last executing test programs: 2.446771053s ago: executing program 2 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000084) 2.363773182s ago: executing program 2 (id=379): syz_usb_connect$uac1(0x2, 0x7a, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x3061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfb, 0x4, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x4, 0x6, {0x7, 0x25, 0x1, 0x4, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x1, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x5}}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 1.262921001s ago: executing program 0 (id=385): set_mempolicy(0x3, &(0x7f0000000080)=0x1b, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) 1.26101979s ago: executing program 3 (id=386): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x7fff, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 1.140454695s ago: executing program 0 (id=387): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 1.140260283s ago: executing program 2 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c840) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) 1.139961162s ago: executing program 2 (id=390): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.05164301s ago: executing program 0 (id=392): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x3c) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 1.03311152s ago: executing program 3 (id=393): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x4002}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x1004, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0x7, 0xe, 0x975e, 0x40005, 0x1, 0xe, 0x0, 0xfffffffc, 0x200000, 0x0, 0xa0000000, 0x6, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff1, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x5, 0x0, 0xc0800000, 0x100, 0x0, 0xffffffdd, 0x4, 0x10, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986, 0x7], [0x2b, 0xbc1, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x6, 0x3, 0xc7fff, 0x40000, 0x5, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x3], [0xfffffffe, 0x1, 0x4, 0x0, 0xfffffff9, 0x0, 0x2, 0x5, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8000, 0x8080, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) writev(r0, &(0x7f0000001ac0)=[{0x0}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 963.599126ms ago: executing program 0 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89", 0x1}], 0x1}, 0x4004010) 962.697135ms ago: executing program 2 (id=395): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0x200, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x42], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xfc, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x2, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x0, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0xde5e, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0x1, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x2, 0x0, 0x6, 0xfffffffb, 0x6, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x20000005, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 890.485039ms ago: executing program 0 (id=396): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 832.298157ms ago: executing program 0 (id=397): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$inet(0x2, 0x4000000000000001, 0x0) 832.009325ms ago: executing program 2 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x10001043, r3, 0x0) 446.037865ms ago: executing program 1 (id=401): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 363.29724ms ago: executing program 3 (id=402): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, 0x0, 0x0, 0xffffffff8) 362.60595ms ago: executing program 1 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r0, &(0x7f0000000040)="b6e8b5", 0x3, 0x20008080, &(0x7f0000000080)=@hci={0x1f, 0x2, 0x2}, 0x80) 273.723673ms ago: executing program 3 (id=404): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 272.182318ms ago: executing program 1 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42141, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xd, 0xb}, {0x8, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 123.727574ms ago: executing program 3 (id=406): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) 117.761238ms ago: executing program 1 (id=407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 51.579317ms ago: executing program 3 (id=408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={0x1c, 0x10, 0x21, 0x70bd26, 0x0, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x116}]}]}, 0x1c}}, 0x80) openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 51.308922ms ago: executing program 1 (id=409): socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') pipe(&(0x7f0000000240)) pipe2(&(0x7f0000000000), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 1 (id=410): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x4002}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x1004, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0x7, 0xe, 0x975e, 0x40005, 0x1, 0xe, 0x0, 0xfffffffc, 0x200000, 0x0, 0xa0000000, 0x6, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff1, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x5, 0x0, 0xc0800000, 0x100, 0x0, 0xffffffdd, 0x4, 0x10, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986, 0x7], [0x2b, 0xbc1, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x6, 0x3, 0xc7fff, 0x40000, 0x5, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x3], [0xfffffffe, 0x1, 0x4, 0x0, 0xfffffff9, 0x0, 0x2, 0x5, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8000, 0x8080, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) writev(r0, &(0x7f0000001ac0)=[{0x0}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55860' (ED25519) to the list of known hosts. [ 41.032381][ T5715] cgroup: Unknown subsys name 'net' [ 41.183509][ T5715] cgroup: Unknown subsys name 'cpuset' [ 41.190124][ T5715] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.165994][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.067636][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.068316][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.070859][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.074859][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.076465][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.078221][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.080179][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.083167][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.084717][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.087822][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.090886][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.092853][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.095213][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.095611][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.097522][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.097602][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.097971][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.099087][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.110123][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.117011][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.636872][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.639712][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.642144][ T5744] bridge_slave_0: entered allmulticast mode [ 46.644850][ T5744] bridge_slave_0: entered promiscuous mode [ 46.680517][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.682910][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.685290][ T5744] bridge_slave_1: entered allmulticast mode [ 46.688127][ T5744] bridge_slave_1: entered promiscuous mode [ 46.697904][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.700358][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.702657][ T5734] bridge_slave_0: entered allmulticast mode [ 46.705304][ T5734] bridge_slave_0: entered promiscuous mode [ 46.709936][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.712499][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.714896][ T5740] bridge_slave_0: entered allmulticast mode [ 46.717637][ T5740] bridge_slave_0: entered promiscuous mode [ 46.736063][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.738550][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.741086][ T5734] bridge_slave_1: entered allmulticast mode [ 46.743735][ T5734] bridge_slave_1: entered promiscuous mode [ 46.752196][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.754660][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.756994][ T5740] bridge_slave_1: entered allmulticast mode [ 46.759876][ T5740] bridge_slave_1: entered promiscuous mode [ 46.798781][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.803908][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.809012][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.813683][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.829014][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.833858][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.850054][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.852561][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.854874][ T5733] bridge_slave_0: entered allmulticast mode [ 46.857546][ T5733] bridge_slave_0: entered promiscuous mode [ 46.862356][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.864676][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.867008][ T5733] bridge_slave_1: entered allmulticast mode [ 46.869695][ T5733] bridge_slave_1: entered promiscuous mode [ 46.896126][ T5740] team0: Port device team_slave_0 added [ 46.918678][ T5734] team0: Port device team_slave_0 added [ 46.922293][ T5740] team0: Port device team_slave_1 added [ 46.925186][ T5744] team0: Port device team_slave_0 added [ 46.928346][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.932850][ T5734] team0: Port device team_slave_1 added [ 46.975146][ T5744] team0: Port device team_slave_1 added [ 46.978955][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.991362][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.993596][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.001685][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.006620][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.009160][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.017439][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.064376][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.066638][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.074660][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.079426][ T5733] team0: Port device team_slave_0 added [ 47.083225][ T5733] team0: Port device team_slave_1 added [ 47.085455][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.087716][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.095468][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.099730][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.101930][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.109900][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.122903][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.125007][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.133144][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.172142][ T5740] hsr_slave_0: entered promiscuous mode [ 47.174828][ T5740] hsr_slave_1: entered promiscuous mode [ 47.178096][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.180679][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.189978][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.195673][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.197904][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.205986][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.233199][ T5734] hsr_slave_0: entered promiscuous mode [ 47.235478][ T5734] hsr_slave_1: entered promiscuous mode [ 47.237600][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.239676][ T5734] Cannot create hsr debugfs directory [ 47.280080][ T5733] hsr_slave_0: entered promiscuous mode [ 47.282330][ T5733] hsr_slave_1: entered promiscuous mode [ 47.284388][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.286215][ T5733] Cannot create hsr debugfs directory [ 47.303988][ T5744] hsr_slave_0: entered promiscuous