last executing test programs: 38.092460825s ago: executing program 1 (id=3634): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) read(0xffffffffffffffff, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 36.59041328s ago: executing program 1 (id=3638): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa20000000000000702", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 33.943704498s ago: executing program 1 (id=3649): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c0000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 29.980744428s ago: executing program 1 (id=3659): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 27.285126906s ago: executing program 1 (id=3657): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)="2a20000000df", 0x6) add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x82, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @none}, 0x8) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x8000000, r1, 0x0) landlock_restrict_self(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f00000001c0)=""/124) 26.280241418s ago: executing program 1 (id=3666): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 11.274612774s ago: executing program 32 (id=3666): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 6.785900523s ago: executing program 0 (id=3733): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000100)={0x9, 0x4, 0x1, 0x5}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x4c, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x800003, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x6, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x0, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xc, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0xffffffff, 0x5}, {0x9, 0xd76, 0x4, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158144, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x9, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x400007ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x6}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x0, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x9e, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x10, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x402, 0x2b00, 0xf7fff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0x0, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x40057}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x87, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff02, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x80000, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x5, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x3, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x1000003, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xe6d, 0x62f, 0x401, 0xffff9d44}, {0x9a2f, 0x800, 0x8, 0x1, 0x10000007}, {0x20000009, 0x2, 0x800, 0x200, 0x10001, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0xd28, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r15, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendfile(r0, r1, &(0x7f0000000080)=0x3, 0xffff) 5.02704438s ago: executing program 0 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 3.901056155s ago: executing program 4 (id=3728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.897335926s ago: executing program 0 (id=3747): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {0x0}], 0x2}, 0x1}], 0x1, 0x20, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) 2.717179559s ago: executing program 2 (id=3740): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) read(0xffffffffffffffff, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 2.707863767s ago: executing program 0 (id=3741): r0 = syz_open_dev$evdev(0x0, 0x3214, 0x460100) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000008000000000000000080012"], 0xa0}}, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000509800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0928090340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003043fd224c1e31d"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "7990fb09", {0x3, 0x100, 0x0, 0x41, 0x8, 0xf0, 0xff}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000002c0)={0x8000000c}) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r4) 2.323496352s ago: executing program 2 (id=3743): r0 = syz_ublk_setup_io_uring(0x67bc, &(0x7f0000000440)={0x0, 0x398, 0x80, 0x0, 0x2cd}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000400)={0x0, 0x1}, 0x1) 2.248968141s ago: executing program 2 (id=3744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}}, 0x24}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.090277075s ago: executing program 2 (id=3745): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.959220618s ago: executing program 2 (id=3746): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r3, 0x32ce970513f32900) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0), 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)}, 0x123) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 1.758691041s ago: executing program 3 (id=3749): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r4, 0x32ce970513f32900) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 1.340537367s ago: executing program 3 (id=3750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000000f60204010006"], 0x59) 1.23070937s ago: executing program 3 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.128659902s ago: executing program 0 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x8, 0x6, 0x200, 0x2, 0x7, 0x8}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000}, 0x4044010) 1.128178133s ago: executing program 3 (id=3753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.127257584s ago: executing program 0 (id=3754): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 1.078495433s ago: executing program 3 (id=3755): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 1.077813021s ago: executing program 4 (id=3756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.076675654s ago: executing program 2 (id=3757): landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_ublk_setup_io_uring(0x67bc, &(0x7f0000000440)={0x0, 0x398, 0x80, 0x0, 0x2cd}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 154.098077ms ago: executing program 4 (id=3758): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r4, 0x32ce970513f32900) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 0s ago: executing program 3 (id=3759): syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='44100,4+000,88200,96000,176400,192000,352800,3', 0x2e) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='usbip-', 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): t with address 0x8, skipping [ 722.646872][ T6922] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 722.650475][ T6922] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 722.653986][ T6922] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 722.657725][ T6922] usb 5-1: config 14 interface 57 has no altsetting 0 [ 722.659853][ T6922] usb 5-1: config 14 interface 228 has no altsetting 0 [ 722.663675][ T6922] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 722.666644][ T6922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.670367][ T6922] usb 5-1: Product: syz [ 722.677478][ T6922] usb 5-1: Manufacturer: syz [ 722.681004][ T6922] usb 5-1: SerialNumber: syz [ 722.790879][T19978] 9p: Bad value for 'wfdno' [ 723.262034][T19983] 9p: Bad value for 'wfdno' [ 723.389466][T19985] syzkaller1: entered promiscuous mode [ 723.391432][T19985] syzkaller1: entered allmulticast mode [ 724.074143][T19987] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 724.083141][ T6922] legousbtower 5-1:14.57: interrupt endpoints not found [ 724.098108][ T5868] legousbtower 6-1:14.57: interrupt endpoints not found [ 724.113769][ T6922] legousbtower 5-1:14.228: interrupt endpoints not found [ 724.114758][ T5868] legousbtower 6-1:14.228: interrupt endpoints not found [ 724.133254][ T6922] usb 5-1: USB disconnect, device number 56 [ 724.133722][ T5868] usb 6-1: USB disconnect, device number 58 [ 724.175699][T19994] 9p: Bad value for 'wfdno' [ 724.198612][T19993] syzkaller0: entered promiscuous mode [ 724.203962][T19993] syzkaller0: entered allmulticast mode [ 724.219906][T19995] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 724.233704][T19995] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 724.236460][T19995] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 724.239098][T19995] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 724.242014][T19995] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 724.256144][T19995] pci 0000:00:01.0: Adding to iommu group 1 [ 724.282725][T19995] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 724.285084][T19995] pci 0000:00:01.0: vgaarb: bridge control possible [ 724.287140][T19995] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 724.304260][T19995] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 724.308227][T19995] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 724.311712][T19995] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 724.319980][T19995] [drm] Found bochs VGA, ID 0xb0c5. [ 724.321654][T19995] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 724.334510][T19995] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 724.336872][T14973] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 724.408692][T19995] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 724.425742][T19999] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 724.518412][T14973] usb 8-1: Using ep0 maxpacket: 32 [ 724.570739][T14973] usb 8-1: unable to get BOS descriptor or descriptor too short [ 724.585701][T20002] 9p: Bad value for 'wfdno' [ 724.606617][T20002] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 724.624425][T20002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 724.627366][T20002] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 724.629972][T20002] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 724.634502][T20002] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 724.655443][T20002] pci 0000:00:01.0: Adding to iommu group 1 [ 724.676879][T20002] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 724.679047][T20002] pci 0000:00:01.0: vgaarb: bridge control possible [ 724.681125][T20002] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 724.693289][T20002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 724.696316][T20002] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 724.704288][T20002] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 724.707526][ T6922] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 724.800630][T20002] [drm] Found bochs VGA, ID 0xb0c5. [ 724.802566][T20002] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 724.882983][ T6922] usb 6-1: Using ep0 maxpacket: 32 [ 724.918257][ T6922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.926269][T20002] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 724.926311][ T6922] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 724.931894][ T6922] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 724.934781][ T6922] usb 6-1: config 14 has no interface number 0 [ 724.936813][ T6922] usb 6-1: config 14 has no interface number 1 [ 724.938829][ T6922] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 724.942174][ T6922] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 724.946015][ T6922] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 724.949603][ T6922] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 724.953301][ T6922] usb 6-1: config 14 interface 57 has no altsetting 0 [ 724.955406][ T6922] usb 6-1: config 14 interface 228 has no altsetting 0 [ 724.959760][ T6922] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 724.962654][ T6922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.965126][ T6922] usb 6-1: Product: syz [ 724.966436][ T6922] usb 6-1: Manufacturer: syz [ 724.968529][ T6922] usb 6-1: SerialNumber: syz [ 724.987108][T14973] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 724.991758][T14973] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 724.996685][T14973] usb 8-1: config 14 has no interface number 0 [ 725.001642][T14973] usb 8-1: config 14 has no interface number 1 [ 725.003954][T14973] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 725.009257][T14973] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 725.015359][T14973] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 725.019992][T14973] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 725.025524][T14973] usb 8-1: config 14 interface 57 has no altsetting 0 [ 725.029079][T14973] usb 8-1: config 14 interface 228 has no altsetting 0 [ 725.031570][T14973] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 725.031593][T14973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.031610][T14973] usb 8-1: Product: syz [ 725.031623][T14973] usb 8-1: Manufacturer: syz [ 725.031635][T14973] usb 8-1: SerialNumber: syz [ 725.049811][T20002] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 726.836913][ T1494] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 727.006867][ T1494] usb 7-1: Using ep0 maxpacket: 32 [ 727.010764][ T1494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 727.014243][ T1494] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 727.016874][ T1494] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 727.019471][ T1494] usb 7-1: config 14 has no interface number 0 [ 727.021451][ T1494] usb 7-1: config 14 has no interface number 1 [ 727.023681][ T1494] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 727.027053][ T1494] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 727.030717][ T1494] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 727.034331][ T1494] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 727.037915][ T1494] usb 7-1: config 14 interface 57 has no altsetting 0 [ 727.040073][ T1494] usb 7-1: config 14 interface 228 has no altsetting 0 [ 727.044169][ T1494] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 727.047492][ T1494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.050019][ T1494] usb 7-1: Product: syz [ 727.051378][ T1494] usb 7-1: Manufacturer: syz [ 727.052923][ T1494] usb 7-1: SerialNumber: syz [ 727.135657][T14973] legousbtower 8-1:14.57: interrupt endpoints not found [ 727.145435][T14973] legousbtower 8-1:14.228: interrupt endpoints not found [ 727.150806][T14973] usb 8-1: USB disconnect, device number 50 [ 727.253839][T20055] 9p: Bad value for 'wfdno' [ 727.426409][ T6922] legousbtower 6-1:14.57: interrupt endpoints not found [ 727.438440][ T6922] legousbtower 6-1:14.228: interrupt endpoints not found [ 727.450560][ T6922] usb 6-1: USB disconnect, device number 59 [ 727.457751][T20057] syzkaller0: entered promiscuous mode [ 727.460013][T20057] syzkaller0: entered allmulticast mode [ 727.509848][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 727.517868][ T1494] legousbtower 7-1:14.57: interrupt endpoints not found [ 727.522528][ T1494] legousbtower 7-1:14.228: interrupt endpoints not found [ 727.526588][ T1494] usb 7-1: USB disconnect, device number 47 [ 727.636998][T14905] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 727.786877][T14905] usb 8-1: Using ep0 maxpacket: 32 [ 727.790670][T14905] usb 8-1: unable to get BOS descriptor or descriptor too short [ 727.794130][T14905] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 727.797044][T14905] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 727.799687][T14905] usb 8-1: config 14 has no interface number 0 [ 727.801632][T14905] usb 8-1: config 14 has no interface number 1 [ 727.803635][T14905] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 727.807214][T14905] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 