last executing test programs: 7.438636763s ago: executing program 3 (id=582): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/170) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 6.420602804s ago: executing program 2 (id=594): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.405531349s ago: executing program 3 (id=602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 4.404843696s ago: executing program 3 (id=603): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpeername$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x404) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.89799204s ago: executing program 2 (id=607): semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000280)=""/248) 3.83867048s ago: executing program 2 (id=608): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 3.728187617s ago: executing program 0 (id=609): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.207168413s ago: executing program 1 (id=612): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) 2.318703543s ago: executing program 1 (id=613): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x27, 0x301, 0xffffffff, 0x0, {0xb}}, 0x14}}, 0x40088c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r3}, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0xb000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8, 0x1014}, 0x50) 2.147740141s ago: executing program 0 (id=614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)='`', 0x1}], 0x1}}], 0x1, 0x7b5779da048cb437) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 2.147058289s ago: executing program 0 (id=615): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.679886318s ago: executing program 1 (id=616): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000200)) 1.298699433s ago: executing program 3 (id=617): unshare(0xa020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, 0x0, 0x0) 1.208830396s ago: executing program 3 (id=618): syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffffff9}}, './file0\x00'}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000140)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4fd", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250c00000000000300", @ANYRES32=r3, @ANYBLOB="0c009900ffff000004000000050008000500000000000600ffffffff87c59a4366e8a42eb839e5ffff00001fda45d7006c24abba015913070ac9993c05db56b0d303e4a0a7bac1db7a7ee17750d356a6e77b4896b23ebea5a4b9bd9bc5ca118d1548c2442bdc98bb4cad593b67b7d325b3"], 0x30}, 0x1, 0x0, 0x0, 0x4894}, 0x8c0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) 798.663472ms ago: executing program 2 (id=619): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b91f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x100, 0x1, 0xf}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db00316f3a277f", 0xe, 0x8000, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 628.671149ms ago: executing program 1 (id=620): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000c97000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214f, 0xc000, 0x3, 0xce}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x5c12, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 568.826691ms ago: executing program 1 (id=621): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000007c0)={&(0x7f00000000c0)=0x2, 0x5, &(0x7f0000000480), &(0x7f0000000180)}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x6f, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYRES16, @ANYRES16=r3, @ANYRES32=r4, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES64], 0x0) close_range(r2, r4, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x2000) getdents(0xffffffffffffffff, &(0x7f0000000e80)=""/202, 0xca) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 568.172992ms ago: executing program 2 (id=622): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x20, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0xb, 0x5, "a8ed9837"}, 0x10000fff, 0x2, {0x0}, 0x5}) 486.360685ms ago: executing program 0 (id=623): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'none\x00', 0x2, 0x7, 0x38}, {@broadcast, 0x4e22, 0x4, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 485.883902ms ago: executing program 2 (id=624): openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) syz_io_uring_setup(0x34b8, 0x0, 0x0, &(0x7f00000002c0)=0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) userfaultfd(0x800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x31c, 0x0, 0x111, 0x4b4, 0x148, 0x700, 0x254, 0x278, 0x278, 0x254, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x2000], [0x0, 0x1]}}, @common=@unspec=@connlabel={{0x24}, {0x5, 0x1001}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x3}, {0x0, 0x4}, 0xf}}}, {{@uncond, 0x0, 0xdc, 0x10c, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x4}, {0x4, 0x1, 0x4}, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x378) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x80000000, 0x0, 0xd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) accept4$x25(r2, 0x0, 0x0, 0x80800) 485.717654ms ago: executing program 0 (id=625): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x1010108, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000200)="2d312eb3d1da93b5f443192f39879895453d62367e5b25fbf525357e618fd4a984dd6b22b7108dd9ccdd61c1cd77eee42251af8b33488af03ac5372fe0c7ac9e92c719b8715e11ea86a31d0e59cdae51e83a477eadbc1adadb7f4eeda58cd4f3f46d258f35d7eebfb417046cfb8498f02207b02a9071a11636267e52f0d6887c1ca4ec41b68d0b55523335a0e802b49659a7252d7ca4c38dd39087542292f85dac01283d73b6780f20270a8d427095abebdcfa5e6fe60feb2e41a5537deee13bfea95869ce10f0f2f21c43d15af12e818555e2808beb9daa492b0c47b2e2f9c7c8f89387adb7c2403f883e547adce9c936acc21ff918de5f09489ab14782da436fdd30689908c74540190b53a85ae96f6f26c72693fe5433dcd2b26c9a9fee6babf00b5accdfe3b86f5b1f8f7916ab785e8df1b5c27bd50ee0090cb4bba96d22d2026c419d2103b44bfec187824611ef4d98a3df58e9638d37e1e2d9a535de688575c0ff528757af19fbb77288363e88d136d975bcbe487f4ee6e9012528580f394cc4c92676981f3c3b8cfb646675aa6a6139cd2bb289296c904303e72355a265208762b824ef1e801fc3b7699e7fc2da49cfd0ed4bb6c3c6b8d41501c2519264f9024e2b0d6a3b72b8ece8b224d5e066744e2f0963463c9f626ebc05b9f402f4a66220a42e20d476925ffea6e48949f42964d04db461b90a6c038923812e75f9b5c62d99702b4a42541f4c73dc68004b776947348eaafa3f8ef84868d7230d350ba2157affde75021e2a209fff5038c8e1c7b17988e07a6a7a80ce93308b7417e86a724b92b7558a8cf3f433002af3c23238c2b64eb4d9811c0acfbe0e393e207c4b74baeb9e58d151111c603dcb23a5e7ac3f5b78824dd54f7918025de0c3653d5991864998145cb0a7b779130c7b60e8d7f712b067d3e5736a6cc3100507718419ab2b3d9c10cd899e9dd196743dddad9e341ed2fecb9dce0c69433e91733000d905a8dc0a6bdbca25cf999ab27499142493c0cd24a162f00adcbf3aa0f28453b605bd14b8996fd40357bfb94f4eaa1ad3dec467bbf464fee782909f41364b1d66d787c5c381e115fa45fab92d1a51f4133614a95c598ce7a79c3b551766a9a4e0385725819d16835f523a9759a863188c2e0118a927a10f66dc0399c619305b6874693cc81f02a8cefaab7cfac120da07648a2af2c09e253d3b760e4499d0f29ad1cb7e94f4f28d70b229a77da865e8a2df720e1e7b2b83beabbb4fa87614b041791e3f30f2a8f4def22eadd53f5156f31b0c5b58781e69656261e735de7ecd2975191564b2d2a6fbecb3d40053a0146471948fcad4f2b06344d2affff9b39dacf0bc768218c6554195a082c663aa097595c3f15c5951c5cc4af7f2a9ecc05ede4a0959ec61dcefec6f4334e50b53be20e2b7463e252ab3d8eb7a145cb56e317c8c02b4853b1428b5502010611b801aee54233e898a3ab62afc074b4b911354433f447fe5cf1278d05ac110357edbf8d3e99b9e6120ff853f650c2e9a4d4ec539305c21ec20ba000d0cc08de3bb42952cb529caf5d38c0532f27bd9f1f477e708a1d4b5753415bd72b117df0e8f113a3acf607578d483ebd5d88a4db5b3b407fd1dde5183219956a45daa0c887058dc62bb01feb99a6c28c37123ba22ed27bbc93faec3b1e204115d99628bdaf811b68fe0c4cdefe6cfdd76bafaed1320cfeb891e5d33e89c2503ccc3819dd3a5e15fdc08683fc457673f6d44f380452ba0039afbdf5b06b90af87d465d046d0ad59855f0fb702cd1d5465caf7f483c56906d694b1f53570cafc850a981ef5139620c669b5f017f230a2192f98eb283921b591f96312da964545f86c496bac0e5a638e7030c682048bf1c548f956202b9d192fe90fe5438d1f503dcff1e5b7c446722a4fd971715511ea1829eac01c32ed9a96db47bed4cd7e8874b2caba8f443e88b1d1d4a300f011cbc5aad062e46b834f17292f4e1128f57e23e0f70e3f518cb4035ff3587792430ff32a7f77126b8ccc150cbf7c91ebc433b236eed1d7c43c82f1f5369a1844f08424cd3a7a725abebac885a5f59c2e1733f90a0617895780972cafc2c7cae141fe3ae88132914e85523d8fa4799326d4c46329cf2c9bf9682941fa75737d424236f5bde2e93e2ecd7ff0e6f065f23ff78d03210837f9cdc6bf4dffedbea2849bc120c235981e904d70ffd2212e11a46794bb6327b54152e9b91eee3878e87fa2a21aa7eb63fa680438583f05cf9c9fc37ac8b98c37a6e5678f175b5d73d796284cdee56137a11ea75e3afa6b11d532a79d4f1a3ae0d1d4349c7fe90f20477868d12835278f63a07972cca619c3000217aec161bbd3bad22b107db0e315601121597484a3e0a3044de0470922021a833253d0cf334da2d694ef9777a95ed9dabc2752d9f48df12f32ad1d0f409ded6990c7af363b3b63736e5267be8cfd82e46cd49181aed172b4a80068fa94db09d476ac34159949b9a6dc4b8dfd9f901349f960fb7555614b6e7524bd3ce6a091ad9368009be6a088bf4a367e0d33cf546f2dcee8a2dfd96a06bc8f5133c31c3864d4c88d68ec02c26ca63b3176661d6388286e690aab2c180b632368cce3f8d4891f3a768088224497c1999767e6189ca9e42945b0be100d0fec3e23d95092e49282bd577704664b473f7db7f0ea831415d4b0ccd8055319f399c695d30be9c69cce613d7190d38dce1407f2fd7cabc78c03ecf7cab7dc0f57fb4b098da626928f715f19666a6ba4e9867820208aa3673c7d4a8dbb8f5f7090612bbaef267e2c585320da1d8473c23fb7e48ee1b2518e0f2566627f992f96f6b2858b870c9e26886290b5988fde32ff78ab606c430c6d5cd479c6b39caba54672e1583d6a317be77dab97ea573d2577f16729f3c6fef58221b8254b1658fb477a12bc13f2cffd7ba316d8eeca5930fa9dd93f13fb8e0d7a631fb10e9b8d5157cee3cae5fff934385c8b88282737258034a51dee40613b16b014e85969b6510217b28087cdd8489436f75a4de8a7ddd3cf3a3e0197f3277053b38f8d1f12f688b82f5fe91efc277baa9023e49d56a603bca8b4ce5be459693ee90918d58b4b92066c36f8cd194b9b06cca674026ec176d712a666f17dbcbadc50348a9e1b8a5c37c1629b426fd60ed9bc64b89c6123b52cd114ca0f6df685398b5601acf8244bb2749a98b4b253a5adf6d82e535401b21720366e9c7cbf47d1e715697922e280efcfb4826e6d9fafa0a538f9f13f723a261a58f19c440c381ed0758c68485c68250e666a81b4589659d0ee608679cc5999d1d1391185b45a4034a877c03d1de8fb06d3c3ff0562741697355a5855242d934cd16a8603433d9947f0ed9972959aa4e1d2049ed20ece8ec0b0def9e2759b4885bfb457224766632faa3a2752be9a53106df12dc0580c48e11c6b8fe17facc3f9a5b5f672845fea139acf00b5621927257598b7307d78a3a569914b2a230d3b9dc41d0159c32fb44c7d54840f6ebda4fafbf709e6104f6823c738e0e962b9c9ffb24d1e6675babf96947a0bb664bd8bb2a410a3d5fac4f666fce6e52ab63843a56217448c4e578295c1900a62bc0d0d10bdec853efc2096fb4d7fd51e0c68f90ff03f25d5aa0cfa2e60c84971dfd365e0f98f7fb89c6f58f8ee0a003a88044ca3f028bc1fc38e0ccc4087901d707eef2558ddd7380e16eb05dd2855f33c86845b6326d06c5236eded5ac1f60daba71eeb8a4b9c01fac0d92122482acefa96f1ded5a8f384643086b41bc727f539efbdf499a284549dea8d3c0e7493684d4c738234698f2b4acb2c09ffb7e8e1394e808eef95bf3aaad0db624