060c880 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 210.027460][ T908] RBP: ffff88806ac45738 R08: 0000000000000001 R09: 0000000000000000 [ 210.030690][ T908] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000c9ae79 [ 210.034013][ T908] R13: 0000000000000000 R14: ffff88806ac45698 R15: ffff88806ac45730 [ 210.036986][ T908] FS: 0000000000000000(0000) GS:ffff8880976c0000(0000) knlGS:0000000000000000 [ 210.040640][ T908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.043285][ T908] CR2: 000000002e110ffc CR3: 0000000024166000 CR4: 0000000000352ef0 [ 210.046458][ T908] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.049707][ T908] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 210.052489][ T908] Call Trace: [ 210.053583][ T908] [ 210.054595][ T908] ? __pfx_enable_work+0x10/0x10 [ 210.056526][ T908] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 210.058980][ T908] __cancel_work_sync+0xe7/0x130 [ 210.061068][ T908] thermal_zone_device_unregister+0x28e/0x4d0 [ 210.063361][ T908] ? __pfx_shield_remove+0x10/0x10 [ 210.065156][ T908] power_supply_unregister+0x10a/0x150 [ 210.066914][ T908] shield_remove+0x75/0x130 [ 210.068394][ T908] ? __pfx_shield_remove+0x10/0x10 [ 210.070354][ T908] hid_device_remove+0xd1/0x260 [ 210.072488][ T908] ? __pfx_hid_device_remove+0x10/0x10 [ 210.074775][ T908] device_remove+0xc8/0x170 [ 210.076685][ T908] device_release_driver_internal+0x44b/0x620 [ 210.079169][ T908] bus_remove_device+0x22f/0x420 [ 210.081299][ T908] device_del+0x396/0x9f0 [ 210.083140][ T908] ? __pfx_device_del+0x10/0x10 [ 210.085164][ T908] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.087285][ T908] hid_destroy_device+0x19c/0x240 [ 210.089449][ T908] usbhid_disconnect+0xa0/0xe0 [ 210.091507][ T908] usb_unbind_interface+0x1dd/0x9e0 [ 210.093713][ T908] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 210.095999][ T908] ? __pfx_usb_unbind_interface+0x10/0x10 [ 210.098280][ T908] device_remove+0x125/0x170 [ 210.100017][ T908] device_release_driver_internal+0x44b/0x620 [ 210.102362][ T908] bus_remove_device+0x22f/0x420 [ 210.104473][ T908] device_del+0x396/0x9f0 [ 210.106325][ T908] ? __pfx_device_del+0x10/0x10 [ 210.108398][ T908] ? kobject_put+0x210/0x5a0 [ 210.110329][ T908] usb_disable_device+0x355/0x7d0 [ 210.112403][ T908] usb_disconnect+0x2e1/0x9c0 [ 210.114325][ T908] hub_event+0x1c81/0x4fe0 [ 210.116197][ T908] ? __lock_acquire+0xb97/0x1ce0 [ 210.118182][ T908] ? __pfx_hub_event+0x10/0x10 [ 210.120127][ T908] ? __list_add_valid_or_report+0xe0/0x190 [ 210.122507][ T908] ? rcu_is_watching+0x12/0xc0 [ 210.124305][ T908] process_one_work+0x9cf/0x1b70 [ 210.126319][ T908] ? __pfx_process_one_work+0x10/0x10 [ 210.128599][ T908] ? assign_work+0x1a0/0x250 [ 210.130533][ T908] worker_thread+0x6c8/0xf10 [ 210.132162][ T908] ? __kthread_parkme+0x19e/0x250 [ 210.134085][ T908] ? __pfx_worker_thread+0x10/0x10 [ 210.136213][ T908] kthread+0x3c5/0x780 [ 210.137933][ T908] ? __pfx_kthread+0x10/0x10 [ 210.139899][ T908] ? rcu_is_watching+0x12/0xc0 [ 210.141942][ T908] ? __pfx_kthread+0x10/0x10 [ 210.143913][ T908] ret_from_fork+0x5d7/0x6f0 [ 210.145885][ T908] ? __pfx_kthread+0x10/0x10 [ 210.147837][ T908] ret_from_fork_asm+0x1a/0x30 [ 210.149447][ T908] [ 210.150452][ T908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.152954][ T908] CPU: 2 UID: 0 PID: 908 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 210.156639][ T908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.160651][ T908] Workqueue: usb_hub_wq hub_event [ 210.162274][ T908] Call Trace: [ 210.163506][ T908] [ 210.164775][ T908] dump_stack_lvl+0x3d/0x1f0 [ 210.166715][ T908] vpanic+0x6e8/0x7a0 [ 210.168444][ T908] ? __pfx_vpanic+0x10/0x10 [ 210.170387][ T908] ? enable_work+0x2f8/0x340 [ 210.172391][ T908] panic+0xca/0xd0 [ 210.173957][ T908] ? __pfx_panic+0x10/0x10 [ 210.175836][ T908] ? check_panic_on_warn+0x1f/0xb0 [ 210.177954][ T908] check_panic_on_warn+0xab/0xb0 [ 210.180046][ T908] __warn+0xf6/0x3c0 [ 210.181724][ T908] ? __pfx_vprintk_emit+0x10/0x10 [ 210.183825][ T908] ? enable_work+0x2f8/0x340 [ 210.185781][ T908] report_bug+0x3c3/0x580 [ 210.187632][ T908] ? enable_work+0x2f8/0x340 [ 210.189630][ T908] handle_bug+0x184/0x210 [ 210.191493][ T908] exc_invalid_op+0x17/0x50 [ 210.193487][ T908] asm_exc_invalid_op+0x1a/0x20 [ 210.195595][ T908] RIP: 0010:enable_work+0x2f8/0x340 [ 210.197798][ T908] Code: 89 ee e8 db 2b 38 00 45 84 ed 0f 85 29 fe ff ff e8 ed 30 38 00 c6 05 56 08 11 0f 01 90 48 c7 c7 60 01 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 17 98 9d 00 e9 aa fe ff ff [ 210.205791][ T908] RSP: 0018:ffffc900064d73c0 EFLAGS: 00010086 [ 210.208357][ T908] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02f8 [ 210.211689][ T908] RDX: ffff88802060c880 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 210.214960][ T908] RBP: ffff88806ac45738 R08: 0000000000000001 R09: 0000000000000000 [ 210.218012][ T908] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000c9ae79 [ 210.221161][ T908] R13: 0000000000000000 R14: ffff88806ac45698 R15: ffff88806ac45730 [ 210.224154][ T908] ? __warn_printk+0x198/0x350 [ 210.226125][ T908] ? __warn_printk+0x1a5/0x350 [ 210.228143][ T908] ? __pfx_enable_work+0x10/0x10 [ 210.229940][ T908] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 210.232407][ T908] __cancel_work_sync+0xe7/0x130 [ 210.234498][ T908] thermal_zone_device_unregister+0x28e/0x4d0 [ 210.237023][ T908] ? __pfx_shield_remove+0x10/0x10 [ 210.239174][ T908] power_supply_unregister+0x10a/0x150 [ 210.241497][ T908] shield_remove+0x75/0x130 [ 210.243450][ T908] ? __pfx_shield_remove+0x10/0x10 [ 210.245627][ T908] hid_device_remove+0xd1/0x260 [ 210.247692][ T908] ? __pfx_hid_device_remove+0x10/0x10 [ 210.249988][ T908] device_remove+0xc8/0x170 [ 210.251926][ T908] device_release_driver_internal+0x44b/0x620 [ 210.254534][ T908] bus_remove_device+0x22f/0x420 [ 210.256579][ T908] device_del+0x396/0x9f0 [ 210.258102][ T908] ? __pfx_device_del+0x10/0x10 [ 210.259893][ T908] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.261928][ T908] hid_destroy_device+0x19c/0x240 [ 210.264021][ T908] usbhid_disconnect+0xa0/0xe0 [ 210.266067][ T908] usb_unbind_interface+0x1dd/0x9e0 [ 210.268275][ T908] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 210.270748][ T908] ? __pfx_usb_unbind_interface+0x10/0x10 [ 210.273244][ T908] device_remove+0x125/0x170 [ 210.275215][ T908] device_release_driver_internal+0x44b/0x620 [ 210.277790][ T908] bus_remove_device+0x22f/0x420 [ 210.279883][ T908] device_del+0x396/0x9f0 [ 210.281769][ T908] ? __pfx_device_del+0x10/0x10 [ 210.283836][ T908] ? kobject_put+0x210/0x5a0 [ 210.285792][ T908] usb_disable_device+0x355/0x7d0 [ 210.287888][ T908] usb_disconnect+0x2e1/0x9c0 [ 210.290011][ T908] hub_event+0x1c81/0x4fe0 [ 210.292142][ T908] ? __lock_acquire+0xb97/0x1ce0 [ 210.294428][ T908] ? __pfx_hub_event+0x10/0x10 [ 210.296486][ T908] ? __list_add_valid_or_report+0xe0/0x190 [ 210.298944][ T908] ? rcu_is_watching+0x12/0xc0 [ 210.300955][ T908] process_one_work+0x9cf/0x1b70 [ 210.303058][ T908] ? __pfx_process_one_work+0x10/0x10 [ 210.305329][ T908] ? assign_work+0x1a0/0x250 [ 210.307285][ T908] worker_thread+0x6c8/0xf10 [ 210.309234][ T908] ? __kthread_parkme+0x19e/0x250 [ 210.311340][ T908] ? __pfx_worker_thread+0x10/0x10 [ 210.313545][ T908] kthread+0x3c5/0x780 [ 210.315537][ T908] ? __pfx_kthread+0x10/0x10 [ 210.317697][ T908] ? rcu_is_watching+0x12/0xc0 [ 210.319956][ T908] ? __pfx_kthread+0x10/0x10 [ 210.321883][ T908] ret_from_fork+0x5d7/0x6f0 [ 210.323874][ T908] ? __pfx_kthread+0x10/0x10 [ 210.325828][ T908] ret_from_fork_asm+0x1a/0x30 [ 210.327880][ T908] [ 210.329798][ T908] Kernel