727.810874][T14905] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 727.814383][T14905] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 727.818108][T14905] usb 8-1: config 14 interface 57 has no altsetting 0 [ 727.820252][T14905] usb 8-1: config 14 interface 228 has no altsetting 0 [ 727.824102][T14905] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 727.827021][T14905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.829607][T14905] usb 8-1: Product: syz [ 727.830932][T14905] usb 8-1: Manufacturer: syz [ 727.832443][T14905] usb 8-1: SerialNumber: syz [ 728.086300][T20064] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 728.100613][T20062] syzkaller0: entered promiscuous mode [ 728.102414][T20062] syzkaller0: entered allmulticast mode [ 728.347092][ T1494] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 728.352482][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 728.380376][T20076] 9p: Bad value for 'wfdno' [ 728.402040][T14905] legousbtower 8-1:14.57: interrupt endpoints not found [ 728.437497][T14905] legousbtower 8-1:14.228: interrupt endpoints not found [ 728.518605][T14905] usb 8-1: USB disconnect, device number 51 [ 728.567727][ T1494] usb 7-1: Using ep0 maxpacket: 32 [ 728.583802][ T1494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 728.592957][ T1494] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 728.594776][T20078] syzkaller0: entered promiscuous mode [ 728.600970][T20078] syzkaller0: entered allmulticast mode [ 728.603631][ T1494] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 728.613178][ T1494] usb 7-1: config 14 has no interface number 0 [ 728.621135][ T1494] usb 7-1: config 14 has no interface number 1 [ 728.630922][ T1494] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 728.647728][ T1494] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 728.660768][ T1494] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 728.664455][ T1494] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 728.670112][ T1494] usb 7-1: config 14 interface 57 has no altsetting 0 [ 728.672639][ T1494] usb 7-1: config 14 interface 228 has no altsetting 0 [ 728.686887][ T1494] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 728.689904][ T1494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.692659][ T1494] usb 7-1: Product: syz [ 728.694092][ T1494] usb 7-1: Manufacturer: syz [ 728.705077][ T1494] usb 7-1: SerialNumber: syz [ 729.475997][T20100] 9p: Bad value for 'wfdno' [ 729.871056][T20102] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 729.890816][T20102] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 729.894278][T20102] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 729.898234][T20102] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 729.902866][T20102] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 729.936199][T20102] pci 0000:00:01.0: Adding to iommu group 1 [ 729.957498][T20102] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 729.959827][T20102] pci 0000:00:01.0: vgaarb: bridge control possible [ 729.961893][T20102] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 729.975119][T20102] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 729.978344][T20102] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 729.985181][T20102] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 730.025904][T20102] [drm] Found bochs VGA, ID 0xb0c5. [ 730.028246][T20102] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 730.275575][T20102] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 730.433737][T20102] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 730.475802][T20109] syzkaller0: entered promiscuous mode [ 730.477729][T20109] syzkaller0: entered allmulticast mode [ 730.600398][T20112] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 730.846924][ T29] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 731.009143][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 731.014032][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.018954][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.022931][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.026432][ T29] usb 5-1: config 14 has no interface number 0 [ 731.029734][ T29] usb 5-1: config 14 has no interface number 1 [ 731.032837][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 731.038701][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 731.044719][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 731.049514][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 731.051319][T20117] syzkaller0: entered promiscuous mode [ 731.054001][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 731.054020][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 731.056319][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 731.057994][T20117] syzkaller0: entered allmulticast mode [ 731.066732][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.070411][ T29] usb 5-1: Product: syz [ 731.072215][ T29] usb 5-1: Manufacturer: syz [ 731.074279][ T29] usb 5-1: SerialNumber: syz [ 731.102363][ T1494] legousbtower 7-1:14.57: interrupt endpoints not found [ 731.116278][ T1494] legousbtower 7-1:14.228: interrupt endpoints not found [ 731.127183][ T1494] usb 7-1: USB disconnect, device number 48 [ 731.174557][T20121] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 731.177100][ T6922] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 731.327004][ T6922] usb 6-1: Using ep0 maxpacket: 32 [ 731.331144][ T6922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 731.338830][ T6922] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.342262][ T6922] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.345916][ T6922] usb 6-1: config 14 has no interface number 0 [ 731.348599][ T6922] usb 6-1: config 14 has no interface number 1 [ 731.351231][ T6922] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 731.355528][ T6922] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 731.360590][ T6922] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 731.365593][ T6922] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 731.370406][ T6922] usb 6-1: config 14 interface 57 has no altsetting 0 [ 731.373300][ T6922] usb 6-1: config 14 interface 228 has no altsetting 0 [ 731.379965][ T6922] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 731.383932][ T6922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.389789][ T6922] usb 6-1: Product: syz [ 731.391631][ T6922] usb 6-1: Manufacturer: syz [ 731.393651][ T6922] usb 6-1: SerialNumber: syz [ 731.416993][T14905] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 731.566891][T14905] usb 8-1: Using ep0 maxpacket: 32 [ 731.574046][T14905] usb 8-1: unable to get BOS descriptor or descriptor too short [ 731.579816][T14905] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.583562][T14905] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.587992][T14905] usb 8-1: config 14 has no interface number 0 [ 731.590716][T14905] usb 8-1: config 14 has no interface number 1 [ 731.593806][T14905] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 731.598271][T14905] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 731.601860][T14905] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 731.605491][T14905] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 731.609366][T14905] usb 8-1: config 14 interface 57 has no altsetting 0 [ 731.611585][T14905] usb 8-1: config 14 interface 228 has no altsetting 0 [ 731.616114][T14905] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 731.619531][T14905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.622110][T14905] usb 8-1: Product: syz [ 731.623554][T14905] usb 8-1: Manufacturer: syz [ 731.625104][T14905] usb 8-1: SerialNumber: syz [ 731.956644][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 731.984402][ T6922] legousbtower 6-1:14.57: interrupt endpoints not found [ 731.993873][ T6922] legousbtower 6-1:14.228: interrupt endpoints not found [ 732.002100][ T6922] usb 6-1: USB disconnect, device number 60 [ 732.425230][T20163] syzkaller0: entered promiscuous mode [ 732.427977][T20163] syzkaller0: entered allmulticast mode [ 732.555633][T20167] syzkaller0: entered promiscuous mode [ 732.558180][T20167] syzkaller0: entered allmulticast mode [ 732.635387][T20165] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 732.651551][T20165] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 732.654085][T20165] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 732.656494][T20165] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 732.659935][T20165] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 732.669165][T20165] pci 0000:00:01.0: Adding to iommu group 1 [ 732.676025][T20165] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 732.678226][T20165] pci 0000:00:01.0: vgaarb: bridge control possible [ 732.680331][T20165] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 732.691424][T20165] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 732.694164][T20165] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 732.698177][T20165] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 732.710730][T20165] [drm] Found bochs VGA, ID 0xb0c5. [ 732.712477][T20165] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 732.723593][T20165] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 732.770556][T20165] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 733.081867][T20172] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 733.101832][T20172] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 733.105156][T20172] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 733.108576][T20172] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 733.112516][T20172] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 733.132662][T20172] pci 0000:00:01.0: Adding to iommu group 1 [ 733.144238][T20172] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 733.147117][T20172] pci 0000:00:01.0: vgaarb: bridge control possible [ 733.149817][T20172] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 733.173992][T20172] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 733.177664][T20172] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 733.182648][T20172] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 733.200307][T20172] [drm] Found bochs VGA, ID 0xb0c5. [ 733.202600][T20172] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 733.236426][T20172] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 733.317568][T20172] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 733.830287][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 733.843605][ T29] legousbtower 5-1:14.228: interrupt endpoints not found [ 733.856868][ T29] usb 5-1: USB disconnect, device number 57 [ 733.919256][T20178] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 733.967317][T20180] 9p: Bad value for 'wfdno' [ 734.046362][T20180] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 734.074044][T20180] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 734.078138][T20180] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 734.084812][T20180] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 734.110407][T20180] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 734.195562][T14905] legousbtower 8-1:14.57: interrupt endpoints not found [ 734.204812][T14905] legousbtower 8-1:14.228: interrupt endpoints not found [ 734.210710][T14905] usb 8-1: USB disconnect, device number 52 [ 734.296835][ T29] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 734.301301][T20180] pci 0000:00:01.0: Adding to iommu group 1 [ 734.311573][T20180] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 734.313786][T20180] pci 0000:00:01.0: vgaarb: bridge control possible [ 734.315888][T20180] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 734.325203][T20180] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 734.327963][T20180] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 734.331604][T20180] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 734.340919][T20180] [drm] Found bochs VGA, ID 0xb0c5. [ 734.343025][T20180] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 734.351772][T20180] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 734.387888][T20180] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 734.419095][T20187] 9p: Bad value for 'wfdno' [ 734.456842][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 734.463342][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.481237][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 734.489908][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 734.495951][ T29] usb 5-1: config 14 has no interface number 0 [ 734.503415][ T29] usb 5-1: config 14 has no interface number 1 [ 734.505463][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 734.520716][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 734.533296][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 734.537510][T20190] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 734.540143][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 734.544066][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 734.546250][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 734.551138][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 734.554431][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.557549][ T29] usb 5-1: Product: syz [ 734.559021][ T29] usb 5-1: Manufacturer: syz [ 734.560909][ T29] usb 5-1: SerialNumber: syz [ 734.649167][T20188] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 734.665804][T20188] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 734.668900][T20188] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 734.671674][T20188] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 734.678139][T20188] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 734.733476][T20188] pci 0000:00:01.0: Adding to iommu group 1 [ 734.750486][T20188] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 734.752650][T20188] pci 0000:00:01.0: vgaarb: bridge control possible [ 734.754731][T20188] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 734.769563][T20188] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 734.773393][T20188] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 734.777199][T15103] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 734.781807][T20188] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 734.813305][T20188] [drm] Found bochs VGA, ID 0xb0c5. [ 734.815255][T20188] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 734.919991][T20188] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 734.927046][T15103] usb 7-1: Using ep0 maxpacket: 32 [ 734.935047][T15103] usb 7-1: unable to get BOS descriptor or descriptor too short [ 734.942606][T15103] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 734.945729][T15103] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 734.948627][T15103] usb 7-1: config 14 has no interface number 0 [ 734.951054][T15103] usb 7-1: config 14 has no interface number 1 [ 734.953869][T15103] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 734.961895][T15103] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 734.970918][T15103] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 734.979546][T15103] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 734.996376][T15103] usb 7-1: config 14 interface 57 has no altsetting 0 [ 734.998913][T15103] usb 7-1: config 14 interface 228 has no altsetting 0 [ 735.008442][T15103] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 735.011919][T15103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.015198][T15103] usb 7-1: Product: syz [ 735.018236][T15103] usb 7-1: Manufacturer: syz [ 735.021597][T15103] usb 7-1: SerialNumber: syz [ 735.110626][T20188] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 735.360179][T20210] syzkaller0: entered promiscuous mode [ 735.363728][T20210] syzkaller0: entered allmulticast mode [ 735.723210][T20216] syzkaller0: entered promiscuous mode [ 735.725405][T20216] syzkaller0: entered allmulticast mode [ 735.744230][T20219] 9p: Bad value for 'wfdno' [ 736.288785][T20236] 9p: Bad value for 'wfdno' [ 736.624181][T20240] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 736.657639][T20240] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 736.662388][T20240] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 736.664834][T20240] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 736.668775][T20240] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 736.679145][T20240] pci 0000:00:01.0: Adding to iommu group 1 [ 736.693475][T20240] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 736.696061][T20240] pci 0000:00:01.0: vgaarb: bridge control possible [ 736.698475][T20240] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 736.709670][T20240] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 736.713041][T20240] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 736.716559][T20240] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 736.725491][T20240] [drm] Found bochs VGA, ID 0xb0c5. [ 736.727378][T20240] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 736.744986][T20240] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 736.790096][T20240] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 737.085556][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 737.428539][ T29] legousbtower 5-1:14.228: interrupt endpoints not found [ 737.632962][T20263] 9p: Bad value for 'wfdno' [ 737.818766][ T29] usb 5-1: USB disconnect, device number 58 [ 737.868702][T15103] legousbtower 7-1:14.57: interrupt endpoints not found [ 737.932154][T15103] legousbtower 7-1:14.228: interrupt endpoints not found [ 738.014053][T15103] usb 7-1: USB disconnect, device number 49 [ 738.881963][T20275] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 738.897736][T20275] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 738.900288][T20275] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 738.902766][T20275] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 738.907284][T20275] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 739.250944][T20275] pci 0000:00:01.0: Adding to iommu group 1 [ 739.276651][T20275] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 739.278810][T20275] pci 0000:00:01.0: vgaarb: bridge control possible [ 739.280858][T20275] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 739.304716][T20275] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 739.314936][T20275] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 739.318719][T20275] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 739.333970][T20275] [drm] Found bochs VGA, ID 0xb0c5. [ 739.335622][T20275] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 739.342873][T20275] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 739.450375][T20296] syzkaller0: entered promiscuous mode [ 739.452191][T20296] syzkaller0: entered allmulticast mode [ 739.504936][T20298] 9p: Bad value for 'wfdno' [ 739.539119][T20298] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 739.556229][T20298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 739.559115][T20298] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 739.561651][T20298] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 739.565354][T20298] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 739.595981][T20298] pci 0000:00:01.0: Adding to iommu group 1 [ 739.614288][T20298] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 739.616593][T20298] pci 0000:00:01.0: vgaarb: bridge control possible [ 739.618660][T20298] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 739.630649][T20298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 739.633368][T20298] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 739.638544][T20298] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 739.646896][ T29] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 739.656938][T20298] [drm] Found bochs VGA, ID 0xb0c5. [ 739.658654][T20298] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 739.670589][T20298] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 739.727169][T20298] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 739.750522][T20301] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 739.763627][T20301] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 739.766405][T20301] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 739.767580][ T1494] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 739.768713][T20301] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 739.773691][T20301] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 739.811969][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 739.815707][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 739.820973][T20301] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 46306 usecs [ 739.821188][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 739.826453][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 739.829289][ T29] usb 5-1: config 14 has no interface number 0 [ 739.831147][ T29] usb 5-1: config 14 has no interface number 1 [ 739.833087][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 739.836386][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 739.840710][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 739.844084][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 739.848181][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 739.850312][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 739.857627][T20301] pci 0000:00:01.0: Adding to iommu group 1 [ 739.863931][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 739.868020][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.872190][ T29] usb 5-1: Product: syz [ 739.873568][ T29] usb 5-1: Manufacturer: syz [ 739.875402][T20301] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 739.877556][T20301] pci 0000:00:01.0: vgaarb: bridge control possible [ 739.879632][T20301] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 739.882648][ T29] usb 5-1: SerialNumber: syz [ 739.900845][T20301] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 739.903593][T20301] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 739.909304][T20301] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 739.919406][T20301] [drm] Found bochs VGA, ID 0xb0c5. [ 739.921127][T20301] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 739.927760][ T1494] usb 6-1: Using ep0 maxpacket: 32 [ 739.942212][T20301] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 739.947167][ T1494] usb 6-1: unable to get BOS descriptor or descriptor too short [ 739.955783][ T1494] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 739.962037][ T1494] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 739.965174][ T1494] usb 6-1: config 14 has no interface number 0 [ 739.970878][ T1494] usb 6-1: config 14 has no interface number 1 [ 739.973054][ T1494] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 739.976549][ T1494] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 739.986000][ T1494] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 739.999544][ T1494] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 740.003302][T20301] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 740.004455][ T1494] usb 6-1: config 14 interface 57 has no altsetting 0 [ 740.008544][ T1494] usb 6-1: config 14 interface 228 has no altsetting 0 [ 740.021852][ T1494] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 740.024749][ T1494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.027285][ T1494] usb 6-1: Product: syz [ 740.028467][ T1494] usb 6-1: Manufacturer: syz [ 740.029764][ T1494] usb 6-1: SerialNumber: syz [ 740.271762][T20308] syzkaller0: entered promiscuous mode [ 740.273647][T20308] syzkaller0: entered allmulticast mode [ 740.303829][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 740.314170][ T1494] legousbtower 6-1:14.57: interrupt endpoints not found [ 740.322233][ T1494] legousbtower 6-1:14.228: interrupt endpoints not found [ 740.326285][ T1494] usb 6-1: USB disconnect, device number 61 [ 740.360143][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 740.387349][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 740.393694][ T29] legousbtower 5-1:14.228: interrupt endpoints not found [ 740.404513][ T29] usb 5-1: USB disconnect, device number 59 [ 741.107613][T20325] syzkaller0: entered promiscuous mode [ 741.109520][T20325] syzkaller0: entered allmulticast mode [ 741.248582][T20326] syzkaller0: entered promiscuous mode [ 741.250437][T20326] syzkaller0: entered allmulticast mode [ 742.060850][T20346] syzkaller0: entered promiscuous mode [ 742.062780][T20346] syzkaller0: entered allmulticast mode [ 742.645417][T20356] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 742.669807][T20356] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 742.672492][T20356] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 742.675366][T20356] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 742.681088][T20356] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 742.835553][T20356] pci 0000:00:01.0: Adding to iommu group 1 [ 742.862721][T20356] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 742.865456][T20356] pci 0000:00:01.0: vgaarb: bridge control possible [ 742.867995][T20356] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 742.880689][T20356] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 742.883893][T20356] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 742.890800][T20356] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 742.940440][T20356] [drm] Found bochs VGA, ID 0xb0c5. [ 742.942261][T20356] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 742.979328][T20365] 9p: Bad value for 'wfdno' [ 743.192714][T20356] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 743.488354][T20366] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 743.504205][T20366] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 743.506937][T20366] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 743.509685][T20366] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 743.513744][T20366] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 743.546460][T20366] pci 0000:00:01.0: Adding to iommu group 1 [ 743.585205][T20374] syzkaller0: entered promiscuous mode [ 743.587594][T20374] syzkaller0: entered allmulticast mode [ 743.597213][T20366] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 743.599392][T20366] pci 0000:00:01.0: vgaarb: bridge control possible [ 743.601462][T20366] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 743.613972][T20366] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 743.617083][T20366] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 743.621772][T20366] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 743.645436][T20366] [drm] Found bochs VGA, ID 0xb0c5. [ 743.647334][T20366] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 743.665698][T20366] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 743.766515][T20366] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 743.793528][T20375] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 743.807426][T20375] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 743.809944][T20375] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 743.812218][T20375] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 743.815088][T20375] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 743.880602][T20375] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 64106 usecs [ 743.895782][T20375] pci 0000:00:01.0: Adding to iommu group 1 [ 743.901690][T20375] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 743.904155][T20375] pci 0000:00:01.0: vgaarb: bridge control possible [ 743.906409][T20375] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 743.910337][T20380] syzkaller0: entered promiscuous mode [ 743.912432][T20380] syzkaller0: entered allmulticast mode [ 743.973947][T20375] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 743.981301][T20375] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 744.017868][T20375] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 744.088164][T20375] [drm] Found bochs VGA, ID 0xb0c5. [ 744.158027][ T50] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 744.160851][T20375] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 744.307655][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 744.318120][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 744.324403][ T50] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 744.327464][ T50] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 744.330406][ T50] usb 7-1: config 14 has no interface number 0 [ 744.332475][ T50] usb 7-1: config 14 has no interface number 1 [ 744.334834][ T50] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 744.341795][ T50] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 744.346349][ T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 744.351957][T20375] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 744.355345][ T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 744.365267][ T50] usb 7-1: config 14 interface 57 has no altsetting 0 [ 744.369923][ T50] usb 7-1: config 14 interface 228 has no altsetting 0 [ 744.393391][ T50] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 744.398390][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.403139][ T50] usb 7-1: Product: syz [ 744.404796][ T50] usb 7-1: Manufacturer: syz [ 744.415685][ T50] usb 7-1: SerialNumber: syz [ 744.953184][T20375] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 745.081894][T20411] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 745.209788][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'. [ 745.220022][ T50] legousbtower 7-1:14.57: interrupt endpoints not found [ 745.224967][ T50] legousbtower 7-1:14.228: interrupt endpoints not found [ 745.229871][ T50] usb 7-1: USB disconnect, device number 50 [ 745.341825][T20425] 9p: Bad value for 'wfdno' [ 745.347084][ T29] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 745.483654][T20427] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 745.499965][T20427] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 745.502633][T20427] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 745.505185][T20427] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 745.511071][T20427] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 745.530542][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 745.620807][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 745.677078][ T29] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 745.690658][ T29] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 745.715194][ T29] usb 6-1: config 14 has no interface number 0 [ 745.731108][ T29] usb 6-1: config 14 has no interface number 1 [ 745.742640][ T29] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 745.763078][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 745.778767][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 745.790446][T20427] pci 0000:00:01.0: Adding to iommu group 1 [ 745.790579][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 745.797534][T20427] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 745.799726][T20427] pci 0000:00:01.0: vgaarb: bridge control possible [ 745.801770][T20427] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 745.807092][ T29] usb 6-1: config 14 interface 57 has no altsetting 0 [ 745.810395][T20427] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 745.814277][ T29] usb 6-1: config 14 interface 228 has no altsetting 0 [ 745.814306][T20427] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 745.818245][ T29] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 