last executing test programs: 6.795332962s ago: executing program 2 (id=5769): epoll_create1(0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) syz_open_procfs(0x0, 0x0) fchdir(r3) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) readlink(0x0, &(0x7f0000000140)=""/104, 0x68) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xfffffffc) 6.095861041s ago: executing program 3 (id=5772): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 5.951641894s ago: executing program 2 (id=5773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f00000004c0)='\n', 0x1) 5.861097961s ago: executing program 3 (id=5774): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) 5.146673348s ago: executing program 2 (id=5776): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 5.046747896s ago: executing program 1 (id=5778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) 4.780312061s ago: executing program 3 (id=5779): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r3, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.70130041s ago: executing program 0 (id=5780): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010125}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 4.351557563s ago: executing program 1 (id=5781): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.305825515s ago: executing program 3 (id=5782): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 4.123331662s ago: executing program 1 (id=5783): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 3.835771659s ago: executing program 0 (id=5784): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 3.125838559s ago: executing program 2 (id=5785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) 2.983790859s ago: executing program 0 (id=5786): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.811887936s ago: executing program 3 (id=5787): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.209297742s ago: executing program 1 (id=5788): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010125}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.930012164s ago: executing program 3 (id=5789): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) io_uring_enter(r4, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0xd0, 0x0, 0x100, 0x70fd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xacc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6468}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)}], 0x1}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000002b80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000004c0)="af", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0xe, @private1, 0xa36}, 0x1c, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000002540)="38e02d7fb5648243a885ff31df22502d", 0x10}, {&(0x7f0000002580)="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", 0xfc}, {&(0x7f0000002680)="3a588b130d734e92ea0deb298b1a81eb838721410cf5cea9ae5d6daddcacb6c3867eb072", 0x24}], 0x4}}, {{&(0x7f0000002700)={0xa, 0x4e21, 0x0, @remote, 0x7f}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002740)="dfeb045fe8b7cef715853152148b4962e0750c903f5c42ec75ec9a7d6ad959c5a059e70460fc", 0x26}, {&(0x7f0000002780)}, {&(0x7f0000002800)="23111cd4e0555eb6e0cb167ef2995ab9ec309bbb7cf60cd5a99a65f84d6af7", 0x1f}, {&(0x7f0000002840)="4609c43d3925ea97b9993947aefc00c1c4ed33f417178a55b78dfa4fa7358efe453d5041a131dc520898a3176c6519803568f5cff221e17f83785047cc255a33a9845c9e4640e84ace8767035819d12876755065b5ca8c1a27af41add69979946b56070c6bb9c36bfb777d15b7107564b981e6dc5eecc70afe9ab1a9344e809f634a27023f095cf02c2d38d6ec11", 0x8e}, {0x0}, {&(0x7f0000002a40)="0a6822a339007e3a6c69637f2dd400cc435f07a1fc5d4b1a0eae80f07b9df5dc9edd63d33f259556ca8ca010e1035fd4737dc57c7ee66f5da474441d670b6b1b8cfec4eb1bb4763f191f", 0x4a}], 0x6, &(0x7f0000002b00)=[@dstopts_2292={{0x44, 0x29, 0x4, {0x4, 0x5, '\x00', [@ra={0x5, 0x2, 0x401}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xfa}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x44}}], 0x4, 0x40800) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) 1.853992032s ago: executing program 2 (id=5790): openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1.853172989s ago: executing program 0 (id=5791): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.608290107s ago: executing program 0 (id=5792): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 1.604417784s ago: executing program 1 (id=5793): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r3, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 837.600165ms ago: executing program 2 (id=5794): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 229.986036ms ago: executing program 0 (id=5795): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_udc.0', 0xb) 0s ago: executing program 1 (id=5796): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) kernel console output (not intermixed with test programs): 730] syzkaller0: entered allmulticast mode [ 1346.514343][T19299] usb 6-1: USB disconnect, device number 98 [ 1346.514486][ C3] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1346.579994][T25733] syzkaller0: entered promiscuous mode [ 1346.581857][T25733] syzkaller0: entered allmulticast mode [ 1346.594146][T25733] tipc: Enabled bearer , priority 0 [ 1346.600438][T25733] tipc: Resetting bearer [ 1346.606492][T25732] tipc: Resetting bearer [ 1346.623996][T25732] tipc: Disabling bearer [ 1347.693505][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1347.920416][T25743] syzkaller0: entered promiscuous mode [ 1347.922989][T25743] syzkaller0: entered allmulticast mode [ 1347.936252][T25743] tipc: Enabled bearer , priority 0 [ 1347.948524][T25743] tipc: Resetting bearer [ 1347.954102][T25740] tipc: Resetting bearer [ 1347.967220][T25740] tipc: Disabling bearer [ 1348.152387][ T5844] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1348.319299][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1348.322786][ T5844] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1348.326137][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1348.329092][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1348.333080][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1348.343898][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1348.347031][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1348.349655][ T5844] usb 5-1: Product: syz [ 1348.351075][ T5844] usb 5-1: Manufacturer: syz [ 1348.377383][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1348.379231][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1348.384661][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1348.386868][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 1348.772510][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 1348.893331][T25754] tipc: Enabled bearer , priority 0 [ 1348.896471][T25754] syzkaller0: entered promiscuous mode [ 1348.898339][T25754] syzkaller0: entered allmulticast mode [ 1348.905891][T19299] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1348.908960][T25754] tipc: Resetting bearer [ 1348.914645][T25753] tipc: Resetting bearer [ 1348.930089][T25753] tipc: Disabling bearer [ 1349.112495][T14113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1349.117976][T14113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1349.123460][T14113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1349.126742][T14113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1349.129667][T14113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1349.269616][T15849] syz_tun (unregistering): left allmulticast mode [ 1349.725308][T25758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.727713][T25758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.730078][T25758] bridge_slave_0: entered allmulticast mode [ 1349.733202][T25758] bridge_slave_0: entered promiscuous mode [ 1349.736671][T25758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.738981][T25758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.741294][T25758] bridge_slave_1: entered allmulticast mode [ 1349.744873][T25758] bridge_slave_1: entered promiscuous mode [ 1349.761489][T25758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.766215][T25758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.783206][T25758] team0: Port device team_slave_0 added [ 1349.786425][T25758] team0: Port device team_slave_1 added [ 1349.799726][T25758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.801889][T25758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.809957][T25758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.814642][T25758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.816863][T25758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.825188][T25758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.848712][T25758] hsr_slave_0: entered promiscuous mode [ 1349.850951][T25758] hsr_slave_1: entered promiscuous mode [ 1349.853239][T25758] debugfs: 'hsr0' already exists in 'hsr' [ 1349.854955][T25758] Cannot create hsr debugfs directory [ 1349.922075][T25758] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.995037][T25758] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.041460][T25758] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.110071][T25758] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.276954][T25758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1350.281784][T25758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.284992][T25758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1350.290436][T25758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.295924][T25758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1350.304335][T25758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.309261][T25758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1350.321641][T25758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.354186][T25758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.356504][T25758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.358870][T25758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.361161][T25758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.416331][T25758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.426935][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.429936][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.440909][T25758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.449488][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.452287][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.459200][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.461474][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.782628][T25758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.819114][T25794] fuse: Bad value for 'rootmode' [ 1350.888620][T25758] veth0_vlan: entered promiscuous mode [ 1350.942299][T25758] veth1_vlan: entered promiscuous mode [ 1351.025472][T25758] veth0_macvtap: entered promiscuous mode [ 1351.040878][ T5844] usb 5-1: USB disconnect, device number 101 [ 1351.085659][T25758] veth1_macvtap: entered promiscuous mode [ 1351.143622][T14113] Bluetooth: hci1: command tx timeout [ 1351.350123][T25758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.373783][T25797] pim6reg1: entered promiscuous mode [ 1351.375580][T25797] pim6reg1: entered allmulticast mode [ 1351.422049][T25758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.502382][T20503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.507210][T20503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.572386][T20503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.575760][T20503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.589650][T25803] tipc: Enabled bearer , priority 0 [ 1351.593553][T25803] syzkaller0: entered promiscuous mode [ 1351.595745][T25803] syzkaller0: entered allmulticast mode [ 1351.607128][T25803] tipc: Resetting bearer [ 1351.642386][T25801] tipc: Resetting bearer [ 1351.667528][T25801] tipc: Disabling bearer [ 1351.828711][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.835594][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.853923][T25474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.856784][T25474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.012567][T23630] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1352.061339][T25812] fuse: Unknown parameter 'use00000000000000000000' [ 1352.142602][T23630] usb 7-1: device descriptor read/64, error -71 [ 1352.172350][T19299] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1352.334258][T19299] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.337484][T19299] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1352.340824][T19299] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.345456][T19299] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1352.348481][T19299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.356280][T19299] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1352.358910][T19299] usb 6-1: invalid MIDI out EP 0 [ 1352.382534][T23630] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1352.405587][T19299] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1352.522356][T23630] usb 7-1: device descriptor read/64, error -71 [ 1352.559263][T19299] usb 6-1: USB disconnect, device number 99 [ 1352.633983][T23630] usb usb7-port1: attempt power cycle [ 1352.972272][T23630] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1352.993677][T23630] usb 7-1: device descriptor read/8, error -71 [ 1353.222394][T14113] Bluetooth: hci1: command tx timeout [ 1353.452323][T23630] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1354.025544][T25829] syzkaller0: entered promiscuous mode [ 1354.027276][T25829] syzkaller0: entered allmulticast mode [ 1354.036243][T25829] tipc: Started in network mode [ 1354.037970][T25829] tipc: Node identity a686b60bcc7a, cluster identity 4711 [ 1354.040779][T25829] tipc: Enabled bearer , priority 0 [ 1354.049073][T25829] tipc: Resetting bearer [ 1354.054490][T25828] tipc: Resetting bearer [ 1354.068108][T25828] tipc: Disabling bearer [ 1354.092714][T23630] usb 7-1: device descriptor read/8, error -71 [ 1354.214297][T23630] usb usb7-port1: unable to enumerate USB device [ 1354.734952][T25835] syzkaller0: entered promiscuous mode [ 1354.736847][T25835] syzkaller0: entered allmulticast mode [ 1354.743256][T25835] tipc: Enabled bearer , priority 0 [ 1354.748130][T25835] tipc: Resetting bearer [ 1354.756078][T25834] tipc: Resetting bearer [ 1354.776234][T25834] tipc: Disabling bearer [ 1355.053478][T25837] tipc: Enabled bearer , priority 0 [ 1355.063762][T25837] syzkaller0: entered promiscuous mode [ 1355.065507][T25837] syzkaller0: entered allmulticast mode [ 1355.169008][T25837] tipc: Resetting bearer [ 1355.242496][T25836] tipc: Resetting bearer [ 1355.270197][T25836] tipc: Disabling bearer [ 1355.302431][T14113] Bluetooth: hci1: command tx timeout [ 1355.342363][T25810] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1355.432312][T24599] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1355.494558][T25810] usb 7-1: Using ep0 maxpacket: 8 [ 1355.504361][T25810] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1355.514688][T25810] usb 7-1: config 0 has no interface number 0 [ 1355.517075][T25810] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1355.526842][T25810] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1355.530742][T25810] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1355.535958][T25810] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1355.540762][T25810] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1355.544341][T25810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.553417][T25810] usb 7-1: config 0 descriptor?? [ 1355.571192][T25810] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1355.593801][T24599] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1355.597658][T24599] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1355.601159][T24599] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1355.604831][T24599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.626936][T24599] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1355.631861][T24599] usb 