last executing test programs: 9.611417324s ago: executing program 3 (id=736): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x100, 0x94, 0x2021, 0x9, 0x0, 0x0, 0x2, 0x3}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x34565348, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x3, 0x0, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x7800, 0xffffffff, 0x4}}) r2 = socket(0x3, 0x2, 0xfffffffd) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r4 = fcntl$dupfd(r1, 0x0, r1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3e, 0x1000, 0x3a, 0x3, 0x10090000, 0xa}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x40091) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0x4101) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x3, 0x34a}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0x3, 0xb, 0x0, 0x18) landlock_create_ruleset(&(0x7f0000000100)={0x10140, 0x5, 0x1, 0x0, 0x2}, 0x30, 0x2) 8.008437256s ago: executing program 2 (id=738): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}]}}}}}}}, 0x0) 8.008143992s ago: executing program 3 (id=739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r5, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.368402692s ago: executing program 2 (id=740): socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x24ba, @private1, 0xfff}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e7040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6.450246255s ago: executing program 2 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0199c2000000aaaaaaaab07800000000ffffffff51009078f5000000010000000000000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="0380b470ae35142a2d18bbbb08060001a3f5f4"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x63) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fcntl$setown(r3, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0xd}, &(0x7f0000000400)=0x88) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) eventfd2(0xa, 0x0) 6.366711175s ago: executing program 1 (id=743): socket$inet6_sctp(0xa, 0x801, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 6.342134518s ago: executing program 3 (id=744): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fa", @ANYRES16=r7, @ANYBLOB="050029bd70000000000022000000"], 0x14}}, 0x4000000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff0000000002000000183700000200000000000000000000008500789692dcc8cbb4c833b575bd1c2300005200000085200000010000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.902000009s ago: executing program 2 (id=748): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x0, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5, 0x4]}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000007423786542265c531ba0934bfe6fdbc0d42570", @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf250100000008000500020000001c0003800500080000000000060007004e24000008000100010000000800040004000000080004000500000008000500000000001800038014000200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket(0x40000000015, 0x5, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, r0, 0x0) 4.852732203s ago: executing program 1 (id=749): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x466040, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x802, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) 4.383897905s ago: executing program 1 (id=750): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = gettid() migrate_pages(r1, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) 3.600659229s ago: executing program 0 (id=751): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.48841846s ago: executing program 1 (id=752): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) syz_io_uring_setup(0x3ba1, &(0x7f000001d140)={0x0, 0x9b36, 0x80, 0x1, 0x18b}, &(0x7f000001b0c0), &(0x7f000001d1c0), &(0x7f0000000000)) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)) modify_ldt$write(0x1, 0x0, 0x0) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) close(r2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25020202000900010073797a32000000000900030073797a3000000000b0bc119d5cf8ddb518ed7264fcbbd1fbf341a4f4904d6894e9e011ddcd3bb6ecf52bd90b377f9a66beb4d275f3516a770036a0f868dd5f0c0c8619aeb17d28cbc2f8a797c39c33bc9e2d1d0b3f537648c6d4cbca57dcde3be0e22c8b2523906cfe89174275cc73ffe97b735178f5de38430398e389c665ba48395f505c3924d26b2330d8a410fa7398a9a1abae4d6b4762af6a83b9fc93b541be4e0ca855247354ebfe33e3fcc1e39952ca7342cdfb4ecd6d023c7cd79f4e7cb64e9faa0ff79261624d11b40bed1ece0b38b9c5166938c44cbb08ad24c43d536f1d8ed47f2b"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000) 2.739995312s ago: executing program 3 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) recvfrom(r0, &(0x7f00000002c0)=""/51, 0x33, 0x100, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x4048090) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x40804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 2.538526605s ago: executing program 1 (id=754): socket(0x10, 0x4, 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x1000)=nil, 0x1000}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x5d5e797, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.444558117s ago: executing program 0 (id=755): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) r1 = io_uring_setup(0x4823, &(0x7f0000000300)={0x0, 0xf0e, 0x40, 0x2, 0x16d}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xd2, &(0x7f0000000800)=""/210, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x53fffffe) memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000280)=""/47) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r4, &(0x7f00000019c0)=[{&(0x7f0000000580)=""/173, 0xad}], 0x1, 0x73e, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 2.383722977s ago: executing program 0 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-0', 0x19) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 2.014262026s ago: executing program 0 (id=757): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x400000000000000}, 0x38) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x451, 0x8001008, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x1, 0x800002b, r5, 0x0) 1.390468146s ago: executing program 2 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) 1.220458323s ago: executing program 1 (id=759): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f00000001c0)={0x40, 0x8, 0x7, "fde61e0ee4a63b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$I2C(&(0x7f0000000080), 0x9, 0x400) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.057006446s ago: executing program 0 (id=760): syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x4044010) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) 315.773312ms ago: executing program 3 (id=761): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = gettid() migrate_pages(r1, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) 189.107181ms ago: executing program 2 (id=762): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x1, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, 0x0, 0x100000) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c43, 0x1ff) epoll_create1(0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) 50.575491ms ago: executing program 3 (id=763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x44004015) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 0s ago: executing program 0 (id=764): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r5, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 3 (id=768): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): device netdevsim2 [ 47.951236][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.956515][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.024981][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.032351][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.049275][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.054871][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.072233][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.078021][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.083020][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.088351][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.142978][ T5754] Bluetooth: hci2: command tx timeout [ 48.142985][ T64] Bluetooth: hci0: command tx timeout [ 48.143170][ T5750] Bluetooth: hci1: command tx timeout [ 48.150552][ T5754] Bluetooth: hci3: command tx timeout [ 48.152288][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.160715][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.164282][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.170254][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.174093][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.180439][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.202275][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.211006][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.262299][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.306369][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.320882][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.324465][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.341878][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.344956][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.367282][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.409832][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.414319][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.426398][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.428917][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.448465][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.451051][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.457662][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.480240][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.482693][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.495144][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.498116][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.508198][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.543846][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.566122][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.568693][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.576143][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.578607][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.749763][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.782686][ T5746] veth0_vlan: entered promiscuous mode [ 48.793596][ T5746] veth1_vlan: entered promiscuous mode [ 48.804325][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.829225][ T5746] veth0_macvtap: entered promiscuous mode [ 48.834147][ T5746] veth1_macvtap: entered promiscuous mode [ 48.846980][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.860323][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.872300][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.878359][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.893183][ T5757] veth0_vlan: entered promiscuous mode [ 48.916422][ T5757] veth1_vlan: entered promiscuous mode [ 48.936999][ T5745] veth0_vlan: entered promiscuous mode [ 48.949539][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.959418][ T5745] veth1_vlan: entered promiscuous mode [ 48.996051][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.999480][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.006392][ T5747] veth0_vlan: entered promiscuous mode [ 49.012345][ T5757] veth0_macvtap: entered promiscuous mode [ 49.021341][ T5747] veth1_vlan: entered promiscuous mode [ 49.030856][ T5757] veth1_macvtap: entered promiscuous mode [ 49.046301][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.049886][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.051652][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.061634][ T5745] veth0_macvtap: entered promiscuous mode [ 49.066436][ T5745] veth1_macvtap: entered promiscuous mode [ 49.075323][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.090821][ T5747] veth0_macvtap: entered promiscuous mode [ 49.106096][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.107640][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.120064][ T5747] veth1_macvtap: entered promiscuous mode [ 49.120821][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.127842][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.128080][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.137989][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.160552][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.196445][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.204034][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.204781][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.211859][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.232822][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.240200][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.244355][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.249123][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274674][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.278531][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.302151][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.304777][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.346867][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.349117][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.354573][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.358087][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.398102][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.402505][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.498910][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.504491][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.516389][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.519728][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.522678][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.525753][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.530571][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.536827][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541713][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.545828][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550334][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.614764][ T5907] Invalid ELF header magic: != ELF [ 50.330422][ T5754] Bluetooth: hci1: command tx timeout [ 50.330472][ T5750] Bluetooth: hci0: command tx timeout [ 50.332197][ T5754] Bluetooth: hci3: command tx timeout [ 50.332219][ T5754] Bluetooth: hci2: command tx timeout [ 50.492023][ T5916] syzkaller0: entered promiscuous mode [ 50.493958][ T5916] syzkaller0: entered allmulticast mode [ 50.732631][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.801378][ T5920] netlink: 4064 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.805571][ T5934] process 'syz.3.9' launched './file2' with NULL argv: empty string added [ 52.378579][ T64] Bluetooth: hci2: command tx timeout [ 52.380105][ T5750] Bluetooth: hci0: command tx timeout [ 52.380161][ T5754] Bluetooth: hci3: command tx timeout [ 52.380191][ T5754] Bluetooth: hci1: command tx timeout [ 52.451666][ T5838] IPVS: starting estimator thread 0... [ 52.558773][ T5946] IPVS: using max 26 ests per chain, 62400 per kthread [ 53.609744][ T5838] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.789373][ T5838] usb 8-1: Using ep0 maxpacket: 8 [ 53.805248][ T5838] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 53.833875][ T5838] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 53.848829][ T5838] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 53.865002][ T5838] usb 8-1: config 250 has no interface number 0 [ 53.872145][ T5838] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 53.887695][ T5838] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 53.895212][ T5838] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.907114][ T5838] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 53.917357][ T5838] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 53.928206][ T5838] usb 8-1: config 250 interface 228 has no altsetting 0 [ 53.932644][ T5838] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 53.939944][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 53.950273][ T5838] usb 8-1: Product: syz [ 53.952133][ T5838] usb 8-1: SerialNumber: syz [ 53.979604][ T5838] hub 8-1:250.228: bad descriptor, ignoring hub [ 53.984760][ T5838] hub 8-1:250.228: probe with driver hub failed with error -5 [ 54.210109][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 54.242959][ T5838] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 54.321760][ T5979] Zero length message leads to an empty skb [ 54.347837][ T5831] IPVS: starting estimator thread 0... [ 54.354366][ T5979] IPVS: lc: FWM 3 0x00000003 - no destination available [ 54.451072][ T5982] IPVS: using max 44 ests per chain, 105600 per kthread [ 54.460257][ T5103] Bluetooth: hci3: command tx timeout [ 54.460877][ T64] Bluetooth: hci0: command tx timeout [ 54.465660][ T5750] Bluetooth: hci1: command tx timeout [ 54.469931][ T5103] Bluetooth: hci2: command tx timeout [ 54.859155][ T5895] usb 8-1: USB disconnect, device number 2 [ 54.870057][ T5895] usblp0: removed [ 55.377646][ T6000] e1000e 0000:00:02.0 eth1: removed PHC [ 55.601193][ T6000] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 56.076895][ T6002] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 56.099179][ T6002] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 56.333970][ T6027] syzkaller0: entered promiscuous mode [ 56.348605][ T6027] syzkaller0: entered allmulticast mode [ 56.447273][ T6030] 0: reclassify loop, rule prio 0, protocol 03 [ 56.625933][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 56.636180][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 56.702728][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 56.712055][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 57.792945][ T6079] kAFS: unable to lookup cell '' [ 57.904025][ T6080] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 57.926120][ T6080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.936711][ T6080] team0: Port device netdevsim1 added [ 58.289631][ T6082] syzkaller0: entered promiscuous mode [ 58.291598][ T6082] syzkaller0: entered allmulticast mode [ 58.297960][ T6082] tipc: Started in network mode [ 58.300280][ T6082] tipc: Node identity 8e506c0785d1, cluster identity 4711 [ 58.303278][ T6082] tipc: Enabled bearer , priority 0 [ 58.310542][ T6082] tipc: Resetting bearer [ 58.324650][ T6081] tipc: Resetting bearer [ 58.348771][ T6081] tipc: Disabling bearer [ 58.364370][ T6085] uhci_hcd 0000:00:1d.0: remove, state 4 [ 58.367715][ T6085] usb usb1: USB disconnect, device number 1 [ 58.404872][ T6085] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 58.471988][ T6088] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 58.617088][ T6087] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 58.645010][ T6087] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 58.714972][ T6087] pci 0000:00:1d.0: Adding to iommu group 7 [ 58.727933][ T6087] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 58.728515][ T6094] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 58.735309][ T6092] tipc: Started in network mode [ 58.737038][ T6092] tipc: Node identity 3213fdfa4803, cluster identity 4711 [ 58.747866][ T6092] tipc: Enabled bearer , priority 0 [ 58.800381][ T6092] syzkaller0: entered promiscuous mode [ 58.805067][ T6092] syzkaller0: entered allmulticast mode [ 58.820042][ T6097] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 58.822829][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39'. [ 58.829112][ T6097] dummy0: entered promiscuous mode [ 58.845904][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 58.855759][ T6092] tipc: Resetting bearer [ 58.873475][ T6091] tipc: Resetting bearer [ 58.873712][ T6087] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 136509 usecs [ 58.886601][ T6091] tipc: Disabling bearer [ 58.894464][ T6096] netlink: 144 bytes leftover after parsing attributes in process `syz.0.40'. [ 58.972804][ T6087] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 58.982862][ T6087] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 59.005130][ T6087] uhci_hcd 0000:00:1d.0: detected 2 ports [ 59.038019][ T6087] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 59.054859][ T6087] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 59.058234][ T6087] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 59.062194][ T6087] usb usb1: Product: UHCI Host Controller [ 59.064241][ T6087] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 59.072498][ T6087] usb usb1: SerialNumber: 0000:00:1d.0 [ 59.083192][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.086645][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.236872][ T6087] hub 1-0:1.0: USB hub found [ 59.244171][ T6087] hub 1-0:1.0: 2 ports detected [ 59.295291][ T5457] veth0_vlan: left promiscuous mode [ 59.316267][ T34] veth0_vlan: entered promiscuous mode [ 59.454003][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 59.497031][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 59.512597][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 60.078688][ T5751] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.248722][ T5751] usb 7-1: Using ep0 maxpacket: 32 [ 60.254597][ T5751] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.258517][ T5751] usb 7-1: config 0 has no interfaces? [ 60.263211][ T5751] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 60.266458][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 60.270591][ T5751] usb 7-1: Product: syz [ 60.272358][ T5751] usb 7-1: Manufacturer: syz [ 60.274250][ T5751] usb 7-1: SerialNumber: syz [ 60.283472][ T5751] usb 7-1: config 0 descriptor?? [ 60.302079][ T6137] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 60.570322][ T5751] usb 7-1: USB disconnect, device number 2 [ 60.820637][ T5103] Bluetooth: hci2: unexpected subevent 0x1a length: 30 > 6 [ 61.293158][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 61.538510][ T5895] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.697763][ T5895] usb 5-1: not running at top speed; connect to a high speed hub [ 61.703806][ T5895] usb 5-1: config 3 has an invalid interface number: 161 but max is 0 [ 61.707394][ T5895] usb 5-1: config 3 has no interface number 0 [ 61.711558][ T5895] usb 5-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 61.723410][ T5895] usb 5-1: config 3 interface 161 has no altsetting 0 [ 61.731114][ T5895] usb 5-1: language id specifier not provided by device, defaulting to English [ 61.756998][ T5895] usb 5-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 61.768555][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.129585][ T6164] Bluetooth: MGMT ver 1.23 [ 62.148929][ T5895] option 5-1:3.161: GSM modem (1-port) converter detected [ 62.171736][ T5895] usb 5-1: USB disconnect, device number 2 [ 62.192593][ T5895] option 5-1:3.161: device disconnected [ 62.772030][ T6198] syzkaller0: entered promiscuous mode [ 62.773841][ T6198] syzkaller0: entered allmulticast mode [ 63.370605][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.375430][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.378953][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.382316][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.385658][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.389104][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.392481][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.395805][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.399147][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.402576][ T6207] tc action pedit unable to extract header offset for header type (0x4) [ 63.405798][ T6207] 0: reclassify loop, rule prio 0, protocol 800 [ 65.640969][ T6242] capability: warning: `syz.1.71' uses deprecated v2 capabilities in a way that may be insecure [ 66.258459][ T6251] netlink: 76 bytes leftover after parsing attributes in process `syz.2.73'. [ 67.310318][ T6262] binder: 6261:6262 ioctl c00c6211 0 returned -14 [ 67.322617][ T6260] syzkaller0: entered promiscuous mode [ 67.326186][ T6260] syzkaller0: entered allmulticast mode [ 67.892513][ T6273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 67.895318][ T6273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.898878][ T6273] vhci_hcd vhci_hcd.0: Device attached [ 68.083939][ T6275] usbip_core: unknown command [ 68.087330][ T6275] vhci_hcd: unknown pdu 100663296 [ 68.090469][ T6275] usbip_core: unknown command [ 68.095581][ T13] vhci_hcd vhci_hcd.0: stop threads [ 68.097554][ T13] vhci_hcd vhci_hcd.0: release socket [ 68.101197][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 68.148672][ T1491] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 70.754874][ T6319] overlayfs: overlapping lowerdir path [ 71.103635][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.107474][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.477223][ T6323] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 71.480005][ T6323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.499915][ T6323] vhci_hcd vhci_hcd.0: Device attached [ 71.563121][ T6328] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 71.576749][ T5852] vhci_hcd vhci_hcd.0: stop threads [ 71.581700][ T5852] vhci_hcd vhci_hcd.0: release socket [ 71.590024][ T5852] vhci_hcd vhci_hcd.0: disconnect device [ 72.429184][ T42] audit: type=1326 audit(1785456401.256:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.94" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 74.462354][ T6378] ======================================================= [ 74.462354][ T6378] WARNING: The mand mount option has been deprecated and [ 74.462354][ T6378] and is ignored by this kernel. Remove the mand [ 74.462354][ T6378] option from the mount to silence this warning. [ 74.462354][ T6378] ======================================================= [ 74.490585][ T6378] overlay: Unknown parameter '/' [ 74.503320][ T6378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.813951][ T6395] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 75.849266][ T6395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.877553][ T6395] dummy0: left promiscuous mode [ 75.896629][ T6395] bond1: (slave dummy0): making interface the new active one [ 75.903839][ T6395] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.925079][ T6395] bond1: entered promiscuous mode [ 75.932041][ T6395] dummy0: entered promiscuous mode [ 75.945595][ T6395] bond1: entered allmulticast mode [ 75.959027][ T6395] dummy0: entered allmulticast mode [ 76.138538][ T5103] Bluetooth: hci3: command tx timeout [ 76.161373][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 77.166159][ T6424] overlayfs: overlapping lowerdir path [ 77.741736][ T6427] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 77.744516][ T6427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.783235][ T6427] vhci_hcd vhci_hcd.0: Device attached [ 77.829533][ T6428] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 77.843207][ T13] vhci_hcd vhci_hcd.1: stop threads [ 77.845471][ T13] vhci_hcd vhci_hcd.1: release socket [ 77.847702][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 78.182089][ T6438] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 78.201676][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.230288][ T6438] bond1: (slave dummy0): making interface the new active one [ 78.233978][ T6438] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 78.248908][ T6438] bond1: entered promiscuous mode [ 78.250836][ T6438] dummy0: entered promiscuous mode [ 78.252548][ T6438] bond1: entered allmulticast mode [ 78.254094][ T6438] dummy0: entered allmulticast mode [ 79.779382][ T6473] overlayfs: overlapping lowerdir path [ 79.936270][ T6476] syzkaller0: entered promiscuous mode [ 79.938967][ T6476] syzkaller0: entered allmulticast mode [ 80.083152][ T6480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 80.085300][ T6480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.088959][ T6480] vhci_hcd vhci_hcd.0: Device attached [ 80.101436][ T6481] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 80.105031][ T5852] vhci_hcd vhci_hcd.2: stop threads [ 80.106713][ T5852] vhci_hcd vhci_hcd.2: release socket [ 80.111291][ T5852] vhci_hcd vhci_hcd.2: disconnect device [ 80.965798][ T6497] Invalid ELF header magic: != ELF [ 81.406807][ T50] cfg80211: failed to load regulatory.db [ 81.410646][ T6499] kAFS: unable to lookup cell '' [ 81.635352][ T6499] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 83.061385][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 84.493083][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.497363][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.940844][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 84.943663][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'. [ 84.947139][ T6568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.955101][ T6568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.294665][ T6582] netlink: 'syz.1.156': attribute type 2 has an invalid length. [ 85.346552][ T6583] netlink: 'syz.1.156': attribute type 2 has an invalid length. [ 86.249612][ T6595] ipt_rpfilter: unknown options [ 86.599190][ T6602] netlink: 'syz.0.159': attribute type 4 has an invalid length. [ 87.378491][ T1491] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 87.538542][ T1491] usb 7-1: Using ep0 maxpacket: 8 [ 87.541629][ T1491] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 87.544568][ T1491] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 87.547309][ T1491] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 87.550456][ T1491] usb 7-1: config 250 has no interface number 0 [ 87.552564][ T1491] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 87.556288][ T1491] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 87.559752][ T1491] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.563020][ T1491] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 87.566308][ T1491] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 87.571171][ T1491] usb 7-1: config 250 interface 228 has no altsetting 0 [ 87.574795][ T1491] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 87.577739][ T1491] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 87.580967][ T1491] usb 7-1: Product: syz [ 87.582396][ T1491] usb 7-1: SerialNumber: syz [ 87.591002][ T1491] hub 7-1:250.228: bad descriptor, ignoring hub [ 87.596757][ T1491] hub 7-1:250.228: probe with driver hub failed with error -5 [ 87.812107][ T1491] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 88.074660][ T6614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 88.077353][ T6614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.080936][ T6614] vhci_hcd vhci_hcd.0: Device attached [ 88.228124][ T6621] Invalid ELF header magic: != ELF [ 88.318771][ T1491] usb 7-1: USB disconnect, device number 3 [ 88.327434][ T1491] usblp0: removed [ 89.158609][ T5831] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 89.215546][ T6618] usbip_core: unknown command [ 89.217583][ T6618] vhci_hcd: unknown pdu 100663296 [ 89.228703][ T6618] usbip_core: unknown command [ 89.271825][ T5852] vhci_hcd vhci_hcd.1: stop threads [ 89.327205][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.329867][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.432559][ T5852] vhci_hcd vhci_hcd.1: release socket [ 89.436770][ T5852] vhci_hcd vhci_hcd.1: disconnect device [ 89.648405][ T40] IPVS: starting estimator thread 0... [ 89.738588][ T6643] IPVS: using max 31 ests per chain, 74400 per kthread [ 89.843638][ T6647] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 89.900265][ T6650] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 90.081869][ T50] IPVS: starting estimator thread 0... [ 90.178553][ T6654] IPVS: using max 26 ests per chain, 