Offset: disabled [ 210.331148][ T908] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:02:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffc90000008000 RDX=ffffc90000007f01 RSI=ffffc90000007fc8 RDI=ffffc90000007a58 RBP=ffffc90000007fc8 RSP=ffffc900000079b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=0000000000007bfd R12=0000000000000008 R13=ffffc90000007a68 R14=ffffc90000007a60 R15=ffffc90000000000 RIP=ffffffff816ab406 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f36e40 CR3=0000000060d47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000ff0000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b33b680 RCX=ffffffff81af2b63 RDX=ffff88801decc880 RSI=ffffffff81af2b3d RDI=0000000000000005 RBP=ffffc9000044fd08 RSP=ffffc9000044fbc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb97ee R12=1ffff92000089f80 R13=0000000000000003 R14=0000000000000001 R15=ffffed10056676d1 RIP=ffffffff81af2b3f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe55c0 CR3=0000000050f04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e3f84a6af98ebd49 3990c2e0cf88629c e3f84a6af98ebd49 3990c2e0cf88629c e3f84a6af98ebd49 3990c2e0cf88629c e3f84a6af98ebd49 3990c2e0cf88629c ZMM18=d6fae3b984e923fe 9468f689e90775af d6fae3b984e923fe 9468f689e90775af d6fae3b984e923fe 9468f689e90775af d6fae3b984e923fe 9468f689e90775af ZMM19=5620000000000000 0000000000000005 5620000000000000 0000000000000004 5620000000000000 0000000000000003 5620000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003020800029803 0402000290030180 0200028e0302e002 00028c0302d40200 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 028a0302b8020002 880302a402000286 0302b00200028403 0604000280030004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080001800200 0800080049c6006d 766b2f7665642f01 ffffffffffffffff ZMM24=e90775afe90775af e90775afe90775af e90775afe90775af e90775afe90775af e90775afe90775af e90775afe90775af e90775afe90775af e90775afe90775af ZMM25=9468f6899468f689 9468f6899468f689 9468f6899468f689 9468f6899468f689 9468f6899468f689 9468f6899468f689 9468f6899468f689 9468f6899468f689 ZMM26=84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe 84e923fe84e923fe ZMM27=d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 d6fae3b9d6fae3b9 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5520000055200000 5520000055200000 5520000055200000 5520000055200000 5520000055200000 5520000055200000 5520000055200000 5520000055200000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856179f5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900064d6d68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0fc6c0 R15=ffffffff85617990 RIP=ffffffff85617a1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e110ffc CR3=0000000024166000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005618e9bf0c50 00005618e9bf0c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a0ac220 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e452d206f7420 6575642074726f70 6572204449482074 7365757165722044 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5645444f4e452d20 6f74206575642074 726f706572204449 4820747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220444d4354534f 4820656b69727473 7265646e75685420 74757074756f206f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 742064656c696146 203a423130302e34 3132373a35353930 3a3330303020646c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65696873205d3132 303654205b5d3833 333737392e393032 20205b203a6c656e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=00000002 EBX=f7484ff4 ECX=ffffffff EDX=819a6841 ESI=f712e68b EDI=819a6845 EBP=f7fe5610 ESP=ff98adc0 EIP=f712e68b EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5748c440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c394794 CR3=000000002738f000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000