8-1: invalid MIDI out EP 0 [ 1355.678414][T25850] fuse: Unknown parameter 'user_i00000000000000000000' [ 1355.715137][T24599] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1355.858329][T25810] usb 8-1: USB disconnect, device number 84 [ 1355.914935][T19299] usb 7-1: USB disconnect, device number 108 [ 1355.915006][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 1355.920549][T19299] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1356.882322][T23630] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1356.903476][T25865] fuse: Unknown parameter 'user_i00000000000000000000' [ 1357.042280][T23630] usb 5-1: Using ep0 maxpacket: 8 [ 1357.047586][T23630] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1357.050937][T23630] usb 5-1: config 0 has no interface number 0 [ 1357.055865][T23630] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.059634][T23630] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1357.067293][T23630] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1357.071103][T23630] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1357.075909][T23630] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1357.078964][T23630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.083437][T23630] usb 5-1: config 0 descriptor?? [ 1357.093672][T23630] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1357.162421][ T845] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1357.334687][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1357.337066][ T845] usb 6-1: device descriptor read/64, error -71 [ 1357.338179][T19299] usb 5-1: USB disconnect, device number 102 [ 1357.361650][T19299] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1357.382669][T14113] Bluetooth: hci1: command tx timeout [ 1357.627702][ T845] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1357.793967][ T845] usb 6-1: device descriptor read/64, error -71 [ 1357.903754][ T845] usb usb6-port1: attempt power cycle [ 1358.262851][ T845] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1358.289824][ T845] usb 6-1: device descriptor read/8, error -71 [ 1358.542550][ T845] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1358.562792][ T845] usb 6-1: device descriptor read/8, error -71 [ 1358.590165][T25878] pim6reg1: entered promiscuous mode [ 1358.592343][T25878] pim6reg1: entered allmulticast mode [ 1358.619915][T25880] tipc: Enabled bearer , priority 0 [ 1358.624382][T25880] syzkaller0: entered promiscuous mode [ 1358.626136][T25880] syzkaller0: entered allmulticast mode [ 1358.635731][T25880] tipc: Resetting bearer [ 1358.640900][T25879] tipc: Resetting bearer [ 1358.657488][T25879] tipc: Disabling bearer [ 1358.672624][ T845] usb usb6-port1: unable to enumerate USB device [ 1358.717914][T25883] fuse: Bad value for 'fd' [ 1360.226499][T25903] tipc: Enabled bearer , priority 0 [ 1360.233794][T25903] syzkaller0: entered promiscuous mode [ 1360.241875][T25903] syzkaller0: entered allmulticast mode [ 1360.268263][T25903] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1360.332630][T25903] tipc: Resetting bearer [ 1360.350204][T25902] tipc: Resetting bearer [ 1360.392035][T25902] tipc: Disabling bearer [ 1360.868401][T25913] tipc: Enabled bearer , priority 0 [ 1360.871244][T25913] syzkaller0: entered promiscuous mode [ 1360.875356][T25913] syzkaller0: entered allmulticast mode [ 1360.881864][T25913] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1360.900635][T25913] tipc: Resetting bearer [ 1360.907949][T25912] tipc: Resetting bearer [ 1360.923468][T25912] tipc: Disabling bearer [ 1361.153408][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.156622][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.189848][T25918] netlink: 'syz.1.5122': attribute type 10 has an invalid length. [ 1361.219768][T25918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.226391][T25918] team0: Port device bond0 added [ 1361.360149][T25921] fuse: Unknown parameter 'user_id00000000000000000000' [ 1361.763647][T25925] fuse: Unknown parameter 'user_id00000000000000000000' [ 1362.442287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1364.779947][T25948] fuse: Unknown parameter '0x0000000000000004' [ 1364.822594][ T845] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1365.013498][ T845] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1365.030082][ T845] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1365.033552][ T845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1365.045683][ T845] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1365.050779][ T845] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1365.079205][ T845] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1365.082277][ T845] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1365.085273][ T845] usb 6-1: Product: syz [ 1365.087331][ T845] usb 6-1: Manufacturer: syz [ 1365.137618][ T845] cdc_wdm 6-1:1.0: skipping garbage [ 1365.139809][ T845] cdc_wdm 6-1:1.0: skipping garbage [ 1365.156175][ T845] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1365.158181][ T845] cdc_wdm 6-1:1.0: Unknown control protocol [ 1365.776026][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 1365.929098][T25957] syzkaller0: entered promiscuous mode [ 1365.930896][T25957] syzkaller0: entered allmulticast mode [ 1365.948999][T25957] tipc: Enabled bearer , priority 0 [ 1365.957260][T25957] tipc: Resetting bearer [ 1365.961704][T25959] syzkaller0: entered promiscuous mode [ 1365.963728][T25959] syzkaller0: entered allmulticast mode [ 1365.969133][T25956] tipc: Resetting bearer [ 1365.984857][T25956] tipc: Disabling bearer [ 1365.991105][T25959] tipc: Enabled bearer , priority 0 [ 1365.997156][T25958] tipc: Resetting bearer [ 1366.011114][T25958] tipc: Disabling bearer [ 1367.096992][T25975] pim6reg1: entered promiscuous mode [ 1367.099139][T25975] pim6reg1: entered allmulticast mode [ 1367.475339][T25985] fuse: Unknown parameter '0x0000000000000004' [ 1367.665205][T25810] usb 6-1: USB disconnect, device number 104 [ 1367.920390][T25990] netlink: 'syz.1.5142': attribute type 10 has an invalid length. [ 1368.018049][T25990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.107756][T25995] netlink: 'syz.2.5143': attribute type 10 has an invalid length. [ 1368.278396][T25995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.300564][T25995] team0: Port device bond0 added [ 1368.471442][T25996] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1368.508033][T25996] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1368.539237][T25996] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1368.578875][T25996] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1369.070388][T26001] tipc: Enabled bearer , priority 0 [ 1369.073838][T26001] syzkaller0: entered promiscuous mode [ 1369.075704][T26001] syzkaller0: entered allmulticast mode [ 1369.093607][T26001] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1369.133899][T26001] tipc: Resetting bearer [ 1369.149828][T26003] fuse: Unknown parameter 'fd0x0000000000000004' [ 1369.175665][T26000] tipc: Resetting bearer [ 1369.238593][T26000] tipc: Disabling bearer [ 1369.448533][T26007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1371.598440][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1371.754636][T26024] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1371.759124][T26024] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1371.764663][T26024] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1371.808124][T26024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1371.848602][T26023] fuse: Unknown parameter 'fd0x0000000000000004' [ 1372.746926][T26037] netlink: 'syz.3.5154': attribute type 10 has an invalid length. [ 1372.756376][T26037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.761267][T26037] team0: Port device bond0 added [ 1372.820056][T26038] netlink: 'syz.2.5155': attribute type 10 has an invalid length. [ 1372.905523][T26037] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1372.927877][T26037] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1372.937955][T26037] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1372.946783][T26037] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1372.971832][T26040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.462408][T24544] Bluetooth: hci0: command 0x0406 tx timeout [ 1373.551441][T26044] fuse: Unknown parameter '0x0000000000000004' [ 1374.229094][T26051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1374.290546][T26053] tipc: Enabled bearer , priority 0 [ 1374.295833][T26053] syzkaller0: entered promiscuous mode [ 1374.298011][T26053] syzkaller0: entered allmulticast mode [ 1374.310909][T26053] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1374.342881][T26053] tipc: Resetting bearer [ 1374.350957][T26052] tipc: Resetting bearer [ 1374.370865][T26052] tipc: Disabling bearer [ 1374.524360][T26060] fuse: Unknown parameter '0x0000000000000004' [ 1375.422423][T23630] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1375.465185][T26071] fuse: Unknown parameter '0x0000000000000004' [ 1375.590137][T23630] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1375.593329][T23630] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1375.596553][T23630] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1375.599507][T23630] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1375.603701][T23630] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1375.619265][T23630] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1375.622589][T23630] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1375.625188][T23630] usb 8-1: Product: syz [ 1375.626658][T23630] usb 8-1: Manufacturer: syz [ 1375.712959][T23630] cdc_wdm 8-1:1.0: skipping garbage [ 1375.717893][T23630] cdc_wdm 8-1:1.0: skipping garbage [ 1375.735517][T23630] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1375.741122][T23630] cdc_wdm 8-1:1.0: Unknown control protocol [ 1376.319914][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'. [ 1376.361360][T26075] siw: device registration error -23 [ 1376.993165][ T6832] usb 8-1: USB disconnect, device number 85 [ 1377.226534][T26083] netlink: 'syz.0.5167': attribute type 10 has an invalid length. [ 1377.265463][T26083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.285672][T26083] team0: Port device bond0 added [ 1377.542508][T26086] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1377.566606][T26086] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1377.602748][T26086] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1377.639607][T26086] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1377.660971][T26090] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1378.402542][T26093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1378.434554][T26093] siw: device registration error -23 [ 1378.752570][ T6278] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1379.012650][T26107] netlink: 'syz.2.5174': attribute type 10 has an invalid length. [ 1379.052106][T26107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.154206][ T6278] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1379.159969][ T6278] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1379.167537][ T6278] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1379.173830][ T6278] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1379.181138][ T6278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.197386][ T6278] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1379.273491][ T6278] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1379.397319][ T6278] usb 8-1: USB disconnect, device number 86 [ 1379.403414][T24409] udevd[24409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1379.703167][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5175'. [ 1379.705478][T26114] siw: device registration error -23 [ 1379.742734][T26111] siw: device registration error -23 [ 1380.864086][T26121] netlink: 'syz.2.5177': attribute type 10 has an invalid length. [ 1380.935088][T26121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.059522][T26130] netlink: 'syz.1.5179': attribute type 10 has an invalid length. [ 1381.411174][T26133] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1382.673649][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1384.131993][T26167] netlink: 'syz.3.5187': attribute type 10 has an invalid length. [ 1384.916910][T26168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.125208][T26175] tipc: Enabled bearer , priority 0 [ 1385.133407][T26175] syzkaller0: entered promiscuous mode [ 1385.137790][T26176] netlink: 'syz.1.5189': attribute type 10 has an invalid length. [ 1385.138170][T26175] syzkaller0: entered allmulticast mode [ 1385.180465][T26176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.228747][T26175] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1385.298297][T26175] tipc: Resetting bearer [ 1385.307794][T26174] tipc: Resetting bearer [ 1385.318919][T26182] netlink: 'syz.3.5191': attribute type 10 has an invalid length. [ 1385.330351][T26174] tipc: Disabling bearer [ 1385.361738][T26182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.611168][T26189] netlink: 'syz.2.5193': attribute type 10 has an invalid length. [ 1385.658563][T26189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.337515][T26201] netlink: 'syz.3.5196': attribute type 10 has an invalid length. [ 1386.342566][T26200] netlink: 'syz.1.5194': attribute type 10 has an invalid length. [ 1386.359509][T26202] netlink: 'syz.0.5195': attribute type 10 has an invalid length. [ 1386.420962][T26201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.576619][T26202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.716513][T26209] siw: device registration error -23 [ 1386.754301][T26200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.508725][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1387.807256][T26216] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1388.194580][T26220] netlink: 'syz.2.5200': attribute type 10 has an invalid length. [ 1388.516243][T26223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.867314][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1389.016348][T26234] netlink: 'syz.0.5203': attribute type 10 has an invalid length. [ 1389.041237][T26234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.136732][T26238] netlink: 'syz.2.5205': attribute type 10 has an invalid length. [ 1389.181026][T26241] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1389.185373][T26241] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1389.190661][T26241] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1389.203882][T26238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.299604][T26246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1389.518638][T26245] pim6reg1: entered promiscuous mode [ 1389.521609][T26245] pim6reg1: entered allmulticast mode [ 1390.253330][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1390.261789][T26253] siw: device registration error -23 [ 1390.615905][T26255] netlink: 'syz.2.5209': attribute type 10 has an invalid length. [ 1390.817266][T26259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1390.999170][T26262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.092490][T26264] netlink: 'syz.1.5210': attribute type 10 has an invalid length. [ 1391.472039][T26267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.558103][T26266] pim6reg1: entered promiscuous mode [ 1391.562100][T26266] pim6reg1: entered allmulticast mode [ 1391.643966][T26274] netlink: 'syz.3.5213': attribute type 10 has an invalid length. [ 1391.697162][T26274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.950286][T26282] netlink: 'syz.0.5214': attribute type 10 has an invalid length. [ 1391.999249][T26282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.182421][T26288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1392.193756][T26288] siw: device registration error -23 [ 