62400 per kthread [ 91.512283][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 91.515714][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 91.744096][ T6680] Invalid ELF header magic: != ELF [ 92.292356][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.295807][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.576791][ T6686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 92.578891][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.581488][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 92.713761][ T6687] usbip_core: unknown command [ 92.715684][ T6687] vhci_hcd: unknown pdu 100663296 [ 92.722900][ T6687] usbip_core: unknown command [ 92.725667][ T12] vhci_hcd vhci_hcd.3: stop threads [ 92.728703][ T12] vhci_hcd vhci_hcd.3: release socket [ 92.731825][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 92.778568][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 94.251117][ T6708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 94.253286][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.255849][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 94.328466][ T5831] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 94.463966][ T6709] usbip_core: unknown command [ 94.465722][ T6709] vhci_hcd: unknown pdu 100663296 [ 94.467722][ T6709] usbip_core: unknown command [ 94.481525][ T5852] vhci_hcd vhci_hcd.2: stop threads [ 94.483391][ T5852] vhci_hcd vhci_hcd.2: release socket [ 94.491203][ T5852] vhci_hcd vhci_hcd.2: disconnect device [ 94.518519][ T5845] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 94.521053][ T5845] usb 41-1: enqueue for inactive port 0 [ 94.588541][ T5845] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 95.104668][ T6716] uhci_hcd 0000:00:1d.0: remove, state 4 [ 95.107059][ T6716] usb usb1: USB disconnect, device number 1 [ 95.149786][ T6716] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 95.297662][ T6720] syzkaller0: entered promiscuous mode [ 95.300039][ T6720] syzkaller0: entered allmulticast mode [ 95.350490][ T6717] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 95.378063][ T6717] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 95.403255][ T6717] pci 0000:00:1d.0: Adding to iommu group 7 [ 95.451590][ T6717] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 95.550646][ T6717] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 89313 usecs [ 95.713812][ T6717] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 95.778086][ T6717] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 95.787602][ T6717] uhci_hcd 0000:00:1d.0: detected 2 ports [ 95.824833][ T6717] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 95.851048][ T6717] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 95.856394][ T6717] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 95.862113][ T6717] usb usb1: Product: UHCI Host Controller [ 95.869332][ T6717] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 95.872328][ T6717] usb usb1: SerialNumber: 0000:00:1d.0 [ 95.958503][ T6717] hub 1-0:1.0: USB hub found [ 95.989340][ T6717] hub 1-0:1.0: 2 ports detected [ 97.306656][ T6750] netlink: 76 bytes leftover after parsing attributes in process `syz.1.199'. [ 98.012406][ T6756] 0: reclassify loop, rule prio 0, protocol 03 [ 100.545680][ T6784] ipt_rpfilter: unknown options [ 100.549044][ T6783] uhci_hcd 0000:00:1d.0: remove, state 4 [ 100.557251][ T6783] usb usb1: USB disconnect, device number 1 [ 100.586243][ T6783] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 100.709433][ T6788] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 100.715575][ T6788] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 100.722749][ T6788] pci 0000:00:1d.0: Adding to iommu group 7 [ 100.737048][ T6788] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 100.799913][ T6788] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 58758 usecs [ 100.833853][ T6788] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 100.838337][ T6788] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 100.841845][ T6788] uhci_hcd 0000:00:1d.0: detected 2 ports [ 100.848004][ T6788] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 100.852574][ T6788] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 100.856244][ T6788] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 100.859010][ T6788] usb usb1: Product: UHCI Host Controller [ 100.860775][ T6788] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 100.863144][ T6788] usb usb1: SerialNumber: 0000:00:1d.0 [ 100.886378][ T6788] hub 1-0:1.0: USB hub found [ 100.891598][ T6788] hub 1-0:1.0: 2 ports detected [ 101.111860][ T6798] netlink: 'syz.0.214': attribute type 2 has an invalid length. [ 101.196208][ T6801] netlink: 'syz.0.214': attribute type 2 has an invalid length. [ 103.276246][ T6820] loop5: detected capacity change from 0 to 7 [ 103.284857][ T6820] Dev loop5: unable to read RDB block 7 [ 103.287916][ T6820] loop5: unable to read partition table [ 103.291967][ T6820] loop5: partition table beyond EOD, truncated [ 103.294813][ T6820] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 103.368167][ T6824] Bluetooth: MGMT ver 1.23 [ 106.597736][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'. [ 106.608035][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'. [ 108.028273][ T6873] syz.2.232 (6873): drop_caches: 2 [ 109.413596][ T6896] 0: reclassify loop, rule prio 0, protocol 03 [ 109.866347][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.700365][ T50] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 110.869198][ T5854] Process accounting resumed [ 110.896386][ T50] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 110.903453][ T50] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.913850][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.931409][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.937423][ T50] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.942782][ T50] usb 5-1: Product: syz [ 110.946493][ T50] usb 5-1: Manufacturer: syz [ 110.952256][ T50] usb 5-1: SerialNumber: syz [ 110.979573][ T50] usb 5-1: config 0 descriptor?? [ 110.996827][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 110.999390][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 111.051176][ T50] usb 5-1: selecting invalid altsetting 0 [ 111.144959][ T6919] loop2: detected capacity change from 0 to 7 [ 111.182659][ T6919] Dev loop2: unable to read RDB block 7 [ 111.184760][ T6919] loop2: AHDI p1 p2 p3 [ 111.187080][ T6919] loop2: partition table partially beyond EOD, truncated [ 111.193190][ T6919] loop2: p1 start 1601398130 is beyond EOD, truncated [ 111.196016][ T6919] loop2: p2 start 1702059890 is beyond EOD, truncated [ 112.078928][ T50] usb 5-1: USB disconnect, device number 3 [ 112.184620][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.468360][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 112.473300][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 113.282001][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 116.371080][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 116.394078][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 116.413327][ T6975] netlink: 72 bytes leftover after parsing attributes in process `syz.3.260'. [ 117.307910][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 117.312626][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 117.316770][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 117.318487][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 117.335550][ T6978] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.344486][ T6978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.187481][ T6999] dlm: no local IP address has been set [ 119.197364][ T6999] dlm: cannot start dlm midcomms -107 [ 119.265805][ T7001] overlayfs: conflicting options: userxattr,redirect_dir=on [ 119.321560][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 120.322737][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 120.334102][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 120.343638][ T7014] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 120.356167][ T7014] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.865606][ T7025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 120.867690][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.878127][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 121.148572][ T1475] usb 38-1: SetAddress Request (2) to port 0 [ 121.172029][ T1475] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 122.278238][ T7039] loop5: detected capacity change from 0 to 7 [ 122.286283][ T7039] Dev loop5: unable to read RDB block 7 [ 122.288096][ T7039] loop5: unable to read partition table [ 122.290715][ T7039] loop5: partition table beyond EOD, truncated [ 122.294938][ T7039] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 123.218538][ T7026] vhci_hcd: connection reset by peer [ 123.221965][ T5852] vhci_hcd vhci_hcd.0: stop threads [ 123.223735][ T5852] vhci_hcd vhci_hcd.0: release socket [ 123.234729][ T5852] vhci_hcd vhci_hcd.0: disconnect device [ 123.268339][ T42] audit: type=1800 audit(1785456451.100:3): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.279" name="bus" dev="9p" ino=77093659 res=0 errno=0 [ 123.462865][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 123.466568][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'. [ 123.472094][ T7050] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.475975][ T7050] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.491467][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 123.495771][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 123.604884][ T7056] loop2: detected capacity change from 0 to 7 [ 123.613175][ T7056] Dev loop2: unable to read RDB block 7 [ 123.615981][ T7056] loop2: AHDI p1 p2 p3 [ 123.617430][ T7056] loop2: partition table partially beyond EOD, truncated [ 123.620438][ T7056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 123.622877][ T7056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.378591][ T1475] usb 38-1: device descriptor read/8, error -110 [ 126.550828][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 126.559806][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 126.565136][ T7090] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.573079][ T7090] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.786113][ T1475] usb usb38-port1: attempt power cycle [ 127.363585][ T7100] loop5: detected capacity change from 0 to 7 [ 127.369435][ T1475] usb usb38-port1: unable to enumerate USB device [ 127.378689][ T7100] Dev loop5: unable to read RDB block 7 [ 127.380990][ T7100] loop5: unable to read partition table [ 127.383046][ T7100] loop5: partition table beyond EOD, truncated [ 127.388154][ T7100] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 127.538623][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.698474][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 127.702096][ T34] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 127.702153][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 127.702193][ T34] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 127.702250][ T34] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 127.702276][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.707502][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.732977][ T34] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.736764][ T34] usb 5-1: Product: syz [ 127.739302][ T34] usb 5-1: Manufacturer: syz [ 127.741541][ T34] usb 5-1: SerialNumber: syz [ 128.041537][ T34] usb 5-1: config 0 descriptor?? [ 128.045444][ T34] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 128.062937][ T34] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 128.421755][ T34] usb 5-1: USB disconnect, device number 4 [ 128.497080][ T34] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 130.597101][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 130.600883][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'. [ 130.625943][ T7132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 130.648615][ T7132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.178507][ T5845] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 131.528491][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 131.532090][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.535507][ T5845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.538341][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.544632][ T5845] usb 7-1: config 0 descriptor?? [ 131.984851][ T5845] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.120821][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 132.135052][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 132.139257][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.142326][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.146700][ T7143] bond1: (slave dummy0): Releasing active interface [ 132.149622][ T7143] dummy0: left promiscuous mode [ 132.151503][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.158130][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.161390][ T7143] dummy0: left allmulticast mode [ 132.169764][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.180408][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.191651][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.204878][ T7072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.302605][ T7072] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 132.365333][ T7143] bridge_slave_0: left allmulticast mode [ 132.370138][ T7143] bridge_slave_0: left promiscuous mode [ 132.375762][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.512976][ T7171] loop5: detected capacity change from 0 to 7 [ 132.516821][ T7143] bridge_slave_1: left allmulticast mode [ 132.522198][ T7171] Dev loop5: unable to read RDB block 7 [ 132.522237][ T7171] loop5: unable to read partition table [ 132.522330][ T7171] loop5: partition table beyond EOD, truncated [ 132.522341][ T7171] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 132.536070][ T7143] bridge_slave_1: left promiscuous mode [ 132.538197][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.542750][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.542798][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.666983][ T7143] bond0: (slave bond_slave_0): Releasing backup interface [ 132.704466][ T7143] bond0: (slave bond_slave_1): Releasing backup interface [ 132.745757][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.748747][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.761424][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.765405][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.777882][ T7143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.975680][ T5795] usb 7-1: USB disconnect, device number 4 [ 133.375439][ T7181] gfs2: error -5 reading superblock [ 133.699398][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 133.708571][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 133.735577][ T7186] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 133.745105][ T7186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.460156][ T7209] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 135.472028][ T7209] ALSA: mixer_oss: invalid index 137438 [ 136.088291][ T7224] netlink: 72 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.978324][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 136.982109][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'. [ 137.001312][ T7234] overlayfs: failed to resolve './file1/file0': -2 [ 139.651777][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 139.655177][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 139.683029][ T7270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.687036][ T7270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.355792][ T7306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 142.357932][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.428270][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 