mode [ 47.307683][ T5744] hsr_slave_1: entered promiscuous mode [ 47.310829][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 47.313135][ T5744] Cannot create hsr debugfs directory [ 47.563352][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.570345][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.573370][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.579572][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.583249][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.586948][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.589769][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.594327][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.629435][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.635064][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.637889][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.641903][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.644736][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.649040][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.652445][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.656719][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.703422][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.709336][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.712921][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.716571][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.719481][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.723341][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.726312][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.731127][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.785202][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.790258][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.796137][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.800199][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.802892][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.806552][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.817597][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.825605][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.835565][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.859167][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.864915][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.876220][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.878821][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.892882][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.895261][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.901928][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.911206][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.913502][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.925840][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.935690][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.938003][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.969557][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.981679][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.984000][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.988405][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.990707][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.024846][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.048341][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.056848][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059323][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.064129][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.066477][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.169551][ T5739] Bluetooth: hci3: command tx timeout [ 48.169556][ T64] Bluetooth: hci1: command tx timeout [ 48.169614][ T5746] Bluetooth: hci2: command tx timeout [ 48.181169][ T5746] Bluetooth: hci0: command tx timeout [ 48.276137][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.297367][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.311089][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.323978][ T5740] veth0_vlan: entered promiscuous mode [ 48.341995][ T5740] veth1_vlan: entered promiscuous mode [ 48.362253][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.373705][ T5734] veth0_vlan: entered promiscuous mode [ 48.390525][ T5733] veth0_vlan: entered promiscuous mode [ 48.398095][ T5734] veth1_vlan: entered promiscuous mode [ 48.410314][ T5740] veth0_macvtap: entered promiscuous mode [ 48.414231][ T5733] veth1_vlan: entered promiscuous mode [ 48.418133][ T5740] veth1_macvtap: entered promiscuous mode [ 48.449092][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.453887][ T5733] veth0_macvtap: entered promiscuous mode [ 48.459837][ T5744] veth0_vlan: entered promiscuous mode [ 48.462628][ T5734] veth0_macvtap: entered promiscuous mode [ 48.465964][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.470521][ T5733] veth1_macvtap: entered promiscuous mode [ 48.479396][ T5734] veth1_macvtap: entered promiscuous mode [ 48.494275][ T5744] veth1_vlan: entered promiscuous mode [ 48.497852][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.509222][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.513260][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.517476][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.528997][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.537258][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.576524][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.580809][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.599799][ T5744] veth0_macvtap: entered promiscuous mode [ 48.614939][ T5744] veth1_macvtap: entered promiscuous mode [ 