1392.294914][T26291] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1392.311117][T26291] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1392.317764][T26291] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1392.383359][T26294] pim6reg1: entered promiscuous mode [ 1392.387632][T26294] pim6reg1: entered allmulticast mode [ 1393.044000][T26305] netlink: 'syz.0.5219': attribute type 10 has an invalid length. [ 1393.062385][ T6278] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1393.069563][T26305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.222290][ T6278] usb 8-1: Using ep0 maxpacket: 8 [ 1393.228043][ T6278] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1393.233916][ T6278] usb 8-1: config 0 has no interface number 0 [ 1393.235887][ T6278] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1393.250496][ T6278] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1393.275337][ T6278] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1393.300397][ T6278] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1393.310317][ T6278] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1393.316703][ T6278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.326972][ T6278] usb 8-1: config 0 descriptor?? [ 1393.335290][ T6278] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1393.459903][T26309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1393.540171][ T34] usb 8-1: USB disconnect, device number 87 [ 1393.555488][ T34] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1393.794694][T26313] netlink: 'syz.3.5222': attribute type 10 has an invalid length. [ 1394.007317][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 1394.023864][T26317] siw: device registration error -23 [ 1394.140548][T26314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.579378][T26332] netlink: 'syz.1.5226': attribute type 10 has an invalid length. [ 1394.600286][T26332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.694489][T26334] netlink: 'syz.0.5227': attribute type 10 has an invalid length. [ 1394.739810][T26334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.255771][T26337] pim6reg1: entered promiscuous mode [ 1395.257515][T26337] pim6reg1: entered allmulticast mode [ 1395.398255][T26342] fuse: Bad value for 'fd' [ 1395.549943][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1395.563116][T26348] siw: device registration error -23 [ 1395.655119][ T24] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1395.844209][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1395.849613][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1395.853037][ T24] usb 8-1: config 0 has no interface number 0 [ 1395.861277][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1395.867313][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1395.871200][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1395.880647][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1395.885997][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1395.891150][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.949071][ T24] usb 8-1: config 0 descriptor?? [ 1396.013316][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1396.257642][ T24] usb 8-1: USB disconnect, device number 88 [ 1396.271865][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1396.460125][T26355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1396.518897][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5235'. [ 1396.523490][T26361] siw: device registration error -23 [ 1396.919719][T26363] netlink: 'syz.1.5233': attribute type 10 has an invalid length. [ 1397.539922][T26372] netlink: 'syz.3.5237': attribute type 10 has an invalid length. [ 1397.598173][T26372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.617889][T26375] netlink: 'syz.2.5238': attribute type 10 has an invalid length. [ 1397.643233][T26376] netlink: 'syz.0.5236': attribute type 10 has an invalid length. [ 1397.766912][T26378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.906182][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1397.916622][T26382] siw: device registration error -23 [ 1398.212031][T26379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.550961][T26388] netlink: 'syz.0.5240': attribute type 10 has an invalid length. [ 1398.574085][T26388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.681992][T26390] fuse: Bad value for 'fd' [ 1398.802343][T23630] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1398.952736][T23630] usb 7-1: Using ep0 maxpacket: 8 [ 1398.969109][T23630] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1398.988084][T23630] usb 7-1: config 0 has no interface number 0 [ 1399.004929][T23630] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1399.031527][T23630] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1399.054155][T23630] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1399.074001][T23630] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1399.087894][T23630] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1399.097905][T23630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.123725][T23630] usb 7-1: config 0 descriptor?? [ 1399.170676][T23630] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1399.320947][T26398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1399.579274][T23630] usb 7-1: USB disconnect, device number 109 [ 1399.587891][T23630] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1400.216444][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1400.220313][T26416] siw: device registration error -23 [ 1400.269239][T26417] netlink: 'syz.2.5246': attribute type 10 has an invalid length. [ 1400.319738][T26417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.233935][T26424] pim6reg1: entered promiscuous mode [ 1401.236221][T26424] pim6reg1: entered allmulticast mode [ 1401.321939][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1401.328489][T26431] siw: device registration error -23 [ 1401.496453][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5254'. [ 1401.655472][T26438] pim6reg1: entered promiscuous mode [ 1401.659540][T26438] pim6reg1: entered allmulticast mode [ 1402.313952][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5255'. [ 1402.319912][T26444] siw: device registration error -23 [ 1403.560294][T26459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5259'. [ 1403.569428][T26459] siw: device registration error -23 [ 1404.510559][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1404.526927][T26468] siw: device registration error -23 [ 1404.545829][T26465] netlink: 'syz.3.5261': attribute type 10 has an invalid length. [ 1404.725142][T26465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.855486][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5263'. [ 1404.861241][T26472] siw: device registration error -23 [ 1405.673203][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1405.683403][T26477] siw: device registration error -23 [ 1406.095653][T26483] netlink: 'syz.0.5265': attribute type 10 has an invalid length. [ 1406.139240][T26483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.734542][T26489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5268'. [ 1406.739001][T26489] siw: device registration error -23 [ 1407.209962][T26495] pim6reg1: entered promiscuous mode [ 1407.212754][T26495] pim6reg1: entered allmulticast mode [ 1407.331986][T26502] netlink: 'syz.1.5269': attribute type 10 has an invalid length. [ 1407.346929][T26502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.899006][T26506] pim6reg1: entered promiscuous mode [ 1407.905156][T26506] pim6reg1: entered allmulticast mode [ 1407.982742][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5272'. [ 1407.992774][T26512] siw: device registration error -23 [ 1408.238474][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5274'. [ 1409.178807][T26524] netlink: 'syz.0.5276': attribute type 10 has an invalid length. [ 1409.219803][T26524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.307239][T14113] Bluetooth: hci4: command 0x0406 tx timeout [ 1409.608819][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5277'. [ 1409.758584][T26533] netlink: 'syz.2.5278': attribute type 10 has an invalid length. [ 1409.856068][T26533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.417913][T26538] syzkaller0: entered promiscuous mode [ 1410.427356][T26538] syzkaller0: entered allmulticast mode [ 1410.689112][T26544] netlink: 'syz.3.5281': attribute type 10 has an invalid length. [ 1410.776783][T26550] netlink: 'syz.1.5282': attribute type 10 has an invalid length. [ 1410.858241][T26553] netlink: 'syz.2.5284': attribute type 10 has an invalid length. [ 1410.872379][T26544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.696954][T26554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.864340][T26560] pim6reg1: entered promiscuous mode [ 1411.868664][T26560] pim6reg1: entered allmulticast mode [ 1411.910831][T26567] netlink: 'syz.0.5285': attribute type 10 has an invalid length. [ 1412.007788][T26569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.086540][T26574] netlink: 'syz.2.5288': attribute type 10 has an invalid length. [ 1412.159590][T26577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.644094][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1413.012258][T26589] pim6reg1: entered promiscuous mode [ 1413.014510][T26589] pim6reg1: entered allmulticast mode [ 1413.891510][T26602] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1413.898148][T26602] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1413.907341][T26602] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1414.008533][T26604] pim6reg1: entered promiscuous mode [ 1414.010854][T26604] pim6reg1: entered allmulticast mode [ 1414.813610][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1414.819897][T26618] siw: device registration error -23 [ 1414.960230][T26619] netlink: 'syz.3.5294': attribute type 10 has an invalid length. [ 1415.242927][T26619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.391501][T26620] netlink: 'syz.0.5297': attribute type 10 has an invalid length. [ 1415.493763][T26623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.894517][T26625] syzkaller0: entered promiscuous mode [ 1415.903552][T26625] syzkaller0: entered allmulticast mode [ 1416.217310][T26630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5302'. [ 1416.226231][T26630] siw: device registration error -23 [ 1416.631587][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5303'. [ 1416.637384][T26635] siw: device registration error -23 [ 1416.807111][T26632] netlink: 'syz.0.5300': attribute type 10 has an invalid length. [ 1416.981407][T26632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.631052][T26642] pim6reg1: entered promiscuous mode [ 1417.633144][T26642] pim6reg1: entered allmulticast mode [ 1417.822064][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5305'. [ 1417.831983][T26652] siw: device registration error -23 [ 1418.552109][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5308'. [ 1419.334515][T26668] netlink: 'syz.1.5309': attribute type 10 has an invalid length. [ 1419.409249][T26668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.459926][T26665] pim6reg1: entered promiscuous mode [ 1419.461834][T26665] pim6reg1: entered allmulticast mode [ 1419.854536][T26676] netlink: 'syz.3.5312': attribute type 10 has an invalid length. [ 1419.919490][T26676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.384606][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1420.398035][T26683] siw: device registration error -23 [ 1420.448825][T26684] netlink: 'syz.1.5314': attribute type 10 has an invalid length. [ 1420.470923][T26684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.764625][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'. [ 1420.769764][T26687] siw: device registration error -23 [ 1421.459997][T26690] pim6reg1: entered promiscuous mode [ 1421.462139][T26690] pim6reg1: entered allmulticast mode [ 1421.754422][T26701] netlink: 'syz.3.5318': attribute type 10 has an invalid length. [ 1421.781069][T26701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.150058][T26705] netlink: 'syz.2.5320': attribute type 10 has an invalid length. [ 1422.202577][T26705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.420928][T26708] pci_bus 0000:01: busn_res: [bus 01] is released [ 1422.484550][T26709] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1422.491344][T26709] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1422.493501][T26709] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1422.494877][T26711] syzkaller0: entered promiscuous mode [ 1422.496632][T26709] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1422.501818][T26711] syzkaller0: entered allmulticast mode [ 1422.503392][T26709] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1422.509319][T26709] pci 0000:00:04.0: enabling Extended Tags [ 1422.527776][T26709] pci 0000:00:04.0: Adding to iommu group 4 [ 1422.570654][T26709] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1422.584791][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.586865][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.594841][T26709] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1422.600072][T26709] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1422.606877][T26709] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1422.622487][T26709] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1422.630352][T26709] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1422.634126][T26709] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1422.636680][T26709] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1422.641134][T26709] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1422.644967][T26709] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1422.716455][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'. [ 1423.043485][T26709] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1423.073871][T26709] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1423.132800][T26719] pci_bus 0000:01: busn_res: [bus 01] is released [ 1423.159964][T26720] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1423.170134][T26720] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.173497][T26720] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1423.176625][T26720] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1423.181434][T26720] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1423.186904][T26720] pci 0000:00:04.0: enabling Extended Tags [ 1423.200359][T26720] pci 0000:00:04.0: Adding to iommu group 4 [ 1423.220940][T26720] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.228730][T26720] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1423.233970][T26720] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1423.238111][T26720] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1423.241426][T26720] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1423.244992][T26720] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1423.248458][T26720] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.250898][T26720] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1423.255830][T26720] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1423.260485][T26720] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1423.318481][T26720] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1423.328988][T26720] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1423.486513][T26728] pci_bus 0000:01: busn_res: [bus 01] is released [ 1423.524776][T26730] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1423.531573][T26730] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.534246][T26730] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1423.536874][T26730] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1423.540314][T26731] pim6reg1: entered promiscuous mode [ 1423.542268][T26731] pim6reg1: entered allmulticast mode [ 1423.546110][T26730] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1423.550174][T26730] pci 0000:00:04.0: enabling Extended Tags [ 1423.560400][T26730] pci 0000:00:04.0: Adding to iommu group 4 [ 