last executing test programs: 7.504252881s ago: executing program 0 (id=1333): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) bind$qrtr(r0, &(0x7f0000000780)={0x2a, 0x1, 0x7fff}, 0xc) 6.672531521s ago: executing program 3 (id=1336): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) bind$qrtr(r0, &(0x7f0000000780)={0x2a, 0x1, 0x7fff}, 0xc) 6.59014491s ago: executing program 0 (id=1337): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0xe0, &(0x7f0000000040), 0x60}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f00000000c0), 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f5, 0x6021, 0x0, 0x0, 0x0) 6.540154138s ago: executing program 0 (id=1339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a81000000000400000000020000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a310000000020000000000a01020000000000000000000000000900010073797a31000000002c000000020a01"], 0xb4}}, 0x0) r4 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) 6.478783208s ago: executing program 0 (id=1340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9f, 0x6, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.650195826s ago: executing program 3 (id=1343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.679302752s ago: executing program 3 (id=1348): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000085c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0xe) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0), 0x0, 0x34280) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) 3.700937s ago: executing program 3 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="0b99cc1316381fb602fc7114afefd244be9cb5a3a7a9ea46d6e71065d6469848843bdc7634450934dc0baf4a16740a7d7be6896e29e7af5a5cb8290d14408d491fb9a2673c7325a179d0ad1f5beb905f93e7c768abb4fda0e400828d0a0338c5ebde08a805b1049b8c2e0953387d", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102381, 0x18fed) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0xf8}}, 0x20000054) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000680)=""/232, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657]}}, 0xfffffffd}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x454e, 0x4) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) 2.880002537s ago: executing program 0 (id=1357): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) bind$qrtr(r0, &(0x7f0000000780)={0x2a, 0x1, 0x7fff}, 0xc) 2.329472303s ago: executing program 1 (id=1361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0x10) writev(r0, &(0x7f00000000c0), 0x2529869) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.329197613s ago: executing program 1 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x1c00, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a01020000000000000000010000000900010073797a3000080000090002"], 0xbc}}, 0x0) 2.209443268s ago: executing program 3 (id=1363): socket$l2tp(0x2, 0x2, 0x73) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0xbb4, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x51, 0x65, 0xc3, 0x10, 0x5cc, 0x3352, 0xe5c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba2, 0x4, 0x6, 0x3, 0x20, 0x3, [{{0x9, 0x4, 0x48, 0x62, 0xf, 0xff, 0xab, 0x2d, 0xf, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x9e}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x6, 0xe, 0x9, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x3, 0x5, 0xd6}]}], [{{0x9, 0x5, 0x9, 0x8, 0x20, 0x7, 0x40, 0x3, [@generic={0x37, 0x31, "1019ade7c5a3d206b89d055eef0197800e7913c3f5ccaf2970220922430567c2958b219d05ea0db227444adffc2b874f1b200a42a5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xd7}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0xea, 0x4, 0x40}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x8}, @generic={0xa4, 0xb, "7de4800c4530244cf4ef192d45b4e2be0079bc0ecf48062d46347f7c0971a9f593156ebed8e398c23ef1cc0d97ee5b557f9decdbe23faa13d96ec22d78713e82d47025a79869d16164f801c29f495a57876382f4d996445206e2521a9aca0dc2e7aa844bc55e91c2023a00e7e9b6debe72b13e1b3ae2fef31050820bf5a7cfc097bf0b0796b3af2fe3afe1c0f97fa9aeaae66a19cfe0900594834d40487c00b7b105"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x6, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}, @generic={0x4d, 0xb, "a9ade0c7635bab7283c53b61167f7da368bc94e1d1978d6bf8b946aae022ce60a82a65e7b9c8a3792f31d73f63f150782847da77e0b92563ec29412309d35d38266e71f6fe1c8e632b23d0"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x9, 0x37}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x0, 0x4, [@generic={0x52, 0x10, "6d46d94f32345fd906986f684b68ede81bc6fa5e21ea22d1e05ad85a9bfa6623f6685cf9668754a55ffedae9c603537bb3ad5399e3d156bf549f833fb986ac98ea8c1a6499ca45b31d82f9633c096ab8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xbd6}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xff, 0x9, 0x8, [@generic={0x25, 0x3, "785daca2a3998ea2620fd254d7d7531dec9be968e6017abf5636d673db9edc75a2ae64"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x3, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1}]}}, {{0x9, 0x5, 0x80, 0x1, 0x1f7, 0x7f, 0x6, 0x10}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x0, 0x0, 0x7, [@generic={0xa6, 0x7, "77a6ac73c4e9e490a444e084346323f220971f8bcbaca5409da71fd4f70aa4f2efb4b3c280e9a7f5afa573c63546d7ed2f310ac00c5497df0bb15945cee6b2bd95ac0ac03a2eb831c0e1c977b2cec9f7ac06dc3f6e9b9ba6ed1220d8c915d2086c87d9eef5fa5178bcbdd98d2e5a72e798e155dd19c907191449b804d5f857b39b75400e9cfea5970fd76f2ac1e324163c9c94feec2c033ed1bc727c4c31abbb6aee6756"}, @generic={0x20, 0x21, "4ba7e22acad7881db6d7771e85cd7a0e5a75ac79426fb7d9e77424128718"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x6, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xd2, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x23, 0x40, 0x2, 0x13, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xeb, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x83, 0x1, 0xe0, [@generic={0xff, 0x3, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xf}]}}]}}, {{0x9, 0x4, 0xc7, 0x2, 0x0, 0x5f, 0x85, 0x6e, 0x6, [@generic={0x53, 0x30, "2b7586b2457f4b11ef1a1fd22e8e13f30edea0f54a9eb6b4c9f3fead30d0bedcf8483b4eed25eee8b57d547438338aaa38c59a7a1c7a9009d901111c8ce88c08ae77e405660c189dc9e9ef66601423a4d9"}]}}, {{0x9, 0x4, 0x77, 0x7f, 0xa, 0xb1, 0x70, 0xe4, 0x2, [], [{{0x9, 0x5, 0xa, 0x10, 0x3a7, 0x7f, 0x2, 0x9, [@generic={0x4f, 0x23, "548fc2e4b53fd0f853f7c923d1e5378fd34dfa94c89561932c1809e87ecc05c870513c84a1fb2c54637897ace2e3bb40aaf6fda3c6e6d5ec6b6bf5a325dda2a57e5b82d0dd819e536d8cf1b21d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x80, 0x4, 0x0, [@generic={0xb6, 0xc, "8108655daa7e5cb75a260dce68d3d34259abb86310d2b11eed518ca735a6c8aadc36b892fea61bd0dffff3e51bd4dde213b826c54a0b0c0f34d17b95bbbd0a569aba35dd615c0c950787ce6e5626837600c28a4f1ee03a696379f4778700558e903c33ab6511d1b78ec235d49eee1adf98c363ca87b35f774908e5ab1b423bdeca490920ded6257d47a0dec29ed9517f1c1e93a08a92d657aff91a5c2cf4eb6698634e2ae9140438aedd08a4d044a76208f597e5"}, @generic={0x9f, 0x21, "e00cd38b2c2b8c6878f6c0490f333a6dd3bea726f7d9ea1832032e096e07043a5d27baf8d846b464c0d5078f54f55b28eab18d7ad7a717fcaa8cde30d464055e01da017e86ba67bff689ab8b3437a2469eb62e91276dfaeb0e5d941605c6d4669708081ce746da1ddc944dc15818a0fabbca9ad1aab6fdc4f635cf23778e105dca1573c6971f8447e7eda7dc40c44670fd98fa400a3ebb4173bbff370b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3d, 0x4, 0x4f, [@generic={0x6f, 0x9, "3de3820125ac4c15e0db6695096bdfd3f42ca544ceb6771a690b84f3b4ad37afe0a2946e01dbd0326e4903dab6f3ddb98ffa8cb3a0415f66b760d5c323ebb771ec1d4a34008e827285b1af049be947c21856145e2eb4154267cee8ba40cc9715eddb5b94fc41dcf9c8d09aab2e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0x6, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf, 0xe, 0x0, [@generic={0xac, 0xc, "f3af2cf7d770ea8882b282a70a219368b8783ebe2f02e6cf15b9c8f21501e65ac29bfc6a522d77dcf35aa3d4ef169b29d4191c6f5669606fa1f568ec88ab6c7bc5ce2ba2bb20f7291a2a5d778362017ad1c866773c6d4cbc8fd18ddbc1678f62f619b23780333261fb6e724d1724470f07378788e7a8755d16fb83c0331b55cacf8799eecae183187351d09c54b90b3e2efdb5626e11a829374397d616ec7bc181e2b658eb6774ee512b"}]}}, {{0x9, 0x5, 0x1e, 0x18, 0x400, 0x7, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x44, 0x5, 0x0, [@generic={0x1e, 0x23, "562d84f14c0c7393d6899ea2c5be9771ac38d5a8385e9f9914305924"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x7}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0xa, 0xf9}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x7, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x2}, @generic={0x9, 0xd, "d977bc31bfbd03"}]}}]}}, {{0x9, 0x4, 0x92, 0x6, 0x5, 0x6e, 0x77, 0x6a, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x539, 0xfe}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x3, 0x8}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x80, "1e1d"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x3, 0x4, 0x9f}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x6, 0x3, [0x6, 0x17, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x1, 0x3, 0x3}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x46}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x43b8, 0x7, 0xee}, [@network_terminal={0x7, 0x24, 0xa, 0x9b, 0x5, 0x21, 0xaf}, @dmm={0x7, 0x24, 0x14, 0x2, 0x4}, @mdlm_detail={0xf, 0x24, 0x13, 0x10, "743acfb4717265871242d6"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x7, 0xff, 0x7, [@generic={0x45, 0x24, "37405d0708bb0bba4c4a08a8009f8c0ef00590b15412773c5af1e6397f9b7ba7f2c5684a67d99460d12002e60e91adaf36129615e272b4bc941cfdd769b36be5706cde"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf3, 0x1d7a}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x5, 0xfe, 0x3, [@generic={0xf5, 0xb, "061383f4e0a4460055bee83dd1606b4a95bf8aed341a0b05b7a9e3bd2556b98cce41f459e83a9e6e782abd6937bb8413bd3b3e4adf029d8cff58bf4a065fd13543684434d4f2c62b3bde76b8d469dd4a0032d8273dbf31e3a2685a303a6579ed1f8a2637994db3b8aa26c4af13eb4773622920a66c77768734e92151096e399590c1edf7660008da8cf2362e9da2146fbf0315aee9edf0a8e2dab52377598391f4dadf086e85d13540a7513d918290d4be63429783f3c1b43eb777478baf050346a9f3d9d637ad258e9adda812c5f9328593d1420d1c6d27c258973fe46b3a05d9e8e4dcdfc727de80bc0fcdf1f17f08529767"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x4, 0x0, [@generic={0x96, 0x10, "5dd9fe749887d41ec90ac9e7435cc2cfdcba25cd2dd763a96d28ac388963028178c2a2c7694ded9615997adcfd1746ac6239aa62f559722561bf4ad90f89eda2cb77017be7a0fd3bda36990dcd8beb6d5a1c230e7487845590a9a85c7d48f9135d35105e0b099db4da1b1080a728a7245a148868a957e6d18aad760ef79ea86a55a38087219e5da370087188b2799aa22063a3fe"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xc800}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0xfe, 0x9, 0xf5}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xfb, 0x7f, 0x8, [@generic={0xfb, 0x21, "9a4676f94e3bf1d7c1c6d1a4985f547785c3cb554e85af56172cccbc77600431c3ec00e486b7f1c369a15e88a682c89471a041f3f7748340aec9956d8d268c3a15571c481a6b326086a9569fee2010deac8b094961e73236bcc5c76ab318d343945017427ac80055c549ea91e3fbebc124d0c66ccce21fc6d8f325fa121d3328ffe3a41ae73adf9a4f16bf8169d523d987e10e78e9656b9f907c974630b9961c03fd519e087867ec4987dfe59e21ad433ad067576d79b1a2bb8da93fed9fb2c53a1fa4ead49dddcbb50855658a7c5c814dbcdf6a4bd0cc9c34889184c7edc2b89426ee78f162036e05ea7109bfc08c452921a48711f84157d6"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0x9, 0x0, 0x8, 0x71}, 0x62, &(0x7f00000001c0)={0x5, 0xf, 0x62, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "8384368acc3db16c9342a4d4d9a4f2ec"}, @generic={0x49, 0x10, 0xa, "ca159af53b868a7ee1e8bb50ffc68eafae0fdba3204f76e570512caac3edf6221b47fe6d39e6728dd619d0b5db716d01f82a64e08a398e071040ac04fc0f609891f2c2c6a5fe"}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1801}}, {0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "a503771f2160138ffcbd7df2303b62e71bc0a06fe1c5637617657cd69d2ae71646d61f4ea70d932b84ae56637f645c2825c6d6f13c678bea2e700c3cf91937418865d8f7c9edf2be216416503be0fe57d498fd6ea3d6c5518aae59a9867a905450a980292f898278357ae36d51ebf99d643621b120aae69a77e159056d06f996bff7e1d1b5e2223bb496f2da35f70389210feae360215f6f798dfe3da145b705f907830b7f864d"}}, {0xad, &(0x7f0000000f80)=@string={0xad, 0x3, "ad0cf8758c3e1a509e4028475881e15e0dfa681f8d20b907dbd803913fd37ccc83060fb2409e8f2033fd9d6115954b21769da5e4db6f0e7bd96902595a7f7f71dffb2784647a38a682a87243a032ad52ae4eb9a1d16f51ae48447192c01f6c4131c9bee7fe39548e629b2813e5c106678414374ea93f9166dcaea8823df058a1d0b0481a3e46bac4698e4773c6d4c516e5e83a7f02aca7e56a26cdf689beeca48329d3cd5e8b622a96d165"}}, {0xaf, &(0x7f0000001040)=@string={0xaf, 0x3, "36da01ac9a0f6964c6104f76f3453b03e8731a421a8ac8251403276044eb8339d2db68551eb2f2011b6b7ab336ac69ea8a34f4bc4f541ed04aa74526aaba8064e3f4b790cf4b318f6b711aa1c6509e50a26445633242d1a946bcc6ac48b8d2a0e55515a9e571b509d95c8797bec214ea3ece00ee355d3dbdb89c628e1a7fcf857808a54f362e70491309035da5716751e28d045a893860586b5dee38e426bc31de723dcb583e1f2a93d729335e"}}, {0xa7, &(0x7f0000001100)=@string={0xa7, 0x3, "6454970df5db2c292d2de2c0e6faf0dfd8998a1e88ca74d2ed54bda8affc8a9f5b35bbe32603f4b2c779381961c6a3c9dbacfbc97f48cb79cff477c2e325ae76dafd46a8ab8970cbb0309d0384024997e578d1d5ab838aa9616117295d1c3298c21d6d3a7e4b2a298767dc701bd82dcf8960193ad96f32a72eab0e9b4e029e2f048e1bf5a42f68a656a82343e86204c1757c21284be7bd3c65668ac10bbc44e24b8b29ccb9"}}, {0xfb, &(0x7f00000011c0)=@string={0xfb, 0x3, "4f20f924ca33b9950cb36c0033c935fc272c25238cdef379e00622d6b3c0f7ff7817c882f13865c0e6172ff39fdbd817250d5a047d7c92c75f2112d16b72787deaa3af09969992fe620c44dfdeb92038430e946a3dd6e8c90a738ebd6bbc1e81b5408ba90bc398f1745014d0b430bb6c005f8c6a00009219381a3fbcc7113303ea09ca2599308337a4c95e006df60c22f8b78a41c2ca4d3f27336f02f13ebd6f26251592736817ac6c9757f3cee15d70500944b5cb077fe4b125640d1eb2bd46231d90e13069e76c5cfea15af9d2acc4573412ec8975eac8a7d4ff42fe7a1af57fd4b133ead9af073bc3da0e55369ddf6710e76c8cd78fd408"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x200a}}]}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = epoll_create1(0x0) r7 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000100)) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, r8, r8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x6}, [{0x8, 0x4, r10}], {0x10, 0x2}}, 0x2c, 0x3) fchown(r5, r8, r10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) 2.20919178s ago: executing program 1 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000000000312201"]) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1ffffe, 0x800, 0x1000}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 2.037244081s ago: executing program 1 (id=1365): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) bind$qrtr(r0, &(0x7f0000000780)={0x2a, 0x1, 0x7fff}, 0xc) 1.942042736s ago: executing program 0 (id=1366): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x110d0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='tran']) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x22c, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xc2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x22c, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xc2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x800100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x3, 0x0, 0x0, 0x1], 0x18000, 0x200080}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x800100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x3, 0x0, 0x0, 0x1], 0x18000, 0x200080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f000000bdc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x9e5, 0xfb, 0x1, {0x22, 0xe93}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x1df, 0x9, 0x7, 0x7}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x5, 0xd, 0x6, 0x8, 0x6}, 0x75, &(0x7f0000000640)={0x5, 0xf, 0x75, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "89af6e4c82940a532bc0b657d2cc9a19"}, @ss_container_id={0x14, 0x10, 0x4, 