48.625094][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.630038][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.643827][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.648759][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.655474][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.670261][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.677262][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.679592][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.680863][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.702612][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.703005][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.726290][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.738367][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.743596][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.750868][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.751019][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.751260][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.751272][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.753312][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.754138][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.756353][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.819416][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.823062][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.869061][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.869754][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.874012][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.877176][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.899683][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.905903][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.908908][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.911695][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.916311][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.969828][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.988828][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.004651][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.789095][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.794832][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 49.923662][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 49.948373][ T5813] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 49.956907][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.203962][ T5746] Bluetooth: hci4: Reading Intel version command failed (-71) [ 50.204906][ T5813] usb 5-1: USB disconnect, device number 2 [ 50.248705][ T5746] Bluetooth: hci2: command tx timeout [ 50.249360][ T5739] Bluetooth: hci3: command tx timeout [ 50.252518][ T64] Bluetooth: hci1: command tx timeout [ 50.715272][ T5942] gfs2: not a GFS2 filesystem [ 50.735613][ T5942] hpfs: Bad magic ... probably not HPFS [ 51.920647][ T6000] Zero length message leads to an empty skb [ 52.328691][ T5739] Bluetooth: hci3: command tx timeout [ 52.330477][ T64] Bluetooth: hci1: command tx timeout [ 52.337811][ T5739] Bluetooth: hci2: command tx timeout [ 52.893006][ T42] audit: type=1800 audit(1786408453.179:2): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="file0" dev="overlay" ino=62 res=0 errno=0 [ 53.174716][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 53.300917][ T6022] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 53.383359][ T5524] IPVS: starting estimator thread 0... [ 53.387118][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 53.478733][ T6026] IPVS: using max 44 ests per chain, 105600 per kthread [ 53.808780][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.958829][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 53.962580][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 53.967335][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.972458][ T10] usb 8-1: config 0 descriptor?? [ 54.188471][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 54.195584][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.199844][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 54.202142][ T10] usb 8-1: media controller created [ 54.210705][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.307198][ T6040] Bluetooth: MGMT ver 1.23 [ 54.408823][ T64] Bluetooth: hci2: command tx timeout [ 54.408960][ T5746] Bluetooth: hci1: command tx timeout [ 54.409943][ T5739] Bluetooth: hci3: command tx timeout [ 54.596329][ T10] az6027: usb out operation failed. (-71) [ 54.598243][ T10] stb0899_attach: Driver disabled by Kconfig [ 54.600181][ T10] az6027: no front-end attached [ 54.600181][ T10] [ 54.602658][ T10] az6027: usb out operation failed. (-71) [ 54.604449][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 54.608466][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 54.615503][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 54.618469][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 54.623885][ T10] usb 8-1: USB disconnect, device number 2 [ 54.645585][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 55.607711][ T6109] support for the xor transformation has been removed. [ 55.614109][ T6106] binder: 6105:6106 unknown command 0 [ 55.616305][ T6106] binder: 6105:6106 ioctl c0306201 800004c0 returned -22 [ 56.302509][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 56.437730][ T42] audit: type=1800 audit(1786408456.719:3): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="scan_secs" dev="configfs" ino=8799 res=0 errno=0 [ 56.539230][ T6145] ======================================================= [ 56.539230][ T6145] WARNING: The mand mount option has been deprecated and [ 56.539230][ T6145] and is ignored by this kernel. Remove the mand [ 56.539230][ T6145] option from the mount to silence this warning. [ 56.539230][ T6145] ======================================================= [ 57.398682][ T60] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 57.475118][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 57.537933][ T42] audit: type=1800 audit(1786408457.819:4): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.82" name="scan_secs" dev="configfs" ino=10671 res=0 errno=0 [ 57.580098][ T60] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 57.592537][ T60] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.599164][ T60] usb 8-1: config 0 has no interface number 0 [ 57.601180][ T60] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.611331][ T60] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.615636][ T60] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.621467][ T60] usb 8-1: config 0 interface 1 has no altsetting 0 [ 57.624706][ T60] usb 8-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 57.627324][ T60] usb 8-1: Manufacturer: syz [ 57.628274][ T6178] capability: warning: `syz.0.87' uses deprecated v2 capabilities in a way that may be insecure [ 57.637463][ T60] usb 8-1: config 0 descriptor?? [ 58.131001][ T6197] 9pnet_fd: p9_fd_create_tcp (6197): problem binding to privport [ 58.278926][ T60] input: syz Pen as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.1/0003:145F:0212.0002/input/input6 [ 58.346860][ T60] input: syz Pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.1/0003:145F:0212.0002/input/input7 [ 58.369330][ T60] uclogic 0003:145F:0212.0002: input,hidraw1: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.3-1/input1 [ 58.494557][ T60] usb 8-1: USB disconnect, device number 3 [ 58.596054][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 58.653938][ T42] audit: type=1800 audit(1786408458.939:5): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.94" name="scan_secs" dev="configfs" ino=9712 res=0 errno=0 [ 59.118740][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.245420][ T6225] input: syz1 as /devices/virtual/input/input8 [ 59.248532][ T6225] input: failed to attach handler leds to device input8, error: -6 [ 59.269581][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.274323][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.282392][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.285684][ T50] usb 7-1: Product: syz [ 59.287340][ T50] usb 7-1: Manufacturer: syz [ 59.289632][ T50] usb 7-1: SerialNumber: syz [ 59.930453][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 60.057724][ T6231] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 60.061985][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 60.317344][ T50] cdc_ncm 7-1:1.0: failed to get mac address [ 60.521799][ T50] cdc_ncm 7-1:1.0: bind() failure [ 60.528324][ T50] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 60.531493][ T50] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 60.534609][ T50] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 60.539939][ T50] usb 7-1: USB disconnect, device number 2 [ 60.548828][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.719250][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 60.723539][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.727324][ T10] usb 5-1: config 0 has no interfaces? [ 60.741189][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.743845][ T10] usb 5-1: Product: syz [ 60.745143][ T10] usb 5-1: Manufacturer: syz [ 60.746696][ T10] usb 5-1: SerialNumber: syz [ 60.750858][ T10] usb 5-1: config 0 descriptor?? [ 60.813647][ T42] audit: type=1800 audit(1786408461.099:6): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.109" name="scan_secs" dev="configfs" ino=11581 res=0 errno=0 [ 61.108756][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.808659][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 61.969466][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 61.979384][ T10] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 61.983631][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.986272][ T10] usb 6-1: Product: syz [ 61.987594][ T10] usb 6-1: Manufacturer: syz [ 61.989137][ T10] usb 6-1: SerialNumber: syz [ 62.001414][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 62.003430][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 62.018528][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 62.128821][ T6258] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 62.132755][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 62.210772][ T10] r8152-cfgselector 6-1: Needed 2 retries to read version [ 62.240123][ T6268] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 62.417098][ T60] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 62.963282][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.971370][ T6273] tipc: Started in network mode [ 62.974791][ T6273] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 62.980071][ T6273] tipc: Enabled bearer , priority 10 [ 63.320081][ T5813] usb 5-1: USB disconnect, device number 3 [ 63.399062][ T42] audit: type=1800 audit(1786408463.679:7): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.124" name="scan_secs" dev="configfs" ino=9782 res=0 errno=0 [ 63.972481][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.983806][ T24] tipc: Node number set to 4269801492 [ 64.177897][ T6290] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 64.183264][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 64.211858][ T6309] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 64.324045][ T6318] syzkaller0: entered promiscuous mode [ 64.326165][ T6318] syzkaller0: entered allmulticast mode [ 64.333144][ T6318] tipc: Started in network mode [ 64.334756][ T6318] tipc: Node identity eaf2897282f2, cluster identity 4711 [ 64.337536][ T6318] tipc: Enabled bearer , priority 0 [ 64.343605][ T6318] tipc: Resetting bearer [ 64.347911][ T6317] tipc: Resetting bearer [ 64.358644][ T6317] tipc: Disabling bearer [ 64.468327][ T42] audit: type=1800 audit(1786408464.749:8): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="scan_secs" dev="configfs" ino=11728 res=0 errno=0 [ 64.560272][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 64.604299][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 64.658511][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 64.771458][ T6336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.860529][ T42] audit: type=1800 audit(1786408465.149:9): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.148" name="scan_secs" dev="configfs" ino=11768 res=0 errno=0 [ 65.011458][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 65.176554][ T42] audit: type=1800 audit(1786408465.459:10): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="scan_secs" dev="configfs" ino=11798 res=0 errno=0 [ 65.188535][ T6357] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 65.251615][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 65.273013][ T6380] tipc: Started in network mode [ 65.275030][ T6380] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 65.284571][ T6380] tipc: Enabled bearer , priority 10 [ 