bc1f6263596be4503b5f9f2572d9d9c0ec3479c3c3abfbc1591f559edfa271e9a660c61d33de7d30c83fa216673f2f7a0e65bd7621ae919d8c13945d2205ad37b21c0b1ba2156308100050d4f39ae0f8fd27220bcbca47aae2f20801745142919c3fecbd9931fb377bf6a41f9c870db75eb9b5f6a443a5bab329f0be473b95ed70d297d36fcb48aab08fd664dc5eaaf0a8af224763a88d74ca4eb0fb56184d4eaa3eba1df87af2583f54a967feffe006f465b38741c5638ddd184600c02ec26e74c017837c1b177dd269fa83a09915ebd9a9077271f956839675d5c1abe0175149240e45ed3b18f3dbb3838aeee2f25b3deb1a14138534756337ef1af61525154480d1d1ecc8b61e965a8f2784428dc5fd5349bc0ea789049929808c0d5fe4e6b08b5cd3774b06f607cb43cb04119c148b1b8bafc365e55d43a44522dbf550f5330c7db7436148ecfdf43cd95cc33f5a28bd722cae146dbd948407285e2df0790cafc953de85a7887af88e3afdb91817d9dc36d798e9e0baa71958a9161ec481466d4fe193443ec98c99914c6a41a4dd8e2b38e3ab2bf689b5edee82b343cd795efb5b86cc9dfeafe8121296738074674f506a7aeeca86d02192446b716db4b70346467a17d2c467803a73e6d06314cef30cdd15badb2aaf75cdf2c0782f27f58bdd5188b63b39580e57710da177a520cb4bfb1633df91a5d04e3364f99e3fc5e09d1ee37d583b66e26afc1289d4ead235a45b8b42db815ad856793b341755b147aa43f22c2b95e394d26fc39578a0a0582fdeface5795a11e4c152174d8d2845dc2a05f77fc892cf63659f1d49b944c73c11f11a04b4f4247f19fe9e712e8fb798b21cc989365a91d33a97a0138eddcad86738cfeda4700a7d0966ddd6ea2be77a0fa69b6161aa9fa4930bfe94598d2e604e4718f24e2cbdd20f7b451177857fa9947daf80e33068a05c1e21d933ccaa0810727501347e1a1f01487e7b61110a63c0d03abea0101c7c6b2e0f37e251371b83debbdbc8c779171f8ba21655184a18adf4de00385da3e4c32cf1f231fd0a5ad25b53144af04a6bf52c826efc6505f8669f4902538d1fa79b63263d9a4332a942560a8e0e6187f286bbd404c435f934d28d7a6595953c3d3da19d449022e5b4f1cb4ec82ae2c5969941ba4accae9c46774cb36e64a7054a1d7030367330f6f78d6b3e4ab71ec63e5514f07fab0d9cc45920cda566ae69cd718232b74d8e64fc3472f732297fed29dc0b6dae61e9d670959ebd805d04ecceb9b9b7f79832eda0350becf9c745e4d3f6c0bb43a3acbdf64bc27d2d811dfc019fa53779072a0156dc6f6ef66ccc78a922d1f0f0d0c497a6ad4e6acf79cc2da302b114000ceebeddd13a6ed8ca4a91b1f70c8ffb8ff6c80c099d02ffc86181123bd63fbc643dfb0da6d8a78d68c3ac82dcee613ec9c7ecc0034f15330f39816b955c6489a5716a0c90057be16f55a643ee527a01891a779700f3c326c486653f20e3b20551b366b7062e3b3d109ce21b6945248fc3f8d0cadd8d2f025dabd83cb7736934acc9634c07da7abc88c1bbf8806d1a1422c13ad8d5b540c2012535760f8da24f1cce67d27d0d4e75bb1423d15124d3a8026209092b5735b09062cd14261562f7a8777cd460427426da7ef9ae10d107351fee0f17a63c7ba58c86a94a73040a64986ae8dfe755c72221a59d15f03e166608ceb2b36395f89540fe9fb340d2f57fde9bacfeef6d3c0f3f84492719e087fe3be458be847cabc07359ef34bde590d988ae670643129f511c8643908d70f7a741d3d79f8b56699abdd1740890feb7a4fb73cffd32784059a1194882b403d7c5aaafd52aecdac41bf18bd20161fd9a6c62b0260b75bccf9bfe4d9d84cad2fa171dabcc14bbe43e639ac481a5386b37568cde43b31620917a029817dd5939d265a9a2c1c9db40ecde399869576ba6aab467657a8d2ed0435f239917bc21d392667515f33a6ff772e41ae7515172ee7963caf816fac47a2f609355f95655e0502f9644cde41113b0e8ddefb9171e41077a7616d59c82d47732b452c50e5f6373a572253f31f0b4fb3dc08b730ea832f553e46dcae7366ac812153e286bcebe715769b51c429d9cfd89141c4302e0c1d8202129849dba61666306583de5f56939348646a4a2c8b040106f1887d345c4fa0ed1532aa3feea4cd657368a96da91ff9879832a6d3b9d47ca25decc5b43c813d4a4598db6554ba39e66933dc90de1f91a532abc3fa878bc97fd8f6fd96afa9f6e4508b962fd5361a73747476e93999a012e699e46f22b5390a38403ad39cdc377d703af51cf57225c23dfec57b9e5a823ceef0c8b70f20717d598c8489fd3e8e419ebdd09589b349370fcf2ba96a77e4d6cabb2f477f37c8d0c7b82a0c9cf14fcf90990c5ce9bd039aa89e8497438653a3bb0efab51c3a68857f9c8c48c01a29073da07bc4f4f3ab641f45cc4337bdb07b5fd66e64e7c1b6874d2425e8121a629ded6898c9511c3c7f80dca53d3e806e80e30313aca3616f2f9bfa2b0ea0fddc19f6f168bf89fe261c60c2e78115c2af2dd84168e39f77f9dc4e6e9cb79c011de34168209da779c774e7f05d63bdbc65fb90d180223010c26f855c7fbae9ecb71c8ba310f5237c9d91e311fed4a52a1d1321c9834c966fe2f88ab4fe85d5b3e9574fe56c0cf428504b9fc16c7b101836e27ac2e9c3c937323d805e14e5544420ad3f4ea7248408df565731d931b99eaf69fe60088ed96fecf57f2a23b25de0e0b1ba05ec915196d7f252458ebeaac24beafbac37c16bb6a09d213d143e01eecccafb63e1e8b9512ca117fa5eaa82e6827a6770477a3c22345ada355cfb2acefa5ffdce82b506ddcbece7e28a83ee1414c6e9ccaaa9045fa91b7b114e8a4db627cfed3ccb40f4168db45bebdf2145db55ff6cea11740f3ddb2ed490ac6ab06b01f50987b4ce9020994cbed52a879eb278b8340691fa6c800a0938171f6a8040be7794d9ad2739964127f363bcd64e7d341b86d5d09cf925838e1961455b2346173245cc0971f063d455603421a7a5ce3a8189f5b926e070cbae376476a8fc4d637b7b56283d7d021e9b715ceff304e6e9535903492faf4d88b74c54c888daaf8200f49590dec5f3e3606af5145c4bfdf2c64b9e750f478aa010338d182b9ae13fbb24f1c92c339079de9be6b9b299842bbabbc31af0082bcf862e9b845ce8112821383706d02e855a442906dec7730ea4c41b2c1601edcfae92a512ef26753ee4a45ff629946708fa51b9ffa99111a159e3dee8f1e87b5c9b0c50e8349f3c6ee292a0e7af0568bba2fa74a0d4e42860e760cb77ec9b9047a8e671e3bd3da2004f6621cccfe316a9008be6de545eeaefc0a27ba7855088a8c5dc211e725cd42a962a0def95599b1f42e35100e35b1dd374f073aeb0a8e9ea4022c4fdebbea9c2b17ceaaa9360a0a8e5b29f94c733646249f34dfb79584e3f71a3f8f017d9dfbc0275f66af86dab4cde6bc94b296db3f8c3a4ca78e1274da7eb6d15687be910345441acb7ab693897d640d19f082843d1c4ba7e0db4926466cef93cb0cc0df6ba316b0962e79ef8e88126b807cd3efa987a268140c6e0401a7bda6f4cb83ba753c05eca08be6798c4c100d734d099e8c028e05096b7944b07a61b8fce3eab7fdd6c5446bfd0ab39a8fdb207af92b686bfe94a03e762eb289c157c30d09cfeb223c0e52f4e2df3795b3390c9fc67ac52b6c73832cc76d443bfc47b9d3468a21412bfaedf47e87966155c20c70140b738292a03151e63a596764e1674fe6b93c71fc87d77287d40c98336fff8ef848a70217ae6827ca400e0abb11ec9befe477323d9ddcdfa22b2ee8f676407b5c7655614d8884ac606f2932fdbf7cd0fa64db4ca2a0870d3e9d28b21fd4ca2361021b84bb6de3766de8bda03460da447470576a74d3f10a64b329482023f562ca3d0f3e00d8b6e529197eb80a0cd7b8090a8ee7d986fbb121f8bd3237be5d083a90338991a0bfd3f1705f238d5f48eef5f6b7b287c4cd119c3eb24c4e642024980d82fab98271861afd9d6082e2c4e8b0c7bc7aee021810ab8907182e13e820e980f0d56e7db12454f1ac227edd8a2b823dcea365b272e5c60dddd3d117e7b46c679436ef59d97d12f63d60221ad09fca17c261bbccbeac424cc603971c2b748e294f4af8094f563c40d887269a8e3b62c268bbf879cb3525fbaa9e03698fc1d1de93734c65585534aab5ab46b898379129b90ed3fe578e020a112d5122cf8b06bc42028bb9eb7207cd3bccb44c2498ef5bae36ac7a188cac77e33c0b5e5a16c7bac67bf9b9a3b89fe9a710626fa306d05838df65504f567c03de4caec6a18a4ee43a0b12262e79d396c33bf91904e4b6db9388ddbc7c3a8a9509dc879a7939618a33d40e2fa5a86ac2751f2be22f2ce5677926116a18affffa8c2582fe7331bca061342d5626248eaf8abed5c518b3a4a3f63ceb4b2e3d0ade8df8328c50c73520c9d1216abbde6f0abe58358a14cb9f14657b0c23c5c687c680cd4b4285d9bb2273b1065bfb24db04c6875b5a193544794b7b594b0e223573d68bb0332a44a627edd52f8ba682a27a27a6e5cd3cc65bf31fcf6e3a59c6ecdb0c0b7d5338bc3314ac4bbf05404dc85b71861ec872a644432e3e9a633c634614656f3ca3db1ce1865dc5e504a1d2dcaa829e5de7ea4a0b4eed0419d68945e3ced29d96b2db0f7d25c97657fa0cafc59536cbfc2ba79bef2a30ecbba9336d16fc48e310c33c75f6d2504ee6c122ea1348353e3d51defdb9b8e4a8a80f2a1a6b840a95332144f969f4a57a0ec84f41c96eb296326aa67c4c4b984abb1907482d4be1b26d32cd4353e83d97dd9b2f1fbd5a020b578b6b56bdfce34195fe8c581d11570cbc65aeacd9121f1efd7da9d0c4253713a0003b469167ad61c32e7ca6bdd22ce4ab437b02b6355eb9f90a6f5323d19645694a5ebc7264db538792716c80804e08bedd71a93df03a0f1937a76cbd2a3b2e265de2f2c3f58658086da1928a8e5f08a23a4cf0df838e1647d9b978a41e9b8c09baef4def4a32563fa049d7de774895f7ddb9cc189eb23979622bbdf0997a29563eea7c2926249d64bf780eb9e6c297fecba6ae48312cbca6971b4b2a52b8fd3f355c1bc19508fcc8ff5ddf520674308c8778a6a88034de525bb7ca0402a47cf4e6281541a2c41ada4e2ecb5597bb616cd3e4f5608646aa60e982eadee077dacb7227842ef7610b4459d5a9a4b73699a5c0c4cce0e1d0e1614ba6f71a823082eeeb82941442482079161da9db504aba021331e7f702abcab7e942fb463880f2a9b4072fa6bc723a0517477a31a1d9d8c1ca0193ed3c35fcce4370d0674ee88382c39910bd937b3632ef0e2f333de77670bc37ae2537b68ca403928c974115aa52bb7f817a2b0ed761460beeec7aaa5bcf340f8565dd2f51e1e632fc42061e3e6334a415bf385e1063c3291898fc94f77c8eeb1d90c571e392b4fd406a2b6cd1507171faf1767fc71fd30a515f9fc1e5a11a523da22f5afe016ad22a79e494d22876c183e595944eb4eba19b88d6a03b2fdfe5a54b0b192c04e6fde4608c63a78d047fd41f91630253944699d717d388ae07e81e567f4657dc6733e8f1e9f563fb84be8e85c59a78f09b66027b252773a433d4fc88b9cc46e8c867d7189de67d14b89f8e238f4d66d3cf21603727fafe3577075b17e4444fc5243704d443bd21642d10cf90c07ddbfb4a9b8df1ce4ba4f931606232cca278a3ecbfd2546a419776abf2d905c29989ab10aa405eb425c0edddce35c6c8d4f7e1c0a93fc072c003961df081fa3120a6f45352c37c900edd0bd4dde205f93777581b3fd632c42acb455f81af13172d7a41444787ceb9240f1bad72417e7f8cb790d94bae7ffb2bcba090584187d4859aae4b42b0a1c27a9cbfd232ea1297cf0da0e0999234f2fff66a0a4c0edb7fa88deb8cf5a7cb2314526333b2b8054c4e09996edf70ec901512cdfa23b9a36f7c0f572a3695ff762a71eb642b570ebaa3ecd4a8556a151f921c69dc49269f5cc4a6951783bd7ec3ff435109bdf0047a39be4066aa0050bf02c6605cfb264288ff88a9aaddebbc0add52e228f9f1a161b1ef279241b60022413a807bd584b47aed2b9ec1868b229f2453bab893f9dbb18d5162fe1bf078efb6df74f50d74e238f2ea1f393aeae1aa5b81cd97b1ddbe303deeea6523ba02552391a0a4f59b75812f6a56564a63142a3aab778cfda6e6d993c18dd3c0dec8d46386ca8b3eec7c7d56ee0dacb828291a56eb0fa015be1ea7366770d14784b6cff0ddd163e7f21270b832c0c9f9329ed9fa7c854527dcd44d533b32e8cd5fd337f474c3d52ea42e85036dec93c03f00ae85c62d2037c5d90e5d7d7a3944b07a844842f8bce810fca30958c87643ee40b55ab1fc4f718431b888d98d92fbe449d27b7c47c0eddd81777c8d4296f081183437a0ce486b51a588d0cbffdd93cfc5a16ec8e7a0a77fc74beab27a8da4bcdb37a5e56e65786e3e70c1d5e3f6a8af29091c390c4a36c77929186110946e431873edec568c4015592688c80e463e1f2e9ecbbfbeee6742ae3c0c293985e325785e0a1cd31107286827f9d34706289ecd65b1b1577a56036980534ee228242f92fe95516498b0f5a5417548bea6dc88aae92ded08f0221fff3f5e2abad394b424c59cfcb2af45fdeb59e8004e00a03bf6b9953fcc06f44af3f1c7948f7a608c190747001236269d23bb3ca4472842303a2c7a26567561bf9a6e98fbc8bce9e682f52108152b970ab8cba0aa39620878e130bbc4cc485e4cf3ea366456833ac7175e34dea00a78f319df8115fc2207ed113d4705aae1f21eb1119837e636638335e0235a3d0307b63a7b28bf5adfe7c9dc7d440fb1b79c07cb032766ed77b41773185c6d42ba3a3b31a2d768c7ba94bef22b3a4e3951b2929e48bf2262ec31fa19fbf1bde8a8e018b4602b23cb7b4bf357c9988a98a895cba3554388a4dd915b3df1b96c69eb6431c4f6d1c63d0e18ad1f59de1a46620da33ea83b8481f981ce22f67afb84bacde0403d2e388fee8da71958673d91b83abb7f1ab44e669863b45621650cccc9addb2497c34578505939607c8e119b5122931a7aa93a50ff406b5a810779d67c337066d0c619dd0041a0a673c2f26bfd2db98b60fe717432949742dbbd3119f425328a5715694d13e31e0f0bc308b3deaea7782d3d6da9bc51189b97037425d2b7db1d1e9f02712af6ee078e332c072513f45943d3e125aebe287f373f405f234bddb043dcb4f9e96bfde9ee94a42e2087cbb2be3029ffc83bbcf339dbf896a4a3681b7f04bf0006bc07ab78b4e96e9028a7549f1295a17038272afdaef6f00116c43c752b378f4d8cba544a2ac5a6a0b2ed5add57e25aab513110fd3624a6868756d9c77039dab008b06cfeb629d9ec0d7c2c4c6667ce730405f513653a4ea8d0a2e378ee0b549f27311a07d2bc7712dd175b77d6b57dac7fec2805cde2aa5c56d7e49fc367e12d87fb54887e0069f88c32bfb4fb80ed61c4767643708591a1fb190373714c72146e8b50e81b89480e4f192441eba4e3adaffc15461be54eea6bc262b4d17485fbfc9b3505cd59f997824239b60a57cf5b1179d338864857ae2fccb009ee1d532e279f693afbfb88bd704fb7f6a8333834a0735c1ecd44aea72", 