745.820833][T20427] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 745.822123][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.826880][ T29] usb 6-1: Product: syz [ 745.826890][ T29] usb 6-1: Manufacturer: syz [ 745.826898][ T29] usb 6-1: SerialNumber: syz [ 745.868460][T20430] syzkaller0: entered promiscuous mode [ 745.868478][T20430] syzkaller0: entered allmulticast mode [ 745.928948][T20427] [drm] Found bochs VGA, ID 0xb0c5. [ 745.931162][T20427] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 745.951060][T20427] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 746.022844][T20427] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 746.062118][T20434] 9p: Bad value for 'wfdno' [ 746.313278][T20439] 9p: Bad value for 'rfdno' [ 746.467478][T20439] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 746.485025][T20439] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 746.487804][T20439] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 746.490410][T20439] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 746.495881][T20439] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 746.549676][T20439] pci 0000:00:01.0: Adding to iommu group 1 [ 746.584423][T20439] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 746.586573][T20439] pci 0000:00:01.0: vgaarb: bridge control possible [ 746.588627][T20439] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 746.601747][T20439] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 746.605225][T20439] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 746.612094][T20439] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 746.673358][T20439] [drm] Found bochs VGA, ID 0xb0c5. [ 746.675132][T20439] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 746.757157][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.777818][T20439] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 747.046139][T20439] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 747.248479][T20445] syzkaller0: entered promiscuous mode [ 747.250216][T20445] syzkaller0: entered allmulticast mode [ 747.361649][T20452] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 747.616923][ T1042] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 747.776886][ T1042] usb 8-1: Using ep0 maxpacket: 32 [ 747.798365][ T1042] usb 8-1: unable to get BOS descriptor or descriptor too short [ 747.818070][ T1042] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 747.825898][ T1042] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 747.828902][ T1042] usb 8-1: config 14 has no interface number 0 [ 747.835909][ T1042] usb 8-1: config 14 has no interface number 1 [ 747.840739][ T1042] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 747.845859][ T1042] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 747.856508][ T1042] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 747.865900][ T1042] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 747.874530][ T1042] usb 8-1: config 14 interface 57 has no altsetting 0 [ 747.879762][ T1042] usb 8-1: config 14 interface 228 has no altsetting 0 [ 747.896245][ T1042] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 747.899860][ T1042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.902680][ T1042] usb 8-1: Product: syz [ 747.904551][ T1042] usb 8-1: Manufacturer: syz [ 747.906687][ T1042] usb 8-1: SerialNumber: syz [ 748.631337][ T29] legousbtower 6-1:14.57: interrupt endpoints not found [ 748.788175][ T29] legousbtower 6-1:14.228: interrupt endpoints not found [ 748.877160][ T29] usb 6-1: USB disconnect, device number 62 [ 749.611638][T20501] syzkaller0: entered promiscuous mode [ 749.613505][T20501] syzkaller0: entered allmulticast mode [ 750.159033][T20535] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 750.175822][T20535] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 750.179035][T20535] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 750.182281][T20535] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 750.188657][T20535] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 750.270082][T20535] pci 0000:00:01.0: Adding to iommu group 1 [ 750.292560][T20535] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 750.294690][T20535] pci 0000:00:01.0: vgaarb: bridge control possible [ 750.296764][T20535] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 750.338771][T20535] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 750.350052][T20535] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 750.364393][T20535] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 750.414407][T20535] [drm] Found bochs VGA, ID 0xb0c5. [ 750.418965][T20535] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 750.489443][T20535] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 750.629593][ T1042] legousbtower 8-1:14.57: interrupt endpoints not found [ 750.638748][T20535] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 751.012228][ T1042] legousbtower 8-1:14.228: interrupt endpoints not found [ 751.019551][ T1042] usb 8-1: USB disconnect, device number 53 [ 751.049685][T20553] syzkaller0: entered promiscuous mode [ 751.058457][T20553] syzkaller0: entered allmulticast mode [ 751.570236][T20560] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 751.588746][T20560] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 751.591388][T20560] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 751.594127][T20560] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 751.600698][T20560] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 751.651342][T20560] pci 0000:00:01.0: Adding to iommu group 1 [ 751.688202][T20560] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 751.690317][T20560] pci 0000:00:01.0: vgaarb: bridge control possible [ 751.692278][T20560] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 751.708181][T20560] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 751.710995][T20560] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 751.719548][T20560] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 751.782385][T20560] [drm] Found bochs VGA, ID 0xb0c5. [ 751.784453][T20560] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 751.905191][T20560] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 752.133800][T20560] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 752.300321][T20564] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 752.536937][T14973] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 752.696842][T14973] usb 7-1: Using ep0 maxpacket: 32 [ 752.711458][T14973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 752.720278][T14973] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 752.725462][T14973] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 752.739849][T14973] usb 7-1: config 14 has no interface number 0 [ 752.741855][T14973] usb 7-1: config 14 has no interface number 1 [ 752.743861][T14973] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 752.750455][T14973] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 752.754470][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 752.767071][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 752.772239][T14973] usb 7-1: config 14 interface 57 has no altsetting 0 [ 752.774480][T14973] usb 7-1: config 14 interface 228 has no altsetting 0 [ 752.788876][T14973] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 752.792269][T14973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.795496][T14973] usb 7-1: Product: syz [ 752.803914][T14973] usb 7-1: Manufacturer: syz [ 752.807965][T14973] usb 7-1: SerialNumber: syz [ 753.412372][T20585] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 753.424126][T20586] syzkaller0: entered promiscuous mode [ 753.425894][T20586] syzkaller0: entered allmulticast mode [ 753.657825][ T29] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 753.817922][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 753.829210][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 753.843199][ T29] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 753.847756][ T29] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 753.852180][ T29] usb 6-1: config 14 has no interface number 0 [ 753.855642][ T29] usb 6-1: config 14 has no interface number 1 [ 753.864603][ T29] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 753.892279][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 753.898334][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 753.903369][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 753.910713][ T29] usb 6-1: config 14 interface 57 has no altsetting 0 [ 753.913555][ T29] usb 6-1: config 14 interface 228 has no altsetting 0 [ 753.932804][ T29] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 753.937352][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.940409][ T29] usb 6-1: Product: syz [ 753.941906][ T29] usb 6-1: Manufacturer: syz [ 753.943533][ T29] usb 6-1: SerialNumber: syz [ 754.553339][T20617] syzkaller0: entered promiscuous mode [ 754.555459][T20617] syzkaller0: entered allmulticast mode [ 754.747194][T20624] 9p: Bad value for 'rfdno' [ 754.933221][T20626] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 754.954332][T20626] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 754.957131][T20626] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 754.960289][T20626] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 754.965473][T20626] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 755.022091][T20626] pci 0000:00:01.0: Adding to iommu group 1 [ 755.100072][T20626] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 755.102096][T20626] pci 0000:00:01.0: vgaarb: bridge control possible [ 755.104142][T20626] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 755.115228][T20626] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 755.118341][T20626] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 755.123555][T20626] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 755.137722][T20626] [drm] Found bochs VGA, ID 0xb0c5. [ 755.139491][T20626] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 755.153400][T20626] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 755.197647][T20626] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 755.317053][T14973] legousbtower 7-1:14.57: interrupt endpoints not found [ 755.322395][T14973] legousbtower 7-1:14.228: interrupt endpoints not found [ 755.561070][T14973] usb 7-1: USB disconnect, device number 51 [ 755.666867][T20638] 9p: Bad value for 'wfdno' [ 755.718471][T20637] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 756.025867][T20642] syzkaller0: entered promiscuous mode [ 756.026951][T14872] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 756.028355][T20642] syzkaller0: entered allmulticast mode [ 756.174426][T20645] 9p: Bad value for 'wfdno' [ 756.176904][T14872] usb 5-1: Using ep0 maxpacket: 32 [ 756.183382][T14872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 756.189130][T14872] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 756.191606][T14872] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 756.194100][T14872] usb 5-1: config 14 has no interface number 0 [ 756.196057][T14872] usb 5-1: config 14 has no interface number 1 [ 756.196379][T20645] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 756.198154][T14872] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 756.213303][T14872] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 756.217585][T20645] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 756.218539][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 756.220877][T20645] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 756.224425][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 756.224443][T14872] usb 5-1: config 14 interface 57 has no altsetting 0 [ 756.226946][T20645] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 756.230535][T14872] usb 5-1: config 14 interface 228 has no altsetting 0 [ 756.233295][T14872] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 756.237460][T20645] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 756.239997][T14872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.240010][T14872] usb 5-1: Product: syz [ 756.240018][T14872] usb 5-1: Manufacturer: syz [ 756.240027][T14872] usb 5-1: SerialNumber: syz [ 756.249659][T20645] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12309 usecs [ 756.275163][T20645] pci 0000:00:01.0: Adding to iommu group 1 [ 756.293726][T20645] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 756.295777][T20645] pci 0000:00:01.0: vgaarb: bridge control possible [ 756.297804][T20645] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 756.309095][T20645] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 756.311865][T20645] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 756.318647][T20645] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 756.352673][T20645] [drm] Found bochs VGA, ID 0xb0c5. [ 756.354346][T20645] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 756.370931][T20645] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 756.444682][ T29] legousbtower 6-1:14.57: interrupt endpoints not found [ 756.453067][ T29] legousbtower 6-1:14.228: interrupt endpoints not found [ 756.466138][ T29] usb 6-1: USB disconnect, device number 63 [ 756.760771][T20645] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 757.508766][T20672] syzkaller0: entered promiscuous mode [ 757.510570][T20672] syzkaller0: entered allmulticast mode [ 757.573327][T20668] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 757.589527][T20668] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 757.591935][T20668] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 757.594195][T20668] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 757.598989][T20668] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 757.611009][T20668] pci 0000:00:01.0: Adding to iommu group 1 [ 757.616185][T20668] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 757.618372][T20668] pci 0000:00:01.0: vgaarb: bridge control possible [ 757.620426][T20668] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 757.635279][T20668] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 757.638592][T20668] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 757.642026][T20668] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 757.650683][T20668] [drm] Found bochs VGA, ID 0xb0c5. [ 757.652357][T20668] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 757.673322][T20668] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 757.814064][T20668] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 758.086129][T20682] 9p: Bad value for 'rfdno' [ 758.167447][T14905] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 758.337270][T14905] usb 7-1: Using ep0 maxpacket: 32 [ 758.340705][T14905] usb 7-1: unable to get BOS descriptor or descriptor too short [ 758.344012][T14905] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 758.346686][T14905] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 758.349374][T14905] usb 7-1: config 14 has no interface number 0 [ 758.351433][T14905] usb 7-1: config 14 has no interface number 1 [ 758.355598][T14905] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 758.359120][T14905] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 758.365445][T14905] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 758.371157][T14905] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 758.376619][T14905] usb 7-1: config 14 interface 57 has no altsetting 0 [ 758.379101][T14905] usb 7-1: config 14 interface 228 has no altsetting 0 [ 758.385277][T14905] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 758.388352][T14905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.390995][T14905] usb 7-1: Product: syz [ 758.393541][T14905] usb 7-1: Manufacturer: syz [ 