1423.580329][T26730] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.586390][T26730] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1423.591754][T26730] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1423.596457][T26730] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1423.599710][T26730] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1423.603459][T26730] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1423.606498][T26730] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1423.608894][T26730] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1423.614783][T26730] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1423.618384][T26730] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1423.661838][T26730] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1423.673771][T26730] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1423.863290][T26740] pim6reg1: entered promiscuous mode [ 1423.868229][T26740] pim6reg1: entered allmulticast mode [ 1423.905052][T26747] netlink: 'syz.3.5330': attribute type 10 has an invalid length. [ 1424.017697][T26747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.479393][T26756] syzkaller0: entered promiscuous mode [ 1424.481952][T26756] syzkaller0: entered allmulticast mode [ 1424.929638][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1424.934319][T26764] siw: device registration error -23 [ 1425.022830][T26765] netlink: 'syz.3.5334': attribute type 10 has an invalid length. [ 1425.124670][T26765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.258374][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5336'. [ 1425.271094][T26769] siw: device registration error -23 [ 1425.848286][T26771] pci_bus 0000:01: busn_res: [bus 01] is released [ 1425.877179][T26777] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1425.879869][T26777] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1425.882655][T26777] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1425.939892][T26779] pim6reg1: entered promiscuous mode [ 1425.941717][T26779] pim6reg1: entered allmulticast mode [ 1426.226100][T26774] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1426.250427][T26774] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1426.259092][T26774] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1426.267575][T26774] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1426.275347][T26774] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1426.286301][T26774] pci 0000:00:04.0: enabling Extended Tags [ 1426.314882][T26774] pci 0000:00:04.0: Adding to iommu group 4 [ 1426.358181][T26774] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1426.364621][T26774] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1426.369965][T26774] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1426.377875][T26774] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1426.381366][T26774] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1426.385716][T26774] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1426.389049][T26774] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1426.391575][T26774] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1426.397508][T26774] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1426.402611][T26774] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1426.473424][T26774] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1426.484897][T26774] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1426.663526][T26791] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 1426.697502][T26791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.705651][T26793] netlink: 'syz.2.5341': attribute type 10 has an invalid length. [ 1426.787192][T26793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.874002][T26796] tipc: Enabled bearer , priority 0 [ 1426.880169][T26796] syzkaller0: entered promiscuous mode [ 1426.882660][T26796] syzkaller0: entered allmulticast mode [ 1426.891165][T26796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1426.918589][T26796] tipc: Resetting bearer [ 1426.924980][T26795] tipc: Resetting bearer [ 1426.944796][T26795] tipc: Disabling bearer [ 1427.041816][T26801] siw: device registration error -23 [ 1427.742093][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1427.758562][T26804] siw: device registration error -23 [ 1428.165567][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'. [ 1428.175438][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1428.179673][T26813] siw: device registration error -23 [ 1428.185766][T26812] siw: device registration error -23 [ 1429.062993][T26820] netlink: 'syz.1.5352': attribute type 10 has an invalid length. [ 1429.129089][T26820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.192818][T26822] netlink: 'syz.2.5351': attribute type 10 has an invalid length. [ 1429.325395][T26824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.592112][T26826] pim6reg1: entered promiscuous mode [ 1429.595800][T26826] pim6reg1: entered allmulticast mode [ 1429.601179][T26831] pim6reg1: entered promiscuous mode [ 1429.606470][T26831] pim6reg1: entered allmulticast mode [ 1429.952994][T26836] pci_bus 0000:01: busn_res: [bus 01] is released [ 1430.016412][T26842] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1430.029512][T26842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.033772][T26842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1430.039615][T26842] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1430.044485][T26842] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1430.050155][T26842] pci 0000:00:04.0: enabling Extended Tags [ 1430.084739][T26842] pci 0000:00:04.0: Adding to iommu group 4 [ 1430.107114][T26842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.112925][T26842] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1430.118094][T26842] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1430.123860][T26842] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1430.127498][T26842] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1430.132896][T26842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1430.136070][T26842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.138427][T26842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1430.142977][T26842] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1430.149792][T26842] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1430.236427][T26842] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1430.250929][T26842] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1430.415214][T26848] pci_bus 0000:01: busn_res: [bus 01] is released [ 1430.430647][T26849] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1430.441771][T26849] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.445203][T26849] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1430.448440][T26849] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1430.454487][T26849] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1430.458872][T26849] pci 0000:00:04.0: enabling Extended Tags [ 1430.473555][T26849] pci 0000:00:04.0: Adding to iommu group 4 [ 1430.488593][T26849] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.495168][T26849] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1430.500137][T26849] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1430.505832][T26849] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1430.509724][T26849] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1430.514246][T26849] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1430.517831][T26849] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1430.520424][T26849] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1430.525974][T26849] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1430.530815][T26849] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1430.607652][T26849] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1430.644410][T26849] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1430.710830][T26854] pim6reg1: entered promiscuous mode [ 1430.713717][T26854] pim6reg1: entered allmulticast mode [ 1430.763321][T26859] tipc: Enabled bearer , priority 0 [ 1430.767241][T26859] syzkaller0: entered promiscuous mode [ 1430.769483][T26859] syzkaller0: entered allmulticast mode [ 1430.778616][T26859] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1430.808228][T26859] tipc: Resetting bearer [ 1430.814229][T26853] tipc: Resetting bearer [ 1430.837545][T26853] tipc: Disabling bearer [ 1430.936777][T26861] pim6reg1: entered promiscuous mode [ 1430.938610][T26861] pim6reg1: entered allmulticast mode [ 1431.041854][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5362'. [ 1432.172118][T26875] netlink: 'syz.3.5364': attribute type 10 has an invalid length. [ 1432.204656][T26875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.837899][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 1432.844198][T26885] siw: device registration error -23 [ 1433.605758][T26888] pci_bus 0000:01: busn_res: [bus 01] is released [ 1433.627883][T26890] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1433.638166][T26890] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1433.640831][T26890] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1433.644874][T26890] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1433.650116][T26890] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1433.655535][T26890] pci 0000:00:04.0: enabling Extended Tags [ 1433.670296][T26890] pci 0000:00:04.0: Adding to iommu group 4 [ 1433.730715][T26890] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1433.745303][T26890] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1433.750432][T26890] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1433.757174][T26890] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1433.760615][T26890] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1433.764835][T26890] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1433.768287][T26890] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1433.770889][T26890] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1433.776385][T26890] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1433.781311][T26890] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1433.863443][T26890] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1433.884471][T26890] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1434.048416][T26902] fuse: Unknown parameter 'fd0x0000000000000004' [ 1434.091344][T26903] pim6reg1: entered promiscuous mode [ 1434.094798][T26903] pim6reg1: entered allmulticast mode [ 1434.653667][T26918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1434.659547][T26918] siw: device registration error -23 [ 1434.915261][T24544] Bluetooth: hci2: command 0x0406 tx timeout [ 1435.799893][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'. [ 1437.092292][ T5844] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1437.254533][ T5844] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1437.262092][ T5844] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1437.271082][ T5844] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1437.279706][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1437.289348][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1437.304854][ T5844] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1437.321020][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1437.328474][ T5844] usb 6-1: Product: syz [ 1437.331924][ T5844] usb 6-1: Manufacturer: syz [ 1437.344577][ T5844] cdc_wdm 6-1:1.0: skipping garbage [ 1437.350123][ T5844] cdc_wdm 6-1:1.0: skipping garbage [ 1437.356305][ T5844] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1437.362087][ T5844] cdc_wdm 6-1:1.0: Unknown control protocol [ 1437.559164][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1437.565004][T26937] siw: device registration error -23 [ 1438.046031][T26943] netlink: 'syz.0.5385': attribute type 10 has an invalid length. [ 1438.167496][T25810] usb 6-1: USB disconnect, device number 105 [ 1438.648959][T26950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.789742][T26955] tipc: Enabled bearer , priority 0 [ 1438.797922][T26955] syzkaller0: entered promiscuous mode [ 1438.801696][T26955] syzkaller0: entered allmulticast mode [ 1438.816406][T26955] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1438.856019][T26955] tipc: Resetting bearer [ 1438.869797][T26954] tipc: Resetting bearer [ 1438.901806][T26954] tipc: Disabling bearer [ 1439.290376][T26966] netlink: 'syz.1.5392': attribute type 10 has an invalid length. [ 1439.293788][ T6278] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1439.337419][T26966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.362454][ T5844] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1439.466254][ T6278] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1439.472988][ T6278] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1439.479724][ T6278] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1439.487236][ T6278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.495908][T26958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1439.519375][ T6278] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1439.533691][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1439.539172][ T5844] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1439.548568][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1439.566217][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1439.573567][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1439.579471][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1439.583080][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1439.585660][ T5844] usb 5-1: Product: syz [ 1439.587080][ T5844] usb 5-1: Manufacturer: syz [ 1439.626462][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1439.631097][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1439.642802][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1439.646032][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 1439.711262][ T5844] usb 7-1: USB disconnect, device number 110 [ 1440.127193][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 1440.383208][T26975] netlink: 'syz.2.5394': attribute type 10 has an invalid length. [ 1440.430077][T26975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.246505][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5395'. [ 1441.251933][T26979] siw: device registration error -23 [ 1441.552918][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5396'. [ 1442.367124][T24599] usb 5-1: USB disconnect, device number 103 [ 1442.464129][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1442.469376][T26985] siw: device registration error -23 [ 1443.120660][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1443.129162][T26995] siw: device registration error -23 [ 1443.231374][T26989] pci_bus 0000:01: busn_res: [bus 01] is released [ 1443.327845][T26990] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1443.352841][T26990] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1443.356890][T26990] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1443.359399][T26990] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1443.369351][T26990] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1443.378915][T26990] pci 0000:00:04.0: enabling Extended Tags [ 1443.428185][T26990] pci 0000:00:04.0: Adding to iommu group 4 [ 1443.473112][T26990] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1443.489294][T26990] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1443.495799][T26990] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1443.500011][T26990] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1443.503492][T26990] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1443.507437][T26990] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1443.510734][T26990] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1443.513980][T26990] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1443.517822][T26990] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1443.521409][T26990] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1443.563592][T26990] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1443.578518][T26990] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1443.902395][ T5844] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1444.054464][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1444.058774][ T5844] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1444.063382][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1444.067973][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1444.072808][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1444.079452][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1444.083532][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1444.087432][ T5844] usb 5-1: Product: syz [ 1444.089452][ T5844] usb 5-1: Manufacturer: syz [ 1444.100236][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1444.102132][T27002] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1444.104800][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 1444.105671][T27002] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1444.109921][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1444.112145][T27002] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1444.114993][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 1444.132508][T23630] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1444.166043][T27003] pim6reg1: entered promiscuous mode [ 1444.167702][T27003] pim6reg1: entered allmulticast mode [ 1444.321336][T23630] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1444.335255][T23630] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1444.349192][T23630] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1444.365447][T23630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.442358][T27000] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1444.523774][T23630] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1444.909973][T23630] usb 8-1: USB disconnect, device number 89 [ 1444.937832][ T6832] usb 5-1: USB disconnect, device number 104 [ 1445.987398][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 1446.014280][T27025] siw: device registration error -23 [ 1446.174464][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1446.178952][T27028] siw: device registration error -23 [ 1447.191427][T27031] pci_bus 0000:01: busn_res: [bus 01] is released [ 1447.287681][T27032] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1447.298766][T27032] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1447.313737][T27032] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1447.331973][T27032] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1447.344730][T27032] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1447.354233][T27032] pci 0000:00:04.0: enabling Extended Tags [ 1447.366563][T27032] pci 0000:00:04.0: Adding to iommu group 4 [ 1447.386769][T27032] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1447.390820][T27032] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1447.396029][T27032] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1447.400159][T27032] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1447.403675][T27032] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1447.406722][T27032] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1447.409169][T27032] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1447.411073][T27032] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1447.415907][T27032] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1447.419815][T27032] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1447.470195][T27032] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1447.478375][T27032] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1447.626256][T27037] pci_bus 0000:01: busn_res: [bus 01] is released [ 1447.734009][T27041] pim6reg1: entered promiscuous mode [ 1447.736256][T27041] pim6reg1: entered allmulticast mode [ 1447.871192][T27049] netlink: 'syz.0.5415': attribute type 10 has an invalid length. [ 1447.938232][T27049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.156713][T27061] tipc: Enabled bearer , priority 0 [ 1448.161665][T27061] syzkaller0: entered promiscuous mode [ 1448.164056][T27061] syzkaller0: entered allmulticast mode [ 1448.171040][T27061] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1448.175104][T19299] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1448.199578][T27061] tipc: Resetting bearer [ 1448.205239][T27060] tipc: Resetting bearer [ 1448.218882][T27060] tipc: Disabling bearer [ 1448.353429][T19299] usb 7-1: Using ep0 maxpacket: 8 [ 1448.378881][T19299] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1448.385953][T19299] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.390930][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1448.394976][T19299] usb 7-1: config 0 has no interface number 0 [ 1448.402431][T19299] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1448.411537][T19299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.440929][T19299] usb 7-1: config 0 descriptor?? [ 1448.461987][T19299] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1448.670617][T24599] usb 7-1: USB disconnect, device number 111 [ 1448.784043][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1448.790658][T27068] siw: device registration error -23 [ 1449.354922][T27072] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1449.361258][T27072] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1449.363395][T27072] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1449.365750][T27072] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1449.369943][T27072] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1449.373174][T27072] pci 0000:00:04.0: enabling Extended Tags [ 1449.382757][T27072] pci 0000:00:04.0: Adding to iommu group 4 [ 1449.414595][T27072] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1449.421430][T27072] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1449.427151][T27072] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1449.431398][T27072] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1449.434906][T27072] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1449.442792][T27072] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1449.448078][T27072] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1449.454007][T27072] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1449.456925][T27074] netlink: 'syz.0.5422': attribute type 10 has an invalid length. [ 1449.465885][T27072] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1449.477546][T27072] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1449.527984][T27074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.699578][T27072] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1449.724797][T27072] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1449.844911][T27076] pci_bus 0000:01: busn_res: [bus 01] is released [ 1449.882083][T27078] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1449.901378][T27078] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1449.907095][T27078] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1449.910236][T27078] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1449.918438][T27078] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1449.923407][T27078] pci 0000:00:04.0: enabling Extended Tags [ 1449.940854][T27078] pci 0000:00:04.0: Adding to iommu group 4 [ 1449.964629][T27078] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1449.974412][T27078] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1449.979933][T27078] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1449.992829][T27078] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1449.998285][T27078] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1450.004905][T27078] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1450.008391][T27078] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1450.011081][T27078] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1450.018854][T27078] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1450.025452][T27078] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1450.117407][T27078] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1450.149209][T27078] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1450.540700][T27085] pci_bus 0000:01: busn_res: [bus 01] is released [ 1450.569203][T27088] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1450.578404][T27088] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1450.583238][T27088] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1450.587044][T27088] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1450.594191][T27088] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1450.620163][T27088] pci 0000:00:04.0: enabling Extended Tags [ 1450.655161][T27088] pci 0000:00:04.0: Adding to iommu group 4 [ 1450.676016][T27088] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1450.683841][T27088] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1450.689140][T27088] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1450.694670][T27088] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1450.698535][T27088] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1450.702821][T27088] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1450.706380][T27088] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1450.709032][T27088] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1450.715435][T27088] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1450.720490][T27088] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1450.798896][T27088] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1450.815071][T27088] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1450.849364][T27095] netlink: 'syz.2.5428': attribute type 10 has an invalid length. [ 1450.902476][T24599] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1450.919555][T27095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.062388][T24599] usb 5-1: Using ep0 maxpacket: 8 [ 1451.067960][T24599] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1451.071291][T24599] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.075186][T24599] usb 5-1: config 0 has no interface number 0 [ 1451.077654][T24599] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1451.082064][T24599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.093265][T24599] usb 5-1: config 0 descriptor?? [ 1451.106957][T24599] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1451.336261][ T6832] usb 5-1: USB disconnect, device number 105 [ 1451.852874][T27106] pci_bus 0000:01: busn_res: [bus 01] is released [ 1451.878073][T27109] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1451.895808][T27109] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1451.902658][T27109] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1451.906193][T27109] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1451.910182][T27109] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1451.914041][T27109] pci 0000:00:04.0: enabling Extended Tags [ 1451.924953][T27109] pci 0000:00:04.0: Adding to iommu group 4 [ 1451.938899][T27109] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1451.946150][T27109] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1451.951450][T27109] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1451.956610][T27109] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1451.960195][T27109] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1451.964614][T27109] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1451.967904][T27109] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1451.970365][T27109] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1451.976024][T27109] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1451.980653][T27109] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1452.055449][T27109] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1452.068240][T27109] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1452.128883][T27117] pci_bus 0000:01: busn_res: [bus 01] is released [ 1452.156819][T27118] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1452.165049][T27118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1452.167724][T27118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1452.170806][T27118] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1452.174940][T27118] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1452.178255][T27118] pci 0000:00:04.0: enabling Extended Tags [ 1452.188194][T27118] pci 0000:00:04.0: Adding to iommu group 4 [ 1452.200583][T27118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1452.205016][T27118] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1452.208847][T27118] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1452.212825][T27118] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1452.216973][T27118] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1452.221227][T27118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1452.224119][T27118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1452.226172][T27118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1452.230275][T27118] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1452.234741][T27118] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1452.289482][T27118] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1452.300335][T27118] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1452.437888][T27129] netlink: 'syz.1.5437': attribute type 10 has an invalid length. [ 1452.488808][T27129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.410800][T27143] pci_bus 0000:01: busn_res: [bus 01] is released [ 1453.460333][T27145] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1453.494994][T27145] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1453.520682][T27145] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1453.528761][T27145] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1453.537224][T27145] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1453.547578][T27145] pci 0000:00:04.0: enabling Extended Tags [ 1453.642145][T27145] pci 0000:00:04.0: Adding to iommu group 4 [ 1453.731386][T27145] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1453.744919][T27145] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1453.753576][T27145] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1453.758859][T27145] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1453.764294][T27145] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1453.768493][T27145] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1453.775449][T27145] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1453.780479][T27145] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1453.795346][T27145] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1453.804564][T27145] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1454.162749][T27145] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1454.375722][T27145] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 1454.383829][T27145] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 1454.392633][T27145] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 1456.121567][T27180] fuse: Bad value for 'group_id' [ 1456.123341][T27180] fuse: Bad value for 'group_id' [ 1456.592466][T24599] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1456.745734][T24599] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1456.749361][T24599] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1456.753094][T24599] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.223484][T24599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.589843][T27186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1457.621772][T24599] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1457.824727][T24599] usb 7-1: USB disconnect, device number 112 [ 1458.226222][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1458.231708][T27215] siw: device registration error -23 [ 1459.075836][T27227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1461.362113][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1461.380202][T27242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1462.001850][T27247] netlink: 