0x2000, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 416.59423ms ago: executing program 1 (id=626): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8063f90e041b6c1d68c036918033f210aba1baa733be085"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 416.183287ms ago: executing program 0 (id=627): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x82081) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0xa02, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x400, 0x1, 0x4, 0x0, 0x9, {}, {0x2, 0x0, 0x59, 0x80, 0x0, 0xfd, "ee78598f"}, 0x9, 0x3, {0x0}}) unshare(0x10030000) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r7}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r8}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x4, 0x0, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x2040080}, 0x4000855) openat$tcp_congestion(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000800) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r11, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) ioctl$TCFLSH(r9, 0x540b, 0x1) shmctl$SHM_LOCK(0x0, 0xb) r12 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x200) ioctl$RTC_AIE_ON(r12, 0x7001) syz_clone3(&(0x7f00000005c0)={0x208080800, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x2a}, &(0x7f00000003c0)=""/214, 0xd6, &(0x7f00000004c0)=""/176, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r2}}, 0x58) 0s ago: executing program 3 (id=628): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12386' (ED25519) to the list of known hosts. [ 42.022958][ T5684] cgroup: Unknown subsys name 'net' [ 42.174855][ T5684] cgroup: Unknown subsys name 'cpuset' [ 42.179749][ T5684] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.231494][ T5684] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.387176][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.387766][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.388485][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.390180][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.390821][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.391442][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.391986][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.392922][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.394113][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.395233][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.396329][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.397711][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.400582][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.406194][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.407661][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.408048][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.411328][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.412880][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.415295][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.439139][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.970680][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.973710][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.976448][ T5733] bridge_slave_0: entered allmulticast mode [ 47.979663][ T5733] bridge_slave_0: entered promiscuous mode [ 47.995256][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.998628][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.001762][ T5733] bridge_slave_1: entered allmulticast mode [ 48.005510][ T5733] bridge_slave_1: entered promiscuous mode [ 48.083861][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.124745][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.208467][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.210920][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.213553][ T5745] bridge_slave_0: entered allmulticast mode [ 48.216343][ T5745] bridge_slave_0: entered promiscuous mode [ 48.220593][ T5733] team0: Port device team_slave_0 added [ 48.224657][ T5733] team0: Port device team_slave_1 added [ 48.250584][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.253292][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.255840][ T5745] bridge_slave_1: entered allmulticast mode [ 48.259691][ T5745] bridge_slave_1: entered promiscuous mode [ 48.321065][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.323438][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.325744][ T5732] bridge_slave_0: entered allmulticast mode [ 48.328506][ T5732] bridge_slave_0: entered promiscuous mode [ 48.331793][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.334146][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.336468][ T5732] bridge_slave_1: entered allmulticast mode [ 48.340774][ T5732] bridge_slave_1: entered promiscuous mode [ 48.353388][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.360493][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.364242][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.366785][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.375190][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.385987][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.388496][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.390895][ T5734] bridge_slave_0: entered allmulticast mode [ 48.393752][ T5734] bridge_slave_0: entered promiscuous mode [ 48.408593][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.410926][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.419334][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.434346][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.437169][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.439504][ T5734] bridge_slave_1: entered allmulticast mode [ 48.442261][ T5734] bridge_slave_1: entered promiscuous mode [ 48.446278][ T5745] team0: Port device team_slave_0 added [ 48.451674][ T5745] team0: Port device team_slave_1 added [ 48.472593][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.489454][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.491787][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.500540][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.505494][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.529110][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.531221][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.538942][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.544781][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.556010][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.562222][ T5733] hsr_slave_0: entered promiscuous mode [ 48.564507][ T5733] hsr_slave_1: entered promiscuous mode [ 48.575284][ T5732] team0: Port device team_slave_0 added [ 48.588821][ T5732] team0: Port device team_slave_1 added [ 48.633642][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.636264][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.645876][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.651431][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.654152][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.663502][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.669118][ T5734] team0: Port device team_slave_0 added [ 48.678916][ T5734] team0: Port device team_slave_1 added [ 48.707961][ T5745] hsr_slave_0: entered promiscuous mode [ 48.710812][ T5745] hsr_slave_1: entered promiscuous mode [ 48.713584][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.715879][ T5745] Cannot create hsr debugfs directory [ 48.727724][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.730032][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.738982][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.755030][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.757705][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.767777][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.832645][ T5732] hsr_slave_0: entered promiscuous mode [ 48.834920][ T5732] hsr_slave_1: entered promiscuous mode [ 48.837068][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.839354][ T5732] Cannot create hsr debugfs directory [ 48.913888][ T5734] hsr_slave_0: entered promiscuous mode [ 48.916196][ T5734] hsr_slave_1: entered promiscuous mode [ 48.918334][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.920107][ T5734] Cannot create hsr debugfs directory [ 49.132005][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.140622][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.152969][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.158747][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.164794][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.172798][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.183007][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.188188][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.222759][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.231751][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.234679][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.242622][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.245424][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.250525][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.253396][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.258740][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.333577][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.341734][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.350601][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.357764][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.361027][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.365259][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.370347][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.376027][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.441333][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.445467][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.455099][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.462091][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.466217][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.471211][ T5748] Bluetooth: hci0: command tx timeout [ 49.471232][ T5094] Bluetooth: hci2: command tx timeout [ 49.471524][ T5741] Bluetooth: hci3: command tx timeout [ 49.471691][ T64] Bluetooth: hci1: command tx timeout [ 