758.395099][T14905] usb 7-1: SerialNumber: syz [ 758.744325][T14872] legousbtower 5-1:14.57: interrupt endpoints not found [ 758.760029][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 758.803109][T14872] legousbtower 5-1:14.228: interrupt endpoints not found [ 758.877259][T14872] usb 5-1: USB disconnect, device number 60 [ 758.944045][T20693] syzkaller0: entered promiscuous mode [ 758.945814][T20693] syzkaller0: entered allmulticast mode [ 758.984379][T14905] legousbtower 7-1:14.57: interrupt endpoints not found [ 758.994332][T14905] legousbtower 7-1:14.228: interrupt endpoints not found [ 759.023832][T14905] usb 7-1: USB disconnect, device number 52 [ 759.041092][T20683] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 759.094128][T20683] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 759.100382][T20683] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 759.108714][T20683] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 759.115482][T20683] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 759.193363][T20683] pci 0000:00:01.0: Adding to iommu group 1 [ 759.198715][T20701] 9p: Bad value for 'wfdno' [ 759.224687][T20683] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 759.226858][T20683] pci 0000:00:01.0: vgaarb: bridge control possible [ 759.228928][T20683] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 759.249512][T20683] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 759.254892][T20683] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 759.315696][T20683] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 759.702671][T20683] [drm] Found bochs VGA, ID 0xb0c5. [ 759.729947][T20683] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 759.751244][T20683] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 760.408750][T20724] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 760.432260][T20724] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 760.435027][T20724] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 760.439207][T20724] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 760.447185][T20724] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 760.499917][T20724] pci 0000:00:01.0: Adding to iommu group 1 [ 760.526673][T20724] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 760.528936][T20724] pci 0000:00:01.0: vgaarb: bridge control possible [ 760.531041][T20724] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 760.547073][T20724] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 760.550382][T20724] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 760.559148][T20724] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 760.616926][T20724] [drm] Found bochs VGA, ID 0xb0c5. [ 760.618843][T20724] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 760.738164][T20724] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 760.777901][T20730] syzkaller0: entered promiscuous mode [ 760.779691][T20730] syzkaller0: entered allmulticast mode [ 760.971670][T20724] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 761.240011][T20741] syzkaller0: entered promiscuous mode [ 761.241973][T20741] syzkaller0: entered allmulticast mode [ 761.306517][T20736] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 761.325850][T20736] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 761.328983][T20736] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 761.331670][T20736] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 761.337403][T20736] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 761.491503][T20736] pci 0000:00:01.0: Adding to iommu group 1 [ 761.509172][T20736] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 761.511324][T20736] pci 0000:00:01.0: vgaarb: bridge control possible [ 761.513387][T20736] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 761.528273][T20736] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 761.531001][T20736] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 761.538790][T20736] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 761.593925][T20736] [drm] Found bochs VGA, ID 0xb0c5. [ 761.595837][T20736] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 762.259325][T20736] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 762.416453][T20736] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 762.792119][T20755] syzkaller0: entered promiscuous mode [ 762.793968][T20755] syzkaller0: entered allmulticast mode [ 762.910654][T20747] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 762.964926][T20747] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 762.970226][T20747] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 762.974885][T20747] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 762.982298][T20747] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 763.000483][T20747] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17892 usecs [ 763.033725][T20747] pci 0000:00:01.0: Adding to iommu group 1 [ 763.056432][T20747] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 763.059156][T20747] pci 0000:00:01.0: vgaarb: bridge control possible [ 763.061726][T20747] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 763.157356][T20747] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 763.161278][T20747] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 763.182635][T20747] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 763.325075][T20747] [drm] Found bochs VGA, ID 0xb0c5. [ 763.389673][T20747] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 763.461220][T20747] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 765.407683][T14973] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 765.556986][T14973] usb 7-1: Using ep0 maxpacket: 32 [ 765.561766][T14973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 765.566175][T14973] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 765.570063][T14973] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 765.573427][T14973] usb 7-1: config 14 has no interface number 0 [ 765.576185][T14973] usb 7-1: config 14 has no interface number 1 [ 765.579082][T14973] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 765.582978][T14973] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 765.592506][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 765.599746][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 765.615628][T14973] usb 7-1: config 14 interface 57 has no altsetting 0 [ 765.624320][T14973] usb 7-1: config 14 interface 228 has no altsetting 0 [ 765.636112][T14973] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 765.648560][T14973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.660154][T14973] usb 7-1: Product: syz [ 765.661698][T14973] usb 7-1: Manufacturer: syz [ 765.676167][T14973] usb 7-1: SerialNumber: syz [ 766.007955][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3625'. [ 766.570444][T14973] legousbtower 7-1:14.57: interrupt endpoints not found [ 766.653036][T20846] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 766.674568][T20846] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 766.679309][T20846] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 766.681879][T20846] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 766.687821][T20846] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 766.724271][T20846] pci 0000:00:01.0: Adding to iommu group 1 [ 766.793127][T20846] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 766.795624][T20846] pci 0000:00:01.0: vgaarb: bridge control possible [ 766.797887][T20846] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 766.810802][T20846] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 766.813682][T20846] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 766.819714][T20846] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 766.868469][T20846] [drm] Found bochs VGA, ID 0xb0c5. [ 766.870284][T20846] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 767.563599][T14973] legousbtower 7-1:14.228: interrupt endpoints not found [ 768.007361][T14973] usb 7-1: USB disconnect, device number 53 [ 768.137192][T20846] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 768.318238][T20846] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 768.337624][T14973] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 768.486989][T14973] usb 7-1: Using ep0 maxpacket: 32 [ 768.665210][T14973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 768.668986][T14973] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 768.671982][T14973] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 768.676962][T14973] usb 7-1: config 14 has no interface number 0 [ 768.680608][T14973] usb 7-1: config 14 has no interface number 1 [ 768.684794][T14973] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 768.687630][T20872] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 768.689873][T14973] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 768.716301][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 768.722306][T14973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 768.726446][T14973] usb 7-1: config 14 interface 57 has no altsetting 0 [ 768.730721][T14973] usb 7-1: config 14 interface 228 has no altsetting 0 [ 768.736036][T14973] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 768.736309][T20872] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 768.740791][T14973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.746857][T14973] usb 7-1: Product: syz [ 768.748251][T14973] usb 7-1: Manufacturer: syz [ 768.752526][T14973] usb 7-1: SerialNumber: syz [ 768.753968][T20872] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 768.789984][T20872] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 768.800169][T20872] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 768.896944][T20872] pci 0000:00:01.0: Adding to iommu group 1 [ 769.008913][T20872] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 769.011002][T20872] pci 0000:00:01.0: vgaarb: bridge control possible [ 769.013048][T20872] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 769.279950][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 769.379628][T14973] legousbtower 7-1:14.57: interrupt endpoints not found [ 769.436080][T20872] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 769.458018][T20872] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 769.537098][T20872] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 769.554334][T20872] [drm] Found bochs VGA, ID 0xb0c5. [ 769.559462][T20872] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 769.564979][T20872] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 769.621529][T20925] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 769.921172][T14872] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 770.520867][T14973] legousbtower 7-1:14.228: interrupt endpoints not found [ 770.535866][T20949] syzkaller0: entered promiscuous mode [ 770.540957][T20949] syzkaller0: entered allmulticast mode [ 770.624964][T14973] usb 7-1: USB disconnect, device number 54 [ 770.796823][T14872] usb 5-1: Using ep0 maxpacket: 32 [ 770.807399][T14872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 771.850911][T14872] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 772.480255][T14872] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 772.811589][T14872] usb 5-1: config 14 has no interface number 0 [ 772.813723][T14872] usb 5-1: config 14 has no interface number 1 [ 772.816209][T14872] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 772.819900][T14872] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 772.823700][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 772.827308][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 772.837322][T14872] usb 5-1: config 14 interface 57 has no altsetting 0 [ 772.839635][T14872] usb 5-1: config 14 interface 228 has no altsetting 0 [ 772.842955][T14872] usb 5-1: string descriptor 0 read error: -71 [ 772.845265][T14872] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 772.849728][T14872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.864851][T14872] usb 5-1: can't set config #14, error -71 [ 772.873895][T14872] usb 5-1: USB disconnect, device number 61 [ 773.007439][T20979] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 773.027947][T20979] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 773.030462][T20979] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 773.033665][T20979] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 773.038543][T20979] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 773.104752][T20979] pci 0000:00:01.0: Adding to iommu group 1 [ 773.137517][T20979] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 773.139758][T20979] pci 0000:00:01.0: vgaarb: bridge control possible [ 773.141833][T20979] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 773.155962][T20979] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 773.158947][T20979] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 773.165672][T20979] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 773.299110][T20979] [drm] Found bochs VGA, ID 0xb0c5. [ 773.300926][T20979] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 773.320522][T20979] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 773.526458][T20979] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 774.508769][T20994] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 774.671680][T20994] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 774.689751][T20994] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 774.837544][T20994] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 774.869923][T20994] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 774.917775][T20994] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 46863 usecs [ 775.264032][T20994] pci 0000:00:01.0: Adding to iommu group 1 [ 775.310337][T20994] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 775.312507][T20994] pci 0000:00:01.0: vgaarb: bridge control possible [ 775.314559][T20994] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 775.342526][T20994] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 775.347433][T20994] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 775.353619][T20994] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 775.386688][T20994] [drm] Found bochs VGA, ID 0xb0c5. [ 775.392412][T20994] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 775.405018][T21009] syzkaller0: entered promiscuous mode [ 775.407865][T21009] syzkaller0: entered allmulticast mode [ 775.418243][T20994] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 775.497378][T20994] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 777.453268][T21067] capability: warning: `syz.3.3652' uses deprecated v2 capabilities in a way that may be insecure [ 778.133772][T21051] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 778.152255][T21051] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 778.154681][T21051] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 778.156994][T21051] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 778.168386][T21051] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 778.174900][T21051] pci 0000:00:01.0: Adding to iommu group 1 [ 778.180147][T21051] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 778.182280][T21051] pci 0000:00:01.0: vgaarb: bridge control possible [ 778.184351][T21051] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 778.191377][T21051] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 778.194190][T21051] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 778.196672][T21051] pci 0000:00:04.0: PCI bridge to [bus 01] [ 778.198592][T21051] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 778.201910][T21051] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 778.205177][T21051] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 