'syz.1.5477': attribute type 10 has an invalid length. [ 1462.413858][T27248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.507524][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'. [ 1463.514372][T27264] siw: device registration error -23 [ 1465.651323][T27289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1466.042011][T27289] siw: device registration error -23 [ 1466.155635][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1466.163023][T27293] siw: device registration error -23 [ 1466.820279][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5493'. [ 1466.842001][T27297] siw: device registration error -23 [ 1467.621003][T27307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5495'. [ 1469.104433][T27331] pci_bus 0000:01: busn_res: [bus 01] is released [ 1469.785441][T27340] netlink: 'syz.2.5505': attribute type 10 has an invalid length. [ 1470.119004][T27344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.618999][T27349] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1470.625700][T27349] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1470.628016][T27349] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1470.630785][T27349] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1470.638055][T27349] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1470.650113][T27349] pci 0000:00:04.0: enabling Extended Tags [ 1470.663806][T27349] pci 0000:00:04.0: Adding to iommu group 4 [ 1470.683145][T27349] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1470.692973][T27349] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1470.701652][T27349] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1470.711696][T27349] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1470.715326][T27349] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1470.719372][T27349] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1470.723100][T27349] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1470.725071][T27349] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1470.729123][T27349] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1470.732867][T27349] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1470.777256][T27349] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1470.786968][T27349] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1470.862575][ T6832] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1470.973580][T27369] netlink: 'syz.1.5512': attribute type 10 has an invalid length. [ 1471.022444][ T6832] usb 5-1: Using ep0 maxpacket: 8 [ 1471.025776][ T6832] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1471.026430][T27369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.029084][ T6832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.035215][ T6832] usb 5-1: config 0 has no interface number 0 [ 1471.037195][ T6832] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1471.040851][ T6832] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1471.044133][ T6832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.048362][ T6832] usb 5-1: config 0 descriptor?? [ 1471.052432][ T6832] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1471.150527][T27375] pci_bus 0000:01: busn_res: [bus 01] is released [ 1471.242474][T21590] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1471.270705][ T6832] usb 5-1: USB disconnect, device number 106 [ 1471.396748][T21590] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1471.443472][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5517'. [ 1471.451257][T27383] siw: device registration error -23 [ 1471.876540][T21590] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1472.293879][T21590] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1472.296651][T21590] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1472.300195][T21590] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1472.307256][T21590] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1472.310886][T21590] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1472.313826][T21590] usb 7-1: Product: syz [ 1472.315162][T21590] usb 7-1: Manufacturer: syz [ 1472.319921][T21590] cdc_wdm 7-1:1.0: skipping garbage [ 1472.323221][T21590] cdc_wdm 7-1:1.0: skipping garbage [ 1472.326169][T21590] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1472.328452][T21590] cdc_wdm 7-1:1.0: Unknown control protocol [ 1472.495142][T27393] netlink: 'syz.1.5519': attribute type 10 has an invalid length. [ 1472.540281][T27393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.968700][T27394] netlink: 'syz.3.5520': attribute type 10 has an invalid length. [ 1473.240745][T27398] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1473.247765][T27398] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1473.249971][T27398] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1473.252373][T27398] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1473.256622][T27398] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1473.259982][T27398] pci 0000:00:04.0: enabling Extended Tags [ 1473.269042][T27398] pci 0000:00:04.0: Adding to iommu group 4 [ 1473.281330][T27398] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1473.286864][T27398] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1473.292082][T27398] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1473.297333][T27398] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1473.300710][T27398] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1473.304402][T27398] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1473.307839][T27398] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1473.310313][T27398] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1473.315630][T27398] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1473.320187][T27398] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1473.413747][T27398] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1473.420226][T27398] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1473.620197][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'. [ 1473.633580][T27409] siw: device registration error -23 [ 1473.920534][T27416] netlink: 'syz.3.5526': attribute type 10 has an invalid length. [ 1473.945195][T27416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.026238][ T10] usb 7-1: USB disconnect, device number 113 [ 1474.521930][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1474.533874][T27424] siw: device registration error -23 [ 1474.999153][T27433] netlink: 'syz.1.5531': attribute type 10 has an invalid length. [ 1475.657738][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'. [ 1475.670694][T27448] siw: device registration error -23 [ 1475.787722][T27436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.874306][T14113] Bluetooth: hci1: command 0x0406 tx timeout [ 1476.517206][T27447] pci_bus 0000:01: busn_res: [bus 01] is released [ 1476.716090][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5541'. [ 1476.770740][T27460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'. [ 1476.778039][T27460] siw: device registration error -23 [ 1478.253798][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5546'. [ 1478.271882][T27480] siw: device registration error -23 [ 1478.782368][T21590] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1478.932300][T21590] usb 8-1: Using ep0 maxpacket: 8 [ 1478.948552][T21590] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1478.953140][T21590] usb 8-1: config 0 has no interface number 0 [ 1478.957897][T21590] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1478.965464][T21590] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1478.976216][T21590] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1478.986416][T21590] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1478.993482][T21590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.017188][T21590] usb 8-1: config 0 descriptor?? [ 1479.059707][T21590] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1479.068924][T27497] netlink: 'syz.0.5551': attribute type 10 has an invalid length. [ 1479.106032][T27497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.601921][ T24] usb 8-1: USB disconnect, device number 90 [ 1479.740909][T27502] netlink: 'syz.1.5555': attribute type 10 has an invalid length. [ 1479.767027][T27506] fuse: Unknown parameter 'grou00000000000000000000' [ 1480.215974][T27502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.556328][ T6278] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1481.729323][ T6278] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1481.732832][ T6278] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1481.736229][ T6278] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1481.739790][ T6278] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1481.757550][ T6278] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1481.770200][ T6278] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1481.775543][ T6278] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1481.782240][ T6278] usb 6-1: Product: syz [ 1481.783656][ T6278] usb 6-1: Manufacturer: syz [ 1481.798201][ T6278] cdc_wdm 6-1:1.0: skipping garbage [ 1481.803176][ T6278] cdc_wdm 6-1:1.0: skipping garbage [ 1481.871770][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 1481.888246][T27540] fuse: Unknown parameter 'grou00000000000000000000' [ 1482.765211][ T6278] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1482.767137][ T6278] cdc_wdm 6-1:1.0: Unknown control protocol [ 1484.005472][T27558] netlink: 'syz.3.5568': attribute type 10 has an invalid length. [ 1484.025659][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.027890][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.041296][T27558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.294900][ T10] usb 6-1: USB disconnect, device number 106 [ 1485.142045][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1485.756825][T27583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5579'. [ 1485.768164][T27583] siw: device registration error -23 [ 1486.778753][T27593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1486.787047][T27593] siw: device registration error -23 [ 1486.802392][T24599] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1486.974275][T24599] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1486.979487][T24599] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1486.990082][T24599] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1486.996489][T24599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1487.001349][T24599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1487.022696][T24599] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1487.027680][T24599] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1487.031230][T24599] usb 5-1: Product: syz [ 1487.038515][T24599] usb 5-1: Manufacturer: syz [ 1487.089312][T27597] netlink: 'syz.1.5583': attribute type 10 has an invalid length. [ 1487.136864][T24599] cdc_wdm 5-1:1.0: skipping garbage [ 1487.146346][T27597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.148101][T24599] cdc_wdm 5-1:1.0: skipping garbage [ 1487.174541][T24599] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1487.187519][T24599] cdc_wdm 5-1:1.0: Unknown control protocol [ 1487.983915][T24599] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1488.153144][T24599] usb 7-1: Using ep0 maxpacket: 8 [ 1488.157887][T24599] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1488.160615][T24599] usb 7-1: config 0 has no interface number 0 [ 1488.162862][T24599] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1488.166761][T24599] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1488.171183][T24599] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1488.175044][T24599] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1488.178172][T24599] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1488.182643][T24599] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1488.185584][T24599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.191545][T24599] usb 7-1: config 0 descriptor?? [ 1488.201713][T24599] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1488.490576][T23630] usb 7-1: USB disconnect, device number 114 [ 1488.506599][T23630] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 1489.568975][T24599] usb 5-1: USB disconnect, device number 107 [ 1489.568974][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1489.568998][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1489.575716][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1489.598936][T27616] fuse: Unknown parameter 'group_i00000000000000000000' [ 1490.065775][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1490.072165][T27620] siw: device registration error -23 [ 1491.715640][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'. [ 1491.721117][T27635] siw: device registration error -23 [ 1492.106446][T27639] netlink: 'syz.3.5596': attribute type 10 has an invalid length. [ 1492.328431][T27639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.603215][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1492.610077][T27643] siw: device registration error -23 [ 1493.687945][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1493.694090][T27651] siw: device registration error -23 [ 1494.131895][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1494.139336][T27663] siw: device registration error -23 [ 1494.814397][T27670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5605'. [ 1494.820264][T27670] siw: device registration error -23 [ 1495.103458][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1495.109943][T27675] siw: device registration error -23 [ 1495.983529][T27680] netlink: 'syz.0.5609': attribute type 10 has an invalid length. [ 1496.020657][T27680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.146741][T27685] netlink: 'syz.3.5608': attribute type 10 has an invalid length. [ 1496.210074][T27685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.362443][T27692] netlink: 'syz.2.5610': attribute type 10 has an invalid length. [ 1496.399519][T27691] binder: BINDER_SET_CONTEXT_MGR already set [ 1496.403326][T27692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.404006][T27691] binder: 27690:27691 ioctl 4018620d 80004a80 returned -16 [ 1497.892311][T19299] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1497.928533][T27715] netlink: 'syz.1.5616': attribute type 10 has an invalid length. [ 1498.031873][T27715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.046192][T19299] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1498.056471][T19299] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1498.070781][T19299] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1498.091819][T19299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1498.120271][T19299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1498.138663][T19299] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1498.147017][T19299] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1498.157051][T19299] usb 8-1: Product: syz [ 1498.161609][T19299] usb 8-1: Manufacturer: syz [ 1498.199849][T19299] cdc_wdm 8-1:1.0: skipping garbage [ 1498.207097][T19299] cdc_wdm 8-1:1.0: skipping garbage [ 1498.208871][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5619'. [ 1498.223884][T27720] siw: device registration error -23 [ 1498.227378][T19299] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1498.236403][T19299] cdc_wdm 8-1:1.0: Unknown control protocol [ 1499.179009][T27730] 9p: Bad value for 'rfdno' [ 1499.179934][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 1499.268099][T27726] siw: device registration error -23 [ 1499.438138][T27725] binder: BINDER_SET_CONTEXT_MGR already set [ 1499.446076][T27725] binder: 27724:27725 ioctl 4018620d 80004a80 returned -16 [ 1501.132900][ T24] usb 8-1: USB disconnect, device number 91 [ 1501.896857][T27752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 1504.336008][T27772] binder: BINDER_SET_CONTEXT_MGR