49.483705][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.493808][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.502075][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.540454][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.568453][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.581787][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.596033][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.599305][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.616573][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.623940][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.626951][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.653291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.656315][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.669997][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.673086][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.681144][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.717468][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.728154][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.739290][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.742529][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.756281][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.759596][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.771870][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.779298][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.781682][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.794812][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.797369][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.851923][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.026218][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.061583][ T5733] veth0_vlan: entered promiscuous mode [ 50.066191][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.074790][ T5733] veth1_vlan: entered promiscuous mode [ 50.105051][ T5733] veth0_macvtap: entered promiscuous mode [ 50.113613][ T5733] veth1_macvtap: entered promiscuous mode [ 50.123400][ T5745] veth0_vlan: entered promiscuous mode [ 50.135395][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.142204][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.152247][ T5745] veth1_vlan: entered promiscuous mode [ 50.157387][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.170447][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.212490][ T5745] veth0_macvtap: entered promiscuous mode [ 50.229325][ T5745] veth1_macvtap: entered promiscuous mode [ 50.233060][ T5734] veth0_vlan: entered promiscuous mode [ 50.252005][ T5734] veth1_vlan: entered promiscuous mode [ 50.255421][ T5732] veth0_vlan: entered promiscuous mode [ 50.273634][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.279401][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.282561][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.284962][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.291955][ T5732] veth1_vlan: entered promiscuous mode [ 50.321408][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.323840][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.342583][ T5734] veth0_macvtap: entered promiscuous mode [ 50.357120][ T5734] veth1_macvtap: entered promiscuous mode [ 50.365050][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.367466][ T5732] veth0_macvtap: entered promiscuous mode [ 50.367597][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.383982][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.385941][ T5732] veth1_macvtap: entered promiscuous mode [ 50.402767][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.405947][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.411106][ T5733] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.413003][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.413165][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.413178][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.416396][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.426057][ T5601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.435178][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.439513][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.445745][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.479163][ T5601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 50.520810][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 50.525894][ T1124] ata1: failed to read log page 10h (errno=-5) [ 50.530409][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 50.537056][ T1124] ata1.00: irq_stat 0x41000000 [ 50.539365][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 50.541363][ T1124] ata1.00: cmd 60/40:f0:1e:7b:03/05:00:00:00:00/40 tag 30 ncq dma 688128 in [ 50.541363][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.546722][ T1124] ata1.00: status: { DRDY } [ 50.548162][ T1124] ata1.00: error: { ABRT } [ 50.551552][ T1124] ata1.00: configured for UDMA/100 [ 50.553648][ T1124] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 50.556831][ T1124] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 50.557027][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.560328][ T1124] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 50.565042][ T1124] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 7b 1e 00 05 40 00 [ 50.568077][ T1124] I/O error, dev sda, sector 228126 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 50.568692][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.572141][ T1124] ata1: EH complete [ 50.615834][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.620422][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.620731][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.626102][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.647598][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.648676][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654499][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.654787][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.689568][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.695234][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.704835][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.716866][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.723791][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.728723][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.759203][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.767649][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.798469][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.804091][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.811161][ T5892] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 50.816427][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.820215][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.959015][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.029935][ T5894] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 51.088633][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.095046][ T5900] netlink: Unknown conntrack attr (type=1293, max=9) [ 51.098074][ T5900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.162323][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 51.168710][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.174142][ T5820] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 51.180393][ T5820] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1112, setting to 1024 [ 51.189572][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.195383][ T5820] usb 6-1: Product: syz [ 51.197580][ T5820] usb 6-1: Manufacturer: syz [ 51.209758][ T5820] usb 6-1: SerialNumber: syz [ 51.238901][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 51.243586][ T24] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 51.249761][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.265189][ T5906] Bluetooth: ISO socket layer initialized [ 51.271472][ T24] usb 8-1: config 0 descriptor?? [ 51.301482][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 51.384819][ T5912] Zero length message leads to an empty skb [ 51.537337][ T5820] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 51.549524][ T5748] Bluetooth: hci0: command tx timeout [ 51.551741][ T5748] Bluetooth: hci1: command tx timeout [ 51.551954][ T5741] Bluetooth: hci3: command tx timeout [ 51.552929][ T5820] usb 6-1: USB disconnect, device number 2 [ 51.699183][ T1035] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.871094][ T1035] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 51.878027][ T1035] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 51.887104][ T1035] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 51.890659][ T1035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.895986][ T1035] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 51.898642][ T1035] usb 5-1: Product: syz [ 51.900014][ T1035] usb 5-1: Manufacturer: syz [ 51.901559][ T1035] usb 5-1: SerialNumber: syz [ 51.909359][ T1035] usb 5-1: config 0 descriptor?? [ 51.917170][ T1035] usb 5-1: selecting invalid altsetting 0 [ 52.007075][ T5923] jffs2: notice: (5923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.198613][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.217290][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.233539][ T5821] usb 5-1: USB disconnect, device number 2 [ 52.499140][ T5940] netlink: 80 bytes leftover after parsing attributes in process `syz.1.21'. [ 52.919765][ T5741] Bluetooth: hci2: failed to read key size for handle 200 [ 53.147037][ T24] gspca_vc032x: reg_r err -71 [ 53.149048][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.152550][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.154376][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.156282][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.158007][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.160607][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.164074][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.165849][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.167465][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.169363][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.171057][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.172824][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.174505][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.176199][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.177815][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.180579][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.182279][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.184092][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 53.185710][ T24] gspca_vc032x: Unknown sensor... [ 53.187314][ T24] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 53.193094][ T24] usb 8-1: USB disconnect, device number 2 [ 53.629830][ T5748] Bluetooth: hci1: command tx timeout [ 53.631663][ T5741] Bluetooth: hci3: command tx timeout [ 53.631981][ T5748] Bluetooth: hci0: command tx timeout [ 53.704592][ T5965] netlink: 80 bytes leftover after parsing attributes in process `syz.3.31'. [ 54.475008][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e48000: rx timeout, send abort [ 54.648333][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.975343][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888013ea7000: rx timeout, send abort [ 54.979693][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e48000: abort rx timeout. Force session deactivation [ 54.988644][ T5748] Bluetooth: hci2: command tx timeout [ 55.209801][ T6005] netlink: 80 bytes leftover after parsing attributes in process `syz.3.48'. [ 55.478307][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888013ea7000: abort rx timeout. Force session deactivation [ 55.629525][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 55.631978][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 55.638869][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.641767][ T10] usb 5-1: Product: syz [ 55.643141][ T10] usb 5-1: Manufacturer: syz [ 55.644643][ T10] usb 5-1: SerialNumber: syz [ 55.648708][ T10] usb 5-1: config 0 descriptor?? [ 55.652892][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 55.709573][ T5748] Bluetooth: hci3: command tx timeout [ 55.709612][ T5741] Bluetooth: hci0: command tx timeout [ 55.709637][ T5741] Bluetooth: hci1: command tx timeout [ 55.753798][ T6022] netlink: 'syz.1.55': attribute type 2 has an invalid length. [ 55.880822][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e4ec00: rx timeout, send abort [ 55.994475][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.1.57'. [ 56.378543][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 56.381029][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e4d800: rx timeout, send abort [ 56.384508][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e4ec00: abort rx timeout. Force session deactivation [ 56.388476][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 56.466625][ T10] usb 5-1: USB disconnect, device number 3 [ 56.718472][ T5800] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.836631][ T6046] netlink: 'syz.2.64': attribute type 2 has an invalid length. [ 56.884400][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888028e4d800: abort rx timeout. Force session deactivation [ 56.890255][ T5800] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.902914][ T5800] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.911449][ T5800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.915982][ T5800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 56.920360][ T5800] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.924672][ T5800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.936487][ T5800] usb 8-1: config 0 descriptor?? [ 57.363446][ T5800] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.373280][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880242cb400: rx timeout, send abort [ 57.448509][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.616510][ T6042] usb 8-1: USB disconnect, device number 3 [ 57.618969][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 57.621452][ T5821] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 57.625689][ T5821] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 57.629145][ T5821] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.632413][ T5821] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.635309][ T5821] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 57.639395][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 57.641421][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.645769][ T5821] usb 5-1: config 0 descriptor?? [ 57.873376][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f752c00: rx timeout, send abort [ 57.876210][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880242cb400: abort rx timeout. Force session deactivation [ 58.028382][ T6102] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 58.057875][ T5821] wacom 0003:056A:0000.0003: ignoring exceeding usage max [ 58.061442][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.063572][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.065622][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.067757][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.071094][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.073315][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.075369][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.077404][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.079791][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.081907][ T5821] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 58.085632][ T5821] wacom 0003:056A:0000.0003: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 58.091521][ T5821] wacom 0003:056A:0000.0003: hidraw1: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 58.098928][ T5821] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:056A:0000.0003/input/input6 [ 58.179309][ T6042] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.255467][ T6120] netlink: 'syz.3.79': attribute type 2 has an invalid length. [ 58.269874][ T29] usb 5-1: USB disconnect, device number 4 [ 58.349170][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 58.352301][ T6042] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 58.359106][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.362495][ T6042] usb 7-1: Product: syz [ 58.364227][ T6042] usb 7-1: Manufacturer: syz [ 58.366168][ T6042] usb 7-1: SerialNumber: syz [ 58.372051][ T6042] usb 7-1: config 0 descriptor?? [ 58.376142][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f752c00: abort rx timeout. Force session deactivation [ 58.384995][ T6042] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 59.044889][ T6042] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 59.052150][ T6042] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 59.059520][ T6042] usb 7-1: USB disconnect, device number 2 [ 59.131787][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888021d95800: rx timeout, send abort [ 59.516435][ T6190] netlink: 'syz.3.89': attribute type 5 has an invalid length. [ 59.518832][ T6190] netlink: 'syz.3.89': attribute type 6 has an invalid length. [ 59.521046][ T6190] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.89'. [ 59.600838][ T6198] netlink: 80 bytes leftover after parsing attributes in process `syz.3.90'. [ 59.631958][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888021d97c00: rx timeout, send abort [ 59.637364][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888021d95800: abort rx timeout. Force session deactivation [ 59.709381][ T6203] binder: 6202:6203 ioctl c0306201 0 returned -14 [ 59.736286][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 60.000635][ T6218] netlink: 80 bytes leftover after parsing attributes in process `syz.3.99'. [ 60.007522][ T6217] netlink: 'syz.0.98': attribute type 5 has an invalid length. [ 60.010605][ T6217] netlink: 'syz.0.98': attribute type 6 has an invalid length. [ 60.013518][ T6217] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.98'. [ 60.135051][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888021d97c00: abort rx timeout. Force session deactivation [ 60.242274][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 60.342767][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888013e13000: rx timeout, send abort [ 60.358737][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.380465][ T6241] netlink: 68 bytes leftover after parsing attributes in process `syz.0.109'. [ 60.411255][ T6243] netlink: 'syz.1.111': attribute type 5 has an invalid length. [ 60.413803][ T6243] netlink: 'syz.1.111': attribute type 6 has an invalid length. [ 60.416175][ T6243] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.111'. [ 60.519501][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 60.523830][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 60.533254][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.540548][ T10] usb 7-1: Product: syz [ 60.541866][ T10] usb 7-1: Manufacturer: syz [ 60.545619][ T10] usb 7-1: SerialNumber: syz [ 60.553388][ T10] usb 7-1: config 0 descriptor?? [ 60.560560][ T10] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 60.842869][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880142fdc00: rx timeout, send abort [ 60.845917][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888013e13000: abort rx timeout. Force session deactivation [ 60.852657][ T6263] netlink: 68 bytes leftover after parsing attributes in process `syz.1.120'. [ 60.929366][ T2314] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 60.983436][ T6267] netlink: 'syz.1.122': attribute type 5 has an invalid length. [ 60.986297][ T6267] netlink: 'syz.1.122': attribute type 6 has an invalid length. [ 60.988874][ T6267] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.122'. [ 61.079992][ T2314] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.086854][ T2314] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 61.093205][ T2314] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 61.098288][ T2314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.102138][ T2314] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 61.104709][ T2314] usb 5-1: Product: syz [ 61.105859][ T2314] usb 5-1: Manufacturer: syz [ 61.107190][ T2314] usb 5-1: SerialNumber: syz [ 61.116330][ T2314] usb 5-1: config 0 descriptor?? [ 61.160229][ T2314] usb 5-1: selecting invalid altsetting 0 [ 61.222648][ T10] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 61.228607][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 61.234903][ T10] usb 7-1: USB disconnect, device number 3 [ 61.345496][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880142fdc00: abort rx timeout. Force session deactivation [ 61.360368][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.372713][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.400033][ T5800] usb 5-1: USB disconnect, device number 5 [ 61.506784][ T6291] netlink: 'syz.3.132': attribute type 5 has an invalid length. [ 61.510462][ T6291] netlink: 'syz.3.132': attribute type 6 has an invalid length. [ 61.595545][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888013e23000: rx timeout, send abort [ 61.899160][ T6311] netlink: 'syz.2.141': attribute type 5 has an