last executing test programs: 8.762154567s ago: executing program 3 (id=2266): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) 7.856768182s ago: executing program 3 (id=2269): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/140) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 7.59262572s ago: executing program 3 (id=2271): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) close(0x4) 7.568981405s ago: executing program 0 (id=2280): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x8040) close(r4) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b0000"], 0x110}}, 0x800) sendmsg$NFT_BATCH(r5, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r2, 0x1) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, 0x0, 0x60044884) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x1}, 0x10) 6.7304249s ago: executing program 3 (id=2272): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) 6.728642054s ago: executing program 0 (id=2282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "e206d5669b913b6c482d91524ebfe9b40dd0180e003db04e4a018e41d5210b40c56f1a73c71f6679b60ef17dfcce62dd57b6aef441a81d36fd2cb20558356bc9d5241c69cb77caea11b68f9bbb280a6b95473e185b1ea36425d6ecbf32e086151d6423086837789c6d052f044eb906e8dc09b0112283b5843edae72196ecc2511c3993f673505242fb8ba3561196f84f0a429e7390f86c62902cdd0b08a363bf5761d7f26b6d8fc76819a4ed914c0d5254e3"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3177f876c734c4f928875ab8db00", '\x00', "0102ce00", '\x00', ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x20, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.752876243s ago: executing program 0 (id=2283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x9}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) 3.750744864s ago: executing program 0 (id=2290): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "e206d5669b913b6c482d91524ebfe9b40dd0180e003db04e4a018e41d5210b40c56f1a73c71f6679b60ef17dfcce62dd57b6aef441a81d36fd2cb20558356bc9d5241c69cb77caea11b68f9bbb280a6b95473e185b1ea36425d6ecbf32e086151d6423086837789c6d052f044eb906e8dc09b0112283b5843edae72196ecc2511c3993f673505242fb8ba3561196f84f0a429e7390f86c62902cdd0b08a363bf5761d7f26b6d8fc76819a4ed914c0d5254e3"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3177f876c734c4f928875ab8db00", '\x00', "0102ce00", '\x00', ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x20, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.392080161s ago: executing program 1 (id=2284): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f0000005340)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000540)="42192ab42dedab6e48952708100d", 0xe}, {&(0x7f0000000940)="430d2205bcf8cdbd61435b8d0a269dfbe842021681313876c6b1600139a526909d469696908cbafe369193e970300b55a07219d2b025168c6d8606da34d9539e7b8ae36e8f77e2c6bb82f1ccbce0028b2bc3251e0417e5800b7a282cc97e36397acab72f46969c17ab5a45b80e91683f5482ff572a1f2d6d94640ab1280fb838c5e1b4cb9b45a3247f16dda49d5f91a9c2bd0ac0cd3b43bf0affdada22d37213afaf556fd87b7293", 0xa8}, {&(0x7f00000005c0)="9ec7b5c7cd5826b25d7f0e4852476e917c729ed6", 0x14}, {&(0x7f0000000a00)="a0fd40073ca5d5b9bf3fa5bf45927aa9c091ea97a02f41b54a06c3e3cbbcbe7001f2271df54c0aad4305c7de2f398446d0b2bbe540a21aefa16c87f058cf22e7fda20188c8b9fabd5be9e88937f8c14a1ec78e78d397ab173cd3475c5344a3a98147a4c9022ff063382827795b", 0x6d}, {&(0x7f0000000a80)="2a5bd84dc598acc0b6f478f8d59f49fa9e8d5efbc544ca240afaaa83142b60f6b1dfffba92656820f35ac2f3a0226a477170aea5e5c8e0569ae21af7a659d74dca3cfa30e07dce2ad292b3759fd2ca388b285a08b981466d83a4fce5150be8b8828abdb267bf7c03bfbbf0e251b6df490cb26e59f44bfdb86952658d91145a1944344ab92600f059328d95186eacbad0f4558a61ba213f7607232aad9fb09ee069e458c712fe925d52cd9c2a81d1cc10358be8f532e2051c5b5a471c77af69f85836120e4831235eb9dd2e7ea4472f7da6c2e42c97a548f5f243dc6dc8dc6952ce77b4215e144e", 0xe7}, {&(0x7f0000000b80)="26df1824d881e3ecf78fff28d716040624c7b3cffadb3695dc807cefce59048eac608c872eb265fd02376caead06ac87", 0x30}, {&(0x7f0000000bc0)="eecafe278b38cd445b6bd33517759d2c573882fc6dd8cc77f3a8c3adfe805fee88656c5df3a2e61cac794158d4874187439f6ee35ac9b52f170e", 0x3a}, {&(0x7f0000000c00)="c2bfcb3f44e40a3c4d709526084d47b77e50839096cb2711029f7923416ecf7c9bf36e7d7a056811ca53d9ffc625e432d09cc70cde12498acbe6d1d15b3512411ffe", 0x42}, {&(0x7f0000000c80)="ba281e74b8ce4e8549282f33e2e5649153ab0429fcec92147001f02d2dd4438fd6d102c62bb43de2e0f67e2db930", 0x2e}], 0x9, &(0x7f0000000d40), 0x0, 0x8000}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e00)="df13d97164e2b21bcb4a094f0e7ff0c734ce0d9d1ff06c7293cd9912ce8498bf41dd211dc8e9ef83713ffccd5db3d1cc869c115ecb6cdc9911cdff6520e343da869e4e73347711565dd5c8a1291401863e19c6bc1da0ad95eea1564a8be6ac64230be596f55bd3a49231e6b402bda5160c10b169804de2cd7d2bc9c9bba78e", 0x7f}], 0x1, &(0x7f00000010c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, r5, r3, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r4, r3]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r0, r3, r5, r5, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0, r0, r5, r5]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r5, r3, r3, r0]}}], 0x12c, 0x20000000}}, {{&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001280)="313c03e604bf4f3d0511c9d6ab9efa5360b06410835e6fdbbf56cf", 0x1b}, {&(0x7f0000000ec0)="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", 0xfc}, {&(0x7f00000013c0)="1af59440e873135f068a2b0aadbc8292175930e4a9f5a4114c25fd5fe7b0343e8c3b34f9337cbc9238e6982470a2502325587f2f68957ac315f9377bf2c02b26a8302b836e25010b439f4a9624fde7b2e2b1c7c6b78f83db8d78689a75f01aff1ba46f1f6572f8e296a0ee514637959f4d08a7e48ff0a5ef7de1a2f08b2faec76bfaeee153499c694f8d002285b701a777159231bea01d081014804938dd1b279c", 0xa1}, {&(0x7f0000001480)="d9a00f232069dd694a6c3fd5c0530f2ff30d1faa04cbbf2e5e23a0f22de21b493d4400a651b5f60089a3584cda0d3c4b3a713259fbad8697a9c2cdbb75805e9c35623c3e", 0x44}, {&(0x7f0000001500)="22e86cae26d3d822e42112c9c2639d4ff83e54838cd2a9936e4297ca31148a56f2bf271f87123e4dd67a62b34b798ffd29053c2fc8b009422501f80536481881ecb0582bcb90b7025a203645372b0ee1a5bee6d552774089bb334f9a391252ff4844c86cc921fc90dbe77fa95f7b1f5ea166e00ce38c324d09e5972217d633e2784f43bb302cb51916a47bd162470098745a366105ecfb290e80265388597ed50d0d2ef5c46852944c1406a740a3b92ef3868777c80ef1b749f74e2910ec1553fee4ab16576bd8c5c436a5dd6363dcc1", 0xd0}, {&(0x7f0000001600)="efc897d0e44071a21e9816b011f748fa0b83bcd28a9184e893d4823c7190f8e62f1ef0affa64db1f8ae85814279ca8342904b0b561cd1ba8be744d33edf48d1156fcdb888ccb5b56e3fcd4ae19f3c3c83aee0697c7aa99297ea6289306637de21ce19f15f4be06cdb27308971a83ea29468b303bb44b861632ab4017359e01fec27c6ba8113da435c2e2a1a60cc7ee83", 0x90}], 0x6, &(0x7f0000004180)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x800}}, {{&(0x7f00000041c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004240)="16f6fe89a96e3dd393ca298482476c61ae4c92610d0a48df240816ab59875d6b2b92a4fbe9688291fac7cd38559ef493d602711612eadfee5053f16d3a5a7ad5b76fd97a29b68954b0c8eefeaa32fbdbf72a372f877303512d07f8bb303c", 0x5e}, {&(0x7f0000004300)="db602f2f3927ad218f2fc446b7e5bb0c8fd8eaaec354ac6d11391e0bb02596558e8d33506ef82680f19e4b1b710f4f0c7989c808ac0ec373f5941b82fdf67cc50d8bb6db02475740e7cf2e488eb0232d7fe218ef04c0f187bfbf4422554f12fe6fbbcf83d89839182a85e3eeecfdd1c8e7265ee23e35fbbb81da3e903a02769a856fbd811a758d093e90b633fd51c78dc7de9d07fb92ffea6bcd000ca92fd7e714f19ca60891cf749bc5883e5ac11c38fa4d359a84a0ec1b4fc6adcb1dba29c912f7c9e58262f59d9176e57fbfc29c97eacbd8062e0914b150d8420b911bc79e54f230df4b8e2fba9fedc2c950957d", 0xef}, {&(0x7f0000004400)}], 0x3, &(0x7f00000045c0)=[@cred={{0x18}}], 0x18, 0x20000080}}, {{&(0x7f0000004600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000004680)="666b4ee4eb4e59083b9027d59d17dcb8adfac0c12bd6febeb860cb5f33324aee9fa6218e84a4bedc27b06acfd37d35f6848ef19b38966184fdb412daaf98a4dc3498e21f88648cf13183ed237e151793e620bbafbd9f1568dff76d42e4ede46752ba1a3c714f5aa4522fe593686118c641b5c3", 0x73}], 0x1, &(0x7f0000004740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2}}}], 0x50, 0x8000}}, {{&(0x7f00000047c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000004840)="bd632eb9aa15c5c54c48189a0a40ea3079fbcb824ce28ad90dc5ce940063ca7c00ad8c898ca94a510e99c5320472599f3966a1d57671e7211fec23f7fd9dc78e6f4ea992d00470975e90a11643074060303755d6f2d3b338b954dda481503c807af7e8aba122f3145141d0780e2f663420051b68c6edcfe747f3addbc8e07a69ffa891dc97f1d6000ab38f6937ce4dfa4454b4b469e01877389e1ca0928debf2e2f8542e89fa2cbbd4", 0xa9}, {&(0x7f0000004900)="e54192ede1f7d8055c708c1c29be5c8e0baea9c8ccc343fb6b36011d7283531fa848394125bcc89cff2035e3f0d82ea423509a4ae35412e5a7368c635696266411fb7b40f5d4fed48a20bca9c054c419149a16186bafcf5e1dff367933fba73ee295bd9e68f8befe58854137b08f56abe8bc28bc1c625284c8cb4263", 0x7c}, {&(0x7f0000004980)="fc61adda0e6fc1976106025b7a3f70e1da084a84c27fc6f23966f696874562deb3f37a0d9cd1b153b2075e92213e569733e6435d44be7bd3b48d9d5f", 0x3c}, {&(0x7f00000049c0)="218fbd671a695b181e9c361e70b418a3f63613366e87f71db9aac967ec", 0x1d}, {&(0x7f0000004a00)="31122398e75b5ec4749ae8feb13d9a866214f7e8872b4e01af73bde864f3db32d127c8d2426b2bd997f856a4e1349b2b28f080b0ee48099d757e6b4e084f2d45707347baca4d3525e3c8301ffa73741198b85c7bb3fed92fb1482e068e447bb8b56601889a354483813b89f5e2425aa544a04329fdbb5567db64a6819bfd4f730d270a55bbb88dc355b22e6208bf3ee44c06d86ea81499eae26ca753f17cf4b696716148fdbeea598b0696", 0xab}], 0x5, &(0x7f0000004b80)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x4c, 0x800}}, {{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004c80)="538ee31a29477ec6e3985948f3ed7a7c2e98b10b36b5b0b64999212ae1d617deb22d6d38d5339ec5bbac0219d5b31e877cd1bec0e930807b429104f44f11b0ced16287e28cdd37e254235bb9c2fc92e012fd3e323d23239f24005269c746a6b1be32828afb29ed820ed5281b60f0fed49963fcf00bb686995a90ed4ef4caf98cc4befec4840a04d46dbf01d95e9d8d903a920fc6ebd97cffdeb1ce12d0cd9653ddae49a8ada1fbaeef2fb8de452e2f556fdfd35926b237ce6eb36c97aabd88f808feba5ea3307ad366646e82e9797c07333758653fa61f233c694794bb926eaed581b0ba578cfed0d66ba2b76d8e6edd2c07cfcea35924", 0xf7}, {&(0x7f0000004d80)="ed45d23b1d828e6b61eb786a44b98b891872b70ed5c4f90302a0038d3a5af9b4c0211a3658a656c69108af17ea4be1718aa2dbd01e207c28acd886de83cb0b2c1f49d4a00153ad5f99efe0e3a3f48cdb4a6170021089fd82aab5e91a22b39b0a895c415c31d6639338c8271f657d4569a09593c401", 0x75}, {&(0x7f0000004e00)="96280c96263df51bfc33711ca98b98ee162b531475c47da697c6bd9cde9377a62aa6187586f88b033163215b5b78eac598a586356755ed377d99798cb7c901dd89b6ec6f5b0cbdf6f592c4af18c3f342ec52658c11217ddb1279f1ce8987f974fc822bc70ee3295706e2535d50bc923256ef7db61494f5ed8b3a1c9fad8696772cf63bc60c4caeab664c2343365c761f37eb7f2c65fa83a0a49c", 0x9a}, {&(0x7f0000004ec0)="c88ae5af00440e7911f5282e33aa00c73968d1a5481124ac8213d00838266df3bbbadaffad52674a5fb785a8aa8ac0df6c4581631914bc2ec6a62d65730bf86af81bb0d952f600e9caf907aad00be7fa6318e19dd3fc67e1054cf4527d49bcd95f6f159f6e7ed8d5af176794826caaa3b42986d36c5baa5ce2e9f734d2e68fa4255c57afff5bd390b856829be6d76d6ab0f5", 0x92}, {&(0x7f0000004f80)="844f58db1be6bdf45fb33b6d7528f8d5c8a9d48c5540a044df203e76fb836884e0daf169e1e6125683c384b126f033f808eb256bb16b2a0743eb5b4d46f738818c2f9b7ca32b306480e0ee8b4ea1f942c8f9b5f245c3005c07b2f28a35e020da983775fb7c668aac7a5398a53c49795e9db6fad4aef0374e5ab8f19bc644445230bee1df7663ab17ad2607fb70c137e5ef3148e8eb5a65c3cb941bc83d6b945739513820cb5a3d1538f89d0b741450067239882a3b93", 0xb6}, {&(0x7f0000005040)="297bf9637c9b52bd3aba7553117962dfe1abf4661a82a16137c2daba0c156db3a2632f25001e4e866824b721a10a70528acb1fdcd65f594adf75670e08400872e8e35185f64690e2ffc81d93a0e40be9e7f76832a0b372d1a703f3e5a543fe50918a9f01adf11ff52e271af6f5d53409e11c571092ac741b0717e685de1983722d4e1c9f3c1b860d7eb0a3114831e7a4227ed2f4719e50f61328277fd58f51bfdb58d850e7477f77304fa32ac35c79", 0xaf}, {&(0x7f0000005100)="f468be960d49f34333f271f94e5b92168ce8289cdeeaaed778afc169291de340ea0fc3c76f1a3fa20b367c46fe75fee3992dc6b0b59b03c53dd677958262791bb1406a61d01e459ee7cc32a661586f54142aac00cf33d7340bcbe02fa23042f106de137cdf60364baf9d82452363a61a14c60b6393c50eb9d5abc2", 0x7b}], 0x7, &(0x7f00000052c0)=[@rights={{0x14, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r1}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x6c, 0x4002001}}], 0x7, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x86, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000780000000000119078000000000000000000001b59006490780200000000000000000000001e16000108653904030405ffffff09c56a3000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a13bd5b6cc6a9471314a1d8c798925618e88a494f45a2c738c4a9f2d3eb783f4d04f3ad7c17b26fb902b1a83a1647168f536bf20de1cad4b8fa0cde25f4b1fb9ee2e28229ed2ff85cbea09e0b67f774cfb670e6a8be3082802de9a53d9d91e9a4abd0552"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000180)='%', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4c) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(r0, &(0x7f0000000580)='./file0\x00', 0x4000, 0x20, &(0x7f00000006c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 3.391379498s ago: executing program 2 (id=2285): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x309, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xf7f}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed55", 0x1b}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f0000000bc0), 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x0, @tick=0x401, 0x6, {0xfe, 0x5}, 0x7f, 0x2, 0x5}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b8010000180080001006669620004000280140000001000017f3bcb700000000000000000000084000a"], 0xd4}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005cf9e996bd6c11f2b4969941b5b091a94e62f26f57b73a15570bf33aa32fa82902000000000000007aebd538db5bbbd3f447e8e37b8c6285d80f3aca5771fa001921940e650378394e2bd4583e947c4e350ffacd5bbbf30390d643fdc9749fee98457c013f57bc123997af6ac057a1ae2ddfdca2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.196410724s ago: executing program 2 (id=2286): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/140) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 2.136718293s ago: executing program 1 (id=2287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xbdc, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xb98, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_DIVISOR={0x8, 0x4, 0xf0}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x9b8, 0x6, 0x82, 0xac, 0x401, 0xffffffff, 0x800, 0x9, 0x9, 0x2, 0x18, 0x6, 0xd5, 0x6, 0x0, 0xffffffff, 0xfffffeff, 0x3, 0x8001, 0x16, 0xec8c, 0x800, 0xb7, 0x2, 0xcf7, 0x2, 0xf, 0x1, 0x3ff, 0x8, 0x5, 0xdeb, 0x6e6, 0x0, 0x6, 0x0, 0x2, 0x8746, 0x2, 0x9, 0x5, 0x3, 0x7, 0x6, 0x6, 0x7, 0x4, 0x81, 0x5b, 0x6, 0x0, 0x16, 0x2, 0x1, 0xc49b, 0x9, 0x9, 0xffffff7f, 0x8, 0x401, 0x9, 0x9, 0x401, 0x8, 0x7ff, 0xfe11, 0xb, 0x2, 0xd, 0x8, 0x100, 0x7, 0x0, 0x7be2, 0x4, 0x4, 0xf, 0x101, 0x7, 0x2, 0x324, 0x7, 0xddc4, 0x6, 0x7, 0x99c9, 0x42ecd744, 0x3, 0x0, 0x3, 0x3, 0x0, 0x101, 0x6f74, 0x0, 0x7, 0xfffffff1, 0x6, 0x5, 0xffff, 0x8, 0x6, 0x8, 0x3, 0x0, 0x95, 0x6, 0x3ff, 0x5, 0x6, 0x1, 0x7, 0x0, 0x85ce, 0x7, 0x8, 0x8, 0x7, 0x1, 0x1, 0x8a7, 0x7, 0x7, 0xd73, 0x0, 0x6, 0x4, 0x400, 0x3, 0xb9, 0x7, 0xffffff14, 0x101, 0xa, 0x6, 0xea50, 0x5, 0x800, 0x9, 0x7f, 0x3765, 0x1, 0x40, 0x8, 0x5, 0x0, 0x5, 0x800, 0xfffffff9, 0x80, 0x4, 0x3, 0x400, 0x44, 0x9, 0x6, 0x5, 0xfff, 0x8, 0xfffffffb, 0x7ff, 0xbf0, 0x6, 0x9, 0x7fffffff, 0x40, 0x573b, 0x3, 0x7fffffff, 0xffffffff, 0xfffffffc, 0x5, 0x4, 0x6, 0x1, 0x80000001, 0x9, 0x4, 0x7ff, 0xa, 0x7f, 0x6, 0x80000001, 0x9, 0x7fff, 0x4, 0x3154, 0x3, 0xffffffff, 0x4, 0x5, 0x5, 0xf174, 0x7f, 0x6, 0x5, 0x6, 0x8001, 0x9, 0xd, 0xff, 0x7, 0x2, 0xfd, 0x3ff, 0xa74, 0x6, 0x8, 0xfffffff7, 0x9, 0x1, 0x6, 0x6163, 0xa, 0x600, 0xf, 0x2, 0xf, 0x7, 0xfffffff4, 0x6, 0x8011, 0x7, 0x2, 0xe3d, 0x400, 0x7, 0x3, 0x9aec, 0x0, 0x3, 0x40000000, 0x7, 0x2, 0x5, 0x8, 0x0, 0x0, 0x2, 0x4, 0xd6, 0x1, 0x9, 0x5, 0x9, 0x4, 0x2e9, 0x3b74, 0x4, 0x0, 0xa0, 0xf, 0x7, 0xb, 0x5, 0x2]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x41}, @TCA_U32_SEL={0x774, 0x5, {0xb, 0x80, 0xf5, 0x4745, 0x80, 0x401, 0x2, 0x4, [{0x15, 0x51e26aaa, 0x3, 0x4}, {0x6, 0xc, 0x2}, {0x5, 0x7, 0x0, 0x9}, {0x2, 0x40, 0x6, 0x70}, {0x0, 0x2, 0xfe, 0x1000}, {0x0, 0xfffff000, 0x4, 0x2}, {0xc, 0x7fffffff, 0x7fffffff, 0x2}, {0x8, 0x80000000, 0xffff, 0x9}, {0x9d3, 0x9, 0x7f, 0x1}, {0x6, 0x8, 0x3726, 0x2}, {0x7, 0x1000, 0x1, 0x7fff800}, {0xff, 0x7, 0x92a, 0x9}, {0x10000, 0xc0d, 0x6}, {0x336b998d, 0x4, 0x1, 0x20f1}, {0x9, 0xffffff7e, 0x5, 0xfff}, {0x5, 0xb, 0x1de, 0x1}, {0x3c8, 0x7, 0x7fff, 0xe}, {0x10001, 0x2, 0x2, 0xd8}, {0x800, 0x1, 0x0, 0x72bc4679}, {0x9, 0x6, 0x6, 0x4}, {0x5, 0x761, 0x1, 0x10000}, {0xff, 0x9, 0x0, 0x3}, {0x4, 0x2, 0x6, 0x6}, {0x9, 0x4, 0x6, 0x3}, {0x8, 0x6, 0x1000, 0xf3e}, {0x4, 0x4, 0x200, 0xb}, {0x5a9c, 0x6, 0x10, 0x4}, {0x7, 