0x88, "ebc74e73b074f75baf1169331d50b8f7"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "0f4c9d467972e39c3d1377bc37fe14e2"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc511, 0x0, 0x2, [0x0, 0x0, 0xcf, 0xff0000, 0xffc0f0]}]}, 0x4, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x90, &(0x7f0000000700)=@string={0x90, 0x3, "53a0fd0daad4d7ed89be70a9fbba193225f9621edb09cde285d4f891e6677c68b2370c6e76d2b44bd589b7aeadf64eab261fb448cd5c33a50b995fbf3735f8beb24d4c478c4464b1f0f0e06d48918191d02621842746581fe87e30aa1b9d2897545283f70528b25b2f9754dbc5ef4f854ce88d9a017d3a6a32d501dc9848ac0962555425a072f5733c6d13056571"}}, {0xaa, &(0x7f00000007c0)=@string={0xaa, 0x3, "00be494ec4a4a5980e79f96af22080d11480db6f8355950bdb3571d9866e7f44173c4f62aae4c70b6ec586a2ffb1170bb0ad43ed2693d35b4cc23e2669e132b1939728ce5e973b005a83f080bd965d206423b2b48e6d3b06fc736015c7c03bf018cf2c047b8dd688861ef235802cf81d69be0b0c62b2aa084ca37a7d73e5bb11f0beb526e226000e108bd27b130150d0d5f5032e5856f110288718ac1ca906a36df7873107d7505f"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1e}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000a80)={0x14, &(0x7f0000000900)={0x20, 0xa, 0x34, {0x34, 0x23, "697d874259ef422cd5a405eeb592a62862cd8e87d140b1403545e27cb4e60fda2e6baa750a9f376c08ccfe3ba604ed18c2c6"}}, &(0x7f0000000940)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "e6c4615e3ef6087a2fa709cf6efcb8cb9bb1b3c0bd15bfed14dab2a62bbc23936dc16cd19c9f8efb26826a5328d6f5d5228988189bb68fbb34abd28baa732a05d500d215955f1b8f6fba9d27860d7995f8357b4b4a1ee5bea6d98395c5c4d17b6b85e5d0d0d91b0d64a0d66e244d2b58d5c75305bcff436713c8"}}, &(0x7f0000000a00)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x9, "67d3ee62"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffad, 0x9, 0x1, {0x22, 0x391}}}}, &(0x7f0000000d00)={0x18, &(0x7f0000000ac0)={0x20, 0x0, 0xfe, "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"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0x20, 0x1, 0xf, "63c14dc0da05648d6c419948100962"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0xa5}}) r10 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[@ANYRES64=r10], 0x118) (async) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[@ANYRES64=r10], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r11, 0x0) getsockname$packet(r11, &(0x7f0000000540), &(0x7f0000000580)=0x14) (async) getsockname$packet(r11, &(0x7f0000000540), &(0x7f0000000580)=0x14) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2001040}, 0x8000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0x0, 0x3, 0x8000000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0x0, 0x3, 0x8000000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.320047689s ago: executing program 2 (id=1368): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1000000000000001}]}], {0x14, 0x10}}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0xd2) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x80, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3f5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000003c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x1, 0x4, 0x5, 0x1}], 0x10, 0x7, @void, @value}, 0x94) fcntl$getflags(r6, 0x401) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x7f}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x811}, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2ec}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000098b000/0x4000)=nil, 0x4000}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@union={0xf, 0x3, 0x0, 0x5, 0x0, 0xfffffffe, [{0xa, 0x4, 0x9}, {0x7, 0x1, 0x6}, {0x4, 0x4, 0x6}]}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0xaad4ddc0ecff4543, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/139, 0x51, 0x8b, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x9, 0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="8520000002000000b7080000000000007b8af8ff0008000000000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000cb9c3efe57714578ad6a067a040c6e8af38000e58e61f228c511bcb02344e20c0f0da22c5b05a2525dd6", @ANYRES16=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r4, @ANYBLOB="00000000000000000d050000fcffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001830000002000000000000000000000018640000020000000000000001000000182b0000", @ANYRES32, @ANYBLOB="0000000006000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xf, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x5, 0x2, 0x3, 0x6}, {0x1, 0x3, 0x1, 0x8}, {0x1, 0x3, 0xd, 0x4}], 0x10, 0x3, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x7ffe, 0x6cc, 0x5ee2133c, 0x0, 0xbf7000000000000, 0x4, 0x0, 0x89c5}, &(0x7f0000000040)={0x4, 0x4, 0xfffffffffffffff9, 0x7, 0x4, 0x1, 0x7fffffff, 0x98}, &(0x7f0000000080)={0x2, 0x8, 0x6, 0x7fffffff, 0x9, 0x0, 0xa, 0xdb6}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9, 0x8]}, 0x8}) write$tcp_congestion(r0, &(0x7f0000000b40)='nv\x00', 0x3) 1.31869945s ago: executing program 2 (id=1369): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)) 1.131132895s ago: executing program 1 (id=1370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3, 0x300, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004) 940.124725ms ago: executing program 1 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="0b99cc1316381fb602fc7114afefd244be9cb5a3a7a9ea46d6e71065d6469848843bdc7634450934dc0baf4a16740a7d7be6896e29e7af5a5cb8290d14408d491fb9a2673c7325a179d0ad1f5beb905f93e7c768abb4fda0e400828d0a0338c5ebde08a805b1049b8c2e0953387d", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102381, 0x18fed) socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0xf8}}, 0x20000054) r4 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000680)=""/232, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657]}}, 0xfffffffd}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) 340.146917ms ago: executing program 2 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffe000}, 0x4040040) 339.810793ms ago: executing program 2 (id=1373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000000000312201"]) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1ffffe, 0x800, 0x1000}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 265.808272ms ago: executing program 3 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 179.765819ms ago: executing program 2 (id=1375): clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0xe76, 0xffffffffffffffff, 0x6000000000000, 0x6, 0x5, 0x78, 0x81, 0x80}, &(0x7f00000000c0)={0x6, 0x140f00c0, 0x6, 0x0, 0xffffffffffffffff, 0x10000, 0x6, 0x46e8}, &(0x7f0000000100)={0x8, 0xb772, 0x494, 0x3, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000180)={r0, r1+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1, 0x68]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_setup(0x2, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) io_pgetevents(r3, 0x11288a8c, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) 0s ago: executing program 2 (id=1376): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x100}, 0xe) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000024c0)='./file0\x00', 0x105c42, 0x5) unlink(&(0x7f0000000000)='./file0\x00') ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x402c560b, &(0x7f0000000380)={0xe1, 0x4e, &(0x7f0000000500)="029e5823af015c144aa680f204826177e4778aa856e67a4e601a87f04c9202930200000000000000d66e9a3bc192d372993ab49d769038e8d6ffed4e4129d16a0d03a4000000000000bfbe88896f04216919d2d22c577070d15996e8febc0bcfff074f75fe109445bbc52f113e1d067b18fd9db6191597196d3e92d942a635550166ec8f2e3da4e51939d1a17d319f6688cd299825aa2a261bda8bc7e6f8233cff529c", {0x3, 0x2, 0x584e4f53, 0xa, 0x33d, 0x1, 0xd}}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file3\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) kernel console output (not intermixed with test programs): 869308][ T9593] ipv6_setsockopt+0xcb/0x170 [ 262.870551][ T9593] udpv6_setsockopt+0x7d/0xd0 [ 262.871765][ T9593] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.873318][ T9593] do_sock_setsockopt+0x222/0x480 [ 262.874665][ T9593] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 262.876380][ T9593] ? lock_acquire+0x2f/0xb0 [ 262.877927][ T9593] __sys_setsockopt+0x1a0/0x230 [ 262.879619][ T9593] __ia32_sys_setsockopt+0xbc/0x160 [ 262.881277][ T9593] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.882687][ T9593] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 262.884592][ T9593] __do_fast_syscall_32+0x73/0x120 [ 262.885986][ T9593] do_fast_syscall_32+0x32/0x80 [ 262.887367][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.889090][ T9593] RIP: 0023:0xf7f23579 [ 262.890158][ T9593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.895347][ T9593] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 262.897536][ T9593] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000029 [ 262.899598][ T9593] RDX: 000000000000002e RSI: 0000000020000200 RDI: 000000000000015a [ 262.901685][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.903887][ T9593] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.905935][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.908029][ T9593] [ 262.914099][ T9594] vhci_hcd: connection closed [ 262.914268][ T45] vhci_hcd: stop threads [ 262.917398][ T45] vhci_hcd: release socket [ 262.919245][ T45] vhci_hcd: disconnect device [ 263.056224][ T39] audit: type=1326 audit(1734345405.162:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.066659][ T39] audit: type=1326 audit(1734345405.162:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.080487][ T39] audit: type=1326 audit(1734345405.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.087569][ T39] audit: type=1326 audit(1734345405.172:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.099390][ T39] audit: type=1326 audit(1734345405.172:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.107013][ T39] audit: type=1326 audit(1734345405.172:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.115171][ T39] audit: type=1326 audit(1734345405.172:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.123376][ T39] audit: type=1326 audit(1734345405.172:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.129475][ T39] audit: type=1326 audit(1734345405.172:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.130963][ T6921] libceph: connect (1)[c::]:6789 error -101 [ 263.136155][ T39] audit: type=1326 audit(1734345405.172:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.3.961" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 263.137511][ T6921] libceph: mon0 (1)[c::]:6789 connect error [ 263.213175][ T9614] ceph: No mds server is up or the cluster is laggy [ 263.248671][ T9623] ======================================================= [ 263.248671][ T9623] WARNING: The mand mount option has been deprecated and [ 263.248671][ T9623] and is ignored by this kernel. Remove the mand [ 263.248671][ T9623] option from the mount to silence this warning. [ 263.248671][ T9623] ======================================================= [ 263.336260][ T64] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 263.717997][ T9632] syzkaller0: entered promiscuous mode [ 263.719553][ T9632] syzkaller0: entered allmulticast mode [ 264.126654][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 264.128405][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 264.155758][ T9647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.158471][ T9647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.217871][ T9644] ceph: No mds server is up or the cluster is laggy [ 265.133941][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 265.978974][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 266.479094][ T64] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 266.521173][ T9689] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 266.870525][ T6182] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 267.031335][ T6182] usb 8-1: not running at top speed; connect to a high speed hub [ 267.035087][ T6182] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 267.038097][ T6182] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 267.044351][ T6182] usb 8-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 267.047936][ T6182] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 267.051373][ T6182] usb 8-1: config 6 has no interface number 0 [ 267.053729][ T6182] usb 8-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 267.059365][ T6182] usb 8-1: config 6 interface 72 has no altsetting 0 [ 267.067250][ T6182] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 267.070601][ T6182] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.073463][ T6182] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 267.085760][ T6182] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 267.095133][ T6182] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 267.319876][ T9682] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.422471][ T9682] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.503899][ T9682] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.668913][ T9682] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.820220][ T9682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.856532][ T9682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.860539][ T6002] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 268.020394][ T6002] usb 6-1: Using ep0 maxpacket: 8 [ 268.025794][ T6002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.030491][ T6921] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 268.031417][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.039603][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.047652][ T6002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.056094][ T6002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.059481][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.103916][ T9682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.117940][ T9682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.180503][ T6921] usb 5-1: Using ep0 maxpacket: 8 [ 268.185284][ T6921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.188198][ T6921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.194466][ T6921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.197728][ T6921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.201789][ T6921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.202342][ T6182] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 268.204310][ T6921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.272694][ T6002] usb 6-1: GET_CAPABILITIES returned 0 [ 268.274770][ T6002] usbtmc 6-1:16.0: can't read capabilities [ 268.441741][ T6921] usb 5-1: GET_CAPABILITIES returned 0 [ 268.443215][ T6921] usbtmc 5-1:16.0: can't read capabilities [ 268.973865][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 268.981521][ T6182] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 268.984733][ T6182] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 268.988721][ T6182] usb 8-1: USB disconnect, device number 32 [ 269.677441][ T64] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 270.261031][ T9736] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 270.378735][ T72] usb 6-1: USB disconnect, device number 41 [ 270.539246][ T6182] usb 5-1: USB disconnect, device number 32 [ 270.808441][ T64] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 271.010907][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 271.020541][ T9748] 9pnet_virtio: no channels available for device syz [ 271.073313][ T64] Bluetooth: hci0: unexpected subevent 0x01 length: 12 < 18 [ 271.525234][ T9760] fuse: Bad value for 'fd' [ 271.995706][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 271.998526][ T9778] 9pnet_virtio: no channels available for device syz [ 271.998689][ T64] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 272.583814][ T9785] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 272.762566][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1009'. [ 272.764982][ T9794] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1009'. [ 272.880715][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 272.930446][ T6789] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.090426][ T6789] usb 5-1: Using ep0 maxpacket: 8 [ 273.094932][ T6789] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.097577][ T6789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.100158][ T6789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.102985][ T6789] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.106504][ T6789] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.108920][ T6789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.325438][ T6789] usb 5-1: GET_CAPABILITIES returned 0 [ 273.326953][ T6789] usbtmc 5-1:16.0: can't read capabilities [ 273.610155][ T5296] Bluetooth: hci0: unexpected subevent 0x01 length: 12 < 18 [ 274.297312][ T9815] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1014'. [ 274.300529][ T9815] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1014'. [ 274.833208][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 275.317069][ T9829] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 275.354864][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 275.920449][ T6789] usb 5-1: USB disconnect, device number 33 [ 275.975430][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1020'. [ 275.977968][ T9834] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1020'. [ 276.420564][ T5296] Bluetooth: hci0: unexpected subevent 0x01 length: 12 < 18 [ 277.009364][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1033'. [ 277.013590][ T9853] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1033'. [ 277.520595][ T6182] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 277.550459][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 277.670398][ T6182] usb 6-1: Using ep0 maxpacket: 8 [ 277.673278][ T6182] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.676244][ T6182] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.680195][ T6182] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.684052][ T6182] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.688842][ T6182] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.692764][ T6182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.013189][ T6182] usb 6-1: GET_CAPABILITIES returned 0 [ 278.014755][ T6182] usbtmc 6-1:16.0: can't read capabilities [ 278.197310][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 278.330385][ T6789] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 278.480433][ T6789] usb 7-1: Using ep0 maxpacket: 8 [ 278.486589][ T6789] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.489175][ T6789] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.499861][ T6789] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.502562][ T6789] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.505987][ T6789] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.508392][ T6789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.729023][ T6789] usb 7-1: GET_CAPABILITIES returned 0 [ 278.730568][ T6789] usbtmc 7-1:16.0: can't read capabilities [ 278.850272][ T9878] loop6: detected capacity change from 0 to 524287999 [ 278.854550][ C2] blk_print_req_error: 25 callbacks suppressed [ 278.854562][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.858601][ C2] buffer_io_error: 25 callbacks suppressed [ 278.858608][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.863694][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.866114][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.868436][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.870859][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.874469][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.876893][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.879262][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.881709][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.884034][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.886565][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.889231][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.891814][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.896308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.898770][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.901029][ T9878] ldm_validate_partition_table(): Disk read failed. [ 278.903776][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.906362][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.908944][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.911471][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.915476][ T9878] Dev loop6: unable to read RDB block 0 [ 278.918261][ T9878] loop6: unable to read partition table [ 278.919915][ T9878] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 279.056989][ T9878] ldm_validate_partition_table(): Disk read failed. [ 279.059733][ T9878] Dev loop6: unable to read RDB block 0 [ 279.063072][ T9878] loop6: unable to read partition table [ 279.065330][ T9878] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 279.147336][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 280.070594][ T6921] usb 6-1: USB disconnect, device number 42 [ 280.170450][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 280.903413][ T6789] usb 7-1: USB disconnect, device number 27 [ 280.975135][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 281.091292][ T9904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1038'. [ 281.094067][ T9904] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1038'. [ 281.750529][ T6921] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 281.822763][ T5981] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 281.901457][ T6921] usb 6-1: not running at top speed; connect to a high speed hub [ 281.906880][ T6921] usb 6-1: config 6 has an invalid interface number: 72 but max is 3 [ 281.909567][ T6921] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 281.912672][ T6921] usb 6-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 281.920408][ T6921] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 281.923315][ T6921] usb 6-1: config 6 has no interface number 0 [ 281.925375][ T6921] usb 6-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 281.929610][ T6921] usb 6-1: config 6 interface 72 has no altsetting 0 [ 281.933592][ T5296] Bluetooth: hci2: unexpected subevent 0x01 length: 12 < 18 [ 281.937409][ T6921] usb 6-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 281.940552][ T6921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.943123][ T6921] usb 6-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 281.951588][ T6921] usb 6-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 281.961949][ T6921] usb 6-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 281.981471][ T5981] usb 8-1: not running at top speed; connect to a high speed hub [ 281.984780][ T5981] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 281.986927][ T5981] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 281.989217][ T5981] usb 8-1: config 6 has an invalid interface number: 199 but max is 3 [ 281.992761][ T5981] usb 8-1: config 6 has an invalid interface number: 119 but max is 3 [ 281.994954][ T5981] usb 8-1: config 6 has an invalid interface number: 146 but max is 3 [ 281.997127][ T5981] usb 8-1: config 6 has no interface number 0 [ 281.998743][ T5981] usb 8-1: config 6 has no interface number 1 [ 282.001867][ T5981] usb 8-1: config 6 has no interface number 2 [ 282.003484][ T5981] usb 8-1: config 6 has no interface number 3 [ 282.005163][ T5981] usb 8-1: config 6 interface 72 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 282.008557][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0xA has invalid maxpacket 935, setting to 64 [ 282.013640][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.016304][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 282.019195][ T5981] usb 8-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 282.022253][ T5981] usb 8-1: config 6 interface 119 altsetting 127 has an endpoint descriptor with address 0x1E, changing to 0xE [ 282.025319][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 282.028219][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 282.031249][ T5981] usb 8-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 282.034099][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 282.037016][ T5981] usb 8-1: config 6 interface 119 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 282.039909][ T5981] usb 8-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 282.042970][ T5981] usb 8-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 282.045893][ T5981] usb 8-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 282.048912][ T5981] usb 8-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 282.052007][ T5981] usb 8-1: config 6 interface 146 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.055508][ T5981] usb 8-1: config 6 interface 72 has no altsetting 0 [ 282.057456][ T5981] usb 8-1: config 6 interface 199 has no altsetting 0 [ 282.059542][ T5981] usb 8-1: config 6 interface 119 has no altsetting 0 [ 282.061628][ T5981] usb 8-1: config 6 interface 146 has no altsetting 0 [ 282.067556][ T5981] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 282.069945][ T5981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.072299][ T5981] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 282.079767][ T5981] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 282.086455][ T5981] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 282.202920][ T9912] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.274223][ T9912] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.323312][ T9910] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.364591][ T9912] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.382673][ T9910] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.440288][ T9912] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.521295][ T9910] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.565525][ T9912] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.576487][ T9912] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.588288][ T9912] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.595791][ T9912] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.634429][ T9910] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.681482][ T6921] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 282.730827][ T9910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.735751][ T9910] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.779981][ T9910] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.804014][ T9910] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.943795][ T5981] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 283.150460][ T6002] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 283.300472][ T6002] usb 5-1: Using ep0 maxpacket: 8 [ 283.303999][ T6002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.307368][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.311608][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.315148][ T6002] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.319502][ T6002] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.322686][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.451809][ T6921] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 283.454507][ T6921] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 283.462838][ T6921] usb 6-1: USB disconnect, device number 43 [ 283.545875][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 283.597824][ T9936] 9pnet_virtio: no channels available for device syz [ 283.831558][ T6002] usb 5-1: GET_CAPABILITIES returned 0 [ 283.832958][ T6002] usbtmc 5-1:16.0: can't read capabilities [ 283.980446][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 284.041262][ T5981] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 284.044193][ T5981] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 284.049594][ T5981] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 284.054516][ T5981] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 284.059582][ T5981] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 284.064506][ T5981] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 284.068179][ T5981] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 284.073562][ T5981] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 284.082994][ T5981] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 284.086864][ T5981] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 284.089624][ T5981] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 284.119308][ T5981] usb 8-1: USB disconnect, device number 33 [ 284.678759][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1051'. [ 284.682218][ T9953] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1051'. [ 284.703558][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 284.705190][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 284.802506][ T9955] ceph: No mds server is up or the cluster is laggy [ 285.088639][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 285.588751][ T9971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1056'. [ 285.592125][ T9971] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1056'. [ 285.795441][ T30] usb 5-1: USB disconnect, device number 34 [ 285.820423][ T5981] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 285.860955][ T9977] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 285.863487][ T9977] netlink: 'syz.0.1059': attribute type 2 has an invalid length. [ 285.981288][ T5981] usb 7-1: not running at top speed; connect to a high speed hub [ 285.985269][ T5981] usb 7-1: config 6 has an invalid interface number: 72 but max is 3 [ 285.988015][ T5981] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 285.991019][ T5981] usb 7-1: config 6 has an invalid interface number: 199 but max is 3 [ 285.993644][ T5981] usb 7-1: config 6 has an invalid interface number: 119 but max is 3 [ 285.996334][ T5981] usb 7-1: config 6 has an invalid interface number: 146 but max is 3 [ 285.999071][ T5981] usb 7-1: config 6 has no interface number 0 [ 286.001063][ T5981] usb 7-1: config 6 has no interface number 1 [ 286.003104][ T5981] usb 7-1: config 6 has no interface number 2 [ 286.005036][ T5981] usb 7-1: config 6 has no interface number 3 [ 286.007165][ T5981] usb 7-1: config 6 interface 72 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 286.011472][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0xA has invalid maxpacket 935, setting to 64 [ 286.014981][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.018071][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 286.021974][ T5981] usb 7-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 286.025466][ T5981] usb 7-1: config 6 interface 119 altsetting 127 has an endpoint descriptor with address 0x1E, changing to 0xE [ 286.029357][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 286.033247][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 286.036772][ T5981] usb 7-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 286.040615][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 286.044091][ T5981] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 286.047899][ T5981] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 286.051369][ T5981] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 286.054729][ T5981] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 286.058100][ T5981] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 286.062950][ T5981] usb 7-1: config 6 interface 146 