invalid length. [ 61.902324][ T6311] netlink: 'syz.2.141': attribute type 6 has an invalid length. [ 62.095703][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888021d96800: rx timeout, send abort [ 62.099061][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888013e23000: abort rx timeout. Force session deactivation [ 62.183702][ T6331] overlayfs: failed to resolve './bus': -2 [ 62.286788][ T6339] netlink: 'syz.1.154': attribute type 5 has an invalid length. [ 62.289204][ T6339] netlink: 'syz.1.154': attribute type 6 has an invalid length. [ 62.298650][ T5821] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.459821][ T5821] usb 8-1: Using ep0 maxpacket: 8 [ 62.462257][ T5821] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 62.467891][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.471405][ T5821] usb 8-1: Product: syz [ 62.472773][ T5821] usb 8-1: Manufacturer: syz [ 62.474231][ T5821] usb 8-1: SerialNumber: syz [ 62.476934][ T5821] usb 8-1: config 0 descriptor?? [ 62.481806][ T5821] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 62.599011][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888021d96800: abort rx timeout. Force session deactivation [ 62.685676][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888026baec00: rx timeout, send abort [ 63.137696][ T5821] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 63.148684][ T5821] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 63.155116][ T5821] usb 8-1: USB disconnect, device number 4 [ 63.185790][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880142fc000: rx timeout, send abort [ 63.188872][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888026baec00: abort rx timeout. Force session deactivation [ 63.249331][ T6358] netlink: 'syz.1.163': attribute type 5 has an invalid length. [ 63.252226][ T6358] netlink: 'syz.1.163': attribute type 6 has an invalid length. [ 63.306797][ T6362] overlayfs: failed to resolve './bus': -2 [ 63.688753][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880142fc000: abort rx timeout. Force session deactivation [ 63.698411][ T5852] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.848374][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 63.855556][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 63.862947][ T5852] usb 7-1: no configurations [ 63.864876][ T5852] usb 7-1: can't read configurations, error -22 [ 63.923924][ T6385] overlayfs: failed to resolve './bus': -2 [ 63.945288][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801361ec00: rx timeout, send abort [ 63.999253][ T5852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.149611][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 64.152379][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 64.155792][ T5852] usb 7-1: no configurations [ 64.157707][ T5852] usb 7-1: can't read configurations, error -22 [ 64.160153][ T5852] usb usb7-port1: attempt power cycle [ 64.298390][ T29] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 64.445432][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888028e4f800: rx timeout, send abort [ 64.448857][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801361ec00: abort rx timeout. Force session deactivation [ 64.469475][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 64.472351][ T29] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 64.479776][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 64.488390][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 64.498736][ T5852] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.522401][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 64.524804][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 64.527556][ T5852] usb 7-1: no configurations [ 64.529203][ T5852] usb 7-1: can't read configurations, error -22 [ 64.617609][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.621325][ T29] usb 6-1: Product: syz [ 64.622976][ T29] usb 6-1: Manufacturer: syz [ 64.624776][ T29] usb 6-1: SerialNumber: syz [ 64.631767][ T29] oti6858 6-1:1.0: oti6858 converter detected [ 64.636976][ T29] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 64.658367][ T5852] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.679182][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 64.684457][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 64.688118][ T5852] usb 7-1: no configurations [ 64.690091][ T5852] usb 7-1: can't read configurations, error -22 [ 64.693327][ T5852] usb usb7-port1: unable to enumerate USB device [ 64.916153][ T6410] capability: warning: `syz.1.176' uses deprecated v2 capabilities in a way that may be insecure [ 64.948769][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888028e4f800: abort rx timeout. Force session deactivation [ 64.994582][ T6387] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 65.002927][ T2314] usb 6-1: USB disconnect, device number 3 [ 65.019503][ T2314] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 65.022373][ T2314] oti6858 6-1:1.0: device disconnected [ 65.449391][ T6418] __nla_validate_parse: 9 callbacks suppressed [ 65.449406][ T6418] netlink: 80 bytes leftover after parsing attributes in process `syz.3.182'. [ 65.505615][ T6423] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.183'. [ 66.682638][ T6459] netlink: 80 bytes leftover after parsing attributes in process `syz.2.191'. [ 66.743122][ T6461] validate_nla: 6 callbacks suppressed [ 66.743147][ T6461] netlink: 'syz.3.192': attribute type 5 has an invalid length. [ 66.748691][ T6461] netlink: 'syz.3.192': attribute type 6 has an invalid length. [ 66.751851][ T6461] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.192'. [ 66.867675][ T6466] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 67.669587][ T850] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.868626][ T850] usb 7-1: Using ep0 maxpacket: 32 [ 67.882041][ T850] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 67.896215][ T850] usb 7-1: no configurations [ 67.908361][ T850] usb 7-1: can't read configurations, error -22 [ 67.945325][ T6496] syzkaller0: entered promiscuous mode [ 67.947742][ T6496] syzkaller0: entered allmulticast mode [ 68.090910][ T850] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 68.186226][ T6505] netlink: 'syz.1.202': attribute type 5 has an invalid length. [ 68.189280][ T6505] netlink: 'syz.1.202': attribute type 6 has an invalid length. [ 68.191653][ T6505] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.202'. [ 68.207468][ T6504] netlink: 80 bytes leftover after parsing attributes in process `syz.3.201'. [ 68.268373][ T850] usb 7-1: Using ep0 maxpacket: 32 [ 68.271510][ T850] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 68.274716][ T850] usb 7-1: no configurations [ 68.276198][ T850] usb 7-1: can't read configurations, error -22 [ 68.280396][ T850] usb usb7-port1: attempt power cycle [ 68.284481][ T6509] Bluetooth: MGMT ver 1.23 [ 68.384518][ T6523] netlink: 'syz.3.209': attribute type 2 has an invalid length. [ 68.387642][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 68.392969][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'. [ 68.638416][ T850] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 68.669095][ T850] usb 7-1: Using ep0 maxpacket: 32 [ 68.672177][ T850] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 68.679679][ T850] usb 7-1: no configurations [ 68.681708][ T850] usb 7-1: can't read configurations, error -22 [ 68.771210][ T6545] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 68.773709][ T6545] netlink: 'syz.0.212': attribute type 6 has an invalid length. [ 68.775992][ T6545] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.212'. [ 68.808383][ T850] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 68.829241][ T850] usb 7-1: Using ep0 maxpacket: 32 [ 68.832574][ T850] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 68.836437][ T850] usb 7-1: no configurations [ 68.837944][ T850] usb 7-1: can't read configurations, error -22 [ 68.845766][ T850] usb usb7-port1: unable to enumerate USB device [ 69.016753][ T6554] netlink: 80 bytes leftover after parsing attributes in process `syz.1.214'. [ 69.654045][ T6581] netlink: 'syz.3.221': attribute type 5 has an invalid length. [ 69.656468][ T6581] netlink: 'syz.3.221': attribute type 6 has an invalid length. [ 70.348469][ T5748] Bluetooth: hci2: command 0x0401 tx timeout [ 70.359202][ T5741] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 70.913787][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.916515][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261239][ T6627] __nla_validate_parse: 6 callbacks suppressed [ 71.261260][ T6627] netlink: 80 bytes leftover after parsing attributes in process `syz.3.241'. [ 72.557236][ T6700] validate_nla: 5 callbacks suppressed [ 72.557249][ T6700] netlink: 'syz.3.251': attribute type 2 has an invalid length. [ 72.565303][ T6700] netlink: 52 bytes leftover after parsing attributes in process `syz.3.251'. [ 72.628314][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.695174][ T6708] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 72.767844][ T6717] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 72.828528][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 72.831324][ T29] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 72.838115][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.844620][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.851017][ T29] usb 6-1: config 0 descriptor?? [ 73.870166][ T5800] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.933081][ T6762] netlink: 'syz.2.263': attribute type 2 has an invalid length. [ 73.935800][ T6762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 74.018458][ T5800] usb 5-1: Using ep0 maxpacket: 32 [ 74.020761][ T5800] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 74.026268][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.029014][ T5800] usb 5-1: Product: syz [ 74.030430][ T5800] usb 5-1: Manufacturer: syz [ 74.032024][ T5800] usb 5-1: SerialNumber: syz [ 74.099969][ T5800] usb 5-1: config 0 descriptor?? [ 74.104762][ T5800] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 74.604030][ T6772] netlink: 'syz.3.267': attribute type 2 has an invalid length. [ 75.013496][ T6786] netlink: 'syz.2.268': attribute type 2 has an invalid length. [ 75.291054][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 75.293000][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 75.298878][ T29] usb 6-1: USB disconnect, device number 4 [ 75.717068][ T5800] gspca_ov534_9: reg_r err -71 [ 75.788706][ T850] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.958605][ T850] usb 8-1: Using ep0 