142.517073][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 142.520301][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 142.523944][ T7317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.526730][ T7317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.719443][ T1475] usb 42-1: SetAddress Request (2) to port 0 [ 142.721454][ T1475] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 142.958555][ T5795] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 142.994444][ T7308] vhci_hcd: connection reset by peer [ 143.001459][ T5852] vhci_hcd vhci_hcd.2: stop threads [ 143.004016][ T5852] vhci_hcd vhci_hcd.2: release socket [ 143.008832][ T5852] vhci_hcd vhci_hcd.2: disconnect device [ 143.115034][ T5795] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.805189][ T5795] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.052733][ T5795] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.056676][ T5795] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.064568][ T5795] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.067659][ T5795] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.071071][ T5795] usb 8-1: Product: syz [ 144.072715][ T5795] usb 8-1: Manufacturer: syz [ 144.081648][ T5795] cdc_wdm 8-1:1.0: skipping garbage [ 144.083931][ T5795] cdc_wdm 8-1:1.0: skipping garbage [ 144.090276][ T5795] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 144.093882][ T5795] cdc_wdm 8-1:1.0: Unknown control protocol [ 144.187940][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 144.190969][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.364'. [ 144.195059][ T7342] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.198328][ T7342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.283458][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 144.292432][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 144.386038][ T5795] usb 8-1: USB disconnect, device number 3 [ 144.521544][ T7349] trusted_key: syz.3.366 sent an empty control message without MSG_MORE. [ 146.914779][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.921656][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.014843][ T7377] bond1: left promiscuous mode [ 147.016552][ T7377] dummy0: left promiscuous mode [ 147.018348][ T7377] bond1: left allmulticast mode [ 147.021468][ T7377] dummy0: left allmulticast mode [ 147.049661][ T5852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.054015][ T5852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.057602][ T5852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.061781][ T5852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.337874][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'. [ 147.341189][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'. [ 147.879425][ T1475] usb 42-1: device descriptor read/8, error -110 [ 148.269387][ T1475] usb usb42-port1: attempt power cycle [ 148.829011][ T1475] usb usb42-port1: unable to enumerate USB device [ 151.288499][ T7436] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 152.443802][ T42] audit: type=1804 audit(1785456478.275:4): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.389" name="/newroot/96/bus/bus" dev="overlay" ino=556 res=1 errno=0 [ 152.456256][ T42] audit: type=1326 audit(1785456478.285:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 155.908551][ T34] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 156.074826][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 156.088471][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.091997][ T34] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.096860][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 156.101634][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.108563][ T34] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.120332][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 156.128450][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.131869][ T34] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.173245][ T34] usb 7-1: string descriptor 0 read error: -22 [ 156.175212][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.188475][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.196348][ T34] adutux 7-1:168.0: interrupt endpoints not found [ 156.494235][ T7515] batadv_slave_1: entered promiscuous mode [ 156.500548][ T7515] macvlan2: entered allmulticast mode [ 156.502876][ T7515] batadv_slave_1: entered allmulticast mode [ 156.514588][ T7515] batman_adv: batadv0: Adding interface: macvlan2 [ 156.517439][ T7515] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.538466][ T7515] batman_adv: batadv0: Interface activated: macvlan2 [ 156.821758][ T7517] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 156.824300][ T7517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.838591][ T7517] vhci_hcd vhci_hcd.0: Device attached [ 157.155157][ T1475] usb 44-1: SetAddress Request (2) to port 0 [ 157.157016][ T1475] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 157.667763][ T7519] vhci_hcd: connection reset by peer [ 157.672960][ T13] vhci_hcd vhci_hcd.3: stop threads [ 157.678265][ T13] vhci_hcd vhci_hcd.3: release socket [ 157.684307][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 157.936412][ T5795] usb 7-1: USB disconnect, device number 5 [ 158.169250][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.318589][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 158.322463][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 158.325616][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 158.330665][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.335134][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 158.340511][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 158.345641][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 158.349510][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 158.352989][ T34] usb 6-1: Product: syz [ 158.354722][ T34] usb 6-1: Manufacturer: syz [ 158.356700][ T34] usb 6-1: SerialNumber: syz [ 158.361903][ T34] usb 6-1: config 0 descriptor?? [ 158.366510][ T34] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 158.388969][ T34] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 158.682915][ T34] usb 6-1: USB disconnect, device number 2 [ 158.689422][ T34] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 161.406881][ T7569] pim6reg: entered allmulticast mode [ 161.713224][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 162.224669][ T1475] usb 44-1: device descriptor read/8, error -110 [ 162.636993][ T1475] usb usb44-port1: attempt power cycle [ 163.209171][ T1475] usb usb44-port1: unable to enumerate USB device [ 163.715631][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 163.721293][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 163.734070][ T7609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.743946][ T7609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 166.328821][ T7631] Process accounting resumed [ 167.035127][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 167.041488][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 167.047237][ T7649] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.052706][ T7649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.780026][ T42] audit: type=1804 audit(1785456493.605:6): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.438" name="/newroot/103/file1/file0" dev="9p" ino=77093651 res=1 errno=0 [ 168.076606][ T42] audit: type=1804 audit(1785456493.905:7): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.438" name="/newroot/103/file1/file0" dev="9p" ino=77093651 res=1 errno=0 [ 168.463677][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 168.467516][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 169.891424][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 169.894211][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 169.899373][ T7685] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.902135][ T7685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.460011][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 170.468511][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 170.468538][ T5755] Bluetooth: hci3: command 0x0406 tx timeout [ 170.470443][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 171.878616][ T40] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.040679][ T40] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.044779][ T40] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 172.049863][ T40] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.053569][ T40] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.068556][ T40] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 172.124581][ T40] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.161853][ T40] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.167350][ T40] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.170240][ T40] usb 6-1: Product: syz [ 172.181429][ T40] usb 6-1: Manufacturer: syz [ 172.195471][ T7715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.201053][ T40] cdc_wdm 6-1:1.0: skipping garbage [ 172.203303][ T40] cdc_wdm 6-1:1.0: skipping garbage [ 172.207025][ T40] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 172.209943][ T40] cdc_wdm 6-1:1.0: Unknown control protocol [ 172.461645][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.464646][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.467379][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.470075][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.472781][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.475492][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.478254][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.480871][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.483647][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.486289][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.489007][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.491030][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.493086][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.495112][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.497185][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.499185][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.501253][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.503314][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 172.505379][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 172.508125][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 173.036727][ T5845] usb 6-1: USB disconnect, device number 3 [ 173.186380][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.457'. [ 173.190768][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.457'. [ 175.129547][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 175.133099][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 175.264977][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 175.372741][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 175.418513][ T5795] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 175.440736][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 175.798430][ T5795] usb 8-1: Using ep0 maxpacket: 32 [ 176.290870][ T5795] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 176.346361][ T5795] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 176.350200][ T5795] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 176.355501][ T5795] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 176.359483][ T5795] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.363270][ T5795] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 176.366108][ T5795] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 176.368657][ T5795] usb 8-1: Product: syz [ 176.369915][ T5795] usb 8-1: Manufacturer: syz [ 176.371373][ T5795] usb 8-1: SerialNumber: syz [ 176.374830][ T5795] usb 8-1: config 0 descriptor?? [ 176.378603][ T5795] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 176.388303][ T5795] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.635729][ T5795] usb 8-1: USB disconnect, device number 4 [ 176.640392][ T5795] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 178.297899][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 179.121221][ T7824] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 179.123713][ T7824] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.384011][ T7824] vhci_hcd vhci_hcd.0: Device attached [ 179.822840][ T29] usb 38-1: SetAddress Request (6) to port 0 [ 179.830188][ T29] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 180.215653][ T7830] vhci_hcd: connection reset by peer [ 180.217747][ T13] vhci_hcd vhci_hcd.0: stop threads [ 180.223118][ T13] vhci_hcd vhci_hcd.0: release socket [ 180.225967][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 181.116398][ T7857] block nbd3: not configured, cannot reconfigure [ 182.298532][ T5845] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 182.448488][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 182.454196][ T5845] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 182.459600][ T5845] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 182.464186][ T5845] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 182.468488][ T5845] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 182.472133][ T7885] ip6t_rpfilter: unknown options [ 182.472687][ T5845] usb 7-1: config 0 interface 0 has no altsetting 0 [ 182.486827][ T5845] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 182.489989][ T5845] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 182.494203][ T5845] usb 7-1: Product: syz [ 182.495902][ T5845] usb 7-1: Manufacturer: syz [ 182.497639][ T5845] usb 7-1: SerialNumber: syz [ 182.509149][ T5845] usb 7-1: config 0 descriptor?? [ 182.521458][ T5845] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.530096][ T5845] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 183.349660][ T5751] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 183.505175][ T5751] usb 8-1: Using ep0 maxpacket: 32 [ 183.514012][ T5751] usb 8-1: config 0 has no interfaces? [ 183.562449][ T40] usb 7-1: USB disconnect, device number 6 [ 183.583899][ T5751] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.614241][ T5751] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.623886][ T5751] usb 8-1: Product: syz [ 183.629962][ T5751] usb 8-1: Manufacturer: syz [ 183.634153][ T5751] usb 8-1: SerialNumber: syz [ 183.672359][ T40] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 183.706253][ T5751] usb 8-1: config 0 descriptor?? [ 184.408495][ T5854] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 184.724665][ T5795] usb 8-1: USB disconnect, device number 5 [ 185.178728][ T29] usb 38-1: device descriptor read/8, error -110 [ 185.274669][ T7936] netlink: 220 bytes leftover after parsing attributes in process `syz.1.494'. [ 185.280082][ T7936] tc_dump_action: action bad kind [ 185.308468][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 185.312289][ T5854] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 185.317408][ T5854] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 185.320706][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.323389][ T5854] usb 7-1: Product: syz [ 185.324903][ T5854] usb 7-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 185.335778][ T5854] usb 7-1: SerialNumber: syz [ 185.570915][ T29] usb usb38-port1: attempt power cycle [ 185.584462][ T7918] netlink: 'syz.2.490': attribute type 21 has an invalid length. [ 185.587306][ T7918] netlink: 128 bytes leftover after parsing attributes in process `syz.2.490'. [ 185.602882][ T7918] netlink: 3 bytes leftover after parsing attributes in process `syz.2.490'. [ 185.619417][ T5854] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 185.669908][ T5854] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.676935][ T5854] usb 7-1: USB disconnect, device number 7 [ 185.731951][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.909169][ T7941] syz.1.494 (7941) used greatest stack