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.066566][ T5981] usb 7-1: config 6 interface 72 has no altsetting 0 [ 286.066738][ T64] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 286.068725][ T5981] usb 7-1: config 6 interface 199 has no altsetting 0 [ 286.068738][ T5981] usb 7-1: config 6 interface 119 has no altsetting 0 [ 286.068753][ T5981] usb 7-1: config 6 interface 146 has no altsetting 0 [ 286.071528][ T5981] usb 7-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 286.080561][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.083261][ T5981] usb 7-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 286.091503][ T5981] usb 7-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 286.099546][ T5981] usb 7-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 286.324381][ T9967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.363829][ T9967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.434134][ T9967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.475580][ T9967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.547101][ T9967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.555939][ T9967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.561377][ T9967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.566085][ T9967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.577905][ T5981] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 286.732936][ T9994] 9pnet_virtio: no channels available for device syz [ 287.360794][ T5981] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 287.362798][ T5981] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 287.366192][ T5981] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 287.368713][ T5981] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 287.370767][ T5981] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 287.373983][ T5981] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 287.376534][ T5981] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 287.378530][ T5981] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 287.383055][ T5981] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 287.385623][ T5981] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 287.387681][ T5981] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 287.397020][ T5981] usb 7-1: USB disconnect, device number 28 [ 287.718986][T10020] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 287.720750][T10020] syzkaller0: linktype set to 0 [ 287.726222][ T6921] IPVS: starting estimator thread 0... [ 287.813193][T10021] IPVS: using max 39 ests per chain, 93600 per kthread [ 287.893611][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1069'. [ 287.896234][T10024] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1069'. [ 287.930581][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 288.050544][ T831] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 288.183039][T10029] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 288.210398][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 288.214182][ T831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.216985][ T831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.219459][ T831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.222038][ T831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.225305][ T831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.227643][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.439111][ T831] usb 5-1: GET_CAPABILITIES returned 0 [ 288.440825][ T831] usbtmc 5-1:16.0: can't read capabilities [ 288.779506][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 289.450448][ T831] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 289.611184][ T831] usb 6-1: not running at top speed; connect to a high speed hub [ 289.615094][ T831] usb 6-1: config 6 has an invalid interface number: 72 but max is 3 [ 289.617249][ T831] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 289.619478][ T831] usb 6-1: config 6 has an invalid interface number: 199 but max is 3 [ 289.621818][ T831] usb 6-1: config 6 has an invalid interface number: 119 but max is 3 [ 289.624138][ T831] usb 6-1: config 6 has an invalid interface number: 146 but max is 3 [ 289.626280][ T831] usb 6-1: config 6 has no interface number 0 [ 289.627863][ T831] usb 6-1: config 6 has no interface number 1 [ 289.629472][ T831] usb 6-1: config 6 has no interface number 2 [ 289.631495][ T831] usb 6-1: config 6 has no interface number 3 [ 289.633121][ T831] usb 6-1: config 6 interface 72 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 289.635927][ T831] usb 6-1: config 6 interface 72 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 289.638682][ T831] usb 6-1: config 6 interface 72 altsetting 98 has a duplicate endpoint with address 0xD, skipping [ 289.641575][T10046] netlink: 'syz.2.1076': attribute type 10 has an invalid length. [ 289.641763][ T831] usb 6-1: config 6 interface 72 altsetting 98 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 289.644471][T10046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 289.648067][ T831] usb 6-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 289.655360][ T831] usb 6-1: config 6 interface 119 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.658012][ T831] usb 6-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 289.660856][ T831] usb 6-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 289.663968][T10046] team0: Port device geneve0 added [ 289.664055][ T831] usb 6-1: config 6 interface 119 altsetting 127 has an endpoint descriptor with address 0x1E, changing to 0xE [ 289.668739][ T831] usb 6-1: config 6 interface 119 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 289.671760][ T831] usb 6-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 289.674583][ T831] usb 6-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 289.677458][ T831] usb 6-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 289.680749][ T831] usb 6-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 289.683603][ T831] usb 6-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 289.686371][ T831] usb 6-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 289.689156][ T831] usb 6-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 289.693165][ T831] usb 6-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 289.696270][ T831] usb 6-1: config 6 interface 146 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 289.699718][ T831] usb 6-1: config 6 interface 72 has no altsetting 0 [ 289.701608][ T831] usb 6-1: config 6 interface 199 has no altsetting 0 [ 289.710157][ T831] usb 6-1: config 6 interface 119 has no altsetting 0 [ 289.712132][ T831] usb 6-1: config 6 interface 146 has no altsetting 0 [ 289.717139][ T64] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 290.009817][ T831] usb 6-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 290.012281][ T831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.014399][ T831] usb 6-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 290.021008][ T831] usb 6-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 290.027655][ T831] usb 6-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 290.243753][T10035] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.304539][T10035] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.378573][T10035] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.450969][ T6789] usb 5-1: USB disconnect, device number 35 [ 290.563996][T10035] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.675321][T10035] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.688000][T10035] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.720418][ T64] Bluetooth: hci0: unexpected subevent 0x01 length: 12 < 18 [ 290.800965][T10035] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.822254][T10035] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.837502][ T831] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 291.065713][T10070] 9pnet_virtio: no channels available for device syz [ 291.416306][T10075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'. [ 291.418857][T10075] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1081'. [ 291.446323][T10077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.453984][T10077] FAULT_INJECTION: forcing a failure. [ 291.453984][T10077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.458615][T10077] CPU: 3 UID: 0 PID: 10077 Comm: syz.1.1083 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 291.462479][T10077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.466321][T10077] Call Trace: [ 291.467545][T10077] [ 291.468640][T10077] dump_stack_lvl+0x16c/0x1f0 [ 291.470364][T10077] should_fail_ex+0x497/0x5b0 [ 291.471653][T10077] strncpy_from_user+0x3b/0x2d0 [ 291.472943][T10077] getname_flags.part.0+0x8f/0x550 [ 291.474332][T10077] getname_flags+0x93/0xf0 [ 291.475529][T10077] __ia32_sys_renameat2+0xd4/0x130 [ 291.476871][T10077] __do_fast_syscall_32+0x73/0x120 [ 291.478214][T10077] do_fast_syscall_32+0x32/0x80 [ 291.479939][T10077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.481969][T10077] RIP: 0023:0xf70de579 [ 291.483041][T10077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.489412][T10077] RSP: 002b:00000000f50d055c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 291.492325][T10077] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000a00 [ 291.494976][T10077] RDX: 00000000ffffff9c RSI: 0000000020000600 RDI: 0000000000000000 [ 291.497047][T10077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.499423][T10077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.502237][T10077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.505066][T10077] [ 291.651323][ T831] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 291.654305][ T831] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 291.657934][ T64] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 291.661249][ T831] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 291.664801][ T831] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 291.667631][ T831] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 291.672612][ T831] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 291.676120][ T831] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 291.679237][ T831] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 291.685198][ T831] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 291.688688][ T831] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 291.691887][ T831] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 291.700681][ T831] usb 6-1: USB disconnect, device number 44 [ 291.982240][T10092] FAULT_INJECTION: forcing a failure. [ 291.982240][T10092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.986138][T10092] CPU: 3 UID: 0 PID: 10092 Comm: syz.1.1085 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 291.989953][T10092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.993498][T10092] Call Trace: [ 291.994436][T10092] [ 291.995519][T10092] dump_stack_lvl+0x16c/0x1f0 [ 291.996927][T10092] should_fail_ex+0x497/0x5b0 [ 291.998343][T10092] _copy_to_user+0x32/0xd0 [ 291.999904][T10092] simple_read_from_buffer+0xd0/0x160 [ 292.001767][T10092] proc_fail_nth_read+0x198/0x270 [ 292.003622][T10092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.005650][T10092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.007676][T10092] vfs_read+0x1df/0xbe0 [ 292.009210][T10092] ? __fget_files+0x1fc/0x3a0 [ 292.010888][T10092] ? __pfx___mutex_lock+0x10/0x10 [ 292.012658][T10092] ? __pfx_vfs_read+0x10/0x10 [ 292.014401][T10092] ? __fget_files+0x206/0x3a0 [ 292.016081][T10092] ksys_read+0x12b/0x250 [ 292.017573][T10092] ? __pfx_ksys_read+0x10/0x10 [ 292.019292][T10092] __do_fast_syscall_32+0x73/0x120 [ 292.020715][T10092] do_fast_syscall_32+0x32/0x80 [ 292.022255][T10092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.024284][T10092] RIP: 0023:0xf70de579 [ 292.025347][T10092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 292.031366][T10092] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 292.034365][T10092] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f508e620 [ 292.037194][T10092] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 292.040013][T10092] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 292.042807][T10092] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 292.045682][T10092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.048515][T10092] [ 292.240382][ T6244] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 292.400361][ T6244] usb 8-1: Using ep0 maxpacket: 8 [ 292.403141][ T6244] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.405686][ T6244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.408196][ T6244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.419507][ T6244] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.429143][ T6244] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.435904][ T6244] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.644918][ T6244] usb 8-1: GET_CAPABILITIES returned 0 [ 292.646387][ T6244] usbtmc 8-1:16.0: can't read capabilities [ 292.883995][ T6244] usb 8-1: USB disconnect, device number 34 [ 293.270390][ T831] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 293.334343][ T64] Bluetooth: hci3: unexpected subevent 0x01 length: 12 < 18 [ 293.450518][ T831] usb 7-1: Using ep0 maxpacket: 8 [ 293.463406][ T831] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.466458][ T831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.469295][ T831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.477718][ T831] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.487929][ T831] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.490287][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.540997][ T64] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 293.710460][ T831] usb 7-1: GET_CAPABILITIES returned 0 [ 293.712478][ T831] usbtmc 7-1:16.0: can't read capabilities [ 293.716916][T10126] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 293.719435][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1097'. [ 293.741321][T10126] team0: Port device geneve0 added [ 293.922645][ T831] usb 7-1: USB disconnect, device number 29 [ 294.547555][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 294.547566][ T39] audit: type=1326 audit(1734346716.652:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.554782][ T39] audit: type=1326 audit(1734346716.652:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.560613][ T39] audit: type=1326 audit(1734346716.652:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.566127][ T39] audit: type=1326 audit(1734346716.652:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.571828][ T39] audit: type=1326 audit(1734346716.662:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.577465][ T39] audit: type=1326 audit(1734346716.662:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.585721][ T39] audit: type=1326 audit(1734346716.662:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 294.591907][ T39] audit: type=1326 audit(1734346716.662:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 295.361067][ T6244] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 295.373709][ T64] Bluetooth: hci3: unexpected subevent 0x01 length: 12 < 18 [ 295.510879][ T6244] usb 8-1: Using ep0 maxpacket: 8 [ 295.514034][ T6244] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.517182][ T6244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.520816][ T6244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.524385][ T6244] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.528606][ T6244] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.533550][ T6244] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.745575][ T6244] usb 8-1: GET_CAPABILITIES