already set [ 1504.343116][T27772] binder: 27768:27772 ioctl 4018620d 80004a80 returned -16 [ 1504.832055][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5642'. [ 1504.844337][T27788] siw: device registration error -23 [ 1505.010043][T27791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1505.014920][T27789] netlink: 'syz.0.5641': attribute type 10 has an invalid length. [ 1505.052735][T27787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.834820][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1506.840135][T27811] siw: device registration error -23 [ 1507.218125][T27822] 9p: Bad value for 'rfdno' [ 1508.343986][T27827] binder: BINDER_SET_CONTEXT_MGR already set [ 1508.349086][T27827] binder: 27826:27827 ioctl 4018620d 80004a80 returned -16 [ 1509.729567][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1509.748715][T27846] netlink: 'syz.3.5663': attribute type 10 has an invalid length. [ 1509.822549][T27846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.018156][T27852] netlink: 'syz.1.5665': attribute type 10 has an invalid length. [ 1510.086343][T27852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.489345][T27872] 9p: Bad value for 'rfdno' [ 1512.140651][T27877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1512.148548][T27877] siw: device registration error -23 [ 1513.536887][T27895] 9p: Bad value for 'rfdno' [ 1516.342354][ T10] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1516.492365][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1516.495787][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1516.498863][ T10] usb 6-1: config 0 has no interface number 0 [ 1516.501460][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1516.506305][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1516.511090][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.519874][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1516.526346][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1516.530232][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.536057][ T10] usb 6-1: config 0 descriptor?? [ 1516.548813][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1516.810450][ T10] usb 6-1: USB disconnect, device number 107 [ 1516.810498][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1517.181012][T27940] 9p: Bad value for 'rfdno' [ 1517.291479][T27940] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1517.327530][T27940] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1517.330484][T27940] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1517.335044][T27940] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1517.341739][T27940] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1517.412818][T27940] pci 0000:00:01.0: Adding to iommu group 1 [ 1517.458714][T27940] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1517.461926][T27940] pci 0000:00:01.0: vgaarb: bridge control possible [ 1517.464830][T27940] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1517.479730][T27940] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1517.486672][T27940] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.489333][T27940] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1517.491997][T27940] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1517.498479][T27940] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1517.506326][T27940] pci 0000:00:04.0: enabling Extended Tags [ 1517.538697][T27940] pci 0000:00:04.0: Adding to iommu group 4 [ 1517.574096][T27940] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.579467][T27940] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1517.585796][T27940] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1517.590059][T27940] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1517.593317][T27940] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 1517.596275][T27940] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1517.599651][T27940] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1517.603537][T27940] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1517.607452][T27940] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.609817][T27940] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1517.613934][T27940] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 1517.617690][T27940] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1517.627372][T27940] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1517.649017][T27940] [drm] Found bochs VGA, ID 0xb0c5. [ 1517.650934][T27940] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1517.682841][T27940] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1517.834063][T27940] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1518.303126][T27940] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1518.315832][T27940] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1518.686822][T27962] 9p: Bad value for 'rfdno' [ 1518.722325][ T34] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1518.902261][ T34] usb 5-1: device descriptor read/64, error -71 [ 1519.308454][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1519.492287][ T34] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1519.601208][T27968] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1519.604973][T27968] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1519.679774][T27972] 9p: Bad value for 'rfdno' [ 1519.680645][T27968] bond1: entered promiscuous mode [ 1519.875545][ T34] usb 5-1: device descriptor read/64, error -71 [ 1520.347566][ T34] usb usb5-port1: attempt power cycle [ 1520.881359][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1520.891250][T27984] siw: device registration error -23 [ 1520.897820][T27983] 9p: Bad value for 'rfdno' [ 1520.953650][T27983] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1520.976031][T27983] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1520.979410][T27983] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1520.982720][T27983] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1520.989879][T27983] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1521.038646][T27983] pci 0000:00:01.0: Adding to iommu group 1 [ 1521.078294][T27983] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1521.080748][T27983] pci 0000:00:01.0: vgaarb: bridge control possible [ 1521.083288][T27983] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1521.099773][T27983] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1521.103362][T27983] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1521.116986][T27983] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1521.179820][T27983] [drm] Found bochs VGA, ID 0xb0c5. [ 1521.181999][T27983] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1521.266582][T27983] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1521.362783][ T34] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1521.391724][T27983] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1521.584797][T27990] 9p: Bad value for 'rfdno' [ 1521.661414][T27991] 9p: Bad value for 'rfdno' [ 1522.042359][ T34] usb 5-1: device not accepting address 110, error -71 [ 1522.064618][T27996] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1522.071916][T27996] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1522.543025][T27991] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1522.583650][T27991] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1522.593347][T27991] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1522.596360][T27991] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1522.603598][T27991] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1522.618277][T27991] pci 0000:00:01.0: Adding to iommu group 1 [ 1522.642378][ T10] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1522.650051][T27991] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1522.652564][T27991] pci 0000:00:01.0: vgaarb: bridge control possible [ 1522.654642][T27991] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1522.672621][T27991] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1522.675740][T27991] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1522.679573][T27991] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1522.688902][T27991] [drm] Found bochs VGA, ID 0xb0c5. [ 1522.690894][T27991] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1522.695583][T27991] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1522.823571][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1522.826670][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1522.832276][ T10] usb 7-1: config 0 has no interface number 0 [ 1522.834246][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1522.844935][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1522.852995][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1522.859167][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1522.864602][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1522.867451][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.874551][ T10] usb 7-1: config 0 descriptor?? [ 1522.887366][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1522.933466][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1522.937496][T28004] siw: device registration error -23 [ 1522.991397][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1522.995569][T28009] siw: device registration error -23 [ 1523.046336][T28010] netlink: 'syz.3.5718': attribute type 10 has an invalid length. [ 1523.144037][T28010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.155965][T28015] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1523.163909][T28015] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1523.176294][ T34] usb 7-1: USB disconnect, device number 115 [ 1523.178813][ C3] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 1523.304631][T28010] bond1: left promiscuous mode [ 1523.322291][T19299] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1523.452284][T19299] usb 6-1: device descriptor read/64, error -71 [ 1523.704779][T28010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1523.712589][T19299] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1523.852424][T19299] usb 6-1: device descriptor read/64, error -71 [ 1523.859251][T28015] bond1: entered promiscuous mode [ 1523.962543][T19299] usb usb6-port1: attempt power cycle [ 1524.393323][T19299] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1525.100575][T28031] 9p: Bad value for 'rfdno' [ 1525.153303][T19299] usb 6-1: device descriptor read/8, error -71 [ 1525.319216][T28031] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1525.338914][T28031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1525.342054][T28031] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1525.345446][T28031] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1525.350905][T28031] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1525.378667][ T34] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1525.392519][T19299] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1525.401754][T28031] pci 0000:00:01.0: Adding to iommu group 1 [ 1525.414563][T19299] usb 6-1: device descriptor read/8, error -71 [ 1525.427724][T28031] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1525.430701][T28031] pci 0000:00:01.0: vgaarb: bridge control possible [ 1525.433320][T28031] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1525.455567][T28031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1525.459538][T28031] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1525.472692][T28031] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1525.496655][T28031] [drm] Found bochs VGA, ID 0xb0c5. [ 1525.498556][T28031] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1525.537314][T19299] usb usb6-port1: unable to enumerate USB device [ 1525.538721][T28031] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1525.712823][T28031] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1526.427933][T28043] fuse: Bad value for 'fd' [ 1526.545650][T28044] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1526.576347][T28044] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1526.666481][T28044] bond2: entered promiscuous mode [ 1527.160023][T28050] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1527.172257][T28050] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1527.398749][T28050] bond1: entered promiscuous mode [ 1528.338407][T28069] netlink: 'syz.1.5740': attribute type 10 has an invalid length. [ 1528.346712][T28068] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1528.355460][T28068] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1528.783188][T28068] bond2: entered promiscuous mode [ 1528.800378][T28070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.863788][T28070] bond1: left promiscuous mode [ 1528.871111][T28070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1528.991707][T28079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1528.999463][T28079] siw: device registration error -23 [ 1529.461566][T28093] netlink: 'syz.2.5745': attribute type 10 has an invalid length. [ 1529.669871][T28096] 9p: Bad value for 'rfdno' [ 1530.273043][T28100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.451411][T28104] 9p: Bad value for 'rfdno' [ 1531.594534][T28110] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1531.656161][T28110] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1531.835752][T28111] bond2: entered promiscuous mode [ 1532.307773][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1532.322397][ T845] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1532.474081][ T845] usb 7-1: Using ep0 maxpacket: 8 [ 1532.487937][ T845] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1532.499007][ T845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1532.514976][ T845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1532.522934][T28130] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.525427][T28130] binder: 28129:28130 ioctl 4018620d 80004a80 returned -16 [ 1532.530299][ T845] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.553774][ T845] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1532.566053][ T845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.802968][ T845] usb 7-1: GET_CAPABILITIES returned 0 [ 1532.804744][ T845] usbtmc 7-1:16.0: can't read capabilities [ 1532.938975][T28138] bond2: left promiscuous mode [ 1532.941103][T28138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1533.002504][ T845] usb 7-1: USB disconnect, device number 116 [ 1533.061534][T28139] bond2: left promiscuous mode [ 1533.087849][T28139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1533.127470][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1533.133081][T28144] siw: device registration error -23 [ 1534.774280][T28169] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1534.785943][T28169] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1534.923642][T28169] bond3: entered promiscuous mode [ 1535.566075][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1535.689692][T28184] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1535.697848][T28184] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1535.882496][T28184] bond3: entered promiscuous mode [ 1535.903232][T28190] 9p: Bad value for 'rfdno' [ 1536.723841][T28205] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1536.727269][T28206] 9p: Bad value for 'rfdno' [ 1536.778426][T28205] bond4: entered promiscuous mode [ 1537.015241][T28206] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1537.051481][T28206] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1537.056195][T28206] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1537.061091][T28206] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1537.080184][T28206] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1537.190179][T28206] pci 0000:00:01.0: Adding to iommu group 1 [ 1537.267549][T28206] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1537.270348][T28206] pci 0000:00:01.0: vgaarb: bridge control possible [ 