depth: 19736 bytes left [ 186.140768][ T29] usb usb38-port1: unable to enumerate USB device [ 186.254176][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 186.257005][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 186.264495][ T7968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.268799][ T7968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 186.621183][ T5751] e1000 0000:00:06.0 eth0: Reset adapter [ 186.768483][ T5854] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 186.938570][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 186.944077][ T5854] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 186.947615][ T5854] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.964044][ T5854] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.973802][ T5854] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.980289][ T5854] usb 7-1: config 0 interface 0 has no altsetting 0 [ 186.985782][ T5854] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.989670][ T5854] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.992522][ T5854] usb 7-1: Product: syz [ 186.994219][ T5854] usb 7-1: Manufacturer: syz [ 186.995784][ T5854] usb 7-1: SerialNumber: syz [ 187.009761][ T5854] usb 7-1: config 0 descriptor?? [ 187.019831][ T5854] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 187.041336][ T5854] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 187.368762][ T5854] usb 7-1: USB disconnect, device number 8 [ 187.389786][ T5854] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 187.955815][ T8017] loop2: detected capacity change from 0 to 32768 [ 187.965120][ T8016] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 187.971321][ T8016] netlink: 756 bytes leftover after parsing attributes in process `syz.0.505'. [ 187.992219][ T8017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.998123][ T8017] md: md0 stopped. [ 188.817391][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 188.821759][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.508'. [ 188.825416][ T8025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.829177][ T8025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.880713][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 193.980174][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.818261][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 196.836524][ T8047] team0 (unregistering): Port device team_slave_0 removed [ 196.840293][ T8047] team0 (unregistering): Port device team_slave_1 removed [ 197.230584][ T5795] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.378493][ T5795] usb 7-1: Using ep0 maxpacket: 16 [ 197.382351][ T5795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.386720][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.391533][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.395118][ T5795] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.398700][ T5795] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.405468][ T5795] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.409589][ T5795] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.412960][ T5795] usb 7-1: Manufacturer: syz [ 197.450619][ T5795] usb 7-1: config 0 descriptor?? [ 197.718598][ T5795] rc_core: IR keymap rc-hauppauge not found [ 197.721273][ T5795] Registered IR keymap rc-empty [ 197.725301][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.748554][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.770487][ T5795] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 197.797614][ T5795] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 197.826892][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.858707][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.878615][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.898596][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.933980][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.958683][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.976557][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 197.980441][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 197.998557][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.018590][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.048732][ T5795] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.074466][ T5795] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.077668][ T5795] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.095880][ T5795] usb 7-1: USB disconnect, device number 9 [ 198.178555][ T40] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 198.338549][ T40] usb 6-1: Using ep0 maxpacket: 32 [ 198.341846][ T40] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 198.344629][ T40] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 198.348647][ T40] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.352461][ T40] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 198.357250][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 198.362398][ T40] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.366779][ T40] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.370383][ T40] usb 6-1: Product: syz [ 198.372150][ T40] usb 6-1: Manufacturer: syz [ 198.374173][ T40] usb 6-1: SerialNumber: syz [ 198.380456][ T40] usb 6-1: config 0 descriptor?? [ 198.389878][ T40] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.394947][ T40] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.547327][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 198.550753][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 198.556525][ T8086] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.559793][ T8086] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.880364][ T10] usb 6-1: USB disconnect, device number 4 [ 198.902293][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 199.584849][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 199.717964][ T8111] kernel profiling enabled (shift: 16) [ 200.579903][ T42] audit: type=1804 audit(1785456526.415:8): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.527" name="/newroot/124/file1/file0" dev="9p" ino=77093651 res=1 errno=0 [ 201.309746][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 201.312832][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 201.317430][ T8149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.320389][ T8149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.918565][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.988642][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.079873][ T40] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.083182][ T40] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.086454][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.089359][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.092804][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.097334][ T40] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.100409][ T40] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.102971][ T40] usb 5-1: Product: syz [ 202.104279][ T40] usb 5-1: Manufacturer: syz [ 202.108704][ T40] cdc_wdm 5-1:1.0: skipping garbage [ 202.110517][ T40] cdc_wdm 5-1:1.0: skipping garbage [ 202.117089][ T40] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 202.119408][ T40] cdc_wdm 5-1:1.0: Unknown control protocol [ 202.148722][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 202.157735][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 202.171457][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 202.181075][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 202.186871][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 202.191527][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.209205][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 202.213089][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 202.215931][ T10] usb 6-1: Product: syz [ 202.217297][ T10] usb 6-1: Manufacturer: syz [ 202.219508][ T10] usb 6-1: SerialNumber: syz [ 202.238138][ T10] usb 6-1: config 0 descriptor?? [ 202.267794][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 202.280806][ T10] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 202.515297][ T40] usb 6-1: USB disconnect, device number 5 [ 202.574754][ T8177] mmap: syz.0.532 (8177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.630322][ T40] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 203.571983][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 203.578537][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 203.584136][ T8171] futex_wake_op: syz.0.532 tries to shift op by 144; fix this program [ 203.596495][ T8193] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.603723][ T8171] futex_wake_op: syz.0.532 tries to shift op by 144; fix this program [ 203.615216][ T8193] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.664187][ T40] usb 5-1: USB disconnect, device number 5 [ 204.957925][ T8230] dvmrp8: entered allmulticast mode [ 205.388305][ T8245] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 205.390486][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.394458][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 205.488678][ T5795] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.648572][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 205.654240][ T5795] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 205.657897][ T5795] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 205.663002][ T5795] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 205.667399][ T5795] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 205.673010][ T5795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.678203][ T5795] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 205.678513][ T5854] usb 40-1: SetAddress Request (2) to port 0 [ 205.682531][ T5795] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 205.684468][ T5854] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.687493][ T5795] usb 5-1: Product: syz [ 205.691630][ T5795] usb 5-1: Manufacturer: syz [ 205.693607][ T5795] usb 5-1: SerialNumber: syz [ 205.700379][ T5795] usb 5-1: config 0 descriptor?? [ 205.705585][ T5795] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.710674][ T5795] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 206.008507][ T8248] vhci_hcd: connection reset by peer [ 206.014947][ T5852] vhci_hcd vhci_hcd.1: stop threads [ 206.016727][ T5852] vhci_hcd vhci_hcd.1: release socket [ 206.019459][ T5852] vhci_hcd vhci_hcd.1: disconnect device [ 206.048666][ T5795] usb 5-1: USB disconnect, device number 6 [ 206.061596][ T5795] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 206.568594][ T40] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 206.739773][ T40] usb 8-1: config 6 has an invalid interface number: 7 but max is 0 [ 206.743267][ T40] usb 8-1: config 6 has no interface number 0 [ 206.745198][ T40] usb 8-1: config 6 interface 7 has no altsetting 0 [ 206.755315][ T40] usb 8-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 206.763586][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.768939][ T40] usb 8-1: Product: syz [ 206.770282][ T40] usb 8-1: Manufacturer: syz [ 206.773715][ T40] usb 8-1: SerialNumber: syz [ 206.958518][ T5845] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 207.390414][ T40] usb 8-1: USB disconnect, device number 6 [ 207.651995][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.878489][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.881936][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 207.891053][ T5845] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 207.895039][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.897600][ T5845] usb 5-1: Product: syz [ 207.899069][ T5845] usb 5-1: Manufacturer: syz [ 207.900522][ T5845] usb 5-1: SerialNumber: syz [ 207.908733][ T8267] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 207.915492][ T5845] usb 5-1: config 0 descriptor?? [ 207.917756][ T8261] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.955105][ T8267] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 207.958128][ T8267] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 207.962469][ T8267] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 207.965721][ T8267] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 207.977279][ T8267] pci 0000:00:01.0: Adding to iommu group 1 [ 207.984715][ T8267] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 207.986939][ T8267] pci 0000:00:01.0: vgaarb: bridge control possible [ 207.988995][ T8267] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 207.998508][ T8267] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 207.999792][ T5845] rc_core: IR keymap rc-streamzap not found [ 208.007599][ T8267] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 208.011697][ T8267] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 208.013105][ T5845] Registered IR keymap rc-empty [ 208.020701][ T5845] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 208.027218][ T5845] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 208.035240][ T8267] [drm] Found bochs VGA, ID 0xb0c5. [ 208.038171][ T8267] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 208.075997][ T8267] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 208.126623][ T8267] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 208.209388][ T8261] ptrace attach of "/syz-executor exec"[5745] was attempted by " [ 208.298643][ T40] usb 5-1: USB disconnect, device number 7 [ 210.078588][ T1475] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 210.238444][ T1475] usb 7-1: Using ep0 maxpacket: 32 [ 210.248102][ T1475] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 210.251672][ T1475] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 210.256335][ T1475] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.266183][ T1475] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 210.288516][ T1475] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.313994][ T1475] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 210.319521][ T1475] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 210.325659][ T1475] usb 7-1: Product: syz [ 210.328526][ T1475] usb 7-1: Manufacturer: syz [ 210.332015][ T1475] usb 7-1: SerialNumber: syz [ 210.356038][ T1475] usb 7-1: config 0 descriptor?? [ 210.375529][ T1475] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 210.386379][ T1475] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 210.976273][ T5795] usb 7-1: USB disconnect, device number 10 [ 210.988185][ T5795] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 211.393978][ T5854] usb 40-1: device descriptor read/8, error -110 [ 211.614025][ T8322] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 211.655076][ T8322] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 211.660779][ T8322] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 211.666531][ T8322] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 211.681101][ T8322] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 211.692096][ T8322] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10897 usecs [ 211.709351][ T8322] pci 0000:00:01.0: Adding to iommu group 1 [ 211.737722][ T8322] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 211.740132][ T8322] pci 0000:00:01.0: vgaarb: bridge control possible [ 211.742191][ T8322] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 211.782504][ T8322] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 211.785496][ T8322] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 211.789786][ T8322] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 211.793542][ T5854] usb usb40-port1: attempt power cycle [ 211.810691][ T8322] [drm] Found bochs VGA, ID 0xb0c5. [ 211.818662][ T8322] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 211.848259][ T8322] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 211.979376][ T8322] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 212.432446][ T5854] usb usb40-port1: unable to enumerate USB device [ 214.688587][ T5751] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 