778.210725][T21051] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 778.218953][T21051] [drm] Found bochs VGA, ID 0xb0c5. [ 778.220630][T21051] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 778.224089][T21051] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 778.702862][T21083] UDC core: g1: couldn't find an available UDC or it's busy [ 778.977330][T14872] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 779.212827][T14872] usb 8-1: Using ep0 maxpacket: 32 [ 779.277341][T14872] usb 8-1: unable to get BOS descriptor or descriptor too short [ 779.283658][T14872] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 779.286334][T14872] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 779.302106][T14872] usb 8-1: config 14 has no interface number 0 [ 779.313964][T14872] usb 8-1: config 14 has no interface number 1 [ 779.321475][T14872] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 779.348387][T14872] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 779.364240][T14872] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 779.382676][T14872] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 779.413777][T14872] usb 8-1: config 14 interface 57 has no altsetting 0 [ 779.431127][T14872] usb 8-1: config 14 interface 228 has no altsetting 0 [ 779.530988][T14872] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 779.546613][T14872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.563880][T14872] usb 8-1: Product: syz [ 779.575782][T14872] usb 8-1: Manufacturer: syz [ 779.596700][T14872] usb 8-1: SerialNumber: syz [ 780.254283][T21088] cgroup: fork rejected by pids controller in /syz0 [ 780.271677][ T5747] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 780.394619][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 780.409350][T14872] legousbtower 8-1:14.57: interrupt endpoints not found [ 780.413946][T14872] legousbtower 8-1:14.228: interrupt endpoints not found [ 780.418378][T14872] usb 8-1: USB disconnect, device number 54 [ 780.541583][T21149] netlink: 'syz.0.3661': attribute type 21 has an invalid length. [ 780.544234][T21149] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3661'. [ 780.548964][T21149] netlink: 'syz.0.3661': attribute type 5 has an invalid length. [ 780.551478][T21149] netlink: 'syz.0.3661': attribute type 6 has an invalid length. [ 780.553909][T21149] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3661'. [ 780.779005][T21156] syzkaller0: entered promiscuous mode [ 780.780897][T21156] syzkaller0: entered allmulticast mode [ 781.074062][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3668'. [ 781.135727][T21170] syz.3.3668 (21170) used greatest stack depth: 19104 bytes left [ 782.909314][T21199] FAULT_INJECTION: forcing a failure. [ 782.909314][T21199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.913260][T21199] CPU: 3 UID: 0 PID: 21199 Comm: syz.2.3673 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.913280][T21199] Tainted: [L]=SOFTLOCKUP [ 782.913284][T21199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 782.913297][T21199] Call Trace: [ 782.913315][T21199] [ 782.913320][T21199] dump_stack_lvl+0x100/0x190 [ 782.913455][T21199] should_fail_ex.cold+0x5/0xa [ 782.913483][T21199] _copy_from_user+0x2e/0xd0 [ 782.913548][T21199] get_compat_msghdr+0xb3/0x480 [ 782.913612][T21199] ? __pfx_get_compat_msghdr+0x10/0x10 [ 782.913646][T21199] ___sys_sendmsg+0x1b6/0x1e0 [ 782.913667][T21199] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.913697][T21199] ? find_held_lock+0x2b/0x80 [ 782.913762][T21199] __sys_sendmsg+0x160/0x210 [ 782.913788][T21199] ? __pfx___sys_sendmsg+0x10/0x10 [ 782.913819][T21199] ? __pfx_ksys_write+0x10/0x10 [ 782.913861][T21199] __do_fast_syscall_32+0xe7/0x970 [ 782.913908][T21199] ? lockdep_hardirqs_on+0x78/0x100 [ 782.913931][T21199] do_fast_syscall_32+0x32/0x70 [ 782.913953][T21199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 782.913976][T21199] RIP: 0023:0xf7fc7fec [ 782.913996][T21199] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 782.914012][T21199] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 782.914029][T21199] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 782.914040][T21199] RDX: 0000000020008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 782.914051][T21199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 782.914061][T21199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 782.914071][T21199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 782.914094][T21199] [ 784.736348][T21229] FAULT_INJECTION: forcing a failure. [ 784.736348][T21229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.746046][T21229] CPU: 2 UID: 0 PID: 21229 Comm: syz.0.3682 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.746067][T21229] Tainted: [L]=SOFTLOCKUP [ 784.746071][T21229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.746084][T21229] Call Trace: [ 784.746089][T21229] [ 784.746095][T21229] dump_stack_lvl+0x100/0x190 [ 784.746114][T21229] should_fail_ex.cold+0x5/0xa [ 784.746128][T21229] _copy_from_user+0x2e/0xd0 [ 784.746148][T21229] do_sys_poll+0x345/0xe90 [ 784.746167][T21229] ? find_held_lock+0x2b/0x80 [ 784.746183][T21229] ? is_bpf_text_address+0x8a/0x1a0 [ 784.746216][T21229] ? is_bpf_text_address+0x8a/0x1a0 [ 784.746234][T21229] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 784.746261][T21229] ? __pfx_do_sys_poll+0x10/0x10 [ 784.746278][T21229] ? __kernel_text_address+0xd/0x30 [ 784.746303][T21229] ? unwind_get_return_address+0x59/0xa0 [ 784.746363][T21229] ? ksys_write+0x190/0x250 [ 784.746375][T21229] ? set_compat_user_sigmask+0x1d9/0x260 [ 784.746388][T21229] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 784.746401][T21229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 784.746419][T21229] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 784.746434][T21229] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 784.746446][T21229] ? fput+0x79/0x100 [ 784.746459][T21229] ? ksys_write+0x1ac/0x250 [ 784.746469][T21229] ? __pfx_ksys_write+0x10/0x10 [ 784.746482][T21229] __do_fast_syscall_32+0xe7/0x970 [ 784.746498][T21229] ? lockdep_hardirqs_on+0x78/0x100 [ 784.746514][T21229] do_fast_syscall_32+0x32/0x70 [ 784.746530][T21229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.746545][T21229] RIP: 0023:0xf7f46fec [ 784.746560][T21229] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 784.746565][T21229] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 784.746577][T21229] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 784.746584][T21229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.746591][T21229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.746598][T21229] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 784.746605][T21229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.746618][T21229] [ 787.378921][T21256] syzkaller0: entered promiscuous mode [ 787.381144][T21256] syzkaller0: entered allmulticast mode [ 787.776878][ T1042] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 788.441853][ T1042] usb 5-1: Using ep0 maxpacket: 32 [ 788.625389][ T1042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 788.628762][ T1042] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 788.631470][ T1042] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 788.636876][ T1042] usb 5-1: config 14 has no interface number 0 [ 788.639335][ T1042] usb 5-1: config 14 has no interface number 1 [ 788.641863][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 788.646192][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 788.650919][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 788.655465][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 788.660171][ T1042] usb 5-1: config 14 interface 57 has no altsetting 0 [ 788.664294][ T1042] usb 5-1: config 14 interface 228 has no altsetting 0 [ 788.669401][ T1042] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 788.673290][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.680486][ T1042] usb 5-1: Product: syz [ 788.682231][ T1042] usb 5-1: Manufacturer: syz [ 788.684151][ T1042] usb 5-1: SerialNumber: syz [ 788.789861][T21274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.872717][T21274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.878819][T21277] FAULT_INJECTION: forcing a failure. [ 788.878819][T21277] name failslab, interval 1, probability 0, space 9, times 0 [ 788.882717][T21277] CPU: 2 UID: 0 PID: 21277 Comm: syz.2.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.882735][T21277] Tainted: [L]=SOFTLOCKUP [ 788.882739][T21277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 788.882746][T21277] Call Trace: [ 788.882752][T21277] [ 788.882756][T21277] dump_stack_lvl+0x100/0x190 [ 788.882776][T21277] should_fail_ex.cold+0x5/0xa [ 788.882791][T21277] should_failslab+0xc2/0x120 [ 788.882821][T21277] kmem_cache_alloc_noprof+0x91/0x6a0 [ 788.882844][T21277] ? do_getname_kernel+0x5d/0x250 [ 788.882861][T21277] do_getname_kernel+0x5d/0x250 [ 788.882876][T21277] do_file_open_root+0x1a4/0x5a0 [ 788.882888][T21277] ? widen_string+0xdb/0x2f0 [ 788.882901][T21277] ? __pfx_do_file_open_root+0x10/0x10 [ 788.882924][T21277] ? __lock_acquire+0x49f/0x1a40 [ 788.882943][T21277] ? vsnprintf+0x4c5/0x1300 [ 788.882960][T21277] file_open_root+0x1c6/0x3f0 [ 788.882973][T21277] ? __pfx_file_open_root+0x10/0x10 [ 788.882984][T21277] ? find_held_lock+0x2b/0x80 [ 788.882999][T21277] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 788.883031][T21277] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 788.883051][T21277] kernel_read_file_from_path_initns+0x189/0x260 [ 788.883071][T21277] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 788.883089][T21277] ? _request_firmware+0x4e1/0x13c0 [ 788.883135][T21277] _request_firmware+0x733/0x13c0 [ 788.883154][T21277] ? __pfx__request_firmware+0x10/0x10 [ 788.883168][T21277] ? __pfx_netdev_run_todo+0x10/0x10 [ 788.883186][T21277] ? rcu_is_watching+0x12/0xc0 [ 788.883202][T21277] ? __kasan_kmalloc+0xaa/0xb0 [ 788.883219][T21277] request_firmware+0x35/0x50 [ 788.883233][T21277] reg_reload_regdb+0x85/0x460 [ 788.883277][T21277] ? __pfx_reg_reload_regdb+0x10/0x10 [ 788.883293][T21277] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 788.883312][T21277] ? nl80211_pre_doit+0x19a/0xae0 [ 788.883335][T21277] genl_family_rcv_msg_doit+0x214/0x300 [ 788.883354][T21277] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.883373][T21277] ? genl_get_cmd+0x3e7/0x760 [ 788.883396][T21277] ? bpf_lsm_capable+0x9/0x10 [ 788.883424][T21277] ? security_capable+0x80/0x260 [ 788.883462][T21277] genl_rcv_msg+0x560/0x800 [ 788.883479][T21277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.883494][T21277] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 788.883508][T21277] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 788.883520][T21277] ? __pfx_nl80211_post_doit+0x10/0x10 [ 788.883540][T21277] netlink_rcv_skb+0x159/0x420 [ 788.883557][T21277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.883573][T21277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.883591][T21277] ? netlink_deliver_tap+0x1ae/0xcc0 [ 788.883605][T21277] genl_rcv+0x28/0x40 [ 788.883618][T21277] netlink_unicast+0x585/0x850 [ 788.883633][T21277] ? __pfx_netlink_unicast+0x10/0x10 [ 788.883661][T21277] netlink_sendmsg+0x8b0/0xda0 [ 788.883679][T21277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.883694][T21277] ? apparmor_socket_sendmsg+0x15b/0x270 [ 788.883711][T21277] ____sys_sendmsg+0xa4d/0xbe0 [ 788.883723][T21277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.883737][T21277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.883755][T21277] ___sys_sendmsg+0x190/0x1e0 [ 788.883768][T21277] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.883788][T21277] ? find_held_lock+0x2b/0x80 [ 788.883811][T21277] __sys_sendmsg+0x160/0x210 [ 788.883827][T21277] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.883847][T21277] ? __pfx_ksys_write+0x10/0x10 [ 788.883861][T21277] __do_fast_syscall_32+0xe7/0x970 [ 788.883877][T21277] ? lockdep_hardirqs_on+0x78/0x100 [ 788.883893][T21277] do_fast_syscall_32+0x32/0x70 [ 788.883909][T21277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.883925][T21277] RIP: 0023:0xf7fc7fec [ 788.883940][T21277] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 788.883946][T21277] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 788.883958][T21277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 788.883966][T21277] RDX: 0000000004000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.883972][T21277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.883979][T21277] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 788.883986][T21277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.884000][T21277] [ 788.884055][T21277] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -12 [ 789.063720][T21274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.157281][T21274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.204538][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 789.254106][ T5822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.287537][ T5822] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.297029][ T5822] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.299796][ T5822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.432701][ T1042] legousbtower 5-1:14.57: interrupt endpoints not found [ 789.786927][ T34] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 789.872653][T21302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 789.936822][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 789.940837][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 789.948566][ T34] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 789.953740][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.957152][ T34] usb 8-1: Product: syz [ 789.959024][ T34] usb 8-1: Manufacturer: syz [ 789.960514][ T34] usb 8-1: SerialNumber: syz [ 789.968100][ T34] usb 8-1: config 0 descriptor?? [ 789.977156][ T34] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.983010][ T34] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 789.992543][ T1042] legousbtower 5-1:14.228: interrupt endpoints not found [ 789.999633][ T1042] usb 5-1: USB disconnect, device number 62 [ 790.648001][ T34] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 792.005378][ T34] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 792.009207][ T34] em28xx 8-1:0.0: board has no eeprom [ 792.071361][ T34] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 792.073868][ T34] em28xx 8-1:0.0: dvb set to bulk mode. [ 792.080584][T21336] em28xx 8-1:0.0: Binding DVB extension [ 792.092813][ T34] usb 8-1: USB disconnect, device number 55 [ 792.096385][ T34] em28xx 8-1:0.0: Disconnecting em28xx [ 792.111349][T21336] em28xx 8-1:0.0: Registering input extension [ 792.113507][ T34] em28xx 8-1:0.0: Closing input extension [ 792.144649][ T34] em28xx 8-1:0.0: Freeing device [ 792.216893][T14973] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 792.366866][ T50] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 792.368156][T14973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 792.372826][T14973] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 792.376073][T14973] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.381659][T14973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 792.384599][T14973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 792.387401][T14973] usb 5-1: Product: syz [ 792.388743][T14973] usb 5-1: Manufacturer: syz [ 792.390266][T14973] usb 5-1: SerialNumber: syz [ 792.519010][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 792.528763][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 792.532558][ T50] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 792.537369][ T50] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 