65.461023][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.608761][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 65.611446][ T10] usb 6-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 65.615295][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 512, setting to 64 [ 65.620970][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.623625][ T10] usb 6-1: Product: syz [ 65.624958][ T10] usb 6-1: Manufacturer: syz [ 65.626525][ T10] usb 6-1: SerialNumber: syz [ 65.846083][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.849890][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 65.910747][ T10] usb 6-1: USB disconnect, device number 3 [ 66.399884][ T10] tipc: Node number set to 4269801492 [ 66.967534][ T6440] futex_wake_op: syz.2.185 tries to shift op by 144; fix this program [ 68.078741][ T1341] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.238339][ T6477] __nla_validate_parse: 1 callbacks suppressed [ 68.238354][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 68.263665][ T1341] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 68.267587][ T1341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.272610][ T1341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.275768][ T1341] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.280126][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.281082][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 68.284438][ T1341] usb 5-1: config 0 descriptor?? [ 68.381234][ T6479] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 68.431212][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 68.722794][ T1341] thrustmaster 0003:044F:B324.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.0-1/input0 [ 68.732739][ T1341] thrustmaster 0003:044F:B324.0003: no inputs found [ 68.887109][ T42] audit: type=1800 audit(1786408469.169:11): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="scan_secs" dev="configfs" ino=9904 res=0 errno=0 [ 68.912280][ T1487] usb 5-1: USB disconnect, device number 4 [ 69.557291][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 69.568532][ T6524] input: syz1 as /devices/virtual/input/input10 [ 69.617819][ T42] audit: type=1800 audit(1786408469.899:12): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="scan_secs" dev="configfs" ino=10974 res=0 errno=0 [ 69.675580][ T6532] syzkaller0: entered promiscuous mode [ 69.677973][ T6532] syzkaller0: entered allmulticast mode [ 69.679122][ T42] audit: type=1800 audit(1786408469.969:13): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.223" name=4003 dev="tmpfs" ino=312 res=0 errno=0 [ 69.693676][ T6532] tipc: Started in network mode [ 69.695307][ T6532] tipc: Node identity 1af76199cd71, cluster identity 4711 [ 69.697669][ T6532] tipc: Enabled bearer , priority 0 [ 69.703494][ T6532] tipc: Resetting bearer [ 69.709484][ T6531] tipc: Resetting bearer [ 69.717482][ T6531] tipc: Disabling bearer [ 70.346669][ T6552] process 'syz.1.229' launched './file0' with NULL argv: empty string added [ 70.638684][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.916535][ T60] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 70.972372][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.975054][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.123672][ T60] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.127211][ T60] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 71.131653][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.560697][ C3] usb 6-1: received EP1 urb->status = -2 [ 71.562643][ T60] usb 6-1: unable to init card! (ret=-110) [ 71.564936][ T60] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 71.668447][ T6587] syzkaller0: entered promiscuous mode [ 71.670294][ T6587] syzkaller0: entered allmulticast mode [ 71.749727][ T5883] usb 6-1: USB disconnect, device number 4 [ 72.058761][ T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.104976][ T6597] netlink: 51 bytes leftover after parsing attributes in process `syz.0.242'. [ 72.221299][ T41] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.226887][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.231478][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.236117][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.239740][ T41] usb 8-1: SerialNumber: syz [ 72.459322][ T41] usb 8-1: 0:2 : does not exist [ 72.471445][ T6603] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 72.490468][ T41] usb 8-1: USB disconnect, device number 4 [ 72.524234][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.875138][ T42] audit: type=1800 audit(1786408473.159:14): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="scan_secs" dev="configfs" ino=12119 res=0 errno=0 [ 73.000452][ T6626] syzkaller0: entered promiscuous mode [ 73.002282][ T6626] syzkaller0: entered allmulticast mode [ 73.007350][ T6626] tipc: Enabled bearer , priority 0 [ 73.012241][ T6624] tipc: Resetting bearer [ 73.023302][ T6624] tipc: Disabling bearer [ 73.062509][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 73.940024][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.128892][ T149] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.131667][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.135874][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.138706][ T29] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 74.141877][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.144819][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.150101][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.152656][ T29] usb 7-1: Product: syz [ 74.153982][ T29] usb 7-1: Manufacturer: syz [ 74.160180][ T29] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 74.279130][ T149] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 74.283034][ T149] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 74.286332][ T149] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 74.289606][ T149] usb 6-1: config 1 interface 0 has no altsetting 0 [ 74.293357][ T149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.296043][ T149] usb 6-1: Product: syz [ 74.297366][ T149] usb 6-1: Manufacturer: syz [ 74.299101][ T149] usb 6-1: SerialNumber: syz [ 74.302717][ T6642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 74.305179][ T6642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 74.363957][ T29] usb 7-1: USB disconnect, device number 3 [ 74.511742][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 74.547751][ T149] rtl8150 6-1:1.0: couldn't reset the device [ 74.550018][ T149] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 74.557277][ T149] usb 6-1: USB disconnect, device number 5 [ 74.691052][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 74.989288][ T42] audit: type=1800 audit(1786408475.279:15): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.268" name="scan_secs" dev="configfs" ino=11119 res=0 errno=0 [ 75.904506][ T6689] trusted_key: encrypted_key: insufficient parameters specified [ 76.154885][ T42] audit: type=1800 audit(1786408476.439:16): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.285" name="scan_secs" dev="configfs" ino=13322 res=0 errno=0 [ 76.303679][ T6719] trusted_key: syz.3.291 sent an empty control message without MSG_MORE. [ 76.307867][ T6717] syzkaller0: entered promiscuous mode [ 76.312113][ T6717] syzkaller0: entered allmulticast mode [ 76.318844][ T6717] tipc: Enabled bearer , priority 0 [ 76.322612][ T6716] tipc: Resetting bearer [ 76.342598][ T6716] tipc: Disabling bearer [ 76.709714][ T149] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.836200][ T6747] syzkaller0: entered promiscuous mode [ 76.838549][ T6747] syzkaller0: entered allmulticast mode [ 76.844239][ T6747] tipc: Enabled bearer , priority 0 [ 76.847589][ T6746] tipc: Resetting bearer [ 76.858236][ T6746] tipc: Disabling bearer [ 76.861221][ T149] usb 8-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 76.866701][ T149] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.870462][ T149] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.876280][ T149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.879193][ T149] usb 8-1: Product: syz [ 76.880519][ T149] usb 8-1: Manufacturer: syz [ 76.882064][ T149] usb 8-1: SerialNumber: syz [ 76.977324][ T6752] syzkaller0: entered promiscuous mode [ 76.979383][ T6752] syzkaller0: entered allmulticast mode [ 77.093995][ T149] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 77.098065][ T149] ttusb-dec 8-1:1.0: probe with driver ttusb-dec failed with error -2 [ 77.295883][ T41] usb 8-1: USB disconnect, device number 5 [ 77.382689][ T6771] netlink: 43 bytes leftover after parsing attributes in process `syz.0.311'. [ 77.678905][ T6772] capability: warning: `syz.2.312' uses 32-bit capabilities (legacy support in use) [ 78.241939][ T6778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.315'. [ 78.398380][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 78.501405][ T6786] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 78.524774][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 78.537562][ T6796] netlink: 'syz.2.322': attribute type 4 has an invalid length. [ 78.700734][ T6801] syzkaller0: entered promiscuous mode [ 78.702551][ T6801] syzkaller0: entered allmulticast mode [ 79.062717][ T6816] netlink: 'syz.2.331': attribute type 4 has an invalid length. [ 79.125933][ T6822] syzkaller0: entered promiscuous mode [ 79.127993][ T6822] syzkaller0: entered allmulticast mode [ 79.132882][ T6821] syzkaller0: entered promiscuous mode [ 79.134617][ T6821] syzkaller0: entered allmulticast mode [ 79.303311][ T42] audit: type=1804 audit(1786408479.589:17): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.341" name="/newroot/79/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=12925 res=1 errno=0 [ 79.324691][ T42] audit: type=1800 audit(1786408479.589:18): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.341" name="iface_name" dev="configfs" ino=12925 res=0 errno=0 [ 79.333135][ T6842] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 80.398473][ T6862] syzkaller0: entered promiscuous mode [ 80.400471][ T6862] syzkaller0: entered allmulticast mode [ 80.934691][ T6877] bond1: entered promiscuous mode [ 80.936719][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.976564][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.979084][ T6877] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 80.982638][ T6877] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 80.998733][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.058881][ T6880] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 81.159446][ T29] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 81.164992][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.168372][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 81.174882][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.177732][ T29] usb 5-1: Product: syz [ 81.179304][ T29] usb 5-1: Manufacturer: syz [ 81.181339][ T29] usb 5-1: SerialNumber: syz [ 81.220552][ T1348] cfg80211: failed to load regulatory.db [ 81.378938][ T1487] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 81.395063][ T29] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -2 [ 81.533289][ T1487] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 81.542583][ T1487] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 81.547260][ T1487] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 81.564525][ T1487] usb 6-1: config 4 has no interface number 0 [ 81.572251][ T1487] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.586496][ T1487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.590065][ T1487] usb 6-1: Product: syz [ 81.591973][ T1487] usb 6-1: Manufacturer: syz [ 81.596307][ T1487] usb 6-1: SerialNumber: syz [ 81.601650][ T29] usb 5-1: USB disconnect, device number 5 [ 82.051615][ T1487] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 82.056110][ T1487] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 82.061539][ T1487] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 82.063783][ T1487] usb 6-1: media controller created [ 82.072067][ T1487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.108970][ T1487] DVB: Unable to find symbol dib7000p_attach() [ 82.119592][ T1487] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 82.188795][ T1487] rc_core: IR keymap rc-dib0700-rc5 not found [ 82.190790][ T1487] Registered IR keymap