214.698552][ T5795] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 214.848484][ T5795] usb 7-1: Using ep0 maxpacket: 16 [ 214.850789][ T5751] usb 8-1: Using ep0 maxpacket: 32 [ 214.852055][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.854287][ T5751] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 214.857295][ T5795] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.860282][ T5751] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 214.865544][ T5795] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.869368][ T5751] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 214.872866][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.874295][ T5795] usb 7-1: config 0 descriptor?? [ 214.876591][ T5751] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 214.876614][ T5751] usb 8-1: config 0 interface 0 has no altsetting 0 [ 214.880436][ T5751] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 214.898529][ T5751] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 214.901737][ T5751] usb 8-1: Product: syz [ 214.903441][ T5751] usb 8-1: Manufacturer: syz [ 214.905044][ T5751] usb 8-1: SerialNumber: syz [ 214.908739][ T5751] usb 8-1: config 0 descriptor?? [ 214.914017][ T5751] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 214.918493][ T5751] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 214.949775][ T8375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.953196][ T8375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 214.957794][ T8375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.962116][ T8375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 215.242541][ T5751] usb 8-1: USB disconnect, device number 7 [ 215.257113][ T5751] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 215.352407][ T8376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 215.610505][ T5795] usbhid 7-1:0.0: can't add hid device: -71 [ 215.615663][ T5795] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 215.622816][ T5795] usb 7-1: USB disconnect, device number 11 [ 217.160596][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 218.129408][ T8403] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 218.130036][ T8403] ALSA: mixer_oss: invalid index 137438 [ 219.315786][ T8431] comedi comedi3: comedi_config --init_data is deprecated [ 219.595822][ T5854] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 220.277323][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 220.519688][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 220.526744][ T8446] team0 (unregistering): Port device team_slave_0 removed [ 220.530596][ T8446] team0 (unregistering): Port device team_slave_1 removed [ 220.704827][ T5854] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 220.709330][ T5854] usb 8-1: config 0 interface 0 has no altsetting 0 [ 220.712062][ T5854] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 220.715697][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.721555][ T5854] usb 8-1: config 0 descriptor?? [ 220.962143][ T8431] xt_hashlimit: max too large, truncated to 1048576 [ 221.022751][ T5760] Bluetooth: hci3: command 0x0406 tx timeout [ 221.292033][ T8456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 221.294107][ T8456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.297392][ T8456] vhci_hcd vhci_hcd.0: Device attached [ 221.588910][ T1475] usb 42-1: SetAddress Request (6) to port 0 [ 221.590898][ T1475] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 221.895587][ T8458] vhci_hcd: connection reset by peer [ 221.900410][ T12] vhci_hcd vhci_hcd.2: stop threads [ 221.902333][ T12] vhci_hcd vhci_hcd.2: release socket [ 221.904509][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 222.358741][ T5854] usbhid 8-1:0.0: can't add hid device: -71 [ 222.360755][ T5854] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 222.365904][ T5854] usb 8-1: USB disconnect, device number 8 [ 223.565740][ T8478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.870505][ T8501] overlayfs: missing 'lowerdir' [ 226.247416][ T8508] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 226.249616][ T8508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.264234][ T8508] vhci_hcd vhci_hcd.0: Device attached [ 226.541389][ T5854] usb 40-1: SetAddress Request (6) to port 0 [ 226.548682][ T5854] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 226.692609][ T1475] usb 42-1: device descriptor read/8, error -110 [ 226.812225][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 227.204869][ T1475] usb usb42-port1: attempt power cycle [ 227.698559][ T8509] vhci_hcd: connection reset by peer [ 227.703315][ T13] vhci_hcd vhci_hcd.1: stop threads [ 227.705094][ T13] vhci_hcd vhci_hcd.1: release socket [ 227.708852][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 227.789079][ T1475] usb usb42-port1: unable to enumerate USB device [ 229.178109][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'. [ 229.228832][ T8566] team0 (unregistering): Port device team_slave_0 removed [ 229.247215][ T8566] team0 (unregistering): Port device team_slave_1 removed [ 229.341073][ T8566] team0 (unregistering): Port device netdevsim1 removed [ 230.436856][ T8582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.539330][ T8583] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 230.541480][ T8583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.551721][ T8583] vhci_hcd vhci_hcd.0: Device attached [ 230.636843][ T8582] XFS (nullb0): Invalid superblock magic number [ 230.831488][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 230.834222][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 231.035730][ T8592] overlayfs: missing 'lowerdir' [ 231.149349][ T8584] vhci_hcd: connection reset by peer [ 231.156741][ T12] vhci_hcd vhci_hcd.3: stop threads [ 231.161815][ T12] vhci_hcd vhci_hcd.3: release socket [ 231.166484][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 231.766966][ T5854] usb 40-1: device descriptor read/8, error -110 [ 232.160346][ T5854] usb usb40-port1: attempt power cycle [ 232.188918][ T5845] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 232.447225][ T5845] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.457304][ T5845] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.463446][ T5845] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.477902][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.480623][ T5845] usb 8-1: SerialNumber: syz [ 232.632258][ T8612] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 232.634955][ T8612] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.639461][ T8612] vhci_hcd vhci_hcd.0: Device attached [ 232.698766][ T8604] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 232.701442][ T8604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.715324][ T8604] vhci_hcd vhci_hcd.0: Device attached [ 232.721417][ T8604] vhci_hcd vhci_hcd.0: port 0 already used [ 232.732399][ T8615] vhci_hcd: connection closed [ 232.740074][ T13] vhci_hcd vhci_hcd.3: stop threads [ 232.744049][ T5845] usb 8-1: skipping empty audio interface (v1) [ 232.744817][ T13] vhci_hcd vhci_hcd.3: release socket [ 232.758248][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 232.765937][ T5854] usb usb40-port1: unable to enumerate USB device [ 232.786161][ T5845] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 232.795464][ T5845] usb 8-1: USB disconnect, device number 9 [ 232.815363][ T8051] udevd[8051]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.938646][ T1475] usb 42-1: SetAddress Request (10) to port 0 [ 232.946180][ T1475] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 233.109356][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.625'. [ 233.115916][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.625'. [ 233.283888][ T8613] vhci_hcd: connection reset by peer [ 233.286390][ T13] vhci_hcd vhci_hcd.2: stop threads [ 233.298443][ T13] vhci_hcd vhci_hcd.2: release socket [ 233.300239][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 233.320612][ T8627] raw_sendmsg: syz.3.627 forgot to set AF_INET. Fix it! [ 233.323430][ T5760] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 233.335698][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.338542][ T8627] bridge0: port 2(bridge_slave_1) entered listening state [ 233.342255][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.345186][ T8627] bridge0: port 1(bridge_slave_0) entered listening state [ 233.372999][ T8627] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 235.785510][ T8660] overlayfs: missing 'lowerdir' [ 235.899272][ T29] usb 44-1: device descriptor read/8, error -110 [ 236.128765][ T7914] e1000 0000:00:06.0 eth0: Reset adapter [ 236.903732][ T29] usb usb44-port1: attempt power cycle [ 237.101217][ T8689] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 237.106348][ T8689] ALSA: mixer_oss: invalid index 137438 [ 237.473201][ T29] usb usb44-port1: unable to enumerate USB device [ 238.068583][ T1475] usb 42-1: device descriptor read/8, error -110 [ 238.456079][ T8702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 238.461670][ T7914] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 238.465666][ T8702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 239.023461][ T1475] usb usb42-port1: attempt power cycle [ 239.699088][ T1475] usb usb42-port1: unable to enumerate USB device [ 255.431729][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.518844][ T7914] e1000 0000:00:06.0 eth0: Reset adapter [ 255.864578][ T8781] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 255.868703][ T8781] ALSA: mixer_oss: invalid index 137438 [ 257.082149][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'. [ 257.088996][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'. [ 257.139782][ T8803] overlayfs: missing 'lowerdir' [ 257.749582][ T7914] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 258.195429][ T8819] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 258.204108][ T8820] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 258.217549][ T8820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.249557][ T8819] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 258.252445][ T8819] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 258.254823][ T8819] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 258.257677][ T8819] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 258.265794][ T8820] vhci_hcd vhci_hcd.0: Device attached [ 258.268412][ T8819] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10660 usecs [ 258.290983][ T8819] pci 0000:00:01.0: Adding to iommu group 1 [ 258.306735][ T8819] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 258.309193][ T8819] pci 0000:00:01.0: vgaarb: bridge control possible [ 258.311403][ T8819] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 258.327667][ T8819] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 258.330619][ T8819] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 258.334794][ T8819] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 258.346283][ T8819] [drm] Found bochs VGA, ID 0xb0c5. [ 258.348126][ T8819] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 258.366903][ T8819] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 258.421826][ T8819] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 258.558922][ T29] usb 42-1: SetAddress Request (14) to port 0 [ 258.561572][ T29] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 258.817666][ T8821] vhci_hcd: connection reset by peer [ 258.820248][ T13] vhci_hcd vhci_hcd.2: stop threads [ 258.822478][ T13] vhci_hcd vhci_hcd.2: release socket [ 258.825163][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 263.658750][ T29] usb 42-1: device descriptor read/8, error -110 [ 263.740290][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 263.743537][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 264.069422][ T29] usb usb42-port1: attempt power cycle [ 264.629987][ T29] usb usb42-port1: unable to enumerate USB device [ 274.402228][ T8865] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 274.429179][ T8865] ALSA: mixer_oss: invalid index 137438 [ 275.578495][ T5760] Bluetooth: hci3: command 0x0406 tx timeout [ 275.721390][ T8891] netlink: 48 bytes leftover after parsing attributes in process `syz.3.666'. [ 275.775510][ T8892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.666'. [ 275.848846][ T7914] e1000 0000:00:06.0 eth0: Reset adapter [ 276.113047][ T8903] overlayfs: missing 'lowerdir' [ 277.445071][ T8919] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 277.466528][ T8919] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 277.472021][ T8919] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 277.475104][ T8919] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 277.479350][ T8919] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 277.497573][ T8919] pci 0000:00:01.0: Adding to iommu group 1 [ 277.503575][ T8919] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 277.505745][ T8919] pci 0000:00:01.0: vgaarb: bridge control possible [ 277.507865][ T8919] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 277.519712][ T8919] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 277.523816][ T8919] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 277.528803][ T8919] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 277.547526][ T8919] [drm] Found bochs VGA, ID 0xb0c5. [ 277.549959][ T8919] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 277.564740][ T8919] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 277.604467][ T8919] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 278.065034][ T7914] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 278.748964][ T8937] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 278.751616][ T8937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.760242][ T8937] vhci_hcd vhci_hcd.0: Device attached [ 279.058492][ T1475] usb 38-1: SetAddress Request (10) to port 0 [ 279.060925][ T1475] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 279.282174][ T8938] vhci_hcd: connection reset by peer [ 279.285193][ T5852] vhci_hcd vhci_hcd.0: stop threads [ 279.287732][ T5852] vhci_hcd vhci_hcd.0: release socket [ 279.290833][ T5852] vhci_hcd vhci_hcd.0: disconnect device [ 284.138559][ T1475] usb 38-1: device descriptor read/8, error -110 [ 284.539032][ T1475] usb usb38-port1: attempt power cycle [ 285.119963][ T1475] usb usb38-port1: unable to enumerate USB device [ 292.625671][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.678'. [ 292.631533][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.678'. [ 292.919220][ T8969] overlayfs: missing 'lowerdir' [ 293.818474][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.821427][ C3] bridge0: topology change detected, propagating [ 293.824350][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.827271][ C3] bridge0: topology change detected, propagating [ 295.359189][ T7914] e1000 0000:00:06.0 eth0: Reset adapter [ 296.060010][ T9002] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 296.158748][ T9002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 296.162369][ T9002] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 296.165603][ T9002] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 296.170053][ T9002] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 296.188053][ T9002] pci 0000:00:01.0: Adding to iommu group 1 [ 296.235551][ T9002] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 296.238534][ T9002] pci 0000:00:01.0: vgaarb: bridge control possible [ 296.241388][ T9002] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 296.286430][ T9002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 296.293484][ T9002] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 296.298851][ T9002] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 296.314790][ T9002] [drm] Found bochs VGA, ID 0xb0c5. [ 296.319808][ T9002] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 296.323421][ T9002] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 297.739587][ T5751] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 298.056476][ T9030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 298.061138][ T9030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 298.458643][ T9038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 298.460742][ T9038] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.468940][ T9038] vhci_hcd vhci_hcd.0: Device attached [ 298.758514][ T1475] usb 40-1: SetAddress Request (10) to port 0 [ 298.760600][ T1475] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 299.003813][ T9039] vhci_hcd: connection reset by peer [ 299.008905][ T5852] vhci_hcd vhci_hcd.1: stop threads [ 299.013313][ T5852] vhci_hcd vhci_hcd.1: release socket [ 299.017863][ T5852] vhci_hcd vhci_hcd.1: disconnect device [ 303.818584][ T1475] usb 40-1: device descriptor read/8, error -110 [ 304.219452][ T1475] usb usb40-port1: attempt power cycle [ 304.778999][ T1475] usb usb40-port1: unable to enumerate USB device [ 305.279937][ T9056] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.285352][ T9056] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.414416][ T9065] erspan0: entered promiscuous mode [ 305.416286][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 307.868981][ T5751] e1000 0000:00:06.0 eth0: Reset adapter [ 308.082857][ T9105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.700'. [ 308.085939][ T9105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.700'. [ 308.122880][ T9108] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 308.145529][ T9108] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 308.148034][ T9108] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 308.150807][ T9108] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 308.158009][ T9108] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 308.168622][ T9108] pci 0000:00:01.0: Adding to iommu group 1 [ 308.187148][ T9108] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 308.189853][ T9108] pci 0000:00:01.0: vgaarb: bridge control possible [ 308.192478][ T9108] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 308.206784][ T9108] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 308.209601][ T9108] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 308.213516][ T9108] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 308.225510][ T9108] [drm] Found bochs VGA, ID 0xb0c5. [ 308.227364][ T9108] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 308.238678][ T9108] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 308.282318][ T9108] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 309.319091][ T9125] comedi comedi3: comedi_config --init_data is deprecated [ 309.578570][ T5854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 309.740707][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 309.746353][ T5854] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 309.757215][ T5854] usb 7-1: config 0 interface 0 has no altsetting 0 [ 309.764043][ T5854] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 309.773009][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.781490][ T5854] usb 7-1: config 0 descriptor?? [ 310.002437][ T9125] xt_hashlimit: max too large, truncated to 1048576 [ 310.062076][ T7914] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 312.329087][ T5854] usbhid 7-1:0.0: can't add hid device: -71 [ 312.331060][ T5854] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 312.337610][ T5854] usb 7-1: USB disconnect, device number 12 [ 316.861814][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.503669][ T9159] tmpfs: Unknown parameter 'grpquota/cluster/mycluster/node/mynode/ipv4_address' [ 321.515194][ T9153] futex_wake_op: syz.2.707 tries to shift op by 144; fix this program [ 321.569693][ T9153] futex_wake_op: syz.2.707 tries to shift op by 144; fix this program [ 322.818474][ T7914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 322.998424][ T7914] usb 5-1: Using ep0 maxpacket: 32 [ 323.733955][ T9182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.714'. [ 323.737981][ T9182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.714'. [ 323.753920][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 324.023468][ T7914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.378410][ T7914] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 324.381186][ T7914] usb 5-1: can't read configurations, error -71 [ 324.691814][ T9196] comedi comedi3: comedi_config --init_data is deprecated [ 324.928545][ T5795] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 325.078538][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 325.082676][ T5795] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 325.086976][ T5795] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.100393][ T5795] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.105557][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.113199][ T5795] usb 6-1: config 0 descriptor?? [ 325.341023][ T5795] usbhid 6-1:0.0: can't add hid device: -71 [ 325.349161][ T5795] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 325.361298][ T5795] usb 6-1: USB disconnect, device number 6 [ 327.619040][ T9238] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 327.639754][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 327.646365][ T9238] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 327.649694][ T9238] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 327.658994][ T9238] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 327.664759][ T9238] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 327.707213][ T9238] pci 0000:00:01.0: Adding to iommu group 1 [ 327.724525][ T9238] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 327.727265][ T9238] pci 0000:00:01.0: vgaarb: bridge control possible [ 327.729795][ T9238] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 327.765004][ T9238] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 327.769373][ T9238] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 327.773917][ T9238] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 327.789833][ T9238] [drm] Found bochs VGA, ID 0xb0c5. [ 327.792028][ T9238] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 327.801318][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.807932][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.811648][ T9238] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 327.814070][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.829667][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.833273][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.844384][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.849393][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.854448][ T10] usb 6-1: Product: syz [ 327.857195][ T10] usb 6-1: Manufacturer: syz [ 327.875934][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 327.879691][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 327.885757][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 327.890468][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 327.935545][ T9238] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 328.350917][ T9262] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 328.912231][ T9248] futex_wake_op: syz.1.726 tries to shift op by 144; fix this program [ 328.919526][ T9248] futex_wake_op: syz.1.726 tries to shift op by 144; fix this program [ 329.217570][ T9273] comedi comedi3: comedi_config --init_data is deprecated [ 329.488517][ T5751] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 329.638432][ T5751] usb 7-1: Using ep0 maxpacket: 32 [ 329.642538][ T5751] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 329.646171][ T5751] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.648399][ T5751] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 329.651381][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.656052][ T5751] usb 7-1: config 0 descriptor?? [ 329.874502][ T9273] xt_hashlimit: max too large, truncated to 1048576 [ 330.142519][ T9281] warning: `syz.3.732' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 330.338366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 330.488549][ T5831] usb 6-1: USB disconnect, device number 7 [ 330.756334][ T9292] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 330.773540][ T9292] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 330.775999][ T9292] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 330.778966][ T9292] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 330.782280][ T9292] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 330.792553][ T9292] pci 0000:00:01.0: Adding to iommu group 1 [ 330.793272][ T9294] comedi comedi3: comedi_config --init_data is deprecated [ 330.797590][ T9292] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 330.799775][ T9292] pci 0000:00:01.0: vgaarb: bridge control possible [ 330.801900][ T9292] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 330.809932][ T9292] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 330.813015][ T9292] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 330.816613][ T9292] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 330.824419][ T9292] [drm] Found bochs VGA, ID 0xb0c5. [ 330.826134][ T9292] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 330.838210][ T9292] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 330.882823][ T9292] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 331.038457][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 331.208389][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 331.212133][ T5854] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 331.215624][ T5854] usb 6-1: config 0 interface 0 has no altsetting 0 [ 331.217749][ T5854] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 331.220669][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.224888][ T5854] usb 6-1: config 0 descriptor?? [ 331.435787][ T9294] xt_hashlimit: max too large, truncated to 1048576 [ 332.241677][ T5751] usbhid 7-1:0.0: can't add hid device: -71 [ 332.247553][ T5751] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 332.269313][ T5751] usb 7-1: USB disconnect, device number 13 [ 332.331234][ T9304] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 332.354253][ T9304] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 332.357863][ T9304] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 332.361485][ T9304] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 332.365181][ T9304] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 332.386008][ T9304] pci 0000:00:01.0: Adding to iommu group 1 [ 332.394639][ T9304] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 332.397351][ T9304] pci 0000:00:01.0: vgaarb: bridge control possible [ 332.399933][ T9304] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 332.419247][ T9304] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 332.422783][ T9304] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 332.427593][ T9304] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 332.441891][ T9304] [drm] Found bochs VGA, ID 0xb0c5. [ 332.444109][ T9304] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 332.454616][ T9304] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 332.698710][ T9304] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 333.248397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 333.812308][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 333.815661][ T5854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 333.831411][ T5854] usb 6-1: USB disconnect, device number 8 [ 334.228481][ T7914] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 335.360356][ T7914] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.364142][ T7914] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.368401][ T7914] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.391507][ T7914] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.391526][ T7914] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.401387][ T9347] comedi comedi3: comedi_config --init_data is deprecated [ 335.402736][ T7914] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.407706][ T7914] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.407728][ T7914] usb 8-1: Product: syz [ 335.407742][ T7914] usb 8-1: Manufacturer: syz [ 335.418892][ T7914] cdc_wdm 8-1:1.0: skipping garbage [ 335.418913][ T7914] cdc_wdm 8-1:1.0: skipping garbage [ 335.422191][ T7914] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 335.422204][ T7914] cdc_wdm 8-1:1.0: Unknown control protocol [ 335.678551][ T5845] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 336.132111][ T9352] futex_wake_op: syz.3.744 tries to shift op by 144; fix this program [ 336.135136][ T9352] futex_wake_op: syz.3.744 tries to shift op by 144; fix this program [ 336.518221][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 336.738479][ T5845] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 336.741935][ T5845] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.743987][ T5845] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 336.746631][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.750666][ T5845] usb 7-1: config 0 descriptor?? [ 336.869073][ T7914] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 336.977585][ T9347] xt_hashlimit: max too large, truncated to 1048576 [ 337.038823][ T7914] usb 5-1: Using ep0 maxpacket: 8 [ 337.044446][ T7914] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 337.047376][ T7914] usb 5-1: config 0 has no interface number 0 [ 337.049364][ T7914] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.052679][ T7914] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 337.056390][ T7914] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.059892][ T7914] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.063865][ T7914] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 337.066768][ T7914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.083501][ T7914] usb 5-1: config 0 descriptor?? [ 337.108260][ T7914] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 337.284490][ T10] usb 8-1: USB disconnect, device number 10 [ 337.649117][ T5854] usb 5-1: USB disconnect, device number 10 [ 337.655028][ T5854] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 338.488368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 339.101509][ T5845] usbhid 7-1:0.0: can't add hid device: -71 [ 339.103454][ T5845] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 339.107284][ T5845] usb 7-1: USB disconnect, device number 14 [ 339.268490][ T5795] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 339.418770][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 339.975934][ T5795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.983486][ T5795] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 339.988931][ T5795] usb 6-1: can't read configurations, error -71 [ 340.538476][ T5854] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 340.609043][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 340.610340][ T9438] comedi comedi3: comedi_config --init_data is deprecated [ 340.708498][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 340.716140][ T5854] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.725628][ T5854] usb 5-1: config 179 has no interface number 0 [ 340.732015][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 340.747334][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 340.758863][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.768473][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 340.776559][ T5854] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.783787][ T5854] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.787467][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.794857][ T9429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.028439][ T5795] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 341.096736][ T9454] comedi comedi3: comedi_config --init_data is deprecated [ 341.179423][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 