792.546820][ T50] usb 7-1: config 14 has no interface number 0 [ 792.549080][ T50] usb 7-1: config 14 has no interface number 1 [ 792.551166][ T50] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 792.555120][ T50] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 792.576864][ T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 792.582575][ T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 792.592597][ T50] usb 7-1: config 14 interface 57 has no altsetting 0 [ 792.597083][ T50] usb 7-1: config 14 interface 228 has no altsetting 0 [ 792.600146][T21335] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 792.613567][ T50] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 792.617671][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.626942][ T50] usb 7-1: Product: syz [ 792.628408][ T50] usb 7-1: Manufacturer: syz [ 792.630042][ T50] usb 7-1: SerialNumber: syz [ 792.761156][T14973] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 792.767414][T14973] usb 5-1: USB disconnect, device number 63 [ 792.773053][T14973] usblp0: removed [ 793.098046][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3712'. [ 793.104970][ T50] legousbtower 7-1:14.57: interrupt endpoints not found [ 793.110507][ T50] legousbtower 7-1:14.228: interrupt endpoints not found [ 793.116417][ T50] usb 7-1: USB disconnect, device number 55 [ 793.456355][T21352] FAULT_INJECTION: forcing a failure. [ 793.456355][T21352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.462102][T21352] CPU: 1 UID: 0 PID: 21352 Comm: syz.3.3715 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.462122][T21352] Tainted: [L]=SOFTLOCKUP [ 793.462126][T21352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.462133][T21352] Call Trace: [ 793.462138][T21352] [ 793.462142][T21352] dump_stack_lvl+0x100/0x190 [ 793.462162][T21352] should_fail_ex.cold+0x5/0xa [ 793.462178][T21352] _copy_from_user+0x2e/0xd0 [ 793.462204][T21352] get_compat_msghdr+0xb3/0x480 [ 793.462231][T21352] ? __pfx_get_compat_msghdr+0x10/0x10 [ 793.462266][T21352] ___sys_sendmsg+0x1b6/0x1e0 [ 793.462288][T21352] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.462318][T21352] ? find_held_lock+0x2b/0x80 [ 793.462357][T21352] __sys_sendmsg+0x160/0x210 [ 793.462382][T21352] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.462414][T21352] ? __pfx_ksys_write+0x10/0x10 [ 793.462438][T21352] __do_fast_syscall_32+0xe7/0x970 [ 793.462463][T21352] ? lockdep_hardirqs_on+0x78/0x100 [ 793.462488][T21352] do_fast_syscall_32+0x32/0x70 [ 793.462512][T21352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.462534][T21352] RIP: 0023:0xf7f87fec [ 793.462553][T21352] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 793.462561][T21352] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 793.462583][T21352] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 793.462593][T21352] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.462603][T21352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.462612][T21352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.462622][T21352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.462644][T21352] [ 793.857441][ T5949] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 794.037666][ T5949] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 794.052515][ T5949] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 794.073157][ T5949] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.127710][ T5949] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 794.135304][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 794.148660][ T5949] usb 8-1: Product: syz [ 794.150024][ T5949] usb 8-1: Manufacturer: syz [ 794.153791][ T5949] usb 8-1: SerialNumber: syz [ 794.220693][T21368] FAULT_INJECTION: forcing a failure. [ 794.220693][T21368] name failslab, interval 1, probability 0, space 9, times 0 [ 794.224774][T21368] CPU: 3 UID: 0 PID: 21368 Comm: syz.0.3721 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.224793][T21368] Tainted: [L]=SOFTLOCKUP [ 794.224797][T21368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 794.224805][T21368] Call Trace: [ 794.224810][T21368] [ 794.224815][T21368] dump_stack_lvl+0x100/0x190 [ 794.224847][T21368] should_fail_ex.cold+0x5/0xa [ 794.224862][T21368] should_failslab+0xc2/0x120 [ 794.224880][T21368] kmem_cache_alloc_noprof+0x91/0x6a0 [ 794.224896][T21368] ? do_getname+0x35/0x390 [ 794.224914][T21368] do_getname+0x35/0x390 [ 794.224929][T21368] __ia32_sys_rename+0x56/0xb0 [ 794.224944][T21368] __do_fast_syscall_32+0xe7/0x970 [ 794.224961][T21368] ? lockdep_hardirqs_on+0x78/0x100 [ 794.224977][T21368] do_fast_syscall_32+0x32/0x70 [ 794.224996][T21368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.225012][T21368] RIP: 0023:0xf7f46fec [ 794.225026][T21368] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 794.225031][T21368] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 794.225042][T21368] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800001c0 [ 794.225050][T21368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 794.225057][T21368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.225064][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.225070][T21368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.225085][T21368] [ 794.371653][ T5949] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 794.639969][ T34] usb 8-1: USB disconnect, device number 56 [ 794.646488][ T34] usblp0: removed [ 795.090657][T21379] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 795.110432][T21379] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 795.113476][T21379] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 795.116139][T21379] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 795.121203][T21379] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 795.162187][T21379] pci 0000:00:01.0: Adding to iommu group 1 [ 795.190609][T21379] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 795.192798][T21379] pci 0000:00:01.0: vgaarb: bridge control possible [ 795.194800][T21379] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 795.207310][T21379] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 795.210027][T21379] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 795.212951][T21379] pci 0000:00:04.0: PCI bridge to [bus 01] [ 795.215288][T21379] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 795.219076][T21379] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 795.222883][T21379] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 795.230711][T21379] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 795.282150][T21379] [drm] Found bochs VGA, ID 0xb0c5. [ 795.284125][T21379] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 795.714937][T21385] syzkaller0: entered promiscuous mode [ 795.716699][T21385] syzkaller0: entered allmulticast mode [ 795.820596][T21379] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 795.908422][T21379] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 796.299949][T14872] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 796.483108][T14872] usb 5-1: Using ep0 maxpacket: 32 [ 796.503028][T14872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.528244][T14872] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 796.534185][T14872] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 796.541048][T14872] usb 5-1: config 14 has no interface number 0 [ 796.542966][T14872] usb 5-1: config 14 has no interface number 1 [ 796.547203][T14872] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 796.556812][T14872] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 796.562678][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 796.570998][T14872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 796.576888][T14872] usb 5-1: config 14 interface 57 has no altsetting 0 [ 796.581236][T14872] usb 5-1: config 14 interface 228 has no altsetting 0 [ 796.619027][T14872] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 796.621858][T14872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.624296][T14872] usb 5-1: Product: syz [ 796.625583][T14872] usb 5-1: Manufacturer: syz [ 796.628530][T14872] usb 5-1: SerialNumber: syz [ 797.216967][T19285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 797.222174][T19285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 797.226358][T19285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 797.229381][T19285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 797.231821][T19285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.315620][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 797.711019][T14872] legousbtower 5-1:14.57: interrupt endpoints not found [ 797.754521][T14872] legousbtower 5-1:14.228: interrupt endpoints not found [ 797.812652][T14872] usb 5-1: USB disconnect, device number 64 [ 797.966327][ T5822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.245415][ T5822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.390629][ T5822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.581073][T21409] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.583476][T21409] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.585801][T21409] bridge_slave_0: entered allmulticast mode [ 798.589990][T21409] bridge_slave_0: entered promiscuous mode [ 798.593476][T21409] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.595837][T21409] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.599002][T21409] bridge_slave_1: entered allmulticast mode [ 798.601772][T21409] bridge_slave_1: entered promiscuous mode [ 798.617758][T21409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.622575][T21409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.637619][T21409] team0: Port device team_slave_0 added [ 798.640871][T21409] team0: Port device team_slave_1 added [ 798.658483][T21409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.660804][T21409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.672563][T21409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.713548][T21409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.733207][T21409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.744305][T21409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.780452][ T5822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.810098][T21409] hsr_slave_0: entered promiscuous mode [ 798.812601][T21409] hsr_slave_1: entered promiscuous mode [ 799.042759][ T5822] bridge_slave_1: left allmulticast mode [ 799.048000][ T5822] bridge_slave_1: left promiscuous mode [ 799.051875][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.073076][ T5822] bridge_slave_0: left allmulticast mode [ 799.074816][ T5822] bridge_slave_0: left promiscuous mode [ 799.076711][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.186844][ T5949] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 799.201734][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.206088][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.210765][ T5822] bond0 (unregistering): Released all slaves [ 799.220520][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 799.289155][T21409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 799.295259][T21409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.298289][T21409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 799.302154][T21409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.305118][T21409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 799.307675][ T5747] Bluetooth: hci1: command tx timeout [ 799.313179][T21409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.316000][T21409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 799.317714][ T1494] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 799.325586][T21409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.347461][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 799.350730][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 799.356723][ T5949] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 799.361030][ T5949] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 799.369144][ T5949] usb 5-1: config 14 has no interface number 0 [ 799.371566][ T5949] usb 5-1: config 14 has no interface number 1 [ 799.373602][ T5949] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 799.381523][ T5949] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 799.385914][ T5949] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 799.392756][ T5949] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 799.404173][ T5949] usb 5-1: config 14 interface 57 has no altsetting 0 [ 799.409831][ T5949] usb 5-1: config 14 interface 228 has no altsetting 0 [ 799.416552][ T5949] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 799.424796][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.430163][ T5949] usb 5-1: Product: syz [ 799.431521][ T5949] usb 5-1: Manufacturer: syz [ 799.433079][ T5949] usb 5-1: SerialNumber: syz [ 799.453231][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 799.477053][ T1494] usb 8-1: Using ep0 maxpacket: 32 [ 799.480286][ T1494] usb 8-1: unable to get BOS descriptor or descriptor too short [ 799.484067][ T1494] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 799.487044][ T1494] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 799.489666][ T1494] usb 8-1: config 14 has no interface number 0 [ 799.491693][ T1494] usb 8-1: config 14 has no interface number 1 [ 799.493671][ T1494] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 799.497447][ T1494] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 799.501288][ T1494] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 799.504736][ T1494] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 799.508445][ T1494] usb 8-1: config 14 interface 57 has no altsetting 0 [ 799.510589][ T1494] usb 8-1: config 14 interface 228 has no altsetting 0 [ 799.518965][ T1494] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 799.523642][ T1494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.526196][ T1494] usb 8-1: Product: syz [ 799.528685][ T1494] usb 8-1: Manufacturer: syz [ 799.530204][ T1494] usb 8-1: SerialNumber: syz [ 799.540193][T21409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.564587][T21409] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.580893][ T5822] hsr_slave_0: left promiscuous mode [ 799.585301][ T5822] hsr_slave_1: left promiscuous mode [ 799.588081][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.590501][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.599791][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.602124][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.621257][ T5822] veth1_macvtap: left promiscuous mode [ 799.623797][ T5822] veth0_macvtap: left promiscuous mode [ 799.627093][ T5822] veth1_vlan: left promiscuous mode [ 799.642843][ T5822] veth0_vlan: left promiscuous mode [ 799.826647][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 799.852728][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 799.915234][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'. [ 799.941808][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 799.947739][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.950058][T16046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.956396][ T5949] legousbtower 5-1:14.57: interrupt endpoints not found [ 799.971832][ T5949] legousbtower 5-1:14.228: interrupt endpoints not found [ 799.977963][T16046] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.978868][ T5949] usb 5-1: USB disconnect, device number 65 [ 799.980290][T16046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.029803][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 800.078382][ T1494] legousbtower 8-1:14.57: interrupt endpoints not found [ 800.093942][ T1494] legousbtower 8-1:14.228: interrupt endpoints not found [ 800.100370][ T1494] usb 8-1: USB