rc-empty [ 82.200369][ T1487] dvb-usb: could not initialize remote control. [ 82.208727][ T1487] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 82.269885][ T5841] usb 6-1: USB disconnect, device number 6 [ 82.297262][ T5841] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 82.410295][ T6900] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 83.423962][ T6934] netlink: 43 bytes leftover after parsing attributes in process `syz.3.375'. [ 84.009637][ T41] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 84.174611][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 84.184572][ T41] usb 7-1: not running at top speed; connect to a high speed hub [ 84.192422][ T41] usb 7-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 84.200148][ T41] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 84.207386][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.211315][ T41] usb 7-1: Product: syz [ 84.213138][ T41] usb 7-1: Manufacturer: syz [ 84.215740][ T41] usb 7-1: SerialNumber: syz [ 84.240047][ T41] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.443999][ T41] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.488561][ T41] usb 7-1: USB disconnect, device number 4 [ 84.522236][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.909530][ T6960] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 85.034549][ T6968] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 85.079655][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 85.899656][ T7006] netlink: 'syz.3.404': attribute type 4 has an invalid length. [ 85.921436][ T7008] tipc: Enabled bearer , priority 0 [ 85.927536][ T7008] tipc: Resetting bearer [ 85.942160][ T7007] tipc: Disabling bearer [ 86.051462][ T7012] binder: 7011:7012 ioctl 4018620d 0 returned -22 [ 86.054633][ T7012] binder: 7011:7012 ioctl c0c89425 0 returned -22 [ 86.064037][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 86.231230][ T7014] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 86.268463][ T5812] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 86.277641][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. VM DIAGNOSIS: 00:34:46 Registers: info registers vcpu 0 CPU#0 RAX=000000000018b575 RBX=ffffffff8e891480 RCX=ffffffff8bb82335 RDX=0000000000000000 RSI=ffffffff8e1a2c56 RDI=ffffffff8c3fe580 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb808ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0349329e9c CR3=00000000644c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a1b98c0 RCX=ffffffff8bb5baf1 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888028900000 RBP=0000000000000000 RSP=ffffc90002cc7198 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90002cc7270 R13=fffff52000598e4e R14=dffffc0000000000 R15=ffffc90002cc7270 RIP=ffffffff8209c890 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080026000 CR3=00000000503a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9026631c3d5a819 0849932dc8c34893 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6da1f481a900a4da 8f43110bff4c4d90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72d05fbae7cc4043 c86ddf63ba4e7905 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4defabd4cacdd3fa 6c1b75fa752959ba ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004e00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaf3140003e9bf00 0000000100003571 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19ae4e00631e5a00 985a040019b7b100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ef9c80000003571 000000000000356f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000357500000000 80b1d6000000356e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9975dca36d8c1c0f 28f0ed5e18e02567 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17d8d145cb1222cc 522676d201e8c5c6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff85263a39 RDX=0000000000000004 RSI=0000000000000004 RDI=ffff8880298b0000 RBP=ffffffff8c400b60 RSP=ffffc900044b7160 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000004 R11=0000000000000000 R12=0000000000000004 R13=0000000000000003 R14=0000000000000001 R15=0000000000000004 RIP=ffffffff8209c87b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5f4f3a3300 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005651b4003000 CR3=000000004b13d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a1430b7 ffffffff84f003fa 0000000400000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a2 0000001400000000 ffffffff8b36e7e3 ffffffff8a143249 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030408000b900342 08000b8803000800 0b8003160000021a 0000000900000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080608017aaa09 c4da800800019803 0008000190030008 0001880300080001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800302080007c080 08000002060145b0 0180024808000108 00060106ae000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0198030a08000190 0308808208000188 0300040001840300 0400018003082e80 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00052e80020b8002 00080006017a8e0f ffffffff020ba003 0fffffffff020b98 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e2800201e69003 00080001e688030f ffffffff0201e680 0320080000020208 ZMM25=938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 938e85f9938e85f9 ZMM26=232691af232691af 232691af232691af 232691af232691af 232691af232691af 232691af232691af 232691af232691af 232691af232691af 232691af232691af ZMM27=383acef5383acef5 383acef5383acef5 383acef5383acef5 383acef5383acef5 383acef5383acef5 383acef5383acef5 383acef5383acef5 383acef5383acef5 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1704000017040000 1704000017040000 1704000017040000 1704000017040000 1704000017040000 1704000017040000 1704000017040000 1704000017040000 info registers vcpu 3 CPU#3 EAX=89877d76 EBX=8aeafd76 ECX=8aeafd76 EDX=00001d76 ESI=0004fee1 EDI=ffffffff EBP=f7462000 ESP=ffe205b8 EIP=f70a0505 EFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 000fffff 00000000 GS =0063 577e4480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 000fffff 00000000 TR =0040 000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2f523a CR3=000000004c817000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000