341.182637][ T5795] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 341.186198][ T5795] usb 6-1: config 0 interface 0 has no altsetting 0 [ 341.188455][ T5795] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 341.191278][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.195357][ T5795] usb 6-1: config 0 descriptor?? [ 341.231606][ T9429] syzkaller1: entered promiscuous mode [ 341.233977][ T9429] syzkaller1: entered allmulticast mode [ 341.338482][ T7072] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 341.407003][ T9438] xt_hashlimit: max too large, truncated to 1048576 [ 341.488370][ T7072] usb 7-1: Using ep0 maxpacket: 32 [ 341.491557][ T7072] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 341.495323][ T7072] usb 7-1: config 0 interface 0 has no altsetting 0 [ 341.504687][ T7072] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 341.507858][ T7072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.514767][ T7072] usb 7-1: config 0 descriptor?? [ 341.681489][ T5895] usb 5-1: USB disconnect, device number 11 [ 341.681559][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 341.686651][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 341.690299][ C1] ================================================================== [ 341.693418][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 341.696370][ C1] Read of size 4 at addr ffff88801d3cc05c by task syz.3.768/9455 [ 341.700293][ C1] [ 341.701898][ C1] CPU: 1 UID: 0 PID: 9455 Comm: syz.3.768 Not tainted syzkaller #0 PREEMPT(full) [ 341.701916][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.701927][ C1] Call Trace: [ 341.701934][ C1] [ 341.701940][ C1] dump_stack_lvl+0x100/0x190 [ 341.701988][ C1] print_report+0x13d/0x4b0 [ 341.702018][ C1] ? __virt_addr_valid+0x239/0x430 [ 341.702032][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 341.702043][ C1] kasan_report+0xdf/0x1c0 [ 341.702067][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 341.702081][ C1] do_raw_spin_lock+0x23b/0x260 [ 341.702094][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.702106][ C1] ? kcov_remote_stop+0x201/0x540 [ 341.702123][ C1] ? kcov_remote_stop+0x201/0x540 [ 341.702139][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 341.702203][ C1] ? __wake_up+0x1c/0x60 [ 341.702222][ C1] __wake_up+0x1c/0x60 [ 341.702237][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 341.702277][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 341.702295][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 341.702313][ C1] dummy_timer+0xdb2/0x36f0 [ 341.702334][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.702346][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 341.702399][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 341.702410][ C1] ? rcu_is_watching+0x12/0xc0 [ 341.702423][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.702435][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 341.702446][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 341.702462][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 341.702476][ C1] handle_softirqs+0x1ea/0x9b0 [ 341.702489][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 341.702501][ C1] ? _raw_spin_unlock+0x28/0x50 [ 341.702511][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 341.702526][ C1] __irq_exit_rcu+0x162/0x210 [ 341.702537][ C1] irq_exit_rcu+0x9/0x30 [ 341.702548][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 341.702562][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.702575][ C1] RIP: 0023:0xf70fb331 [ 341.702585][ C1] Code: 8d b4 26 00 00 00 00 66 90 39 4c 24 10 89 f8 19 e8 73 1f 8b 44 24 08 66 90 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef <89> 44 24 08 89 54 24 10 8b 73 f8 8d 53 f8 8b 5b fc 89 e8 39 f1 19 [ 341.702597][ C1] RSP: 002b:00000000ffc91330 EFLAGS: 00000246 [ 341.702607][ C1] RAX: 00000000f6d4ab80 RBX: 00000000f6d57af8 RCX: 000000008211e58c [ 341.702614][ C1] RDX: 000000008211e58c RSI: 0000000000000000 RDI: 00000000ffffffff [ 341.702621][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 341.702627][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.702634][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.702643][ C1] [ 341.702647][ C1] [ 341.724697][ T9454] xt_hashlimit: max too large, truncated to 1048576 [ 341.725633][ C1] Allocated by task 5854: [ 341.725646][ C1] kasan_save_stack+0x30/0x50 [ 341.725671][ C1] kasan_save_track+0x14/0x30 [ 341.812219][ C1] __kasan_kmalloc+0xaa/0xb0 [ 341.814050][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 341.816137][ C1] xpad_probe+0x28e/0x1f60 [ 341.817920][ C1] usb_probe_interface+0x303/0x8f0 [ 341.819957][ C1] really_probe+0x241/0xa60 [ 341.821692][ C1] __driver_probe_device+0x20e/0x450 [ 341.823722][ C1] driver_probe_device+0x4a/0x140 [ 341.825706][ C1] __device_attach_driver+0x1df/0x320 [ 341.827825][ C1] bus_for_each_drv+0x159/0x1e0 [ 341.829747][ C1] __device_attach+0x1e4/0x4d0 [ 341.831623][ C1] device_initial_probe+0xaf/0xd0 [ 341.833600][ C1] bus_probe_device+0x64/0x160 [ 341.835464][ C1] device_add+0x121d/0x1970 [ 341.837238][ C1] usb_set_configuration+0xd97/0x1c60 [ 341.839254][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 341.841404][ C1] usb_probe_device+0xef/0x400 [ 341.843285][ C1] really_probe+0x241/0xa60 [ 341.844777][ C1] __driver_probe_device+0x20e/0x450 [ 341.846223][ C1] driver_probe_device+0x4a/0x140 [ 341.848101][ C1] __device_attach_driver+0x1df/0x320 [ 341.849976][ C1] bus_for_each_drv+0x159/0x1e0 [ 341.851529][ C1] __device_attach+0x1e4/0x4d0 [ 341.853045][ C1] device_initial_probe+0xaf/0xd0 [ 341.854633][ C1] bus_probe_device+0x64/0x160 [ 341.856133][ C1] device_add+0x121d/0x1970 [ 341.857599][ C1] usb_new_device.cold+0x685/0x115c [ 341.859224][ C1] hub_event+0x30a3/0x4a60 [ 341.860638][ C1] process_one_work+0xa23/0x1940 [ 341.862195][ C1] worker_thread+0x5ef/0xe50 [ 341.863653][ C1] kthread+0x370/0x450 [ 341.864952][ C1] ret_from_fork+0x72b/0xd50 [ 341.866453][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.867982][ C1] [ 341.868751][ C1] Freed by task 5895: [ 341.869996][ C1] kasan_save_stack+0x30/0x50 [ 341.871482][ C1] kasan_save_track+0x14/0x30 [ 341.872959][ C1] kasan_save_free_info+0x3b/0x70 [ 341.874525][ C1] __kasan_slab_free+0x5f/0x80 [ 341.876019][ C1] kfree+0x22b/0x6c0 [ 341.877279][ C1] xpad_disconnect+0x1cf/0x530 [ 341.878775][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 341.880414][ C1] device_remove+0x12a/0x180 [ 341.881866][ C1] device_release_driver_internal+0x44e/0x620 [ 341.883757][ C1] bus_remove_device+0x2bc/0x560 [ 341.885306][ C1] device_del+0x376/0x9b0 [ 341.886659][ C1] usb_disable_device+0x367/0x810 [ 341.888271][ C1] usb_disconnect+0x2e2/0x9a0 [ 341.889752][ C1] hub_event+0x1c4f/0x4a60 [ 341.891159][ C1] process_one_work+0xa23/0x1940 [ 341.892719][ C1] worker_thread+0x5ef/0xe50 [ 341.894162][ C1] kthread+0x370/0x450 [ 341.895442][ C1] ret_from_fork+0x72b/0xd50 [ 341.896917][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.898415][ C1] [ 341.899170][ C1] The buggy address belongs to the object at ffff88801d3cc000 [ 341.899170][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 341.903415][ C1] The buggy address is located 92 bytes inside of [ 341.903415][ C1] freed 1024-byte region [ffff88801d3cc000, ffff88801d3cc400) [ 341.907604][ C1] [ 341.908367][ C1] The buggy address belongs to the physical page: [ 341.910384][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d3c8 [ 341.913074][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 341.915784][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 341.918178][ C1] page_type: f5(slab) [ 341.919431][ C1] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 341.922073][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 341.924708][ C1] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 341.927407][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 341.930093][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 341.932784][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 341.935461][ C1] page dumped because: kasan: bad access detected [ 341.937539][ C1] page_owner tracks the page as allocated [ 341.939312][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2184618174, free_ts 0 [ 341.945301][ C1] post_alloc_hook+0xfd/0x120 [ 341.946801][ C1] get_page_from_freelist+0xf48/0x3530 [ 341.948529][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 341.950374][ C1] new_slab+0xa2/0x640 [ 341.951669][ C1] refill_objects+0xe3/0x410 [ 341.953131][ C1] __pcs_replace_empty_main+0x376/0x680 [ 341.954862][ C1] __kmalloc_noprof+0x66d/0x820 [ 341.956494][ C1] __alloc_workqueue+0x1bd/0x1940 [ 341.958125][ C1] alloc_workqueue_noprof+0xc7/0x130 [ 341.959780][ C1] pm_init+0x1d/0x110 [ 341.961143][ C1] do_one_initcall+0x11d/0x700 [ 341.962658][ C1] kernel_init_freeable+0x6ea/0x7b0 [ 341.964299][ C1] kernel_init+0x1f/0x1e0 [ 341.965673][ C1] ret_from_fork+0x72b/0xd50 [ 341.967149][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.968670][ C1] page_owner free stack trace missing [ 341.970338][ C1] [ 341.971135][ C1] Memory state around the buggy address: [ 341.972890][ C1] ffff88801d3cbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 341.975368][ C1] ffff88801d3cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 341.977867][ C1] >ffff88801d3cc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.980328][ C1] ^ [ 341.982485][ C1] ffff88801d3cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.984970][ C1] ffff88801d3cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.987478][ C1] ================================================================== [ 341.989955][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 341.992172][ C1] CPU: 1 UID: 0 PID: 9455 Comm: syz.3.768 Not tainted syzkaller #0 PREEMPT(full) [ 341.995003][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.998120][ C1] Call Trace: [ 341.999182][ C1] [ 342.000095][ C1] dump_stack_lvl+0x100/0x190 [ 342.001591][ C1] vpanic+0x552/0x970 [ 342.002855][ C1] ? __pfx_vpanic+0x10/0x10 [ 342.004230][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 342.005719][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 342.007326][ C1] panic+0xd1/0xe0 [ 342.008529][ C1] ? __pfx_panic+0x10/0x10 [ 342.009948][ C1] ? end_report.part.0+0x23/0x90 [ 342.011535][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.012987][ C1] ? end_report.part.0+0x23/0x90 [ 342.014349][ C1] ? check_panic_on_warn+0x1f/0x90 [ 342.015877][ C1] check_panic_on_warn.cold+0x19/0x34 [ 342.017581][ C1] end_report.part.0+0x3a/0x90 [ 342.019046][ C1] kasan_report.cold+0xe/0x18 [ 342.020496][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 342.022091][ C1] do_raw_spin_lock+0x23b/0x260 [ 342.023625][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.025304][ C1] ? kcov_remote_stop+0x201/0x540 [ 342.026886][ C1] ? kcov_remote_stop+0x201/0x540 [ 342.028467][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 342.030026][ C1] ? __wake_up+0x1c/0x60 [ 342.031315][ C1] __wake_up+0x1c/0x60 [ 342.032616][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 342.034260][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 342.035840][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 342.037481][ C1] dummy_timer+0xdb2/0x36f0 [ 342.038855][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.040539][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 342.042279][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 342.043821][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.045327][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.047154][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 342.048722][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 342.050352][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 342.051964][ C1] handle_softirqs+0x1ea/0x9b0 [ 342.053406][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 342.054997][ C1] ? _raw_spin_unlock+0x28/0x50 [ 342.056437][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 342.058139][ C1] __irq_exit_rcu+0x162/0x210 [ 342.059619][ C1] irq_exit_rcu+0x9/0x30 [ 342.060960][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 342.062628][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.064352][ C1] RIP: 0023:0xf70fb331 [ 342.065583][ C1] Code: 8d b4 26 00 00 00 00 66 90 39 4c 24 10 89 f8 19 e8 73 1f 8b 44 24 08 66 90 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef <89> 44 24 08 89 54 24 10 8b 73 f8 8d 53 f8 8b 5b fc 89 e8 39 f1 19 [ 342.071534][ C1] RSP: 002b:00000000ffc91330 EFLAGS: 00000246 [ 342.073449][ C1] RAX: 00000000f6d4ab80 RBX: 00000000f6d57af8 RCX: 000000008211e58c [ 342.075802][ C1] RDX: 000000008211e58c RSI: 0000000000000000 RDI: 00000000ffffffff [ 342.078285][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 342.080665][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.083065][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.085516][ C1] [ 342.087186][ C1] Kernel Offset: disabled [ 342.088502][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:11:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e1830bd RDI=ffffffff8c400a80 RBP=ffff88806daf8000 RSP=ffffc90004fa7bc0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=dffffc0000000000 R15=ffff88806daf8000 RIP=ffffffff8bb91a7d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034218ff8 CR3=0000000072139000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a135b5 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc90003a07430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6f522f R15=ffffffff85a13550 RIP=ffffffff85a135df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ce1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70bf000 CR3=0000000072139000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000616343 RBX=ffff88801c7fca80 RCX=ffffffff8bb912d5 RDX=0000000000000000 RSI=ffffffff8e1a8f2e RDI=ffffffff8c400a80 RBP=ffffed10038ff950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb8f89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53baff4 CR3=00000000259c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0664a32b 00007ffc0664a32b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0664a830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0664a830 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20444c203a302e30 3a312d3820627375 646c205d31353735 54205b5d33393400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2044462030302430 3031273220627375 6466205731353735 5420515733333400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3838386666666620 7264646120746120 3420657a69732066 6f2064616552205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120353620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 6920393731206769 666e6f63203a312d 3520627375205d34 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003cda33 RBX=ffff88801c7fa540 RCX=ffffffff8bb912d5 RDX=0000000000000000 RSI=ffffffff8e1a8f2e RDI=ffffffff8c400a80 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8f89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033ec0ff8 CR3=0000000072c83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefc00 Opmask01=0000000000000000 Opmask02=0000000003010037 Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005599d7a52f90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005599d7a5aad0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6131f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffff0000ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 609ce864de835a4b 00000005599d7a53 0000000000000141 0000000000000020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3fcfbb2592c0181e 535f494609c23e1a 00005599ba739ef6 00007ffcd2a8e8d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fdfffe7dfdf7ffe 777f7dffeffb7f7b a7287fffbb73ffff 74417fffdfeffbd6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000045504b 00004c4c49391f23 0000000000000021 0000000000000020 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000702 0000000000000702 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000