disconnect, device number 57 [ 800.228626][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 800.294255][T21409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.524282][T21409] veth0_vlan: entered promiscuous mode [ 800.530092][T21409] veth1_vlan: entered promiscuous mode [ 800.552165][T21409] veth0_macvtap: entered promiscuous mode [ 800.561174][T21409] veth1_macvtap: entered promiscuous mode [ 800.573808][T21409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.574886][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.579331][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.581313][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.583218][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.585132][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.587066][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.588933][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.589773][T21409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.590827][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.595311][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.597013][T21545] tc action pedit 'at' offset 5 out of bounds [ 800.598697][T21545] 0: reclassify loop, rule prio 0, protocol 800 [ 800.619556][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.747856][T21453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.750834][T21453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.753884][T21453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.767973][ T5822] IPVS: stop unused estimator thread 0... [ 801.397033][ T5747] Bluetooth: hci1: command tx timeout [ 802.240116][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.248552][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.363703][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.366159][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.404123][T21587] pci 0000:00:04.0: PCI bridge to [bus 01] [ 802.407004][T21587] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 802.413046][T21587] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 802.417706][T21587] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 803.484014][ T5747] Bluetooth: hci1: command tx timeout [ 803.749240][T14905] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 803.759668][T21615] syzkaller0: entered promiscuous mode [ 803.777220][T21615] syzkaller0: entered allmulticast mode [ 804.842240][T21651] process 'syz.3.3742' launched './file2' with NULL argv: empty string added [ 804.856888][T21336] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 805.007773][T21336] usb 5-1: Using ep0 maxpacket: 32 [ 805.013782][T21336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 805.018645][T21336] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 805.021227][T21336] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 805.025511][T21336] usb 5-1: config 14 has no interface number 0 [ 805.027945][T21336] usb 5-1: config 14 has no interface number 1 [ 805.029836][T21336] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 805.033060][T21336] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 805.036658][T21336] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 805.040331][T21336] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 805.044032][T21336] usb 5-1: config 14 interface 57 has no altsetting 0 [ 805.046093][T21336] usb 5-1: config 14 interface 228 has no altsetting 0 [ 805.050072][T21655] syzkaller0: entered promiscuous mode [ 805.052130][T21655] syzkaller0: entered allmulticast mode [ 805.053251][T21336] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 805.056655][T21336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.060582][T21336] usb 5-1: Product: syz [ 805.062057][T21336] usb 5-1: Manufacturer: syz [ 805.064909][T21336] usb 5-1: SerialNumber: syz [ 805.190962][T21657] syzkaller0: entered promiscuous mode [ 805.192817][T21657] syzkaller0: entered allmulticast mode [ 805.556978][ T5747] Bluetooth: hci1: command tx timeout [ 805.581248][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 805.623063][T21336] legousbtower 5-1:14.57: interrupt endpoints not found [ 805.701315][T21336] legousbtower 5-1:14.228: interrupt endpoints not found [ 805.790774][T21336] usb 5-1: USB disconnect, device number 66 [ 805.878816][T21666] pci 0000:00:04.0: PCI bridge to [bus 01] [ 805.882026][T21666] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 805.887985][T21666] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 805.893421][T21666] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 806.032566][T21671] syzkaller0: entered promiscuous mode [ 806.034791][T21671] syzkaller0: entered allmulticast mode [ 806.415859][T21686] pci 0000:00:04.0: PCI bridge to [bus 01] [ 806.417792][T21686] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 806.422001][T21686] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 806.426040][T21686] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 806.564616][T21685] syzkaller0: entered promiscuous mode [ 806.591290][T21685] syzkaller0: entered allmulticast mode [ 807.343206][T21705] pci 0000:00:04.0: PCI bridge to [bus 01] [ 807.345486][T21705] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 807.353207][T21705] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 807.362653][T21705] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 807.366512][T21707] ================================================================== [ 807.369043][T21707] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.371800][T21707] Free of addr ffff888028be930c by task syz.3.3759/21707 [ 807.375304][T21707] [ 807.377274][T21707] CPU: 3 UID: 0 PID: 21707 Comm: syz.3.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.377298][T21707] Tainted: [L]=SOFTLOCKUP [ 807.377306][T21707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 807.377332][T21707] Call Trace: [ 807.377355][T21707] [ 807.377363][T21707] dump_stack_lvl+0x100/0x190 [ 807.377442][T21707] print_report+0x13d/0x4b0 [ 807.377479][T21707] ? __virt_addr_valid+0x239/0x430 [ 807.377526][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.377557][T21707] kasan_report_invalid_free+0xb8/0x190 [ 807.377604][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.377628][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.377656][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.377685][T21707] check_slab_allocation+0xe1/0xf0 [ 807.377706][T21707] ? f_uac2_opts_p_srate_store+0x100/0x260 [ 807.377732][T21707] kfree+0x1b6/0x6c0 [ 807.377754][T21707] ? __asan_memcpy+0x3c/0x60 [ 807.377771][T21707] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.377800][T21707] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 807.377828][T21707] ? configfs_write_iter+0x388/0x4e0 [ 807.377893][T21707] configfs_write_iter+0x302/0x4e0 [ 807.377910][T21707] vfs_write+0x6ac/0x1050 [ 807.377935][T21707] ? __pfx_configfs_write_iter+0x10/0x10 [ 807.377953][T21707] ? __pfx_vfs_write+0x10/0x10 [ 807.377968][T21707] ? find_held_lock+0x2b/0x80 [ 807.378005][T21707] ksys_write+0x12a/0x250 [ 807.378021][T21707] ? __pfx_ksys_write+0x10/0x10 [ 807.378035][T21707] __do_fast_syscall_32+0xe7/0x970 [ 807.378080][T21707] do_fast_syscall_32+0x32/0x70 [ 807.378104][T21707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.378127][T21707] RIP: 0023:0xf7f87fec [ 807.378145][T21707] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 807.378159][T21707] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 807.378177][T21707] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 807.378191][T21707] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 807.378203][T21707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.378215][T21707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.378226][T21707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.378244][T21707] [ 807.378251][T21707] [ 807.464311][T21707] Allocated by task 21707: [ 807.466050][T21707] kasan_save_stack+0x30/0x50 [ 807.467861][T21707] kasan_save_track+0x14/0x30 [ 807.469653][T21707] __kasan_kmalloc+0xaa/0xb0 [ 807.471481][T21707] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 807.473927][T21707] kstrdup+0x51/0xe0 [ 807.475479][T21707] f_uac2_opts_p_srate_store+0x113/0x260 [ 807.477607][T21707] configfs_write_iter+0x302/0x4e0 [ 807.479553][T21707] vfs_write+0x6ac/0x1050 [ 807.481202][T21707] ksys_write+0x12a/0x250 [ 807.482877][T21707] __do_fast_syscall_32+0xe7/0x970 [ 807.484866][T21707] do_fast_syscall_32+0x32/0x70 [ 807.486718][T21707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.489128][T21707] [ 807.490070][T21707] The buggy address belongs to the object at ffff888028be9300 [ 807.490070][T21707] which belongs to the cache kmalloc-64 of size 64 [ 807.495183][T21707] The buggy address is located 12 bytes inside of [ 807.495183][T21707] 47-byte region [ffff888028be9300, ffff888028be932f) [ 807.500052][T21707] [ 807.500983][T21707] The buggy address belongs to the physical page: [ 807.503458][T21707] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028be9d80 pfn:0x28be9 [ 807.507230][T21707] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 807.510177][T21707] page_type: f5(slab) [ 807.511744][T21707] raw: 00fff00000000200 ffff88801bc428c0 ffffea000092b290 ffffea000092dc10 [ 807.514948][T21707] raw: ffff888028be9d80 000000080020001f 00000000f5000000 0000000000000000 [ 807.518184][T21707] page dumped because: kasan: bad access detected [ 807.520626][T21707] page_owner tracks the page as allocated [ 807.522825][T21707] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5745, tgid 5745 (syz-executor), ts 47798109509, free_ts 23567150935 [ 807.530435][T21707] post_alloc_hook+0xfd/0x120 [ 807.532226][T21707] get_page_from_freelist+0xf48/0x3530 [ 807.534343][T21707] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 807.536607][T21707] new_slab+0xa2/0x640 [ 807.538180][T21707] refill_objects+0xe3/0x410 [ 807.539925][T21707] __pcs_replace_empty_main+0x376/0x680 [ 807.541970][T21707] __kmalloc_cache_noprof+0x479/0x6c0 [ 807.544040][T21707] ipv6_add_dev+0x60b/0x1520 [ 807.545803][T21707] addrconf_notify+0x5db/0x1ba0 [ 807.547663][T21707] notifier_call_chain+0x99/0x3f0 [ 807.549605][T21707] call_netdevice_notifiers_info+0xbe/0x110 [ 807.551825][T21707] register_netdevice+0x1998/0x25a0 [ 807.553865][T21707] wg_newlink+0x3af/0x7a0 [ 807.555568][T21707] rtnl_newlink+0x1499/0x2380 [ 807.557408][T21707] rtnetlink_rcv_msg+0x95e/0xe90 [ 807.559290][T21707] netlink_rcv_skb+0x159/0x420 [ 807.561142][T21707] page last free pid 5486 tgid 5486 stack trace: [ 807.563553][T21707] __free_frozen_pages+0x79f/0x1090 [ 807.565495][T21707] rcu_core+0x5a2/0x10d0 [ 807.567128][T21707] handle_softirqs+0x1ea/0x9b0 [ 807.568988][T21707] __irq_exit_rcu+0x162/0x210 [ 807.570795][T21707] irq_exit_rcu+0x9/0x30 [ 807.572428][T21707] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 807.574597][T21707] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.576899][T21707] [ 807.577841][T21707] Memory state around the buggy address: [ 807.579973][T21707] ffff888028be9200: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 807.583009][T21707] ffff888028be9280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 807.586058][T21707] >ffff888028be9300: 00 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc [ 807.589101][T21707] ^ [ 807.590753][T21707] ffff888028be9380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 807.593776][T21707] ffff888028be9400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 807.596742][T21707] ================================================================== [ 807.619795][T21707] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 807.622605][T21707] CPU: 3 UID: 0 PID: 21707 Comm: syz.3.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.626690][T21707] Tainted: [L]=SOFTLOCKUP [ 807.628292][T21707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 807.632072][T21707] Call Trace: [ 807.633379][T21707] [ 807.634541][T21707] dump_stack_lvl+0x100/0x190 [ 807.636369][T21707] vpanic+0x552/0x970 [ 807.637916][T21707] ? __pfx_vpanic+0x10/0x10 [ 807.639699][T21707] panic+0xd1/0xe0 [ 807.641143][T21707] ? __pfx_panic+0x10/0x10 [ 807.642834][T21707] ? preempt_schedule_common+0x42/0xc0 [ 807.644930][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.647156][T21707] check_panic_on_warn.cold+0x19/0x34 [ 807.649223][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.651462][T21707] end_report.part.0+0x3a/0x90 [ 807.653332][T21707] kasan_report_invalid_free.cold+0xd/0x12 [ 807.655590][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.657789][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.660063][T21707] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.662253][T21707] check_slab_allocation+0xe1/0xf0 [ 807.664299][T21707] ? f_uac2_opts_p_srate_store+0x100/0x260 [ 807.666564][T21707] kfree+0x1b6/0x6c0 [ 807.668224][T21707] ? __asan_memcpy+0x3c/0x60 [ 807.670004][T21707] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 807.672225][T21707] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 807.674602][T21707] ? configfs_write_iter+0x388/0x4e0 [ 807.676656][T21707] configfs_write_iter+0x302/0x4e0 [ 807.678793][T21707] vfs_write+0x6ac/0x1050 [ 807.680578][T21707] ? __pfx_configfs_write_iter+0x10/0x10 [ 807.682760][T21707] ? __pfx_vfs_write+0x10/0x10 [ 807.684632][T21707] ? find_held_lock+0x2b/0x80 [ 807.686470][T21707] ksys_write+0x12a/0x250 [ 807.688145][T21707] ? __pfx_ksys_write+0x10/0x10 [ 807.690029][T21707] __do_fast_syscall_32+0xe7/0x970 [ 807.692010][T21707] do_fast_syscall_32+0x32/0x70 [ 807.693898][T21707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.696343][T21707] RIP: 0023:0xf7f87fec [ 807.697949][T21707] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 807.700514][T21707] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 807.703690][T21707] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 807.706651][T21707] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 807.709007][T21707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.711176][T21707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.714170][T21707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.717185][T21707] [ 807.719068][T21707] Kernel Offset: disabled [ 807.720741][T21707] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:28:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffff88802ab0d380 RCX=0000000000000040 RDX=0000000000000000 RSI=ffffffff8e1a9955 RDI=ffffffff8c400a80 RBP=0000000000000282 RSP=ffffc900040d7808 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802ab0d210 R13=ffff88802ab0d3c0 R14=ffff88802ab0cd68 R15=ffff8880425abe00 RIP=ffffffff8bbc08d1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006000 CR3=000000004a96d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000002e93 RBX=ffffc90003fdff48 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a9955 RDI=ffffffff8c400a80 RBP=ffffc90003fdff38 RSP=ffffc90003fdff10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888021934a80 R13=000000000000010b R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bb8a093 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000004 CR3=000000004a96d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e183ae4 RDI=ffffffff8c400a80 RBP=ffff888024e20000 RSP=ffffc90003797938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=dffffc0000000000 R15=0000000080002888 RIP=ffffffff8bb92a7d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fdb1e59000 CR3=00000000750d9000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc9000420f598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2065657246 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9b6f71f8 R15=0000000000000000 RIP=ffffffff85a1321f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c36412d CR3=000000007157f000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000