0x10001, 0x6, 0x3}, {0xc000000, 0x4, 0x3ff, 0x8001}, {0x7, 0x8, 0x7fffffff, 0xd539}, {0x2, 0xd59, 0x0, 0x1ff}, {0xffffff7f, 0x7, 0x8, 0x7}, {0x4b5, 0xd, 0x8, 0xf}, {0x8, 0x101, 0xffff, 0xfffffffc}, {0x5, 0x2, 0x7, 0x2}, {0x7ff, 0x7, 0xffffff81, 0x92}, {0x8001, 0x7, 0x8, 0x1}, {0xb, 0x3, 0x6, 0x7}, {0x2ca, 0x81, 0x37749c31, 0xffffffff}, {0x30, 0x3, 0x3a0, 0x4}, {0x9, 0x6, 0x0, 0x3}, {0x6, 0x9, 0x1, 0x5}, {0x0, 0x8001, 0x99a}, {0x7, 0x0, 0x1fca, 0x1}, {0x9, 0x4, 0x0, 0x6}, {0x6, 0x9, 0x544, 0x9}, {0x401, 0xd23, 0x0, 0x80df}, {0xffffffff, 0x1, 0x7, 0x6}, {0x5, 0xb3ad992a, 0x7, 0x8}, {0x961c, 0x0, 0xe1f, 0x9}, {0x5, 0xfffffffd, 0x1, 0x29}, {0x7, 0x5025, 0x2, 0x9}, {0x0, 0x800, 0x5, 0x4}, {0xfffffffc, 0x8, 0x8, 0x9}, {0x7ff, 0x400, 0x10000, 0x3ac}, {0x8, 0x8, 0x9, 0x9}, {0xd7fa, 0x3, 0x1}, {0x81, 0xec, 0x6, 0x3ff}, {0x5, 0x3, 0x5, 0x6}, {0x9, 0x0, 0x5, 0x8}, {0x4, 0x39, 0x8, 0xcf82}, {0x56, 0x101, 0xfffffffe, 0x6}, {0xce, 0x40, 0x5, 0x3}, {0x6, 0x3, 0xae6, 0x7}, {0x20000000, 0x5, 0x7f, 0x6}, {0x6, 0x10000, 0x3, 0x1}, {0x6, 0x2, 0xffffffff, 0x80000000}, {0xffff, 0xe91, 0x1}, {0x9, 0x6, 0x2, 0x9}, {0x0, 0x2, 0xd, 0xfffffffa}, {0x9ea, 0x4c4, 0x4d, 0x77}, {0x9, 0x197, 0x0, 0xa66}, {0x1000, 0x8, 0x1, 0xe7e}, {0x8, 0x44c3, 0x1, 0x81}, {0xa5, 0x5, 0x81, 0x5}, {0x7, 0x7, 0x7, 0x9ac5}, {0xb0b8, 0x7f, 0x4, 0x7ff}, {0x400, 0x3, 0x7fffffff, 0x10}, {0x8, 0x200, 0x5, 0x8000}, {0x40, 0x200, 0x8001, 0x1}, {0x8, 0x8001, 0x1, 0x401}, {0x800, 0x6, 0x80000000, 0xa}, {0x4, 0x10, 0x64bc, 0xd}, {0x2, 0xfffffff6, 0x3ff, 0x1}, {0xe6, 0x401, 0x1, 0x6}, {0x1d, 0x3, 0x1, 0x47}, {0x6fe000, 0x3, 0x81, 0x9}, {0x5, 0x0, 0x9, 0x90c8}, {0xfffffff7, 0xffffffff, 0x2, 0x200}, {0x2, 0x7, 0xfffffff9, 0x9}, {0x4, 0x2, 0x6, 0x401}, {0x190c, 0x7, 0x6, 0x4}, {0xffff8000, 0x107, 0x98b0, 0x8}, {0x0, 0x8, 0x50, 0x5}, {0x80000001, 0x2, 0x9, 0xe9180000}, {0x2, 0x6, 0xeee5}, {0x2, 0x7fffffff, 0x5, 0x80}, {0x4, 0x8, 0x6, 0x80}, {0x8, 0x6, 0xb1f, 0x4}, {0xeaf6, 0x1, 0x619, 0x5}, {0x97, 0xc, 0x0, 0x5}, {0x9, 0x0, 0x9, 0xbaab4e5}, {0x6, 0x0, 0x8, 0x9}, {0x5, 0x75ffa9ed, 0x8, 0x3}, {0x1, 0x2, 0x5, 0x6}, {0x9, 0x8, 0x2, 0x8}, {0x344, 0x69, 0xd, 0x78c57e6}, {0xf, 0x5, 0x3, 0x6}, {0x7, 0x7f, 0x175cdb81, 0x4}, {0x1, 0x6, 0x34000, 0x7}, {0x7, 0x3, 0xfcc1, 0x8}, {0x8, 0xc, 0x3, 0x7f}, {0x3ff, 0x7, 0xffff, 0x7fffffff}, {0xc, 0x5, 0x800, 0x7d80}, {0xecfb, 0x3, 0x6, 0x8}, {0x80000001, 0x400, 0xfffff801, 0x64a}, {0x4, 0x800, 0x570, 0x41479a37}, {0x200, 0x9, 0xe00000, 0xc}]}}]}}]}, 0xbdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.070563953s ago: executing program 1 (id=2288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fcf9b00bc7be3134e8f6ae586cd0aa3d2ea5c5a56cad23aa4027df4d04003f353b5070ede3a9346b522ed0c66b86b72aed50e0745f2df8238fd0207bf08b0312cbecf6", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004000280"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r2, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x58, &(0x7f0000000540)}, 0x10) 1.89754602s ago: executing program 2 (id=2289): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="a91548c190a8758392a88b06cf6930057db8281f57ce69033eecd719248e6598a3fb2cc9cdd4eabd42d32d778f6f3b7e70974d74eaf08a6e9068943e23b078caa1d307797ea59cbfbbba9de49e7beeeb671909f5c71c9cc1db2a6d45a6762e4e2be5c922017591985975af09fecd9eba34c6f10504c60f32f9b65dad9348b6df6618f51e328871c862a29652d4", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="97ef8b", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="9af9e7c3a62bee995791e76fd927d23f32fc74a2e9c3956acece512d8dfe2c6eb51928d50cf8c02a89aaa2d1bbd1378201eab8defcf299776d47142f5556c98bb6effd7f17b420e2206d2fbb", 0x4c}], 0x1}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000e80)="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", 0x217}], 0x1}}], 0x4, 0x44000) 1.866153604s ago: executing program 2 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x38}}, 0x0) 1.782157662s ago: executing program 2 (id=2292): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/140) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1.602660251s ago: executing program 2 (id=2293): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1801) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x254) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1901) fcntl$dupfd(r0, 0x406, r1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) 1.524007392s ago: executing program 3 (id=2275): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x309, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xf7f}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed55", 0x1b}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f0000000bc0), 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x0, @tick=0x401, 0x6, {0xfe, 0x5}, 0x7f, 0x2, 0x5}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b8010000180080001006669620004000280140000001000017f3bcb700000000000000000000084000a"], 0xd4}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005cf9e996bd6c11f2b4969941b5b091a94e62f26f57b73a15570bf33aa32fa82902000000000000007aebd538db5bbbd3f447e8e37b8c6285d80f3aca5771fa001921940e650378394e2bd4583e947c4e350ffacd5bbbf30390d643fdc9749fee98457c013f57bc123997af6ac057a1ae2ddfdca2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.19289068s ago: executing program 1 (id=2294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r2, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x58, &(0x7f0000000540)}, 0x10) 872.28809ms ago: executing program 0 (id=2295): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r6, 0x1, 0x22, &(0x7f0000000040)=""/232, &(0x7f0000000180)=0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x14}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="009e2b00", @ANYBLOB="000826bd7000fbdbdf251d0000000800", @ANYRES32=r8, @ANYBLOB="0c009900ff000000670000001c00238006000a000300000008001700da55000008001700000000000c00990003000000750000000800010055000000080001000f00000034002380080017007f000000080009000900000006000d009e0f000006000300bf00000008001a0003000000060019007f000000"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) 702.568384ms ago: executing program 0 (id=2296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fcf9b00bc7be3134e8f6ae586cd0aa3d2ea5c5a56cad23aa4027df4d04003f353b5070ede3a9346b522ed0c66b86b72aed50e0745f2df8238fd0207bf08b0312cbecf6", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004000280"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r1, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000540)}, 0x10) 561.061227ms ago: executing program 3 (id=2297): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc, 0x0, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=@newtaction={0x1078, 0x30, 0x1, 0x0, 0x0, {}, [{0x1064, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x102c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0x1078}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0x0, [{0x0, 0x93}, {}, {}, {}, {}, {}, {0xb}, {0x81}]}}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) 247.667746ms ago: executing program 1 (id=2298): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/140) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 0s ago: executing program 1 (id=2300): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/140) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) kernel console output (not intermixed with test programs): ldn't find an available UDC or it's busy [ 94.871458][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.879136][ T840] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 94.899992][ T840] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 94.920014][ T8719] tipc: Enabling of bearer rejected, failed to enable media [ 94.930144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.346523][ T8740] __nla_validate_parse: 16 callbacks suppressed [ 95.346536][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1123'. [ 95.493719][ T8749] loop7: detected capacity change from 0 to 7 [ 95.497036][ T8757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1129'. [ 95.500913][ T8749] Dev loop7: unable to read RDB block 7 [ 95.503848][ T8749] loop7: unable to read partition table [ 95.505835][ T8749] loop7: partition table beyond EOD, truncated [ 95.507804][ T8749] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.553706][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 95.562907][ T8700] validate_nla: 2 callbacks suppressed [ 95.562923][ T8700] netlink: 'syz.0.1111': attribute type 5 has an invalid length. [ 95.568006][ T8700] netlink: 'syz.0.1111': attribute type 7 has an invalid length. [ 95.595445][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 95.616766][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 95.703825][ T8770] tipc: Enabled bearer , priority 0 [ 95.707939][ T8770] syzkaller0: entered promiscuous mode [ 95.710004][ T8770] syzkaller0: entered allmulticast mode [ 95.716468][ T8769] tipc: Resetting bearer [ 95.729025][ T8769] tipc: Disabling bearer [ 95.823860][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1133'. [ 95.971520][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 95.976546][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 96.089449][ T1020] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.243663][ T1020] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.248837][ T1020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.253817][ T1020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.257093][ T1020] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.264133][ T1020] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 96.268026][ T1020] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 96.271568][ T1020] usb 6-1: Manufacturer: syz [ 96.276329][ T1020] usb 6-1: config 0 descriptor?? [ 96.464393][ T8790] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1141'. [ 96.542930][ T8794] tipc: Enabled bearer , priority 0 [ 96.548650][ T8794] syzkaller0: entered promiscuous mode [ 96.552960][ T8794] syzkaller0: entered allmulticast mode [ 96.567599][ T8791] tipc: Resetting bearer [ 96.582520][ T8791] tipc: Disabling bearer [ 96.668349][ T8800] tipc: Enabling of bearer rejected, failed to enable media [ 96.694457][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.699945][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.708338][ T1020] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 96.716146][ T1020] appleir 0003:05AC:8243.0003: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 96.927654][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 97.000548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.305330][ T8830] random: crng reseeded on system resumption [ 97.318541][ T8835] loop7: detected capacity change from 0 to 7 [ 97.324786][ T6048] usb 5-1: USB disconnect, device number 2 [ 97.326151][ T8835] Dev loop7: unable to read RDB block 7 [ 97.332680][ T8835] loop7: unable to read partition table [ 97.335979][ T8835] loop7: partition table beyond EOD, truncated [ 97.341703][ T8835] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.382513][ T8832] infiniband syz1: set active [ 97.386254][ T8832] infiniband syz1: added syz_tun [ 97.428361][ T8832] RDS/IB: syz1: added [ 97.431593][ T8832] smc: adding ib device syz1 with port count 1 [ 97.435218][ T8832] smc: ib device syz1 port 1 has pnetid [ 97.483339][ T8833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.489038][ T8833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.586246][ T8833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.590839][ T8833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.694188][ T8833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.699671][ T8833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.792822][ T8833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.797730][ T8833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.968572][ T1187] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 97.971789][ T1187] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 97.998518][ T1187] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.001782][ T1187] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.021566][ T1187] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.024211][ T1187] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.036587][ T1187] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.040397][ T1187] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.130295][ T8862] tipc: Enabling of bearer rejected, failed to enable media [ 98.642759][ T8897] tipc: Enabling of bearer rejected, failed to enable media [ 98.864962][ T53] usb 6-1: USB disconnect, device number 2 [ 99.429542][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.581101][ T29] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 99.584185][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.588897][ T29] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.592913][ T29] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.596149][ T29] usb 5-1: Manufacturer: syz [ 99.599970][ T29] usb 5-1: config 0 descriptor?? [ 99.659377][ T29] rc_core: IR keymap rc-hauppauge not found [ 99.662078][ T29] Registered IR keymap rc-empty [ 99.665162][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 99.667047][ T8948] tipc: Enabled bearer , priority 0 [ 99.669833][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 99.674162][ T8948] syzkaller0: entered promiscuous mode [ 99.678226][ T8948] syzkaller0: entered allmulticast mode [ 99.720974][ T8948] tipc: Resetting bearer [ 99.723791][ T8948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.727575][ T8948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.761798][ T8947] tipc: Resetting bearer [ 99.787489][ T8947] tipc: Disabling bearer [ 99.816933][ T6048] usb 5-1: USB disconnect, device number 3 [ 100.310785][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 100.588530][ T9012] __nla_validate_parse: 22 callbacks suppressed [ 100.588546][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 100.765494][ T9030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 100.817560][ T9035] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 100.821635][ T9035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 100.824662][ T9035] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 100.827810][ T9035] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 100.831639][ T9035] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1222'. [ 100.865148][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 100.882164][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 100.902824][ T6048] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 101.073108][ T6048] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.077220][ T6048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.105160][ T6048] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.107685][ T6048] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.110268][ T6048] usb 7-1: Manufacturer: syz [ 101.115708][ T6048] usb 7-1: config 0 descriptor?? [ 101.169290][ T6048] rc_core: IR keymap rc-hauppauge not found [ 101.171277][ T6048] Registered IR keymap rc-empty [ 101.174547][ T6048] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 101.182521][ T6048] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 101.327120][ T841] usb 7-1: USB disconnect, device number 3 [ 101.684961][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 101.905421][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 101.982297][ T9089] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 101.985078][ T9089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1240'. [ 101.988218][ T9089] netlink: 'syz.2.1240': attribute type 2 has an invalid length. [ 101.993135][ T9089] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 101.995986][ T9089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1240'. [ 102.119561][ T841] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 102.271194][ T841] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.275190][ T841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.278705][ T841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.284370][ T841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.290420][ T841] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.293749][ T841] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.296463][ T841] usb 8-1: Manufacturer: syz [ 102.302919][ T841] usb 8-1: config 0 descriptor?? [ 102.462918][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 102.713239][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.716871][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.727962][ T841] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 102.750883][ T841] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 103.390977][ T9080] netlink: 'syz.3.1236': attribute type 5 has an invalid length. [ 103.393813][ T9080] netlink: 'syz.3.1236': attribute type 7 has an invalid length. [ 104.667201][ T9165] tipc: Enabling of bearer rejected, failed to enable media [ 105.105346][ T9206] tipc: Enabling of bearer rejected, failed to enable media [ 105.431142][ T8694] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 105.689813][ T6070] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.782752][ T9240] __nla_validate_parse: 6 callbacks suppressed [ 105.782768][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 105.788739][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.792643][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.798941][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 105.803605][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 105.852096][ T6070] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 105.855271][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.862147][ T6070] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 105.865262][ T6070] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 105.867889][ T6070] usb 5-1: Manufacturer: syz [ 105.872499][ T6070] usb 5-1: config 0 descriptor?? [ 105.939705][ T6070] rc_core: IR keymap rc-hauppauge not found [ 105.941814][ T6070] Registered IR keymap rc-empty [ 105.944191][ T6070] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 105.948327][ T6070] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 106.086602][ T8694] usb 5-1: USB disconnect, device number 4 [ 106.303786][ T9246] netlink: 'syz.3.1278': attribute type 5 has an invalid length. [ 106.307252][ T9246] netlink: 'syz.3.1278': attribute type 7 has an invalid length. [ 106.506077][ T9254] tipc: Enabled bearer , priority 0 [ 106.510025][ T9254] syzkaller0: entered promiscuous mode [ 106.512717][ T9254] syzkaller0: entered allmulticast mode [ 106.531663][ T9254] tipc: Resetting bearer [ 106.540601][ T9253] tipc: Resetting bearer [ 106.548928][ T9253] tipc: Disabling bearer [ 106.599396][ T6070] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 106.771753][ T6070] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.775420][ T6070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.778936][ T6070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.782274][ T6070] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.788519][ T6070] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.792390][ T6070] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.795016][ T6070] usb 7-1: Manufacturer: syz [ 106.798808][ T6070] usb 7-1: config 0 descriptor?? [ 106.947652][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 107.014456][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 107.209895][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.214175][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.221603][ T6070] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 107.232758][ T6070] appleir 0003:05AC:8243.0005: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 107.672960][ T9293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1307'. [ 107.680597][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 107.682636][ T9293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 107.785731][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 107.904120][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 107.933912][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 107.991267][ T1020] usb 8-1: USB disconnect, device number 2 [ 108.767424][ T9337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 108.788957][ T9339] tipc: Enabled bearer , priority 0 [ 108.794286][ T9339] tipc: Resetting bearer [ 108.805734][ T9338] tipc: Disabling bearer [ 109.168739][ T9350] random: crng reseeded on system resumption [ 109.364108][ T840] usb 7-1: USB disconnect, device number 4 [ 109.544904][ T9374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 109.959426][ T840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 110.111249][ T840] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.116872][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.121889][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.126207][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.134627][ T840] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.138711][ T840] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.142420][ T840] usb 7-1: Manufacturer: syz [ 110.146437][ T840] usb 7-1: config 0 descriptor?? [ 110.316280][ T9403] tipc: Enabled bearer , priority 0 [ 110.321633][ T9403] syzkaller0: entered promiscuous mode [ 110.324187][ T9403] syzkaller0: entered allmulticast mode [ 110.357611][ T9403] tipc: Resetting bearer [ 110.374622][ T9402] tipc: Resetting bearer [ 110.389819][ T9402] tipc: Disabling bearer [ 110.517230][ T9408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 110.558360][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.562538][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.567295][ T840] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 110.573603][ T840] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 110.887414][ T9425] __nla_validate_parse: 14 callbacks suppressed [ 110.887429][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 110.906914][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 111.169496][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 111.288406][ T9445] tipc: Enabled bearer , priority 0 [ 111.294535][ T9445] syzkaller0: entered promiscuous mode [ 111.296989][ T9445] syzkaller0: entered allmulticast mode [ 111.310158][ T9445] tipc: Resetting bearer [ 111.331806][ T9445] tipc: Resetting bearer [ 111.341783][ T9445] tipc: Disabling bearer [ 111.631791][ T9460] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1359'. [ 111.647745][ T9460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 111.877434][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 111.909763][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 112.019902][ T9466] random: crng reseeded on system resumption [ 112.250825][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 112.628780][ T9506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1377'. [ 112.641475][ T9506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input25 [ 112.785855][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 112.802172][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 113.046613][ T6065] usb 7-1: USB disconnect, device number 5 [ 113.080582][ T9526] random: crng reseeded on system resumption [ 113.583753][ T9537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 113.617843][ T9539] tipc: Enabled bearer , priority 0 [ 113.623149][ T9539] syzkaller0: entered promiscuous mode [ 113.625294][ T9539] syzkaller0: entered allmulticast mode [ 113.638531][ T9539] tipc: Resetting bearer [ 113.668852][ T9539] tipc: Resetting bearer [ 113.688658][ T9539] tipc: Disabling bearer [ 113.811108][ T9547] syzkaller0: entered promiscuous mode [ 113.814641][ T9547] syzkaller0: entered allmulticast mode [ 114.392366][ T9571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 114.743678][ T9601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 115.302584][ T9626] dummy0: entered promiscuous mode [ 115.304673][ T9626] macsec1: entered promiscuous mode [ 115.306674][ T9626] macsec1: entered allmulticast mode [ 115.308359][ T9626] dummy0: entered allmulticast mode [ 115.317255][ T9626] dummy0: left allmulticast mode [ 115.319663][ T9626] dummy0: left promiscuous mode [ 115.398527][ T9634] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 115.402656][ T9634] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 115.405550][ T9634] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 115.739389][ T9671] syzkaller0: entered promiscuous mode [ 115.741487][ T9671] syzkaller0: entered allmulticast mode [ 115.869436][ T9679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 115.983006][ T9682] __nla_validate_parse: 24 callbacks suppressed [ 115.983023][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 116.216592][ T9701] syzkaller0: entered promiscuous mode [ 116.218582][ T9701] syzkaller0: entered allmulticast mode [ 116.234406][ T9692] random: crng reseeded on system resumption [ 116.255459][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 116.333672][ T9707] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1449'. [ 116.350400][ T9707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 116.565511][ T9726] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 116.568736][ T9726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1455'. [ 116.572874][ T9726] netlink: 'syz.3.1455': attribute type 2 has an invalid length. [ 116.576044][ T9726] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 116.578956][ T9726] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1455'. [ 116.974153][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 117.036476][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 117.102496][ T9744] syzkaller0: entered promiscuous mode [ 117.104525][ T9744] syzkaller0: entered allmulticast mode [ 117.495929][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 117.515831][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 117.563413][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 117.801775][ T9773] random: crng reseeded on system resumption [ 119.152647][ T9834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 119.677504][ T9861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 119.778716][ T9866] syzkaller0: entered promiscuous mode [ 119.781239][ T9866] syzkaller0: entered allmulticast mode [ 119.978036][ T9881] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 119.982674][ T9881] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 119.985209][ T9881] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 120.065329][ T9888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 120.128600][ T9895] syzkaller0: entered promiscuous mode [ 120.134465][ T9895] syzkaller0: entered allmulticast mode [ 120.418362][ T9928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 120.568534][ T9946] syzkaller0: entered promiscuous mode [ 120.571967][ T9946] syzkaller0: entered allmulticast mode [ 121.056391][ T9966] __nla_validate_parse: 19 callbacks suppressed [ 121.056406][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 121.439424][ T840] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 121.569355][ T840] usb 7-1: device descriptor read/64, error -71 [ 121.669330][ T6028] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.809487][ T840] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 121.830616][ T6028] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.834256][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.837952][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.841351][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.848140][ T6028] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.851932][ T6028] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.854781][ T6028] usb 6-1: Manufacturer: syz [ 121.858731][ T6028] usb 6-1: config 0 descriptor?? [ 121.939423][ T840] usb 7-1: device descriptor read/64, error -71 [ 121.956046][ T9982] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 121.958945][ T9982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1540'. [ 121.962651][ T9982] netlink: 'syz.3.1540': attribute type 2 has an invalid length. [ 121.966090][ T9982] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 121.969652][ T9982] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1540'. [ 122.050301][ T840] usb usb7-port1: attempt power cycle [ 122.272122][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.278103][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.284376][ T6028] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 122.290944][ T6028] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 122.347381][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 122.411326][ T840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 122.432484][ T840] usb 7-1: device descriptor read/8, error -71 [ 122.521926][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 122.574155][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 122.595809][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 122.679500][ T840] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 122.700271][ T840] usb 7-1: device descriptor read/8, error -71 [ 122.814506][ T840] usb usb7-port1: unable to enumerate USB device [ 123.306462][T10027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1553'. [ 123.315085][T10027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 123.332602][T10029] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 123.335559][T10029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1554'. [ 123.338495][T10029] netlink: 'syz.0.1554': attribute type 2 has an invalid length. [ 123.342922][T10029] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 123.345963][T10029] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1554'. [ 124.295249][T10051] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.673862][T10069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input36 [ 124.731172][ T8694] usb 6-1: USB disconnect, device number 3 [ 124.769000][T10077] syzkaller0: entered promiscuous mode [ 124.772938][T10077] syzkaller0: entered allmulticast mode [ 124.806294][T10080] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 124.808898][T10080] netlink: 'syz.1.1567': attribute type 2 has an invalid length. [ 124.811750][T10080] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 125.089471][ T840] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 125.241191][ T840] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.245716][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.253953][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.258193][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.265891][ T840] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.270863][ T840] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.297009][ T840] usb 7-1: Manufacturer: syz [ 125.301970][ T840] usb 7-1: config 0 descriptor?? [ 125.652505][T10105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input37 [ 125.708974][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.713492][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.717983][ T840] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 125.724819][ T840] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 125.912658][T10118] syzkaller0: entered promiscuous mode [ 125.915192][T10118] syzkaller0: entered allmulticast mode [ 126.214281][T10130] __nla_validate_parse: 13 callbacks suppressed [ 126.214294][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 126.229888][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 126.271576][T10134] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 126.274110][T10134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1586'. [ 126.277031][T10134] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1586'. [ 126.331538][T10135] loop7: detected capacity change from 0 to 7 [ 126.334475][T10135] Dev loop7: unable to read RDB block 7 [ 126.336260][T10135] loop7: unable to read partition table [ 126.338145][T10135] loop7: partition table beyond EOD, truncated [ 126.340432][T10135] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.550739][ T840] usb 7-1: USB disconnect, device number 10 [ 126.670900][T10144] syzkaller0: entered promiscuous mode [ 126.672835][T10144] syzkaller0: entered allmulticast mode [ 127.048832][T10164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input38 [ 127.094777][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 127.126656][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 127.149092][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 127.343277][T10189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 127.402233][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 127.446638][T10195] validate_nla: 4 callbacks suppressed [ 127.446652][T10195] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 127.451922][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1610'. [ 127.455047][T10195] netlink: 'syz.2.1610': attribute type 2 has an invalid length. [ 127.457715][T10195] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 127.461051][T10195] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1610'. [ 