1537.272897][T28206] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1537.290139][T28206] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1537.295968][T28206] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1537.306088][T28206] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1537.337105][T28206] [drm] Found bochs VGA, ID 0xb0c5. [ 1537.342141][T28206] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1537.392460][T28206] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1537.474462][T28223] 9p: Bad value for 'rfdno' [ 1537.497690][T28206] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1537.583756][T28226] 9p: Bad value for 'rfdno' [ 1538.114666][T28227] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1538.148014][T28227] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1538.155690][T28227] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1538.159067][T28227] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1538.167903][T28227] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1538.267955][T28227] pci 0000:00:01.0: Adding to iommu group 1 [ 1538.388958][T28227] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1538.391800][T28227] pci 0000:00:01.0: vgaarb: bridge control possible [ 1538.394421][T28227] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1538.426931][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5784'. [ 1538.431816][T28229] siw: device registration error -23 [ 1538.469497][T28227] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1538.477795][T28227] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1538.494118][T28227] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1538.578559][T28227] [drm] Found bochs VGA, ID 0xb0c5. [ 1538.580963][T28227] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1538.681561][T28227] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1538.739087][T28233] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1538.749743][T28233] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1538.870772][T28233] bond1: entered promiscuous mode [ 1538.916262][T28227] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1539.794155][T28246] fuse: Invalid rootmode [ 1540.097300][T28259] siw: device registration error -23 [ 1540.566566][ T13] bridge_slave_1: left allmulticast mode [ 1540.580599][ T13] bridge_slave_1: left promiscuous mode [ 1540.599231][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.650127][ T13] bridge_slave_0: left allmulticast mode [ 1540.678631][ T13] bridge_slave_0: left promiscuous mode [ 1540.707735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.626676][T28270] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1541.629551][T28270] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1541.636374][T28270] ================================================================== [ 1541.639664][T28270] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 1541.642900][T28270] Read of size 8 at addr ffff888026b7fff0 by task syz.0.5795/28270 [ 1541.647189][T28270] [ 1541.649030][T28270] CPU: 2 UID: 0 PID: 28270 Comm: syz.0.5795 Not tainted syzkaller #0 PREEMPT(full) [ 1541.649055][T28270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1541.649066][T28270] Call Trace: [ 1541.649086][T28270] [ 1541.649093][T28270] dump_stack_lvl+0x100/0x190 [ 1541.649177][T28270] print_report+0x13d/0x4b0 [ 1541.649205][T28270] ? __virt_addr_valid+0x239/0x430 [ 1541.649237][T28270] ? dummy_free_request+0x8a/0x90 [ 1541.649253][T28270] kasan_report+0xdf/0x1c0 [ 1541.649291][T28270] ? dummy_free_request+0x8a/0x90 [ 1541.649311][T28270] dummy_free_request+0x8a/0x90 [ 1541.649331][T28270] uvc_function_bind+0x181a/0x1939 [ 1541.649367][T28270] ? __pfx_uvc_function_bind+0x10/0x10 [ 1541.649389][T28270] usb_add_function+0x219/0x890 [ 1541.649420][T28270] configfs_composite_bind+0xd83/0x1960 [ 1541.649448][T28270] ? kernfs_create_link+0x1bd/0x240 [ 1541.649501][T28270] gadget_bind_driver+0x28c/0xbf0 [ 1541.649515][T28270] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1541.649535][T28270] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1541.649549][T28270] really_probe+0x241/0xa60 [ 1541.649579][T28270] __driver_probe_device+0x20e/0x450 [ 1541.649598][T28270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1541.649625][T28270] driver_probe_device+0x4a/0x140 [ 1541.649643][T28270] __driver_attach+0x21f/0x5b0 [ 1541.649659][T28270] ? __pfx___driver_attach+0x10/0x10 [ 1541.649675][T28270] bus_for_each_dev+0x13e/0x1d0 [ 1541.649689][T28270] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1541.649703][T28270] ? bus_add_driver+0x2b5/0x5b0 [ 1541.649719][T28270] bus_add_driver+0x305/0x5b0 [ 1541.649738][T28270] driver_register+0x1e2/0x360 [ 1541.649758][T28270] usb_gadget_register_driver_owner+0x132/0x210 [ 1541.649773][T28270] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1541.649790][T28270] configfs_write_iter+0x302/0x4e0 [ 1541.649803][T28270] vfs_write+0x6ac/0x1050 [ 1541.649821][T28270] ? __pfx_configfs_write_iter+0x10/0x10 [ 1541.649833][T28270] ? __pfx_vfs_write+0x10/0x10 [ 1541.649842][T28270] ? find_held_lock+0x2b/0x80 [ 1541.649882][T28270] ksys_write+0x12a/0x250 [ 1541.649894][T28270] ? __pfx_ksys_write+0x10/0x10 [ 1541.649910][T28270] __do_fast_syscall_32+0xe7/0x970 [ 1541.649981][T28270] do_fast_syscall_32+0x32/0x70 [ 1541.649998][T28270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1541.650016][T28270] RIP: 0023:0xf7f04fec [ 1541.650033][T28270] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 1541.650044][T28270] RSP: 002b:00000000f4f6150c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1541.650060][T28270] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 1541.650070][T28270] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 1541.650078][T28270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1541.650085][T28270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1541.650094][T28270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1541.650106][T28270] [ 1541.650111][T28270] [ 1541.755319][T28270] Allocated by task 25996: [ 1541.757099][T28270] kasan_save_stack+0x30/0x50 [ 1541.759075][T28270] kasan_save_track+0x14/0x30 [ 1541.761026][T28270] __kasan_kmalloc+0xaa/0xb0 [ 1541.762921][T28270] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1541.765049][T28270] __hw_addr_create+0x57/0x220 [ 1541.766928][T28270] __hw_addr_add_ex+0x32b/0x650 [ 1541.768861][T28270] dev_mc_add+0xb6/0x110 [ 1541.770562][T28270] igmp_group_added+0x83a/0x9a0 [ 1541.772539][T28270] ____ip_mc_inc_group+0x7e3/0x10d0 [ 1541.774699][T28270] ip_mc_up+0x154/0x390 [ 1541.776436][T28270] inetdev_event+0x6c3/0x17f0 [ 1541.778351][T28270] notifier_call_chain+0x99/0x3f0 [ 1541.780335][T28270] call_netdevice_notifiers_info+0xbe/0x110 [ 1541.782736][T28270] __dev_notify_flags+0x12c/0x2e0 [ 1541.784752][T28270] netif_change_flags+0x108/0x160 [ 1541.786776][T28270] do_setlink.isra.0+0x1ac4/0x3e60 [ 1541.788823][T28270] rtnl_newlink+0x1b7e/0x2380 [ 1541.790710][T28270] rtnetlink_rcv_msg+0x95e/0xe90 [ 1541.792729][T28270] netlink_rcv_skb+0x159/0x420 [ 1541.794676][T28270] netlink_unicast+0x585/0x850 [ 1541.796612][T28270] netlink_sendmsg+0x8b0/0xda0 [ 1541.798537][T28270] ____sys_sendmsg+0xa4d/0xbe0 [ 1541.800499][T28270] ___sys_sendmsg+0x190/0x1e0 [ 1541.802459][T28270] __sys_sendmsg+0x160/0x210 [ 1541.804364][T28270] __do_fast_syscall_32+0xe7/0x970 [ 1541.806494][T28270] do_fast_syscall_32+0x32/0x70 [ 1541.808510][T28270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1541.810793][T28270] [ 1541.811797][T28270] The buggy address belongs to the object at ffff888026b7ff00 [ 1541.811797][T28270] which belongs to the cache kmalloc-128 of size 128 [ 1541.817246][T28270] The buggy address is located 136 bytes to the right of [ 1541.817246][T28270] allocated 104-byte region [ffff888026b7ff00, ffff888026b7ff68) [ 1541.822849][T28270] [ 1541.823846][T28270] The buggy address belongs to the physical page: [ 1541.826344][T28270] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026b7f500 pfn:0x26b7f [ 1541.830230][T28270] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1541.833448][T28270] page_type: f5(slab) [ 1541.835055][T28270] raw: 00fff00000000200 ffff88801bc42a00 ffffea00004e0450 ffffea00009bfdd0 [ 1541.838485][T28270] raw: ffff888026b7f500 000000080010000f 00000000f5000000 0000000000000000 [ 1541.841897][T28270] page dumped because: kasan: bad access detected [ 1541.844404][T28270] page_owner tracks the page as allocated [ 1541.846722][T28270] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5095371708, free_ts 0 [ 1541.854166][T28270] post_alloc_hook+0xfd/0x120 [ 1541.856123][T28270] get_page_from_freelist+0xf48/0x3530 [ 1541.858295][T28270] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1541.860679][T28270] new_slab+0xa2/0x640 [ 1541.862355][T28270] refill_objects+0xe3/0x410 [ 1541.864152][T28270] __pcs_replace_empty_main+0x376/0x680 [ 1541.866373][T28270] __kmalloc_cache_noprof+0x479/0x6c0 [ 1541.868521][T28270] con_insert_unipair+0x1c0/0x270 [ 1541.870622][T28270] con_set_default_unimap+0x39d/0x700 [ 1541.872759][T28270] fbcon_init+0x10ea/0x1830 [ 1541.874632][T28270] visual_init+0x320/0x620 [ 1541.876469][T28270] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1541.878778][T28270] do_take_over_console+0x501/0x5d0 [ 1541.880947][T28270] do_fbcon_takeover+0xe9/0x210 [ 1541.882996][T28270] fbcon_fb_registered+0x364/0x4b0 [ 1541.885117][T28270] do_register_framebuffer+0x503/0x870 [ 1541.887357][T28270] page_owner free stack trace missing [ 1541.889519][T28270] [ 1541.890477][T28270] Memory state around the buggy address: [ 1541.892716][T28270] ffff888026b7fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1541.895841][T28270] ffff888026b7ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 1541.899003][T28270] >ffff888026b7ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1541.902158][T28270] ^ [ 1541.905252][T28270] ffff888026b80000: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 1541.908363][T28270] ffff888026b80080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1541.911587][T28270] ================================================================== [ 1541.964682][T28270] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1541.967713][T28270] CPU: 2 UID: 0 PID: 28270 Comm: syz.0.5795 Not tainted syzkaller #0 PREEMPT(full) [ 1541.971494][T28270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1541.975492][T28270] Call Trace: [ 1541.976863][T28270] [ 1541.977984][T28270] dump_stack_lvl+0x100/0x190 [ 1541.979681][T28270] vpanic+0x552/0x970 [ 1541.981170][T28270] ? __pfx_vpanic+0x10/0x10 [ 1541.982924][T28270] ? dummy_free_request+0x8a/0x90 [ 1541.984881][T28270] panic+0xd1/0xe0 [ 1541.986373][T28270] ? __pfx_panic+0x10/0x10 [ 1541.988165][T28270] ? dummy_free_request+0x8a/0x90 [ 1541.990082][T28270] ? preempt_schedule_common+0x42/0xc0 [ 1541.992048][T28270] check_panic_on_warn.cold+0x19/0x34 [ 1541.994017][T28270] end_report.part.0+0x3a/0x90 [ 1541.995930][T28270] kasan_report.cold+0xe/0x18 [ 1541.997843][T28270] ? dummy_free_request+0x8a/0x90 [ 1541.999784][T28270] dummy_free_request+0x8a/0x90 [ 1542.001705][T28270] uvc_function_bind+0x181a/0x1939 [ 1542.003749][T28270] ? __pfx_uvc_function_bind+0x10/0x10 [ 1542.005943][T28270] usb_add_function+0x219/0x890 [ 1542.007888][T28270] configfs_composite_bind+0xd83/0x1960 [ 1542.010141][T28270] ? kernfs_create_link+0x1bd/0x240 [ 1542.012224][T28270] gadget_bind_driver+0x28c/0xbf0 [ 1542.014173][T28270] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1542.016160][T28270] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1542.018279][T28270] really_probe+0x241/0xa60 [ 1542.020077][T28270] __driver_probe_device+0x20e/0x450 [ 1542.022108][T28270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1542.024479][T28270] driver_probe_device+0x4a/0x140 [ 1542.026502][T28270] __driver_attach+0x21f/0x5b0 [ 1542.028378][T28270] ? __pfx___driver_attach+0x10/0x10 [ 1542.030561][T28270] bus_for_each_dev+0x13e/0x1d0 [ 1542.032470][T28270] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1542.034648][T28270] ? bus_add_driver+0x2b5/0x5b0 [ 1542.036670][T28270] bus_add_driver+0x305/0x5b0 [ 1542.038642][T28270] driver_register+0x1e2/0x360 [ 1542.040637][T28270] usb_gadget_register_driver_owner+0x132/0x210 [ 1542.043030][T28270] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1542.045165][T28270] configfs_write_iter+0x302/0x4e0 [ 1542.047236][T28270] vfs_write+0x6ac/0x1050 [ 1542.048975][T28270] ? __pfx_configfs_write_iter+0x10/0x10 [ 1542.051298][T28270] ? __pfx_vfs_write+0x10/0x10 [ 1542.053216][T28270] ? find_held_lock+0x2b/0x80 [ 1542.054904][T28270] ksys_write+0x12a/0x250 [ 1542.056461][T28270] ? __pfx_ksys_write+0x10/0x10 [ 1542.058176][T28270] __do_fast_syscall_32+0xe7/0x970 [ 1542.059995][T28270] do_fast_syscall_32+0x32/0x70 [ 1542.061808][T28270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1542.063773][T28270] RIP: 0023:0xf7f04fec [ 1542.065060][T28270] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 1542.067168][T28270] RSP: 002b:00000000f4f6150c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1542.069733][T28270] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 1542.072184][T28270] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 1542.074829][T28270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1542.077485][T28270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1542.079884][T28270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1542.082333][T28270] [ 1542.083963][T28270] Kernel Offset: disabled [ 1542.085315][T28270] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:21:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ebe7f40 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8e183b74 RDI=ffffffff8c400a80 RBP=ffff8880224e2540 RSP=ffffc9000c7cf5e0 R8 =ffffffff8a5d4755 R9 =0000000000000000 R10=ffffc9000c7cf820 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8bb881d5 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801dc018 CR3=000000004cc2d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003eb8943 RBX=ffff88801c742540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032bf9ff8 CR3=000000004cc2d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a09eb0 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc9000323f240 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff373eeee R15=dffffc0000000000 RIP=ffffffff85a09ed7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4f60ff4 CR3=000000006b7c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000008000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47163d2f508c3177 4dcd8036a4cd56f2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ccb93e229675c60 5ca4e4cc7c2eb236 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab833c72928e9df5 f835858fc76ea06f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 577ddc59dd476651 820bd536da4d08d6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 caa3bacc97cf5e21 02a2f7076d38459e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b509b734344f748a 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69e6590ab4063ce9 c4755bcb2d9471ec ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3e49ed00000000 504de416b54079be ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fd1b5cb27825d59 aa06012b9cddfb5a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 340fbfb9d89d8bd9 212d57756fda39f9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a637675203a302e 7465676461672031 672e746567646167 2d73666769666e6f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2032207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 3631206769666e6f 63203a312d372062 7375205d35343854 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801d2bfa10 RCX=ffffc900001f765c RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=0000000000000000 RBP=ffffffff82bd408a RSP=ffffc900001f7628 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88801c740000 R13=ffffffff9122e380 R14=0000000000000000 R15=ffff8880618e8870 RIP=ffffffff81e561bb RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa55c0 CR3=000000006c982000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000