returned 0 [ 295.747109][ T6244] usbtmc 8-1:16.0: can't read capabilities [ 296.450400][ T830] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 296.621649][ T830] usb 5-1: not running at top speed; connect to a high speed hub [ 296.631119][ T830] usb 5-1: config 6 has an invalid interface number: 72 but max is 3 [ 296.633141][ T830] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 296.635242][ T830] usb 5-1: config 6 has an invalid interface number: 199 but max is 3 [ 296.637282][ T830] usb 5-1: config 6 has an invalid interface number: 119 but max is 3 [ 296.639297][ T830] usb 5-1: config 6 has an invalid interface number: 146 but max is 3 [ 296.650480][ T830] usb 5-1: config 6 has no interface number 0 [ 296.652105][ T830] usb 5-1: config 6 has no interface number 1 [ 296.653683][ T830] usb 5-1: config 6 has no interface number 2 [ 296.655240][ T830] usb 5-1: config 6 has no interface number 3 [ 296.656847][ T830] usb 5-1: config 6 interface 72 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 296.660223][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0xA has invalid maxpacket 935, setting to 64 [ 296.664332][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.670405][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 296.673675][ T830] usb 5-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 296.676650][ T830] usb 5-1: config 6 interface 119 altsetting 127 has an endpoint descriptor with address 0x1E, changing to 0xE [ 296.679882][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 296.693639][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 296.696585][ T830] usb 5-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 296.699778][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 296.703612][ T830] usb 5-1: config 6 interface 119 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 296.707358][ T830] usb 5-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 296.711180][ T830] usb 5-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 296.714771][ T830] usb 5-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 296.717904][ T830] usb 5-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 296.720664][ T830] usb 5-1: config 6 interface 146 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.724346][ T830] usb 5-1: config 6 interface 72 has no altsetting 0 [ 296.726010][ T830] usb 5-1: config 6 interface 199 has no altsetting 0 [ 296.727721][ T830] usb 5-1: config 6 interface 119 has no altsetting 0 [ 296.729421][ T830] usb 5-1: config 6 interface 146 has no altsetting 0 [ 296.732743][ T830] usb 5-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 296.735075][ T830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.737052][ T830] usb 5-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 296.743535][ T830] usb 5-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 296.751263][ T830] usb 5-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 296.972883][T10182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.043723][T10182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.136721][T10182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.213188][T10182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.221389][T10210] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.224138][T10210] FAULT_INJECTION: forcing a failure. [ 297.224138][T10210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.227615][T10210] CPU: 3 UID: 0 PID: 10210 Comm: syz.2.1119 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 297.231201][T10210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.235056][T10210] Call Trace: [ 297.236284][T10210] [ 297.237364][T10210] dump_stack_lvl+0x16c/0x1f0 [ 297.239098][T10210] should_fail_ex+0x497/0x5b0 [ 297.240824][T10210] _copy_to_user+0x32/0xd0 [ 297.242574][T10210] simple_read_from_buffer+0xd0/0x160 [ 297.244560][T10210] proc_fail_nth_read+0x198/0x270 [ 297.246379][T10210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.248415][T10210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.250037][T10210] vfs_read+0x1df/0xbe0 [ 297.251158][T10210] ? __fget_files+0x1fc/0x3a0 [ 297.252456][T10210] ? __pfx___mutex_lock+0x10/0x10 [ 297.253824][T10210] ? __pfx_vfs_read+0x10/0x10 [ 297.255052][T10210] ? __fget_files+0x206/0x3a0 [ 297.256317][T10210] ksys_read+0x12b/0x250 [ 297.257445][T10210] ? __pfx_ksys_read+0x10/0x10 [ 297.258720][T10210] __do_fast_syscall_32+0x73/0x120 [ 297.260090][T10210] do_fast_syscall_32+0x32/0x80 [ 297.261429][T10210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.263248][T10210] RIP: 0023:0xf7f55579 [ 297.264376][T10210] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.269428][T10210] RSP: 002b:00000000f50a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 297.271629][T10210] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50a6620 [ 297.273754][T10210] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000 [ 297.275820][T10210] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 297.277880][T10210] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 297.279949][T10210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.282071][T10210] [ 297.344542][T10182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.349833][T10182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.355182][T10182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.362547][T10182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.402798][ T830] usb 5-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 297.701444][ T64] Bluetooth: hci1: unexpected subevent 0x01 length: 12 < 18 [ 297.754111][ T831] usb 8-1: USB disconnect, device number 35 [ 297.829505][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 297.838794][T10219] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1122'. [ 298.220107][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 298.384448][ T830] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 298.386403][ T830] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 298.389823][ T830] usb 5-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 298.392436][ T830] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 298.394373][ T830] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 298.397459][ T830] usb 5-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 298.399932][ T830] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 298.402063][ T830] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 298.406465][ T830] usb 5-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 298.408935][ T830] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 298.411960][ T830] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 298.417169][ T830] usb 5-1: USB disconnect, device number 36 [ 298.590999][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 298.639061][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 298.690658][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 298.790614][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 299.095940][ T64] Bluetooth: hci0: unexpected subevent 0x01 length: 12 < 18 [ 300.971246][ T6222] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 306.262305][ T6900] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.264687][ T62] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.264729][ T25] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.270419][ T6922] usb 6-1: [UEAGLE-ATM] firmware is not available [ 306.270522][ T6181] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.274393][ T5980] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.276119][ T6205] usb 5-1: [UEAGLE-ATM] firmware is not available [ 306.277825][ T6191] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.282403][ T6001] usb 7-1: [UEAGLE-ATM] firmware is not available [ 306.282470][ T72] usb 6-1: [UEAGLE-ATM] firmware is not available [ 306.282521][ T6732] usb 7-1: [UEAGLE-ATM] firmware is not available [ 306.287570][ T6787] usb 6-1: [UEAGLE-ATM] firmware is not available [ 306.287622][ T5982] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.289920][ T30] usb 6-1: [UEAGLE-ATM] firmware is not available [ 306.291392][ T9] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.293018][ T6789] usb 6-1: [UEAGLE-ATM] firmware is not available [ 306.294674][ T832] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.298074][ T5983] usb 7-1: [UEAGLE-ATM] firmware is not available [ 306.299803][ T6466] usb 7-1: [UEAGLE-ATM] firmware is not available [ 306.302278][T10012] usb 7-1: [UEAGLE-ATM] firmware is not available [ 306.304059][ T6002] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.306120][ T6467] usb 8-1: [UEAGLE-ATM] firmware is not available [ 306.307887][ T8] usb 5-1: [UEAGLE-ATM] firmware is not available [ 309.635652][ T64] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 309.690386][T10316] 9pnet_virtio: no channels available for device syz [ 310.368260][T10323] block nbd1: NBD_DISCONNECT [ 310.375056][T10323] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 310.483450][T10329] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 310.947359][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 312.635694][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 312.880411][ T6787] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 312.910506][ T6789] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 313.070404][ T6787] usb 5-1: Using ep0 maxpacket: 16 [ 313.071828][ T6789] usb 6-1: Using ep0 maxpacket: 8 [ 313.074809][ T6789] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.074918][ T6787] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.081044][ T6789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.083666][ T6789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.084524][T10367] block nbd3: NBD_DISCONNECT [ 313.086689][ T6789] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.092479][ T6787] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 313.095698][ T6787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 313.098448][ T6787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 313.101367][ T6789] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.103716][ T6789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.106136][ T6787] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.112299][ T6787] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 313.114705][ T6787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.116809][ T6787] usb 5-1: Product: syz [ 313.117937][ T6787] usb 5-1: Manufacturer: syz [ 313.119210][ T6787] usb 5-1: SerialNumber: syz [ 313.119295][T10367] netlink: 'syz.3.1156': attribute type 4 has an invalid length. [ 313.121730][ T6787] usb 5-1: config 0 descriptor?? [ 313.312203][ T6789] usb 6-1: GET_CAPABILITIES returned 0 [ 313.313718][ T6789] usbtmc 6-1:16.0: can't read capabilities [ 313.383500][ T6787] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 313.388720][ T6787] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 313.433256][ T64] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 313.458344][T10376] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 313.561188][ T6787] usb 6-1: USB disconnect, device number 45 [ 313.561816][ T6181] usb 5-1: USB disconnect, device number 37 [ 314.478147][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 314.537692][T10394] 9pnet_virtio: no channels available for device syz [ 314.620542][ T6787] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 314.770358][ T6787] usb 6-1: Using ep0 maxpacket: 8 [ 314.780668][ T6787] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.783472][ T6787] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.785924][ T6787] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.788418][ T6787] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.800381][ T6787] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.802661][ T6787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.830402][ T62] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 314.981325][ T62] usb 8-1: not running at top speed; connect to a high speed hub [ 314.984566][ T62] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 314.986956][ T62] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 314.989973][ T62] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 314.993718][ T62] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 314.996744][ T62] usb 8-1: config 6 has no interface number 0 [ 314.998778][ T62] usb 8-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 315.002224][ T62] usb 8-1: config 6 interface 72 has no altsetting 0 [ 315.005497][ T62] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 315.008333][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.011280][ T62] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 315.020170][ T62] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 315.029015][ T62] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 315.047721][ T6787] usb 6-1: GET_CAPABILITIES returned 0 [ 315.049244][ T6787] usbtmc 6-1:16.0: can't read capabilities [ 315.249702][T10393] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.399430][T10393] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.488814][T10393] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.586504][T10393] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.664120][T10393] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.671251][T10393] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.678266][T10393] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.688297][T10393] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.728868][ T62] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 316.359793][ T64] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 316.495055][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.497409][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.507275][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 316.514502][T10414] 9pnet_virtio: no channels available for device syz [ 316.520455][ T62] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 316.522770][ T62] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 316.525171][ T6900] usb 8-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 316.527848][ T6900] usb 8-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 316.532261][ T62] usb 8-1: USB disconnect, device number 36 [ 317.112965][ T30] usb 6-1: USB disconnect, device number 46 [ 317.219496][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 317.386021][ T6787] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 317.540473][ T6787] usb 7-1: Using ep0 maxpacket: 8 [ 317.543207][ T6787] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.545770][ T6787] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.548279][ T6787] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.551269][ T6787] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.554721][ T6787] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.557082][ T6787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.760367][ T30] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 317.763814][ T6787] usb 7-1: GET_CAPABILITIES returned 0 [ 317.765611][ T6787] usbtmc 7-1:16.0: can't read capabilities [ 317.910466][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 317.913539][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.916327][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 317.919236][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 317.922210][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 317.925238][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.931234][ T30] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 317.933657][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.935865][ T30] usb 8-1: Product: syz [ 317.936964][ T30] usb 8-1: Manufacturer: syz [ 317.938292][ T30] usb 8-1: SerialNumber: syz [ 317.940723][ T30] usb 8-1: config 0 descriptor?? [ 317.966743][ T6787] usb 7-1: USB disconnect, device number 30 [ 318.202353][ T30] appledisplay 8-1:0.0: Error while getting initial brightness: -110 [ 318.208170][ T30] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -110 [ 318.410130][T10444] 9pnet_virtio: no channels available for device syz [ 318.488376][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 318.491195][ T64] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 318.524249][ T8] usb 8-1: USB disconnect, device number 37 [ 319.214716][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 319.281908][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 320.010537][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 320.146251][T10481] openvswitch: netlink: EtherType 0 is less than min 600 [ 320.149368][T10481] program syz.0.