127.682231][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 127.832610][ T840] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.836255][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.841519][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.845053][ T840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.851841][ T840] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.854668][ T840] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.857325][ T840] usb 6-1: Manufacturer: syz [ 127.860825][ T840] usb 6-1: config 0 descriptor?? [ 128.039965][T10216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input40 [ 128.275848][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.284406][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.298843][ T840] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 128.309654][ T840] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 128.455095][T10240] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 128.461651][T10242] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 128.464566][T10242] netlink: 'syz.0.1627': attribute type 2 has an invalid length. [ 128.468051][T10242] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 128.901451][T10259] loop7: detected capacity change from 0 to 7 [ 128.904284][T10259] Dev loop7: unable to read RDB block 7 [ 128.906191][T10259] loop7: unable to read partition table [ 128.908546][T10259] loop7: partition table beyond EOD, truncated [ 128.911487][T10259] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.917002][T10259] netlink: 'syz.1.1609': attribute type 5 has an invalid length. [ 128.924434][T10259] netlink: 'syz.1.1609': attribute type 7 has an invalid length. [ 129.120029][ T55] usb 6-1: USB disconnect, device number 4 [ 129.189801][ T6065] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 129.351178][ T6065] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.356744][ T6065] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.362781][ T6065] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.367715][ T6065] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.376562][ T6065] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.381544][ T6065] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.385055][ T6065] usb 8-1: Manufacturer: syz [ 129.390840][ T6065] usb 8-1: config 0 descriptor?? [ 129.766243][T10288] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 129.768794][T10288] netlink: 'syz.1.1641': attribute type 2 has an invalid length. [ 129.805547][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.814841][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.821359][ T6065] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 129.840955][ T6065] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 130.125022][T10301] syzkaller0: entered promiscuous mode [ 130.127068][T10301] syzkaller0: entered allmulticast mode [ 130.505812][T10308] syzkaller0: entered promiscuous mode [ 130.507966][T10308] syzkaller0: entered allmulticast mode [ 130.646017][T10310] syzkaller0: entered promiscuous mode [ 130.648764][T10310] syzkaller0: entered allmulticast mode [ 131.159390][ T8694] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 131.321483][ T8694] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.329416][ T8694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.333951][ T8694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.337796][ T8694] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.344760][ T8694] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.347821][ T8694] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.357735][ T8694] usb 7-1: Manufacturer: syz [ 131.364465][ T8694] usb 7-1: config 0 descriptor?? [ 131.668721][T10342] __nla_validate_parse: 7 callbacks suppressed [ 131.668734][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1655'. [ 131.673583][T10342] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1655'. [ 131.776511][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.780038][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.785083][ T8694] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 131.791156][ T8694] appleir 0003:05AC:8243.000B: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 132.194511][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 132.283171][ T6028] usb 8-1: USB disconnect, device number 3 [ 132.339706][T10367] loop7: detected capacity change from 0 to 7 [ 132.352598][T10367] Dev loop7: unable to read RDB block 7 [ 132.354647][T10367] loop7: unable to read partition table [ 132.357419][T10367] loop7: partition table beyond EOD, truncated [ 132.359878][T10367] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.424194][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 132.477917][T10374] syzkaller0: entered promiscuous mode [ 132.483668][T10374] syzkaller0: entered allmulticast mode [ 132.565651][T10378] validate_nla: 6 callbacks suppressed [ 132.565669][T10378] netlink: 'syz.1.1665': attribute type 17 has an invalid length. [ 132.573019][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 132.583266][T10376] syzkaller0: entered promiscuous mode [ 132.586237][T10376] syzkaller0: entered allmulticast mode [ 132.841202][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 132.896174][T10397] syzkaller0: entered promiscuous mode [ 132.897966][T10397] syzkaller0: entered allmulticast mode [ 133.023315][T10399] syzkaller0: entered promiscuous mode [ 133.025676][T10399] syzkaller0: entered allmulticast mode [ 133.307248][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 133.346200][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 133.562637][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 133.562746][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 133.661489][T10436] tipc: Enabling of bearer rejected, failed to enable media [ 133.666460][T10436] syzkaller0: entered promiscuous mode [ 133.668780][T10436] syzkaller0: entered allmulticast mode [ 133.949361][ T6028] usb 7-1: USB disconnect, device number 11 [ 133.952443][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 134.020928][T10454] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 134.024294][T10454] netlink: 'syz.2.1689': attribute type 2 has an invalid length. [ 134.027464][T10454] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 134.069978][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 134.179888][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 134.289476][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 134.429415][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 134.539368][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 134.659965][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 134.769672][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 134.939411][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 135.069902][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 135.085262][T10503] netlink: 'syz.0.1702': attribute type 17 has an invalid length. [ 135.720037][T10538] syzkaller0: entered promiscuous mode [ 135.722187][T10538] syzkaller0: entered allmulticast mode [ 135.956605][T10553] syzkaller0: entered promiscuous mode [ 135.958742][T10553] syzkaller0: entered allmulticast mode [ 136.319361][ T6028] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 136.490684][ T6028] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 136.495820][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.506495][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.514199][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 136.519975][ T6028] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 136.523462][ T6028] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 136.539661][ T6028] usb 6-1: Manufacturer: syz [ 136.544331][ T6028] usb 6-1: config 0 descriptor?? [ 136.661235][T10591] syzkaller0: entered promiscuous mode [ 136.663571][T10591] syzkaller0: entered allmulticast mode [ 136.799982][T10595] __nla_validate_parse: 13 callbacks suppressed [ 136.800000][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 136.963175][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.969489][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.974586][ T6028] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 136.992229][ T6028] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 137.156164][T10608] syzkaller0: entered promiscuous mode [ 137.158846][T10608] syzkaller0: entered allmulticast mode [ 137.188913][T10610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1738'. [ 137.199664][T10610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 137.318315][T10619] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 137.321268][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1741'. [ 137.324467][T10619] netlink: 'syz.2.1741': attribute type 2 has an invalid length. [ 137.327352][T10619] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 137.330866][T10619] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1741'. [ 137.335742][T10617] syzkaller0: entered promiscuous mode [ 137.338230][T10617] syzkaller0: entered allmulticast mode [ 137.782785][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.785043][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.786379][T10632] tipc: Enabled bearer , priority 0 [ 137.793303][ T6065] usb 6-1: USB disconnect, device number 5 [ 137.794719][T10632] syzkaller0: entered promiscuous mode [ 137.797239][T10632] syzkaller0: entered allmulticast mode [ 137.806020][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 137.820026][T10632] tipc: Resetting bearer [ 137.826878][T10631] tipc: Resetting bearer [ 137.837218][T10631] tipc: Disabling bearer [ 137.949574][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 137.954624][T10638] syzkaller0: entered promiscuous mode [ 137.957494][T10638] syzkaller0: entered allmulticast mode [ 138.195752][T10645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1748'. [ 138.203940][T10645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input43 [ 138.363759][T10658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 138.454533][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 138.476319][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 138.971516][T10667] net_ratelimit: 32 callbacks suppressed [ 138.971528][T10667] openvswitch: netlink: Flow key attr not present in new flow. [ 139.009384][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 139.119479][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 139.229473][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 139.279387][ T6065] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.319443][ T840] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 139.339588][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 139.442832][ T6065] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.448201][ T6065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.457658][ T6065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.459478][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 139.463325][ T6065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.473020][ T6065] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.482549][ T6065] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.482976][ T840] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.485529][ T6065] usb 5-1: Manufacturer: syz [ 139.487591][ T6065] usb 5-1: config 0 descriptor?? [ 139.489758][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.489784][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.508412][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.514988][ T840] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.518526][ T840] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.529366][ T840] usb 8-1: Manufacturer: syz [ 139.547037][ T840] usb 8-1: config 0 descriptor?? [ 139.569404][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 139.699594][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 139.809462][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 139.919517][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 139.953615][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.959346][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.963457][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.964224][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.970918][ T6065] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 139.972768][ T840] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 139.980987][ T6065] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 139.982849][ T840] appleir 0003:05AC:8243.000E: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 140.228517][T10716] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1769'. [ 140.538187][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 140.582683][T10725] loop7: detected capacity change from 0 to 7 [ 140.585696][T10725] Dev loop7: unable to read RDB block 7 [ 140.588101][T10725] loop7: unable to read partition table [ 140.591196][T10725] loop7: partition table beyond EOD, truncated [ 140.599331][T10725] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.655505][T10725] netlink: 'syz.0.1757': attribute type 5 has an invalid length. [ 140.659458][T10725] netlink: 'syz.0.1757': attribute type 7 has an invalid length. [ 142.185378][T10760] __nla_validate_parse: 1 callbacks suppressed [ 142.185390][T10760] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1786'. [ 142.359562][T10758] random: crng reseeded on system resumption [ 142.366814][T10770] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1790'. [ 142.420761][ T840] usb 5-1: USB disconnect, device number 5 [ 142.454221][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 142.471834][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 142.476870][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 142.659290][ T6065] usb 8-1: USB disconnect, device number 4 [ 142.932536][T10794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1799'. [ 142.986449][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 143.048966][T10803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1802'. [ 143.080754][T10810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 143.239143][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 143.445796][T10827] random: crng reseeded on system resumption [ 144.023264][ T12] net_ratelimit: 37 callbacks suppressed [ 144.023281][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 144.141356][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 144.249447][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 144.359429][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 144.382930][T10879] random: crng reseeded on system resumption [ 144.469386][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 144.579559][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 144.689488][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 144.809415][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 144.919472][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 145.029421][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 145.526095][T10940] syzkaller0: entered promiscuous mode [ 145.528185][T10940] syzkaller0: entered allmulticast mode [ 145.827000][T10967] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 145.830532][T10967] netlink: 'syz.1.1869': attribute type 2 has an invalid length. [ 145.833831][T10967] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 145.837433][T10969] syzkaller0: entered promiscuous mode [ 145.840115][T10969] syzkaller0: entered allmulticast mode [ 146.429493][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 146.581241][ T10] usb 7-1: config 0 has no interfaces? [ 146.584809][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.588670][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.591468][ T10] usb 7-1: Manufacturer: syz [ 146.594399][ T10] usb 7-1: config 0 descriptor?? [ 146.639379][ T840] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 146.722809][T11001] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 146.727109][T11001] netlink: 'syz.0.1881': attribute type 2 has an invalid length. [ 146.731350][T11001] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 146.804010][ T10] usb 7-1: USB disconnect, device number 12 [ 146.811162][ T840] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.814944][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.830038][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.834545][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.841526][ T840] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.844334][ T840] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.846880][ T840] usb 8-1: Manufacturer: syz [ 146.866980][ T840] usb 8-1: config 0 descriptor?? [ 147.212490][T11017] __nla_validate_parse: 28 callbacks suppressed [ 147.212556][T11017] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1885'. [ 147.276908][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.281013][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.287219][ T840] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 147.294315][ T840] appleir 0003:05AC:8243.000F: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 147.412897][T11025] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1887'. [ 147.427754][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 147.453293][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 147.703654][T11041] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1894'. [ 147.979459][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.075640][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 148.092053][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 148.092201][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 148.131166][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.135085][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.141284][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.145053][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.149407][ T10] usb 5-1: Manufacturer: syz [ 148.153534][ T10] usb 5-1: config 0 descriptor?? [ 148.158438][ T10] igorplugusb 5-1:0.0: incorrect number of endpoints [ 148.214498][T11065] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 148.218537][T11065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1901'. [ 148.222742][T11065] netlink: 'syz.1.1901': attribute type 2 has an invalid length. [ 148.226449][T11065] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 148.232251][T11065] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1901'. [ 148.365327][ T6028] usb 5-1: USB disconnect, device number 6 [ 149.121016][T11089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 149.135249][ T1144] net_ratelimit: 34 callbacks suppressed [ 149.135262][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 149.249828][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 149.409435][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 149.519517][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 149.597125][T11114] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 149.640564][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 149.740432][ T55] usb 8-1: USB disconnect, device number 5 [ 149.753574][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 149.859376][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 149.892875][T11105] random: crng reseeded on system resumption [ 150.009464][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 150.119608][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 150.239700][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 150.267280][T11137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input46 [ 150.649383][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.835827][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 150.849386][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.853068][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.856203][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 150.863830][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 150.867537][ T29] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 150.870395][ T29] usb 5-1: Manufacturer: syz [ 150.873620][ T29] usb 5-1: config 0 descriptor?? [ 150.919417][T11151] random: crng reseeded on system resumption [ 151.286126][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.292078][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.297439][ T29] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 151.302694][ T29] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 151.447147][T11173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input47 [ 151.565559][T11179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input48 [ 151.668625][T11186] validate_nla: 2 callbacks suppressed [ 151.668665][T11186] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 151.674664][T11186] netlink: 'syz.1.1933': attribute type 2 has an invalid length. [ 151.678377][T11186] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 151.843507][T11197] syzkaller0: entered promiscuous mode [ 151.845524][T11197] syzkaller0: entered allmulticast mode [ 152.039588][T11205] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 152.042454][T11205] netlink: 'syz.3.1938': attribute type 2 has an invalid length. [ 152.045327][T11205] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 152.554841][T11213] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 152.557797][T11213] __nla_validate_parse: 12 callbacks suppressed [ 152.557807][T11213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1939'. [ 152.566517][T11213] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 152.571014][T11213] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 152.574295][T11213] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1939'. [ 152.591646][T11215] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1941'. [ 152.832523][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 153.193726][T11239] syzkaller0: entered promiscuous mode [ 153.196111][T11239] syzkaller0: entered allmulticast mode [ 153.278114][T11236] random: crng reseeded on system resumption [ 153.472207][T11245] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 153.474905][T11245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1948'. [ 153.478203][T11245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1948'. [ 153.750978][ T841] usb 5-1: USB disconnect, device number 7 [ 153.883622][T11257] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1951'. [ 153.985459][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 154.171131][T11278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1956'. [ 154.229580][ T93] net_ratelimit: 32 callbacks suppressed [ 154.229593][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 154.250320][T11284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1959'. [ 154.341436][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 154.449381][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 154.657645][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 154.801730][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 154.911735][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 155.019436][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 155.151095][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 155.309455][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 155.419397][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 155.472669][T11349] tipc: Enabled bearer , priority 0 [ 155.478759][T11349] tipc: Resetting bearer [ 155.489471][T11348] tipc: Disabling bearer [ 155.931122][T11386] tipc: Enabled bearer , priority 0 [ 155.937808][T11386] tipc: Resetting bearer [ 155.948219][T11385] tipc: Disabling bearer [ 156.696646][T11408] validate_nla: 8 callbacks suppressed [ 156.696663][T11408] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 156.707681][T11408] netlink: 'syz.1.1996': attribute type 2 has an invalid length. [ 156.712352][T11408] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 157.113807][T11427] tipc: Enabled bearer , priority 0 [ 157.130755][T11427] tipc: Resetting bearer [ 157.149166][T11426] tipc: Disabling bearer [ 157.565263][T11453] __nla_validate_parse: 13 callbacks suppressed [ 157.565283][T11453] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2009'. [ 157.568373][T11454] tipc: Enabled bearer , priority 0 [ 157.577780][T11454] syzkaller0: entered promiscuous mode [ 157.580245][T11454] syzkaller0: entered allmulticast mode [ 157.606437][T11452] tipc: Resetting bearer [ 157.625837][T11452] tipc: Disabling bearer [ 157.929322][ T841] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 157.954334][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 158.034186][T11478] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 158.037451][T11478] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2018'. [ 158.039047][T11469] random: crng reseeded on system resumption [ 158.041780][T11478] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 158.047332][T11478] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 158.051144][T11478] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2018'. [ 158.104852][ T841] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.108566][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.113145][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.116803][ T841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.122410][ T841] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.125512][ T841] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.128764][ T841] usb 7-1: Manufacturer: syz [ 158.134647][ T841] usb 7-1: config 0 descriptor?? [ 158.460653][T11490] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 158.463367][T11490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2020'. [ 158.466697][T11490] netlink: 'syz.0.2020': attribute type 2 has an invalid length. [ 158.470235][T11490] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 158.473286][T11490] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2020'. [ 158.554907][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.559750][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.570039][ T841] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 158.576734][ T841] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 158.970190][T11504] tipc: Enabled bearer , priority 0 [ 158.973183][T11504] syzkaller0: entered promiscuous mode [ 158.975316][T11504] syzkaller0: entered allmulticast mode [ 159.011180][T11503] tipc: Resetting bearer [ 159.024086][T11503] tipc: Disabling bearer [ 159.174425][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 159.245352][T11462] netlink: 'syz.2.2014': attribute type 5 has an invalid length. [ 159.249938][ T12] net_ratelimit: 33 callbacks suppressed [ 159.249950][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 159.419630][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 159.529825][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 159.645660][T11533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2032'. [ 159.648926][T11533] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2032'. [ 159.651062][T11529] random: crng reseeded on system resumption [ 159.659941][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 159.769567][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 159.879554][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 159.999648][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 160.060649][T11544] tipc: Enabled bearer , priority 0 [ 160.064962][T11544] syzkaller0: entered promiscuous mode [ 160.067193][T11544] syzkaller0: entered allmulticast mode [ 160.083449][T11543] tipc: Resetting bearer [ 160.097309][T11543] tipc: Disabling bearer [ 160.111083][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 160.229595][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 160.279920][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 160.339876][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 160.930219][ T8694] usb 7-1: USB disconnect, device number 13 [ 161.049527][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 161.211694][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.216056][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.220281][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.223448][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.228344][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.233417][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.236366][ T10] usb 6-1: Manufacturer: syz [ 161.242010][ T10] usb 6-1: config 0 descriptor?? [ 161.652459][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.656272][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.662005][ T10] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 161.666914][ T10] appleir 0003:05AC:8243.0012: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 161.735974][T11593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 161.764652][T11595] validate_nla: 4 callbacks suppressed [ 161.764668][T11595] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 161.771285][T11595] netlink: 'syz.2.2050': attribute type 2 has an invalid length. [ 161.775030][T11595] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 161.897326][T11601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input50 [ 162.193726][T11620] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 162.196293][T11620] netlink: 'syz.3.2056': attribute type 2 has an invalid length. [ 162.199085][T11620] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 162.272758][T11621] loop7: detected capacity change from 0 to 7 [ 162.282193][T11621] Dev loop7: unable to read RDB block 7 [ 162.285199][T11621] loop7: unable to read partition table [ 162.287829][T11621] loop7: partition table beyond EOD, truncated [ 162.304635][T11621] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.363074][T11575] netlink: 'syz.1.2043': attribute type 5 has an invalid length. [ 162.365561][T11575] netlink: 'syz.1.2043': attribute type 7 has an invalid length. [ 163.199414][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.351443][ T55] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.354583][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.361829][ T55] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.364921][ T55] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.367589][ T55] usb 5-1: Manufacturer: syz [ 163.371012][ T55] usb 5-1: config 0 descriptor?? [ 163.374697][ T55] igorplugusb 5-1:0.0: incorrect number of endpoints [ 163.582751][ T6070] usb 5-1: USB disconnect, device number 8 [ 163.996330][T11659] tipc: Enabled bearer , priority 0 [ 164.001111][T11659] syzkaller0: entered promiscuous mode [ 164.003222][T11659] syzkaller0: entered allmulticast mode [ 164.013787][T11659] tipc: Resetting bearer [ 164.017211][T11658] tipc: Resetting bearer [ 164.028851][T11658] tipc: Disabling bearer [ 164.090485][ T8694] usb 6-1: USB disconnect, device number 6 [ 164.135213][T11665] __nla_validate_parse: 10 callbacks suppressed [ 164.135229][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 164.162278][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 164.299397][ T93] net_ratelimit: 33 callbacks suppressed [ 164.299413][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 164.420497][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 164.529506][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 164.639452][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 164.751762][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 164.859358][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 164.979604][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 165.000136][ T841] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 165.142044][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 165.172569][T11691] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2075'. [ 165.181376][ T841] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 165.185217][T11691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input51 [ 165.186985][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.196838][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.201862][ T841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 165.209041][ T841] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 165.213807][ T841] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 165.218762][ T841] usb 7-1: Manufacturer: syz [ 165.224005][ T841] usb 7-1: config 0 descriptor?? [ 165.249438][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 165.360592][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 165.452385][T11699] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2078'. [ 165.464170][T11699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input52 [ 165.529725][ T55] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.641067][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.646728][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.653360][ T841] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 165.659777][ T841] appleir 0003:05AC:8243.0013: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 165.692089][ T55] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 165.695897][ T55] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.713384][ T55] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 165.717102][ T55] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 165.720775][ T55] usb 8-1: Manufacturer: syz [ 165.726575][ T55] usb 8-1: config 0 descriptor?? [ 165.735182][ T55] igorplugusb 8-1:0.0: incorrect number of endpoints [ 165.947694][ T55] usb 8-1: USB disconnect, device number 6 [ 166.206132][T11717] loop7: detected capacity change from 0 to 7 [ 166.209587][T11717] Dev loop7: unable to read RDB block 7 [ 166.213127][T11717] loop7: unable to read partition table [ 166.216678][T11717] loop7: partition table beyond EOD, truncated [ 166.220317][T11717] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.226349][T11717] netlink: 'syz.2.2073': attribute type 5 has an invalid length. [ 166.232469][T11717] netlink: 'syz.2.2073': attribute type 7 has an invalid length. [ 166.648785][T11724] tipc: Enabled bearer , priority 0 [ 166.652584][T11724] syzkaller0: entered promiscuous mode [ 166.655052][T11724] syzkaller0: entered allmulticast mode [ 166.662188][T11724] tipc: Resetting bearer [ 166.665870][T11723] tipc: Resetting bearer [ 166.678806][T11723] tipc: Disabling bearer [ 167.071509][T11732] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2087'. [ 167.079105][T11732] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input53 [ 167.138541][T11735] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2088'. [ 167.147322][T11735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input54 [ 167.599399][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 167.772269][ T29] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 167.776053][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.785560][ T6070] usb 7-1: USB disconnect, device number 14 [ 167.809323][ T29] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 167.824646][ T29] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 167.830268][ T29] usb 8-1: Manufacturer: syz [ 167.902485][ T29] usb 8-1: config 0 descriptor?? [ 167.917493][ T29] igorplugusb 8-1:0.0: incorrect number of endpoints [ 168.112963][ T841] usb 8-1: USB disconnect, device number 7 [ 168.116801][T11754] tipc: Enabled bearer , priority 0 [ 168.122005][T11754] syzkaller0: entered promiscuous mode [ 168.124515][T11754] syzkaller0: entered allmulticast mode [ 168.137495][T11754] tipc: Resetting bearer [ 168.144082][T11753] tipc: Resetting bearer [ 168.156841][T11753] tipc: Disabling bearer [ 168.333423][T11761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2096'. [ 168.350598][T11761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input55 [ 168.660693][T11775] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2101'. [ 168.670556][T11775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input56 [ 168.702301][T11773] random: crng reseeded on system resumption [ 168.739345][ T6070] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.900957][ T6070] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.904759][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.908859][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.912101][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.917356][ T6070] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.920741][ T6070] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.923631][ T6070] usb 5-1: Manufacturer: syz [ 168.927514][ T6070] usb 5-1: config 0 descriptor?? [ 169.334512][T11786] tipc: Enabled bearer , priority 0 [ 169.336003][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.338337][T11786] syzkaller0: entered promiscuous mode [ 169.341512][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.343253][T11786] syzkaller0: entered allmulticast mode [ 169.351140][ T6070] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 169.357309][ T6070] appleir 0003:05AC:8243.0014: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 169.364314][T11786] tipc: Resetting bearer [ 169.374928][T11785] tipc: Resetting bearer [ 169.393197][T11785] tipc: Disabling bearer [ 169.429952][ T61] net_ratelimit: 34 callbacks suppressed [ 169.430024][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 169.539549][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 169.649458][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 169.680135][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.759673][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 169.860955][ T29] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.863341][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.867256][ T29] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.869391][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 169.870146][ T29] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.874734][ T29] usb 7-1: Manufacturer: syz [ 169.886376][ T29] usb 7-1: config 0 descriptor?? [ 169.910486][T11796] loop7: detected capacity change from 0 to 7 [ 169.914227][T11796] Dev loop7: unable to read RDB block 7 [ 169.916269][T11796] loop7: unable to read partition table [ 169.918663][T11796] loop7: partition table beyond EOD, truncated [ 169.921291][T11796] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.928911][T11796] netlink: 'syz.0.2100': attribute type 5 has an invalid length. [ 169.932179][T11796] netlink: 'syz.0.2100': attribute type 7 has an invalid length. [ 169.949307][ T29] rc_core: IR keymap rc-hauppauge not found [ 169.951900][ T29] Registered IR keymap rc-empty [ 169.956884][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 169.961199][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input57 [ 169.980355][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 170.089418][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 170.104858][ T29] usb 7-1: USB disconnect, device number 15 [ 170.199517][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 170.309345][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 170.419532][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 170.471532][T11799] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2108'. [ 170.480704][T11799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input58 [ 170.638956][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 170.718632][T11822] tipc: Enabled bearer , priority 0 [ 170.724660][T11822] syzkaller0: entered promiscuous mode [ 170.727022][T11822] syzkaller0: entered allmulticast mode [ 170.735385][T11822] tipc: Resetting bearer [ 170.741889][T11820] tipc: Resetting bearer [ 170.754252][T11820] tipc: Disabling bearer [ 171.026987][T11841] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 171.030411][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2118'. [ 171.034526][T11841] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 171.037972][T11841] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 171.042144][T11841] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2118'. [ 171.511349][ T29] usb 5-1: USB disconnect, device number 9 [ 171.858492][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 171.919497][ T840] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 171.952212][T11856] random: crng reseeded on system resumption [ 171.965559][T11866] tipc: Enabled bearer , priority 0 [ 171.971147][T11866] syzkaller0: entered promiscuous mode [ 171.973063][T11866] syzkaller0: entered allmulticast mode [ 171.987794][T11866] tipc: Resetting bearer [ 171.993262][T11865] tipc: Resetting bearer [ 172.005640][T11865] tipc: Disabling bearer [ 172.071048][ T840] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.074886][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.078728][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.082881][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.093427][ T840] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.096873][ T840] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.102127][ T840] usb 7-1: Manufacturer: syz [ 172.107020][ T840] usb 7-1: config 0 descriptor?? [ 172.329338][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 172.481399][ T10] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.485862][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.491151][ T10] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.495354][ T10] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.509463][ T10] usb 8-1: Manufacturer: syz [ 172.513676][ T10] usb 8-1: config 0 descriptor?? [ 172.533178][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.536156][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.545311][ T840] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 172.550477][ T840] appleir 0003:05AC:8243.0015: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 172.579380][ T10] rc_core: IR keymap rc-hauppauge not found [ 172.582189][ T10] Registered IR keymap rc-empty [ 172.585687][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 172.592007][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input59 [ 172.679613][ T53] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.724710][ T10] usb 8-1: USB disconnect, device number 8 [ 172.832508][ T53] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.835254][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.839519][ T53] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.842236][ T53] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.845268][ T53] usb 5-1: Manufacturer: syz [ 172.849906][ T53] usb 5-1: config 0 descriptor?? [ 172.899429][ T53] rc_core: IR keymap rc-hauppauge not found [ 172.901981][ T53] Registered IR keymap rc-empty [ 172.904558][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 172.908718][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input60 [ 173.070950][ T29] usb 5-1: USB disconnect, device number 10 [ 173.206309][T11853] netlink: 'syz.2.2121': attribute type 5 has an invalid length. [ 173.209060][T11853] netlink: 'syz.2.2121': attribute type 7 has an invalid length. [ 173.289481][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 173.452795][ T53] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 173.462404][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.470864][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.480063][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.491147][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 173.494599][ T53] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 173.497623][ T53] usb 6-1: Manufacturer: syz [ 173.504000][ T53] usb 6-1: config 0 descriptor?? [ 173.618720][T11901] tipc: Enabled bearer , priority 0 [ 173.625403][T11901] tipc: Resetting bearer [ 173.638486][T11900] tipc: Disabling bearer [ 173.915227][T11889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.921009][T11889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.928135][ T53] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 173.937871][ T53] appleir 0003:05AC:8243.0016: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 174.212513][T11907] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2132'. [ 174.221280][T11907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input61 [ 174.449714][ T12] net_ratelimit: 34 callbacks suppressed [ 174.449729][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 174.480067][T11917] loop7: detected capacity change from 0 to 7 [ 174.485265][T11917] Dev loop7: unable to read RDB block 7 [ 174.487430][T11917] loop7: unable to read partition table [ 174.489658][T11917] loop7: partition table beyond EOD, truncated [ 174.491872][T11917] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.496261][T11917] netlink: 'syz.1.2128': attribute type 5 has an invalid length. [ 174.499605][T11917] netlink: 'syz.1.2128': attribute type 7 has an invalid length. [ 174.559474][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 174.669419][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 174.779379][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 174.899891][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 174.935458][T11922] random: crng reseeded on system resumption [ 174.982291][ T53] usb 7-1: USB disconnect, device number 16 [ 175.009479][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 175.120288][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 175.239450][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 175.361943][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 175.453316][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 175.475217][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 175.519525][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 176.022147][T11955] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 176.025848][T11955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2143'. [ 176.030124][T11955] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 176.033977][T11955] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 176.037265][T11955] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2143'. [ 176.089352][ T6070] usb 6-1: USB disconnect, device number 7 [ 176.131533][T11958] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2144'. [ 176.145867][T11958] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input62 [ 176.846408][T11970] random: crng reseeded on system resumption [ 176.953862][T11981] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2150'. [ 176.961484][T11981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input63 [ 177.399036][T11996] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 177.399878][ T8694] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 177.401811][T11996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2154'. [ 177.407139][T11996] netlink: 'syz.1.2154': attribute type 2 has an invalid length. [ 177.411141][T11996] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 177.413957][T11996] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2154'. [ 177.560782][ T8694] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 177.565068][ T8694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.569316][ T8694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.572652][ T8694] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 177.577629][ T8694] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 177.580964][ T8694] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 177.584256][ T8694] usb 8-1: Manufacturer: syz [ 177.590199][ T8694] usb 8-1: config 0 descriptor?? [ 177.633156][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 177.661166][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 178.004239][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.008700][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.015713][ T8694] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 178.022347][ T8694] appleir 0003:05AC:8243.0017: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 178.275806][T11990] loop7: detected capacity change from 0 to 7 [ 178.293661][T11990] Dev loop7: unable to read RDB block 7 [ 178.295554][T11990] loop7: unable to read partition table [ 178.297698][T11990] loop7: partition table beyond EOD, truncated [ 178.307172][T11990] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.373370][T12025] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 178.375881][T12025] netlink: 'syz.3.2152': attribute type 7 has an invalid length. [ 178.559349][ T841] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 178.670146][T12033] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 178.672884][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2161'. [ 178.676038][T12033] netlink: 'syz.0.2161': attribute type 2 has an invalid length. [ 178.678839][T12033] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2161'. [ 178.736619][ T841] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.748641][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.753203][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.756289][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.763881][ T841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.766973][ T841] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.770083][ T841] usb 6-1: Manufacturer: syz [ 178.773211][ T841] usb 6-1: config 0 descriptor?? [ 179.185687][T12024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.188590][T12024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.197398][ T841] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 179.203482][ T841] appleir 