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.180498][ T72] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 320.340402][ T72] usb 8-1: Using ep0 maxpacket: 8 [ 320.344599][ T72] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.347379][ T72] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.349982][ T72] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.352650][ T72] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.356105][ T72] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.358479][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.390378][ T30] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 320.583310][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 320.591637][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.594249][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.596740][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.599302][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.620390][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.622808][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.638239][ T72] usb 8-1: GET_CAPABILITIES returned 0 [ 320.639740][ T72] usbtmc 8-1:16.0: can't read capabilities [ 320.832958][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 320.834576][ T30] usbtmc 6-1:16.0: can't read capabilities [ 321.120518][ T6191] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 321.271296][ T6191] usb 7-1: not running at top speed; connect to a high speed hub [ 321.274369][ T6191] usb 7-1: config 6 has an invalid interface number: 72 but max is 3 [ 321.276505][ T6191] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 321.278774][ T6191] usb 7-1: config 6 has an invalid interface number: 199 but max is 3 [ 321.281118][ T6191] usb 7-1: config 6 has an invalid interface number: 119 but max is 3 [ 321.283276][ T6191] usb 7-1: config 6 has an invalid interface number: 146 but max is 3 [ 321.285391][ T6191] usb 7-1: config 6 has no interface number 0 [ 321.287086][ T6191] usb 7-1: config 6 has no interface number 1 [ 321.288687][ T6191] usb 7-1: config 6 has no interface number 2 [ 321.290288][ T6191] usb 7-1: config 6 has no interface number 3 [ 321.291975][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 321.294785][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 321.297596][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 321.300496][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has a duplicate endpoint with address 0xD, skipping [ 321.303279][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 321.306699][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 321.309537][ T6191] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.312261][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 321.315084][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 321.318094][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has an endpoint descriptor with address 0x1E, changing to 0xE [ 321.321221][ T6191] usb 7-1: config 6 interface 119 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 321.324086][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 321.326872][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 321.329696][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 321.332534][ T6191] usb 7-1: config 6 interface 119 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 321.335349][ T6191] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 321.338751][ T6191] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 321.341692][ T6191] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 321.344484][ T6191] usb 7-1: config 6 interface 146 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 321.347279][ T6191] usb 7-1: config 6 interface 146 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 321.350691][ T6191] usb 7-1: config 6 interface 72 has no altsetting 0 [ 321.352438][ T6191] usb 7-1: config 6 interface 199 has no altsetting 0 [ 321.354220][ T6191] usb 7-1: config 6 interface 119 has no altsetting 0 [ 321.356002][ T6191] usb 7-1: config 6 interface 146 has no altsetting 0 [ 321.359240][ T6191] usb 7-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 321.361686][ T6191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.363770][ T6191] usb 7-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 321.370278][ T6191] usb 7-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 321.376821][ T6191] usb 7-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 321.385476][T10485] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 321.592627][T10485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.658247][T10485] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.714022][T10485] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.803461][T10485] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.851304][T10485] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.855757][T10485] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.860084][T10485] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.864628][T10485] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.877513][ T6191] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 322.373143][ T72] usb 8-1: USB disconnect, device number 38 [ 322.407669][T10494] netlink: 'syz.0.1196': attribute type 16 has an invalid length. [ 322.419281][T10494] sp0: Synchronizing with TNC [ 322.651273][ T6191] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 322.653758][ T6191] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 322.659701][ T6191] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 322.670779][ T6191] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 322.673377][ T6191] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 322.677331][ T6191] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 322.681573][ T6191] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 322.684217][ T6191] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 322.688992][ T6191] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 322.693022][ T6191] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 322.695797][ T6191] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 322.705809][ T6191] usb 7-1: USB disconnect, device number 31 [ 322.942415][ T72] usb 6-1: USB disconnect, device number 47 [ 323.470435][ T72] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 323.641457][ T72] usb 6-1: Using ep0 maxpacket: 8 [ 323.644853][ T72] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.648297][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.651945][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.655463][ T72] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.659933][ T72] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.663159][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.876641][ T72] usb 6-1: GET_CAPABILITIES returned 0 [ 323.878119][ T72] usbtmc 6-1:16.0: can't read capabilities [ 323.990554][ T6191] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 324.158810][ T6191] usb 7-1: not running at top speed; connect to a high speed hub [ 324.165345][ T6191] usb 7-1: config 6 has an invalid interface number: 72 but max is 3 [ 324.165368][ T6191] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 324.165385][ T6191] usb 7-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 324.165403][ T6191] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 324.165421][ T6191] usb 7-1: config 6 has no interface number 0 [ 324.165448][ T6191] usb 7-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 324.165471][ T6191] usb 7-1: config 6 interface 72 has no altsetting 0 [ 324.167274][ T6191] usb 7-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 324.167298][ T6191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.167316][ T6191] usb 7-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 324.167341][ T6191] usb 7-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 324.167438][ T6191] usb 7-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 324.376224][T10522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.446797][T10522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.526461][T10522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.615382][T10522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.711196][ T1101] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 324.712987][ T1101] ata1: failed to read log page 10h (errno=-5) [ 324.714633][ T1101] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 324.716698][ T1101] ata1.00: irq_stat 0x40000000 [ 324.718058][ T1101] ata1.00: failed command: WRITE FPDMA QUEUED [ 324.719749][ T1101] ata1.00: cmd 61/18:70:72:0d:10/00:00:00:00:00/40 tag 14 ncq dma 12288 out [ 324.719749][ T1101] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 324.725064][ T1101] ata1.00: status: { DRDY } [ 324.726360][ T1101] ata1.00: error: { ABRT } [ 324.731611][ T1101] ata1.00: configured for UDMA/100 [ 324.733660][ T1101] ata1: EH complete [ 325.835641][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 326.065823][T10522] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.070050][T10522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.079725][T10522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.084261][T10522] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.096506][ T6191] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 326.120485][ T30] usb 6-1: USB disconnect, device number 48 [ 326.239139][T10569] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 326.242446][T10569] netlink: 'syz.1.1211': attribute type 2 has an invalid length. [ 326.395595][T10573] openvswitch: netlink: EtherType 0 is less than min 600 [ 326.398997][T10573] program syz.1.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.565990][T10578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1213'. [ 326.568361][T10578] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1213'. [ 326.833395][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 326.973637][ C3] ata1: illegal qc_active transition (00000000->00002000) [ 326.979822][ T6191] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 326.981958][ T6191] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 326.984651][ T6191] usb 7-1: USB disconnect, device number 32 [ 327.301919][ T1101] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 327.305199][ T1101] ata1.00: configured for UDMA/100 [ 327.543251][ T30] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 327.730585][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 327.735146][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.738189][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.740859][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.743616][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.747060][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.749514][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.994276][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 327.995830][ T30] usbtmc 8-1:16.0: can't read capabilities [ 328.690475][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 329.280401][ T5982] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 329.562251][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 329.631041][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 329.716572][ T5982] usb 7-1: not running at top speed; connect to a high speed hub [ 329.719481][ T5982] usb 7-1: config 6 has an invalid interface number: 72 but max is 3 [ 329.721862][ T5982] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 329.725014][ T5982] usb 7-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 329.727772][ T5982] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 329.730039][ T5982] usb 7-1: config 6 has no interface number 0 [ 329.731772][ T5982] usb 7-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 329.735110][ T5982] usb 7-1: config 6 interface 72 has no altsetting 0 [ 329.738298][ T5982] usb 7-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 329.740853][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.743008][ T5982] usb 7-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 329.749506][ T5982] usb 7-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 329.756020][ T5982] usb 7-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 329.968375][T10619] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.042533][T10619] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.048926][ T30] usb 8-1: USB disconnect, device number 39 [ 330.105505][T10619] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.217951][T10619] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.524721][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 330.691451][ T30] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 330.750057][T10619] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.757716][T10619] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.762415][T10619] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.766958][T10619] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.778648][ T5982] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 330.870441][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 330.873055][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.875655][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.878383][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.881605][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.885123][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.887593][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.098646][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 331.100170][ T30] usbtmc 6-1:16.0: can't read capabilities [ 331.560757][ T5982] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 331.563205][ T5982] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 331.576249][ T5982] usb 7-1: USB disconnect, device number 33 [ 332.433865][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 332.620474][ T30] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 332.800376][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 332.802962][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.805606][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.808230][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.811058][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.814521][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.816950][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.857736][ T5296] Bluetooth: hci1: unexpected subevent 0x01 length: 12 < 18 [ 333.096313][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 333.097852][ T30] usbtmc 5-1:16.0: can't read capabilities [ 333.243352][ T30] usb 6-1: USB disconnect, device number 49 [ 333.542060][ T6081] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 333.692247][ T6081] usb 8-1: not running at top speed; connect to a high speed hub [ 333.695418][ T6081] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 333.697590][ T6081] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 333.699859][ T6081] usb 8-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 333.702662][ T6081] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 333.705031][ T6081] usb 8-1: config 6 has no interface number 0 [ 333.706632][ T6081] usb 8-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 333.710008][ T6081] usb 8-1: config 6 interface 72 has no altsetting 0 [ 333.713396][ T6081] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 333.715950][ T6081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.718011][ T6081] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 333.724678][ T6081] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 333.731272][ T6081] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 333.946846][T10682] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.003829][T10682] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.062812][T10682] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.137348][T10682] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.252742][T10682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.267868][T10682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.273991][T10682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.278401][T10682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.292546][ T6081] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 334.545942][T10707] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 335.070958][ T6081] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 335.073235][ T6081] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 335.078591][ T6081] usb 8-1: USB disconnect, device number 40 [ 335.120414][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 335.170818][ T6191] usb 5-1: USB disconnect, device number 38 [ 335.511376][ T30] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 335.660413][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 335.665928][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.668455][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.671997][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.674644][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.678024][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.795294][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.860856][T10727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1253'. [ 335.863585][T10727] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1253'. [ 336.012514][ T30] usb 7-1: GET_CAPABILITIES returned 0 [ 336.014490][ T30] usbtmc 7-1:16.0: can't read capabilities [ 336.446704][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 337.210451][ T6081] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 337.361281][ T6081] usb 8-1: not running at top speed; connect to a high speed hub [ 337.365017][ T6081] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 337.367125][ T6081] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 337.369380][ T6081] usb 8-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 337.375012][ T6081] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 337.377290][ T6081] usb 8-1: config 6 has no interface number 0 [ 337.378998][ T6081] usb 8-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 337.383823][ T6081] usb 8-1: config 6 interface 72 has no altsetting 0 [ 337.388439][ T6081] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 337.395447][ T6081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.398460][ T6081] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 337.407971][ T6081] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 337.421026][ T6081] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 337.634930][T10740] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.713296][T10740] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.816002][T10740] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.872809][T10740] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.077164][ T6789] usb 7-1: USB disconnect, device number 34 [ 338.334066][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 338.620444][ T6789] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 338.770593][ T6789] usb 5-1: Using ep0 maxpacket: 16 [ 338.774033][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.777158][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 338.780280][ T6789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 338.783399][ T6789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 338.786325][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.791487][ T6789] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 338.794557][ T6789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.796976][ T6789] usb 5-1: Product: syz [ 338.798146][ T6789] usb 5-1: Manufacturer: syz [ 338.799413][ T6789] usb 5-1: SerialNumber: syz [ 338.801649][ T6789] usb 5-1: config 0 descriptor?? [ 338.838338][T10740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.843920][T10740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.849927][T10740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.859646][T10740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.881562][ T6081] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 339.063874][ T6789] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 339.066713][ T6789] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 339.071089][ T6789] usb 5-1: USB disconnect, device number 39 [ 339.162653][T10773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1265'. [ 339.165130][T10773] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1265'. [ 339.853685][ T6081] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 339.855780][ T6081] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 339.865395][ T6081] usb 8-1: USB disconnect, device number 41 [ 340.201989][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 340.396820][T10796] 9pnet_virtio: no channels available for device syz [ 340.399584][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 341.310455][ T6789] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 341.460458][ T6789] usb 5-1: Using ep0 maxpacket: 16 [ 341.464048][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.466850][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 341.470006][ T6789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 341.473094][ T6789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 341.475971][ T6789] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.481984][ T6789] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 341.484307][ T6789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.486274][ T6789] usb 5-1: Product: syz [ 341.487380][ T6789] usb 5-1: Manufacturer: syz [ 341.488615][ T6789] usb 5-1: SerialNumber: syz [ 341.490716][ T6789] usb 5-1: config 0 descriptor?? [ 341.704989][ T6789] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 341.725478][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 341.728814][ T6789] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 341.737795][ T6789] usb 5-1: USB disconnect, device number 40 [ 342.215761][T10826] 9pnet_virtio: no channels available for device syz [ 342.290589][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 342.767629][ T39] audit: type=1800 audit(1734348812.865:42): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1282" name="/" dev="fuse" ino=1 res=0 errno=0 [ 342.773423][ T39] audit: type=1804 audit(1734348812.865:43): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1282" name="/newroot/318/file0" dev="fuse" ino=1 res=1 errno=0 [ 342.778696][ T39] audit: type=1800 audit(1734348812.865:44): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1282" name="/" dev="fuse" ino=1 res=0 errno=0 [ 343.094460][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 343.894239][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 344.076251][T10866] 9pnet_virtio: no channels available for device syz [ 344.116899][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 344.326994][T10869] 9pnet_virtio: no channels available for device syz [ 344.330725][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 345.100449][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 345.130619][ T6922] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 345.187176][T10882] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1295'. [ 345.189482][T10882] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1295'. [ 345.281630][ T6922] usb 6-1: not running at top speed; connect to a high speed hub [ 345.285599][ T6922] usb 6-1: config 6 has an invalid interface number: 72 but max is 3 [ 345.288446][ T6922] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 345.291566][ T6922] usb 6-1: config 6 has an invalid descriptor of length 231, skipping remainder of the config [ 345.295161][ T6922] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 345.298317][ T6922] usb 6-1: config 6 has no interface number 0 [ 345.306457][ T6922] usb 6-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 345.311165][ T6922] usb 6-1: config 6 interface 72 has no altsetting 0 [ 345.315455][ T6922] usb 6-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 345.318705][ T6922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.321821][ T6922] usb 6-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 345.330690][ T6922] usb 6-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 345.338099][ T6922] usb 6-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 345.556588][T10873] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.634332][T10873] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.687095][T10891] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 345.764108][T10873] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.822753][T10873] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.927851][T10873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.933219][T10873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.937670][T10873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.942279][T10873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.980070][ T6922] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 346.708177][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 346.761424][ T6922] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 346.763610][ T6922] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 346.767818][ T6922] usb 6-1: USB disconnect, device number 50 [ 347.870491][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 348.324868][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 348.610503][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 348.936332][T10956] 9pnet_virtio: no channels available for device syz [ 348.937564][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 349.754055][T10974] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 349.962029][ T6191] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 350.120428][ T6191] usb 7-1: Using ep0 maxpacket: 8 [ 350.122841][ T6191] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.125062][ T6191] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.127224][ T6191] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.129387][ T6191] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.132608][ T6191] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.134580][ T6191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.262011][ T39] audit: type=1804 audit(1734348820.365:45): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1320" name="/newroot/319/bus/bus" dev="overlay" ino=1764 res=1 errno=0 [ 350.264207][T10977] evm: overlay not supported [ 350.271827][T10977] Invalid ELF header magic: != ELF [ 350.341713][ T6191] usb 7-1: GET_CAPABILITIES returned 0 [ 350.343087][ T6191] usbtmc 7-1:16.0: can't read capabilities [ 350.578478][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 351.329489][T10997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1326'. [ 351.331952][T10997] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1326'. [ 351.636639][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 351.853435][T11007] FAULT_INJECTION: forcing a failure. [ 351.853435][T11007] name failslab, interval 1, probability 0, space 0, times 0 [ 351.857464][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.0.1329 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 351.860883][T11007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.864365][T11007] Call Trace: [ 351.865240][T11007] [ 351.866011][T11007] dump_stack_lvl+0x16c/0x1f0 [ 351.867252][T11007] should_fail_ex+0x497/0x5b0 [ 351.868482][T11007] ? fs_reclaim_acquire+0xae/0x150 [ 351.869819][T11007] should_failslab+0xc2/0x120 [ 351.871057][T11007] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 351.872485][T11007] ? sk_prot_alloc+0x60/0x2a0 [ 351.873747][T11007] sk_prot_alloc+0x60/0x2a0 [ 351.875168][T11007] sk_alloc+0x36/0xb90 [ 351.876353][T11007] inet_create+0x3a1/0x10a0 [ 351.877625][T11007] ? inet_create+0x90/0x10a0 [ 351.879196][T11007] __sock_create+0x335/0x8d0 [ 351.880729][T11007] mptcp_subflow_create_socket+0xf6/0x10a0 [ 351.882744][T11007] ? __pfx_mark_lock+0x10/0x10 [ 351.884424][T11007] ? lock_acquire.part.0+0x11b/0x380 [ 351.886190][T11007] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 351.888130][T11007] ? find_held_lock+0x2d/0x110 [ 351.889387][T11007] __mptcp_nmpc_sk+0x184/0x7d0 [ 351.890620][T11007] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 351.892267][T11007] ? __local_bh_enable_ip+0xa4/0x120 [ 351.894177][T11007] mptcp_sendmsg+0x1693/0x1f20 [ 351.895920][T11007] ? find_held_lock+0x2d/0x110 [ 351.897636][T11007] ? __pfx___might_resched+0x10/0x10 [ 351.899129][T11007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.901040][T11007] ? aa_sk_perm+0x2f5/0xb20 [ 351.902229][T11007] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 351.903569][T11007] ? __might_fault+0xe3/0x190 [ 351.904801][T11007] ? __import_iovec+0x1f2/0x6d0 [ 351.906072][T11007] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 351.907408][T11007] inet_sendmsg+0x119/0x140 [ 351.908606][T11007] ____sys_sendmsg+0x907/0xb40 [ 351.909858][T11007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.911491][T11007] ? get_compat_msghdr+0x11b/0x170 [ 351.913340][T11007] ___sys_sendmsg+0x135/0x1e0 [ 351.915077][T11007] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.916990][T11007] ? __pfx_lock_release+0x10/0x10 [ 351.918828][T11007] ? trace_lock_acquire+0x14e/0x1f0 [ 351.920723][T11007] ? __fget_files+0x206/0x3a0 [ 351.922488][T11007] __sys_sendmsg+0x16e/0x220 [ 351.924182][T11007] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.926112][T11007] __do_fast_syscall_32+0x73/0x120 [ 351.927787][T11007] do_fast_syscall_32+0x32/0x80 [ 351.929064][T11007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.930762][T11007] RIP: 0023:0xf7f23579 [ 351.931837][T11007] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.938112][T11007] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 351.940834][T11007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 351.942935][T11007] RDX: 0000000030004001 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.944988][T11007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.947065][T11007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.949110][T11007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.951180][T11007] [ 352.231125][ T6191] usb 7-1: USB disconnect, device number 35 [ 352.413582][T11019] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 352.511647][T11022] 9pnet_virtio: no channels available for device 127.0.0.1 [ 352.524700][T11024] 9pnet_virtio: no channels available for device syz [ 352.534099][ T64] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 352.536049][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 353.220233][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 353.464073][ T5296] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 353.497285][T11044] 9pnet_virtio: no channels available for device syz [ 353.499870][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 354.120489][ T6002] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 354.270074][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 354.273835][ T6002] usb 5-1: Using ep0 maxpacket: 8 [ 354.279908][ T6002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.322134][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.326844][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.332845][T11056] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 354.335670][ T6002] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.339660][ T6002] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.348484][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.357204][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 354.555186][ T6002] usb 5-1: GET_CAPABILITIES returned 0 [ 354.556734][ T6002] usbtmc 5-1:16.0: can't read capabilities [ 354.638484][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 354.641742][T11062] 9pnet_virtio: no channels available for device syz [ 355.140087][T11069] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 356.450452][ T6789] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 356.465967][ T5296] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 356.600403][ T6789] usb 8-1: Using ep0 maxpacket: 16 [ 356.603748][ T6789] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.606567][ T6789] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 356.609614][ T6789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 356.612600][ T6789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 356.615838][ T6789] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.621927][ T6789] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 356.624389][ T6789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.626650][ T6789] usb 8-1: Product: syz [ 356.627761][ T6789] usb 8-1: Manufacturer: syz [ 356.628977][ T6789] usb 8-1: SerialNumber: syz [ 356.631291][ T6789] usb 8-1: config 0 descriptor?? [ 356.850464][ T72] usb 5-1: USB disconnect, device number 41 [ 356.891632][ T6789] appledisplay 8-1:0.0: Error while getting initial brightness: -110 [ 356.895777][ T6789] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -110 [ 356.904825][ T6789] usb 8-1: USB disconnect, device number 42 [ 357.175818][T11101] 9pnet_virtio: no channels available for device syz [ 357.186032][ T5296] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 357.479742][T11112] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1362'. [ 358.030592][ T6789] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 358.145758][ T5296] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 358.250440][ T72] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 358.273071][ T6789] usb 8-1: not running at top speed; connect to a high speed hub [ 358.276818][ T6789] usb 8-1: config 6 has an invalid interface number: 72 but max is 3 [ 358.279054][ T6789] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 358.281558][ T6789] usb 8-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 358.284078][ T6789] usb 8-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 358.288866][ T6789] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 358.292015][ T6789] usb 8-1: config 6 has no interface number 0 [ 358.293740][ T6789] usb 8-1: config 6 interface 72 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 358.297253][ T6789] usb 8-1: config 6 interface 72 has no altsetting 0 [ 358.302423][ T6789] usb 8-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=e5.c9 [ 358.304861][ T6789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.307027][ T6789] usb 8-1: Product: ಭ痸㺌倚䂞䜨腘廡嗀Ὠ₍޹鄃팿챼ڃ눏鹀₏ﴳ憝锕⅋鵶濛笎槙夂罚煿ﯟ萧穤꘸ꢂ䍲㊠劭亮ꆹ濑깑䑈鉱῀䅬줱㧾蹔魢ጨ쇥朆ᒄ丷㾩暑껜芨ꅘ냐ᩈ䘾쒺蹩獇퓆ᛅ缺갂♪뺉ꓬ⦃췓譞⩢톖 [ 358.313931][ T6789] usb 8-1: Manufacturer: Υί怡輓뷼㬰쀛澠엡癣攗홼⪝ᛧ홆丟ට⮓꺄捖摿⡜옥朼瀮㰌᧹䄷斈뻲搡倖埾飔滽횣凅꺊꥙窆咐ꥐ⦀褯碂稵淣鷹㙤넡ꨠ髦ՙ٭雹퇡㬢隴褃༡Ⅰ潟赹㷾䖡ַ߹ஃ虿 [ 358.320877][ T6789] usb 8-1: SerialNumber: 각ྚ摩჆癏䗳̻珨䈚訚◈̔性㦃啨눞Dz欛덺갶㒊보呏퀞Ꝋ♅몪撀邷䯏輱煫ꄚ僆傞撢捅䈲꧑뱆곆롈ꃒ嗥ꤕ燥঵峙鞇슾츾崵봽鲸蹢缚藏ࡸ侥⸶䥰ओ崃熥內跢娄㢉塠嵫㣮⛤ㆼ狞쬽㹘⨟힓㌩ [ 358.420434][ T72] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.536915][T11115] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.560442][ T72] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 358.651641][T11115] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.672327][ T64] Bluetooth: hci4: sending frame failed (-49) [ 358.673276][T11134] Bluetooth: hci4: Frame reassembly failed (-84) [ 358.674834][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 358.740520][ T72] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.742212][ T72] usb usb5-port1: attempt power cycle [ 358.754171][T11115] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.841565][T11115] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.932875][T11115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.938245][T11115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.944947][T11115] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.949969][T11115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.991109][ T6789] usb 8-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XE5C9): ADI930 [ 359.080416][ T72] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 359.101104][ T72] usb 5-1: Invalid ep0 maxpacket: 32 [ 359.160396][ T30] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 359.230387][ T72] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 359.252608][ T72] usb 5-1: Invalid ep0 maxpacket: 32 [ 359.254184][ T72] usb usb5-port1: unable to enumerate USB device [ 359.310441][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 359.314429][ T30] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.318164][ T30] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 359.322384][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 359.326203][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 359.329979][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.336175][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 359.339258][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.342382][ T30] usb 6-1: Product: syz [ 359.343862][ T30] usb 6-1: Manufacturer: syz [ 359.345423][ T30] usb 6-1: SerialNumber: syz [ 359.347793][ T30] usb 6-1: config 0 descriptor?? [ 359.415278][T11143] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 359.612762][ T30] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 359.613846][ T30] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 359.629500][ T6191] usb 6-1: USB disconnect, device number 51 [ 359.761549][ T6789] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 359.763777][ T6789] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 359.772459][ T6789] usb 8-1: USB disconnect, device number 43 [ 359.827996][ T39] audit: type=1800 audit(1734348829.925:46): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1376" name="file0" dev="9p" ino=36574852 res=0 errno=0 [ 359.853992][T11155] overlayfs: upper fs needs to support d_type. [ 359.856084][T11155] overlayfs: upper fs does not support tmpfile. [ 359.861637][T11155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 359.867432][T11155] overlayfs: failed to set xattr on upper [ 359.869455][T11155] overlayfs: ...falling back to redirect_dir=nofollow. [ 359.872178][T11155] overlayfs: ...falling back to index=off. [ 359.875089][T11155] overlayfs: ...falling back to uuid=null. [ 359.902168][ T39] audit: type=1800 audit(1734348830.005:47): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1376" name="file2" dev="overlay" ino=36574951 res=0 errno=0 [ 359.930120][T11155] ------------[ cut here ]------------ [ 359.931885][T11155] WARNING: CPU: 0 PID: 11155 at fs/overlayfs/dir.c:213 ovl_create_real+0x5ab/0x670 [ 359.934472][T11155] Modules linked in: [ 359.935721][T11155] CPU: 0 UID: 0 PID: 11155 Comm: syz.2.1376 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 359.940374][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.943403][T11155] RIP: 0010:ovl_create_real+0x5ab/0x670 [ 359.944877][T11155] Code: 89 e2 48 c7 c6 c0 c2 89 8b 48 c7 c7 90 4d 0d 90 e8 6a b3 ba 01 e9 d9 fb ff ff e8 b0 d4 ef fe e9 93 fc ff ff e8 a6 61 8d fe 90 <0f> 0b 90 4c 89 e3 49 c7 c4 fb ff ff ff e9 d5 fc ff ff e8 ce 15 0e [ 359.949919][T11155] RSP: 0018:ffffc90003ddfc28 EFLAGS: 00010287 [ 359.952033][T11155] RAX: 0000000000001cf5 RBX: ffff888067972eb0 RCX: ffffc9000d0a1000 [ 359.954226][T11155] RDX: 0000000000080000 RSI: ffffffff830bed4a RDI: ffff888067972f18 [ 359.956292][T11155] RBP: 1ffff920007bbf86 R08: 0000000000000005 R09: 0000000000000000 [ 359.958377][T11155] R10: 0000000000000000 R11: 0000000000000004 R12: ffff888067972eb0 [ 359.960613][T11155] R13: 0000000000000000 R14: ffff88804ceead10 R15: 000000000000a000 [ 359.962706][T11155] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5085b40 [ 359.965083][T11155] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 359.967164][T11155] CR2: 000000000c2dee4f CR3: 000000006bf56000 CR4: 0000000000352ef0 [ 359.969351][T11155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.971599][T11155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.973692][T11155] Call Trace: [ 359.974574][T11155] [ 359.975448][T11155] ? __warn+0xea/0x3c0 [ 359.976527][T11155] ? ovl_create_real+0x5ab/0x670 [ 359.977831][T11155] ? report_bug+0x3c0/0x580 [ 359.979016][T11155] ? handle_bug+0x54/0xa0 [ 359.980376][T11155] ? exc_invalid_op+0x17/0x50 [ 359.981707][T11155] ? asm_exc_invalid_op+0x1a/0x20 [ 359.983030][T11155] ? ovl_create_real+0x5aa/0x670 [ 359.984329][T11155] ? ovl_create_real+0x5ab/0x670 [ 359.985583][T11155] ? ovl_create_real+0x5aa/0x670 [ 359.986872][T11155] ? __pfx_ovl_create_real+0x10/0x10 [ 359.988272][T11155] ovl_create_or_link+0x2a4/0x800 [ 359.989589][T11155] ? inode_init_owner+0x2d5/0x3c0 [ 359.990998][T11155] ovl_create_object+0x268/0x300 [ 359.992219][T11155] ? __pfx_ovl_create_object+0x10/0x10 [ 359.993701][T11155] ? bpf_lsm_inode_permission+0x9/0x10 [ 359.995154][T11155] ? security_inode_permission+0xbf/0x260 [ 359.996582][T11155] ? inode_permission+0xdd/0x5f0 [ 359.998210][T11155] vfs_symlink+0x3e8/0x660 [ 359.999418][T11155] do_symlinkat+0x263/0x310 [ 360.000792][T11155] ? __pfx_do_symlinkat+0x10/0x10 [ 360.002097][T11155] ? getname_flags.part.0+0x1c5/0x550 [ 360.003484][T11155] __ia32_sys_symlink+0x74/0x90 [ 360.004769][T11155] __do_fast_syscall_32+0x73/0x120 [ 360.006114][T11155] do_fast_syscall_32+0x32/0x80 [ 360.007400][T11155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.009092][T11155] RIP: 0023:0xf7f55579 [ 360.010185][T11155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 360.015715][T11155] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 360.017966][T11155] RAX: ffffffffffffffda RBX: 00000000200049c0 RCX: 00000000200059c0 [ 360.020030][T11155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.022137][T11155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.024221][T11155] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 360.026697][T11155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.028781][T11155] [ 360.029602][T11155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.031513][T11155] CPU: 0 UID: 0 PID: 11155 Comm: syz.2.1376 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 360.034276][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.037056][T11155] Call Trace: [ 360.037999][T11155] [ 360.038796][T11155] dump_stack_lvl+0x3d/0x1f0 [ 360.040343][T11155] panic+0x71d/0x800 [ 360.041445][T11155] ? __pfx_panic+0x10/0x10 [ 360.042622][T11155] ? show_trace_log_lvl+0x29d/0x3d0 [ 360.044033][T11155] ? ovl_create_real+0x5ab/0x670 [ 360.045346][T11155] check_panic_on_warn+0xab/0xb0 [ 360.046668][T11155] __warn+0xf6/0x3c0 [ 360.047752][T11155] ? ovl_create_real+0x5ab/0x670 [ 360.049056][T11155] report_bug+0x3c0/0x580 [ 360.050215][T11155] handle_bug+0x54/0xa0 [ 360.051314][T11155] exc_invalid_op+0x17/0x50 [ 360.052504][T11155] asm_exc_invalid_op+0x1a/0x20 [ 360.053800][T11155] RIP: 0010:ovl_create_real+0x5ab/0x670 [ 360.055270][T11155] Code: 89 e2 48 c7 c6 c0 c2 89 8b 48 c7 c7 90 4d 0d 90 e8 6a b3 ba 01 e9 d9 fb ff ff e8 b0 d4 ef fe e9 93 fc ff ff e8 a6 61 8d fe 90 <0f> 0b 90 4c 89 e3 49 c7 c4 fb ff ff ff e9 d5 fc ff ff e8 ce 15 0e [ 360.060614][T11155] RSP: 0018:ffffc90003ddfc28 EFLAGS: 00010287 [ 360.062210][T11155] RAX: 0000000000001cf5 RBX: ffff888067972eb0 RCX: ffffc9000d0a1000 [ 360.064295][T11155] RDX: 0000000000080000 RSI: ffffffff830bed4a RDI: ffff888067972f18 [ 360.066353][T11155] RBP: 1ffff920007bbf86 R08: 0000000000000005 R09: 0000000000000000 [ 360.068458][T11155] R10: 0000000000000000 R11: 0000000000000004 R12: ffff888067972eb0 [ 360.070493][T11155] R13: 0000000000000000 R14: ffff88804ceead10 R15: 000000000000a000 [ 360.072550][T11155] ? ovl_create_real+0x5aa/0x670 [ 360.073787][T11155] ? ovl_create_real+0x5aa/0x670 [ 360.075002][T11155] ? __pfx_ovl_create_real+0x10/0x10 [ 360.076384][T11155] ovl_create_or_link+0x2a4/0x800 [ 360.077724][T11155] ? inode_init_owner+0x2d5/0x3c0 [ 360.079110][T11155] ovl_create_object+0x268/0x300 [ 360.080706][T11155] ? __pfx_ovl_create_object+0x10/0x10 [ 360.082085][T11155] ? bpf_lsm_inode_permission+0x9/0x10 [ 360.083507][T11155] ? security_inode_permission+0xbf/0x260 [ 360.084983][T11155] ? inode_permission+0xdd/0x5f0 [ 360.086279][T11155] vfs_symlink+0x3e8/0x660 [ 360.087502][T11155] do_symlinkat+0x263/0x310 [ 360.088783][T11155] ? __pfx_do_symlinkat+0x10/0x10 [ 360.090105][T11155] ? getname_flags.part.0+0x1c5/0x550 [ 360.091604][T11155] __ia32_sys_symlink+0x74/0x90 [ 360.092878][T11155] __do_fast_syscall_32+0x73/0x120 [ 360.094246][T11155] do_fast_syscall_32+0x32/0x80 [ 360.095910][T11155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.097608][T11155] RIP: 0023:0xf7f55579 [ 360.098683][T11155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 360.103666][T11155] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 360.105860][T11155] RAX: ffffffffffffffda RBX: 00000000200049c0 RCX: 00000000200059c0 [ 360.107994][T11155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.110449][T11155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.112617][T11155] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 360.114676][T11155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.116732][T11155] [ 360.118196][T11155] Kernel Offset: disabled [ 360.119417][T11155] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:47:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90003ddf588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008 R12=0000000000000000 R13=0000000000000030 R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2dee4f CR3=000000006bf56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000014648c1 RBX=0000000000000001 RCX=ffffffff8b1a17a9 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16c00 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cd990 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006bf56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000059d547 RBX=0000000000000002 RCX=ffffffff8b1a17a9 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16c00 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cd990 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005621d75e7000 CR3=000000004b8fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000053c437 RBX=0000000000000003 RCX=ffffffff8b1a17a9 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16c00 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cd990 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200059c0 CR3=000000004bfcc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000