0003:05AC:8243.0018: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 179.461608][ T1187] net_ratelimit: 33 callbacks suppressed [ 179.461630][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 179.562721][T12049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input64 [ 179.570059][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 179.690658][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 179.706777][T12052] tipc: Enabled bearer , priority 0 [ 179.711712][T12052] syzkaller0: entered promiscuous mode [ 179.713737][T12052] syzkaller0: entered allmulticast mode [ 179.719460][T12052] tipc: Resetting bearer [ 179.724235][T12051] tipc: Resetting bearer [ 179.734313][T12051] tipc: Disabling bearer [ 179.809871][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 179.929468][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 180.050165][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 180.105323][ T840] usb 8-1: USB disconnect, device number 9 [ 180.109528][ T8694] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.160004][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 180.263067][ T8694] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.266974][ T8694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.272913][ T8694] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.276545][ T8694] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.279330][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 180.280118][ T8694] usb 5-1: Manufacturer: syz [ 180.288673][ T8694] usb 5-1: config 0 descriptor?? [ 180.370515][ T8694] rc_core: IR keymap rc-hauppauge not found [ 180.372503][ T8694] Registered IR keymap rc-empty [ 180.379429][ T8694] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 180.388876][ T8694] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input65 [ 180.389782][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 180.502804][ T6028] usb 5-1: USB disconnect, device number 11 [ 180.512141][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 180.819584][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 180.820696][ T5335] Bluetooth: hci2: command 0x0406 tx timeout [ 180.820740][ T5995] Bluetooth: hci0: command 0x0406 tx timeout [ 181.120331][T12090] __nla_validate_parse: 5 callbacks suppressed [ 181.120345][T12090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2174'. [ 181.132648][T12090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input66 [ 181.269599][T12101] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2177'. [ 181.283283][T12101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input67 [ 181.337812][ T840] usb 6-1: USB disconnect, device number 8 [ 181.459485][T12063] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 181.624685][T12063] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.630826][T12063] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.638898][T12063] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.643857][T12063] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.649913][T12063] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.653720][T12063] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.656409][T12063] usb 7-1: Manufacturer: syz [ 181.660613][T12063] usb 7-1: config 0 descriptor?? [ 182.072463][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.075685][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.081050][T12063] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 182.088173][T12063] appleir 0003:05AC:8243.0019: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 182.299396][T12129] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2185'. [ 182.309656][T12129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input68 [ 182.344212][T12099] loop7: detected capacity change from 0 to 7 [ 182.347526][T12099] Dev loop7: unable to read RDB block 7 [ 182.349870][T12099] loop7: unable to read partition table [ 182.351942][T12099] loop7: partition table beyond EOD, truncated [ 182.355055][T12099] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.411412][T12137] validate_nla: 6 callbacks suppressed [ 182.411425][T12137] netlink: 'syz.2.2176': attribute type 5 has an invalid length. [ 182.416769][T12137] netlink: 'syz.2.2176': attribute type 7 has an invalid length. [ 182.437829][T12139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2188'. [ 182.444934][T12139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input69 [ 182.602599][T12146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input70 [ 182.697199][T12155] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2192'. [ 182.711962][T12155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input71 [ 183.199337][ T840] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 183.361007][ T840] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.364542][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.368421][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.372075][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.376887][ T840] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.379793][ T840] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.382491][ T840] usb 8-1: Manufacturer: syz [ 183.385561][ T840] usb 8-1: config 0 descriptor?? [ 183.562016][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2197'. [ 183.575126][T12169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input72 [ 183.796576][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.804999][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.876466][ T840] usbhid 8-1:0.0: can't add hid device: -71 [ 183.878605][ T840] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 183.883859][ T840] usb 8-1: USB disconnect, device number 10 [ 183.936087][T12181] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 183.943395][T12181] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2201'. [ 184.070120][ T6048] usb 7-1: USB disconnect, device number 17 [ 184.475933][T12200] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2206'. [ 184.479466][ T61] net_ratelimit: 33 callbacks suppressed [ 184.479514][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 184.491351][T12200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input73 [ 184.589679][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 184.699787][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 184.709826][T12063] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 184.809540][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 184.861549][T12063] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 184.865402][T12063] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.877273][T12063] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 184.881243][T12063] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 184.883826][T12063] usb 7-1: Manufacturer: syz [ 184.886604][T12063] usb 7-1: config 0 descriptor?? [ 184.931188][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 184.940086][T12063] rc_core: IR keymap rc-hauppauge not found [ 184.942095][T12063] Registered IR keymap rc-empty [ 184.945428][T12063] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 184.951896][T12063] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input74 [ 184.973132][T12211] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 184.976894][T12211] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2216'. [ 185.039435][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 185.100521][T12063] usb 7-1: USB disconnect, device number 18 [ 185.149888][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 185.259420][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 185.369668][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 185.489666][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 185.657314][T12235] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 185.661581][T12235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2211'. [ 185.665667][T12235] netlink: 'syz.2.2211': attribute type 2 has an invalid length. [ 185.669037][T12235] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 186.509492][ T6070] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 186.671885][ T6070] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.675503][ T6070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.679103][ T6070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.682930][ T6070] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.691333][ T6070] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.694271][ T6070] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.696923][ T6070] usb 6-1: Manufacturer: syz [ 186.719324][ T6070] usb 6-1: config 0 descriptor?? [ 186.780230][T12264] __nla_validate_parse: 1 callbacks suppressed [ 186.780243][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 186.792034][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 186.796614][T12265] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 186.799739][T12265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'. [ 186.803049][T12265] netlink: 'syz.0.2218': attribute type 2 has an invalid length. [ 186.805623][T12265] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 186.808162][T12265] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2218'. [ 187.130519][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.134740][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.143537][ T6070] usbhid 6-1:0.0: can't add hid device: -71 [ 187.146338][ T6070] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 187.160132][ T6070] usb 6-1: USB disconnect, device number 9 [ 187.379318][T12276] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2221'. [ 188.219284][ T5989] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.272287][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 188.297265][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 188.400702][ T5989] usb 5-1: config 0 has no interfaces? [ 188.403318][ T5989] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 188.409355][ T5989] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 188.419423][ T5989] usb 5-1: Manufacturer: syz [ 188.422306][ T5989] usb 5-1: config 0 descriptor?? [ 188.635366][ T10] usb 5-1: USB disconnect, device number 12 [ 188.901567][T12320] validate_nla: 1 callbacks suppressed [ 188.901579][T12320] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 188.907247][T12320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2232'. [ 188.911170][T12320] netlink: 'syz.3.2232': attribute type 2 has an invalid length. [ 188.914149][T12320] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 188.916879][T12320] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2232'. [ 189.501320][T12337] syzkaller0: entered promiscuous mode [ 189.503424][T12337] syzkaller0: entered allmulticast mode [ 189.540160][ T1143] net_ratelimit: 32 callbacks suppressed [ 189.540176][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 189.642066][T12342] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 189.645115][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2236'. [ 189.649761][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 189.653403][T12342] netlink: 'syz.2.2236': attribute type 2 has an invalid length. [ 189.656960][T12342] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 189.759682][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 189.876472][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 190.060545][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 190.226553][T12364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input75 [ 190.251411][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 190.264194][T12360] random: crng reseeded on system resumption [ 190.369623][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 190.499586][ T93] bond1: (slave wlan0): failed to get link speed/duplex [ 190.609492][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 190.719820][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 190.831048][T12369] random: crng reseeded on system resumption [ 191.537039][T12403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input76 [ 191.592806][T12406] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 191.595581][T12406] netlink: 'syz.1.2251': attribute type 2 has an invalid length. [ 191.598781][T12406] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 191.664164][T12410] tipc: Enabled bearer , priority 0 [ 191.667926][T12410] syzkaller0: entered promiscuous mode [ 191.672982][T12410] syzkaller0: entered allmulticast mode [ 191.697858][T12410] tipc: Resetting bearer [ 191.703855][T12409] tipc: Resetting bearer [ 191.712331][T12409] tipc: Disabling bearer [ 192.026115][T12416] random: crng reseeded on system resumption [ 192.614170][T12439] __nla_validate_parse: 11 callbacks suppressed [ 192.614183][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 192.849595][ T6070] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 193.033266][ T6070] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.036314][ T6070] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.049784][ T6070] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.052934][ T6070] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.055712][ T6070] usb 8-1: Manufacturer: syz [ 193.066872][ T6070] usb 8-1: config 0 descriptor?? [ 193.073857][T12449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2262'. [ 193.083100][T12449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input78 [ 193.132876][ T6070] rc_core: IR keymap rc-hauppauge not found [ 193.138992][ T6070] Registered IR keymap rc-empty [ 193.143161][ T6070] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 193.153203][ T6070] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input77 [ 193.316537][ T34] usb 8-1: USB disconnect, device number 11 [ 194.079376][ T5989] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 194.190618][ T841] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 194.241023][ T5989] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 194.243785][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.247619][ T5989] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 194.254416][ T5989] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 194.257176][ T5989] usb 6-1: Manufacturer: syz [ 194.270394][ T5989] usb 6-1: config 0 descriptor?? [ 194.319822][ T5989] rc_core: IR keymap rc-hauppauge not found [ 194.322427][ T5989] Registered IR keymap rc-empty [ 194.328540][ T5989] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 194.335461][ T5989] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input79 [ 194.344220][ T841] usb 7-1: config 0 has no interfaces? [ 194.347208][ T841] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 194.350734][ T841] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 194.353641][ T841] usb 7-1: Manufacturer: syz [ 194.357305][ T841] usb 7-1: config 0 descriptor?? [ 194.477878][ T8694] usb 6-1: USB disconnect, device number 10 [ 194.500941][T12480] random: crng reseeded on system resumption [ 194.567377][ T841] usb 7-1: USB disconnect, device number 19 [ 194.619488][ T61] net_ratelimit: 33 callbacks suppressed [ 194.619515][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 194.739375][ T1187] bond1: (slave wlan0): failed to get link speed/duplex [ 194.849385][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 194.959500][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 195.024007][T12492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2280'. [ 195.035202][T12492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input80 [ 195.070024][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 195.179434][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 195.239426][ T841] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 195.290265][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 195.399658][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 195.404541][ T841] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.409260][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.414084][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.418344][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.426223][ T841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.430180][ T841] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.433919][ T841] usb 6-1: Manufacturer: syz [ 195.438712][ T841] usb 6-1: config 0 descriptor?? [ 195.509755][ T1144] bond1: (slave wlan0): failed to get link speed/duplex [ 195.619400][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 195.851268][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.856154][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.863045][ T841] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 195.869930][ T841] appleir 0003:05AC:8243.001A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 196.099526][ T5989] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.250645][ T5989] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 196.254141][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.257611][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.261345][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.266807][ T5989] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 196.269806][ T5989] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 196.272380][ T5989] usb 5-1: Manufacturer: syz [ 196.277798][ T5989] usb 5-1: config 0 descriptor?? [ 196.676635][ T53] usb 6-1: USB disconnect, device number 11 [ 196.692137][ T5989] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 196.699303][ T5989] appleir 0003:05AC:8243.001B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 196.956537][ T5986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.962326][ T5986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.966734][ T5986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.973455][ T5986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.978541][ T5986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.274024][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.291467][T12508] chnl_net:caif_netlink_parms(): no params data found [ 197.354431][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.435054][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.438743][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.448422][T12508] bridge_slave_0: entered allmulticast mode [ 197.452622][T12508] bridge_slave_0: entered promiscuous mode [ 197.469046][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.476703][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.479660][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.482092][T12508] bridge_slave_1: entered allmulticast mode [ 197.485093][T12508] bridge_slave_1: entered promiscuous mode [ 197.589428][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.609788][T12508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.633362][T12508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.694293][T12508] team0: Port device team_slave_0 added [ 197.698023][T12508] team0: Port device team_slave_1 added [ 197.760094][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.762859][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.774501][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.779437][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.782050][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.792341][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.872424][T12508] hsr_slave_0: entered promiscuous mode [ 197.877396][T12508] hsr_slave_1: entered promiscuous mode [ 197.885071][T12508] debugfs: 'hsr0' already exists in 'hsr' [ 197.888420][T12508] Cannot create hsr debugfs directory [ 197.976404][ T1143] bridge_slave_1: left allmulticast mode [ 197.978676][ T1143] bridge_slave_1: left promiscuous mode [ 197.985458][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.991221][ T1143] bridge_slave_0: left allmulticast mode [ 197.993356][ T1143] bridge_slave_0: left promiscuous mode [ 197.995366][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.189909][ T841] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 198.354379][ T1143] tipc: Left network mode [ 198.357347][ T841] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 198.367615][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.381068][ T841] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 198.389385][ T841] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 198.394278][ T841] usb 7-1: Manufacturer: syz [ 198.409791][ T841] usb 7-1: config 0 descriptor?? [ 198.469294][ T841] rc_core: IR keymap rc-hauppauge not found [ 198.471611][ T841] Registered IR keymap rc-empty [ 198.475578][ T841] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 198.483075][ T841] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input81 [ 198.640038][ T6070] usb 7-1: USB disconnect, device number 20 [ 198.643396][T12539] random: crng reseeded on system resumption [ 198.827842][ T1143] hsr_slave_0: left promiscuous mode [ 198.832196][ T1143] hsr_slave_1: left promiscuous mode [ 198.835400][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.839048][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.874822][ T1143] veth1_macvtap: left promiscuous mode [ 198.877457][ T1143] veth0_macvtap: left promiscuous mode [ 198.881645][ T1143] veth1_vlan: left promiscuous mode [ 198.885524][ T1143] veth0_vlan: left promiscuous mode [ 199.065201][ T5986] Bluetooth: hci4: command tx timeout [ 199.235339][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.238028][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.329313][ T5989] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 199.657529][T12552] random: crng reseeded on system resumption [ 199.717927][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 199.793714][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 200.246592][ T1143] team0 (unregistering): Port device dummy0 removed [ 200.345089][T12508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.353082][T12508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.363674][T12508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.373846][T12508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.469555][ T61] net_ratelimit: 17 callbacks suppressed [ 200.469574][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 200.494836][T12575] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 200.498129][T12575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2288'. [ 200.502693][T12575] netlink: 'syz.1.2288': attribute type 2 has an invalid length. [ 200.505695][T12575] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 200.507002][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.508183][T12575] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2288'. [ 200.545286][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.558372][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.562742][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.573894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.576457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.579930][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 200.689477][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 200.790761][ T1143] IPVS: stop unused estimator thread 0... [ 200.814944][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.861405][T12508] veth0_vlan: entered promiscuous mode [ 200.876347][T12508] veth1_vlan: entered promiscuous mode [ 200.889616][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 200.905930][T12508] veth0_macvtap: entered promiscuous mode [ 200.911426][T12508] veth1_macvtap: entered promiscuous mode [ 200.928649][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.938976][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.950697][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.954272][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.957245][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.961748][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.004852][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.007570][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.010468][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 201.030117][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.033101][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.119394][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 201.139428][ T5986] Bluetooth: hci4: command tx timeout [ 201.189663][ T840] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 201.229481][ T61] bond1: (slave wlan0): failed to get link speed/duplex [ 201.342474][ T840] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.346426][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.351293][ T840] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.354493][ T840] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.357300][ T840] usb 7-1: Manufacturer: syz [ 201.367050][ T840] usb 7-1: config 0 descriptor?? [ 201.419111][T12607] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 201.420485][ T840] rc_core: IR keymap rc-hauppauge not found [ 201.421920][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2294'. [ 201.423630][ T840] Registered IR keymap rc-empty [ 201.426463][T12607] netlink: 'syz.1.2294': attribute type 2 has an invalid length. [ 201.429025][ T840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 201.430412][T12607] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 201.430429][T12607] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2294'. [ 201.445296][ T840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input82 [ 201.479475][ T1143] bond1: (slave wlan0): failed to get link speed/duplex [ 201.574981][ T53] usb 7-1: USB disconnect, device number 21 [ 201.589539][ T46] bond1: (slave wlan0): failed to get link speed/duplex [ 201.700259][ T46] bond1: (slave wlan0): failed to get link speed/duplex [ 201.801427][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 201.922700][ T10] usb 5-1: USB disconnect, device number 13 [ 202.525783][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.534065][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.538186][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.542837][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.545928][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.618021][ T6783] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 202.622297][ T6783] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 202.625512][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 202.631108][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.634801][ T6783] RIP: 0010:klist_put+0x4d/0x1b0 [ 202.636639][ T6783] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.642871][ T6783] RSP: 0018:ffffc90004db79b0 EFLAGS: 00010202 [ 202.644971][ T6783] RAX: dffffc0000000000 RBX: ffff88802076e460 RCX: ffffffff825f350d [ 202.647903][ T6783] RDX: 000000000000000b RSI: ffffffff8b864035 RDI: 0000000000000058 [ 202.650733][ T6783] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 202.653794][ T6783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 202.656612][ T6783] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 202.659313][ T6783] FS: 0000000000000000(0000) GS:ffff8880975c0000(0000) knlGS:0000000000000000 [ 202.662314][ T6783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.664429][ T6783] CR2: 00000000574544c0 CR3: 000000004e671000 CR4: 0000000000352ef0 [ 202.667087][ T6783] Call Trace: [ 202.668313][ T6783] [ 202.669404][ T6783] device_del+0x1d8/0x9f0 [ 202.671189][ T6783] ? __pfx_device_del+0x10/0x10 [ 202.672860][ T6783] ? netdev_unregister_kobject+0x2da/0x540 [ 202.674828][ T6783] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 202.676909][ T6783] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 202.679176][ T6783] ? __pfx___mutex_lock+0x10/0x10 [ 202.681083][ T6783] unregister_netdevice_queue+0x305/0x3f0 [ 202.682912][ T6783] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 202.684902][ T6783] ? rtnl_net_dev_lock+0x28/0x360 [ 202.686582][ T6783] ? rtnl_net_dev_lock+0x146/0x360 [ 202.688500][ T6783] ? rtnl_lock+0x9/0x20 [ 202.690336][ T6783] ? rtnl_net_dev_lock+0x146/0x360 [ 202.692224][ T6783] unregister_netdev+0x1f/0x60 [ 202.694132][ T6783] bnep_session+0x224e/0x2d80 [ 202.695667][ T6783] ? __pfx_bnep_session+0x10/0x10 [ 202.697129][ T6783] ? do_raw_spin_lock+0x12c/0x2b0 [ 202.698733][ T6783] ? __pfx_woken_wake_function+0x10/0x10 [ 202.700699][ T6783] ? rcu_is_watching+0x12/0xc0 [ 202.702432][ T6783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.704318][ T6783] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.705992][ T6783] ? __kthread_parkme+0x19e/0x250 [ 202.707597][ T6783] ? __pfx_bnep_session+0x10/0x10 [ 202.709203][ T6783] kthread+0x3c5/0x780 [ 202.710647][ T6783] ? __pfx_kthread+0x10/0x10 [ 202.712344][ T6783] ? rcu_is_watching+0x12/0xc0 [ 202.714049][ T6783] ? __pfx_kthread+0x10/0x10 [ 202.715548][ T6783] ret_from_fork+0x5d7/0x6f0 [ 202.717058][ T6783] ? __pfx_kthread+0x10/0x10 [ 202.718559][ T6783] ret_from_fork_asm+0x1a/0x30 [ 202.720255][ T6783] [ 202.721459][ T6783] Modules linked in: [ 202.723563][ T6783] ---[ end trace 0000000000000000 ]--- [ 202.726010][ T6783] RIP: 0010:klist_put+0x4d/0x1b0 [ 202.727697][ T6783] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 202.734542][ T6783] RSP: 0018:ffffc90004db79b0 EFLAGS: 00010202 [ 202.736532][ T6783] RAX: dffffc0000000000 RBX: ffff88802076e460 RCX: ffffffff825f350d [ 202.739413][ T6783] RDX: 000000000000000b RSI: ffffffff8b864035 RDI: 0000000000000058 [ 202.742466][ T6783] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 202.746161][ T6783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 202.749013][ T6783] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 202.751923][ T6783] FS: 0000000000000000(0000) GS:ffff8880977c0000(0000) knlGS:0000000000000000 [ 202.754975][ T6783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.757291][ T6783] CR2: 00000000f74a6288 CR3: 000000000e380000 CR4: 0000000000352ef0 [ 202.760547][ T6783] Kernel panic - not syncing: Fatal exception [ 202.763112][ T6783] Kernel Offset: disabled [ 202.764546][ T6783] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:45:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000222234 RBX=0000000000000000 RCX=ffffffff8b90dbf9 RDX=ffffed1005646656 RSI=ffffffff8c162d00 RDI=ffffffff8190ccb1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032723ffc CR3=00000000499f1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e95ffa55c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5d07f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5d0752c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323a33696368 2f336963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963682f68746f6f 7465756c622f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 703076f5b6a37bac 000055ec016eb22d 00000000000001b1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616e75 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90004db7320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000006e R14=ffffffff9b0fc6c0 R15=ffffffff85616e10 RIP=ffffffff85616e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000574544c0 CR3=000000004e671000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000022e58c RBX=0000000000000002 RCX=ffffffff8b90dbf9 RDX=ffffed1005686656 RSI=ffffffff8c162d00 RDI=ffffffff8190ccb1 RBP=ffffed1003a5a910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801d2d4880 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f200d7c000 CR3=000000004c124000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000903 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808080820800 040800060070de0c 0000049f00000000 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e032802000eb480 8c032802000eb480 8a0302d802000eb4 80880302b8c60484 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000eb48084030404 000eb48080032008 0000020100000008 06060101ba1fffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffe048800080302 b8c6048400040304 0400000308080013 8002018080808080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80808408000c0800 0100000008060a01 6ef801ee08001380 0300080001808080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 edc7bb407a5d330e 0b2f7c2d94146521 e85c665ba34dfc11 a10033059dd558d0 ZMM25=e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 e3a1e753e3a1e753 ZMM26=2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d 2851bb0d2851bb0d ZMM27=f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd f02517fdf02517fd ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=650d0000650d0000 650d0000650d0000 650d0000650d0000 650d0000650d0000 650d0000650d0000 650d0000650d0000 650d0000650d0000 650d0000650d0000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c10a0 RCX=ffffffff8b5deb17 RDX=ffff888020534880 RSI=ffffffff8b5deb35 RDI=ffffffff8e5c10a0 RBP=000000000000018f RSP=ffffc900007cfae0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff9afe2960 R12=ffffffff8b5deb35 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81975a05 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74a6288 CR3=0000000071583000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000