maxpacket: 8 [ 75.965426][ T850] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 75.973266][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.976809][ T850] usb 8-1: Product: syz [ 75.979018][ T850] usb 8-1: Manufacturer: syz [ 75.980916][ T850] usb 8-1: SerialNumber: syz [ 75.985517][ T850] usb 8-1: config 0 descriptor?? [ 75.988591][ T5800] gspca_ov534_9: Unknown sensor 0000 [ 75.988666][ T5800] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 75.993911][ T850] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 75.997051][ T5800] usb 5-1: USB disconnect, device number 6 [ 76.343263][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 76.346079][ T6856] netlink: 48 bytes leftover after parsing attributes in process `syz.0.280'. [ 76.458376][ T5800] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 76.606032][ T850] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 76.609158][ T850] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 76.612629][ T850] usb 8-1: USB disconnect, device number 5 [ 76.618906][ T5800] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.623051][ T5800] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 76.626828][ T5800] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 76.630461][ T5800] usb 7-1: config 0 interface 0 has no altsetting 0 [ 76.634408][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.637090][ T5800] usb 7-1: Product: syz [ 76.638569][ T5800] usb 7-1: Manufacturer: syz [ 76.640132][ T5800] usb 7-1: SerialNumber: syz [ 76.643497][ T5800] usb 7-1: config 0 descriptor?? [ 76.648895][ T5800] usb 7-1: selecting invalid altsetting 0 [ 76.864368][ T29] usb 7-1: USB disconnect, device number 12 [ 77.046392][ T6865] netlink: 'syz.0.283': attribute type 2 has an invalid length. [ 78.020717][ T6894] syzkaller0: entered promiscuous mode [ 78.022594][ T6894] syzkaller0: entered allmulticast mode [ 78.200936][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 78.774716][ T6915] overlayfs: missing 'lowerdir' [ 79.100651][ T6922] netlink: 'syz.0.296': attribute type 2 has an invalid length. [ 79.234046][ T6917] syz.1.293 (6917): drop_caches: 2 [ 79.351818][ T6941] overlayfs: missing 'lowerdir' [ 79.476022][ T6946] smc: net device vlan1 applied user defined pnetid SYZ2 [ 80.716730][ T6973] netlink: 'syz.0.315': attribute type 2 has an invalid length. [ 80.718389][ T2314] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 80.819001][ T6969] ima: Unable to open file: /e (-2) [ 80.842459][ T6968] ima: policy update failed [ 80.869907][ T42] audit: type=1802 audit(1786305748.077:2): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.313" res=0 errno=0 [ 80.968808][ T2314] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.080581][ T2314] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 81.088411][ T2314] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 81.096716][ T2314] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.101138][ T2314] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.103841][ T2314] usb 6-1: Product: syz [ 81.105182][ T2314] usb 6-1: Manufacturer: syz [ 81.107288][ T2314] usb 6-1: SerialNumber: syz [ 81.113579][ T2314] usb 6-1: config 0 descriptor?? [ 81.126878][ T2314] usb 6-1: selecting invalid altsetting 0 [ 81.156376][ T40] cfg80211: failed to load regulatory.db [ 81.161978][ T6986] xt_nfacct: accounting object `syz0' does not exist [ 81.261902][ T6993] binder: 6992:6993 ioctl c0306201 0 returned -14 [ 81.324806][ T40] usb 6-1: USB disconnect, device number 5 [ 82.096089][ T7041] netlink: 'syz.2.332': attribute type 2 has an invalid length. [ 82.499800][ T7055] netlink: 80 bytes leftover after parsing attributes in process `syz.3.335'. [ 83.467193][ T7093] overlayfs: missing 'workdir' [ 83.536340][ T7099] netlink: 80 bytes leftover after parsing attributes in process `syz.0.345'. [ 83.623642][ T7108] netlink: 'syz.2.350': attribute type 2 has an invalid length. [ 83.760860][ T7119] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 83.998351][ T5852] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 84.171207][ T5852] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 84.177777][ T5852] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 84.182722][ T5852] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 84.186281][ T5852] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.192669][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 84.196072][ T5852] usb 5-1: Product: syz [ 84.197556][ T5852] usb 5-1: Manufacturer: syz [ 84.199384][ T5852] usb 5-1: SerialNumber: syz [ 84.203586][ T5852] usb 5-1: config 0 descriptor?? [ 84.210778][ T5852] usb 5-1: selecting invalid altsetting 0 [ 84.416723][ T6042] usb 5-1: USB disconnect, device number 7 [ 84.682104][ T7155] overlayfs: missing 'workdir' [ 84.747973][ T7159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.356'. [ 85.028385][ T850] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.188324][ T850] usb 6-1: Using ep0 maxpacket: 8 [ 85.191293][ T850] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 85.197967][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.202175][ T850] usb 6-1: Product: syz [ 85.204012][ T850] usb 6-1: Manufacturer: syz [ 85.206017][ T850] usb 6-1: SerialNumber: syz [ 85.210331][ T850] usb 6-1: config 0 descriptor?? [ 85.219243][ T850] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 85.835143][ T850] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 85.840226][ T850] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 85.843566][ T850] usb 6-1: USB disconnect, device number 6 [ 86.324747][ T7203] overlayfs: missing 'workdir' [ 86.408371][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.558933][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 86.564229][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.567137][ T24] usb 8-1: Product: syz [ 86.568828][ T24] usb 8-1: Manufacturer: syz [ 86.570605][ T24] usb 8-1: SerialNumber: syz [ 86.617816][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 86.753692][ T7224] misc userio: Begin command sent, but we're already running [ 86.979053][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 86.984187][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 87.003655][ T7226] overlayfs: missing 'lowerdir' [ 87.034536][ T7228] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 87.190892][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 87.194789][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 87.198385][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 87.204199][ T24] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 87.212835][ T24] usb 8-1: USB disconnect, device number 6 [ 87.269403][ T7240] netlink: 'syz.1.377': attribute type 2 has an invalid length. [ 87.770481][ T7265] binder: 7264:7265 ioctl c0306201 0 returned -14 [ 88.178345][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 88.336214][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 88.349554][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.354666][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 88.361472][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 88.365930][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 88.373595][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.377745][ T24] usb 8-1: Product: syz [ 88.380064][ T24] usb 8-1: Manufacturer: syz [ 88.382090][ T24] usb 8-1: SerialNumber: syz [ 88.390928][ T24] usb 8-1: config 0 descriptor?? [ 88.398174][ T24] usb 8-1: selecting invalid altsetting 0 [ 88.410161][ T7299] overlayfs: missing 'lowerdir' [ 88.600727][ T24] usb 8-1: USB disconnect, device number 7 [ 88.678512][ T2314] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.830690][ T2314] usb 5-1: Using ep0 maxpacket: 32 [ 88.837362][ T2314] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 88.844094][ T2314] usb 5-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.848874][ T2314] usb 5-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.853128][ T2314] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.858578][ T2314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.861456][ T2314] usb 5-1: Product: syz [ 88.863012][ T2314] usb 5-1: Manufacturer: syz [ 88.864557][ T2314] usb 5-1: SerialNumber: syz [ 88.997652][ T7319] netlink: 'syz.1.389': attribute type 2 has an invalid length. [ 89.091485][ T2314] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input10 [ 89.101544][ T5130] bcm5974 5-1:1.0: could not read from device [ 89.110744][ T5130] bcm5974 5-1:1.0: could not read from device [ 89.118897][ T2314] usb 5-1: USB disconnect, device number 8 [ 89.119170][ T5130] bcm5974 5-1:1.0: could not read from device [ 89.125455][ T5130] bcm5974 5-1:1.0: could not read from device [ 89.604709][ T7341] netlink: 'syz.2.392': attribute type 2 has an invalid length. [ 89.627009][ T7343] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 89.632254][ T7343] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 90.013440][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 90.630602][ T7384] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 90.988149][ T7408] netlink: 'syz.3.408': attribute type 2 has an invalid length. [ 92.183045][ T7470] syz_tun: entered allmulticast mode [ 92.190457][ T7468] syz_tun: left allmulticast mode [ 92.237403][ T7477] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 92.568327][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 92.729192][ T24] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 92.736377][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.745766][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.750394][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.769031][ T24] usb 7-1: config 0 descriptor?? [ 93.095075][ T7513] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 93.178063][ T24] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 93.240178][ T24] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 93.262117][ T24] hid-steam 0003:28DE:1142.0005: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 93.398321][ T40] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.548383][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 93.558360][ T40] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 93.565034][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.567614][ T40] usb 5-1: Product: syz [ 93.570611][ T40] usb 5-1: Manufacturer: syz [ 93.572254][ T40] usb 5-1: SerialNumber: syz [ 93.575481][ T40] usb 5-1: config 0 descriptor?? [ 93.584527][ T40] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 94.201506][ T40] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 94.211672][ T40] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 94.217504][ T40] usb 5-1: USB disconnect, device number 9 [ 94.367960][ T7585] netlink: 80 bytes leftover after parsing attributes in process `syz.1.437'. [ 94.598662][ T850] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 94.688347][ T61] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.741465][ T7592] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 94.769084][ T850] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.774072][ T850] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 94.778872][ T850] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 94.783465][ T850] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.788034][ T850] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.791593][ T850] usb 8-1: Product: syz [ 94.793362][ T850] usb 8-1: Manufacturer: syz [ 94.795279][ T850] usb 8-1: SerialNumber: syz [ 94.800320][ T850] usb 8-1: config 0 descriptor?? [ 94.805524][ T850] usb 8-1: selecting invalid altsetting 0 [ 94.820450][ T61] usb 6-1: device descriptor read/64, error -71 [ 94.909327][ T7602] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 95.011278][ T2314] usb 8-1: USB disconnect, device number 8 [ 95.052429][ T5821] usb 7-1: USB disconnect, device number 13 [ 95.058648][ T5821] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 95.068317][ T61] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.218297][ T61] usb 6-1: device descriptor read/64, error -71 [ 95.340068][ T61] usb usb6-port1: attempt power cycle [ 95.688337][ T61] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.713589][ T13] syzkaller0: tun_net_xmit 76 [ 95.720110][ T13] syzkaller0: tun_net_xmit 48 [ 95.721171][ T7638] syzkaller0: create flow: hash 2141521953 index 1 [ 95.724520][ T61] usb 6-1: device descriptor read/8, error -71 [ 95.742542][ T4012] syzkaller0: tun_net_xmit 76 [ 95.764263][ T7637] syzkaller0: delete flow: hash 2141521953 index 1 [ 95.864572][ T7647] netlink: 80 bytes leftover after parsing attributes in process `syz.2.447'. [ 95.938272][ T7654] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 95.968492][ T61] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 96.001319][ T61] usb 6-1: device descriptor read/8, error -71 [ 96.118761][ T4012] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.121779][ T61] usb usb6-port1: unable to enumerate USB device [ 96.269751][ T4012] usb 8-1: Using ep0 maxpacket: 8 [ 96.271868][ T4012] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 96.284534][ T4012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.288189][ T4012] usb 8-1: Product: syz [ 96.289607][ T4012] usb 8-1: Manufacturer: syz [ 96.291130][ T4012] usb 8-1: SerialNumber: syz [ 96.294388][ T4012] usb 8-1: config 0 descriptor?? [ 96.299480][ T4012] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 96.895693][ T7684] netlink: 'syz.0.454': attribute type 2 has an invalid length. [ 96.913716][ T4012] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 96.917708][ T4012] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 96.923641][ T4012] usb 8-1: USB disconnect, device number 9 [ 97.445929][ T7700] netlink: 'syz.3.455': attribute type 2 has an invalid length. [ 97.542948][ T7705] netlink: 80 bytes leftover after parsing attributes in process `syz.1.457'. [ 98.237760][ T5852] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 98.355523][ T7744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.467'. [ 98.401669][ T5852] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 98.406219][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.409627][ T5852] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.414580][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.417457][ T5852] usb 7-1: Product: syz [ 98.420459][ T5852] usb 7-1: Manufacturer: syz [ 98.422370][ T5852] usb 7-1: SerialNumber: syz [ 98.429279][ T4012] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.641906][ T5852] usb 7-1: Limiting number of CPorts to U8_MAX [ 98.683291][ T7751] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 99.274213][ T5852] usb 7-1: failed to send ARPC request 1: -71 [ 99.280726][ T5852] usb 7-1: failed to execute ARPC: -71 [ 99.282617][ T5852] usb 7-1: failed to set connected state for cport 0: -71 [ 99.290879][ T5852] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 99.297105][ T5852] usb 7-1: failed to send ARPC request 3: -71 [ 99.302836][ T5852] usb 7-1: failed to execute ARPC: -71 [ 99.304660][ T5852] usb 7-1: failed to clear cport 0: -71 [ 99.311563][ T5852] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 99.318792][ T4012] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.322757][ T4012] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.325762][ T5852] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 99.326263][ T4012] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.332147][ T4012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.333037][ T5852] usb 7-1: USB disconnect, device number 14 [ 99.341471][ T4012] usb 5-1: config 0 descriptor?? [ 99.471514][ T7774] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 99.549893][ T4012] usb 5-1: USB disconnect, device number 10 [ 99.845406][ T7792] netlink: 80 bytes leftover after parsing attributes in process `syz.2.476'. [ 100.068356][ T5852] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.278316][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 100.282482][ T5852] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 100.288822][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.294383][ T5852] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.299484][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.307913][ T5852] usb 5-1: config 0 descriptor?? [ 100.516968][ T5852] usb 5-1: USB disconnect, device number 11 [ 100.648361][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 101.201192][ T7835] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 101.480937][ T34] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 101.490208][ T2314] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 101.492074][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.508051][ T34] usb 8-1: config 0 descriptor?? [ 101.512961][ T34] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 101.650531][ T2314] usb 7-1: Using ep0 maxpacket: 8 [ 101.653098][ T2314] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 101.660102][ T2314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.663432][ T2314] usb 7-1: Product: syz [ 101.665229][ T2314] usb 7-1: Manufacturer: syz [ 101.667199][ T2314] usb 7-1: SerialNumber: syz [ 101.671780][ T2314] usb 7-1: config 0 descriptor?? [ 101.681615][ T2314] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 101.831763][ T7859] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 102.126874][ T34] usb 8-1: USB disconnect, device number 10 [ 102.294025][ T2314] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 102.297271][ T2314] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 102.301473][ T2314] usb 7-1: USB disconnect, device number 15 [ 102.368425][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 102.519183][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.524334][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.529009][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.532774][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.537984][ T29] usb 5-1: config 0 descriptor?? [ 102.745638][ T29] usb 5-1: USB disconnect, device number 12 [ 102.777078][ T7903] binder: 7902:7903 unknown command 0 [ 102.779481][ T7903] binder: 7902:7903 ioctl c0306201 800001c0 returned -22 [ 102.783130][ T7903] binder: 7902:7903 ioctl c0306201 0 returned -14 [ 103.009647][ T40] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 103.188370][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 103.201568][ T40] usb 8-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 103.220092][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.229172][ T40] usb 8-1: Product: syz [ 103.232697][ T40] usb 8-1: Manufacturer: syz [ 103.237534][ T40] usb 8-1: SerialNumber: syz [ 103.338550][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 103.341613][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 103.346817][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.350972][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.354673][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.363196][ T29] usb 5-1: config 0 descriptor?? [ 103.539792][ T40] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.568186][ T29] usb 5-1: USB disconnect, device number 13 [ 103.602217][ T7937] binder: 7936:7937 unknown command 0 [ 103.604594][ T7937] binder: 7936:7937 ioctl c0306201 800001c0 returned -22 [ 103.610430][ T7937] binder: 7936:7937 ioctl c0306201 0 returned -14 [ 103.791407][ T40] usb 8-1: USB disconnect, device number 11 [ 103.840515][ T6284] udevd[6284]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.911197][ T2314] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 104.058531][ T2314] usb 7-1: Using ep0 maxpacket: 8 [ 104.061716][ T2314] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 104.068804][ T2314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.072150][ T2314] usb 7-1: Product: syz [ 104.073784][ T2314] usb 7-1: Manufacturer: syz [ 104.075785][ T2314] usb 7-1: SerialNumber: syz [ 104.079965][ T2314] usb 7-1: config 0 descriptor?? [ 104.084794][ T2314] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 104.261494][ T7965] binder: 7964:7965 unknown command 0 [ 104.263320][ T7965] binder: 7964:7965 ioctl c0306201 800001c0 returned -22 [ 104.266629][ T7965] binder: 7964:7965 ioctl c0306201 0 returned -14 [ 104.558342][ T4012] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 104.709893][ T4012] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.714916][ T4012] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 104.719976][ T4012] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 104.724572][ T4012] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.733043][ T4012] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.736538][ T4012] usb 5-1: Product: syz [ 104.738974][ T4012] usb 5-1: Manufacturer: syz [ 104.742185][ T4012] usb 5-1: SerialNumber: syz [ 104.746576][ T4012] usb 5-1: config 0 descriptor?? [ 104.755786][ T4012] usb 5-1: selecting invalid altsetting 0 [ 104.986457][ T34] usb 5-1: USB disconnect, device number 14 [ 105.109187][ T2314] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 105.114026][ T2314] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 105.116073][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.119722][ T2314] usb 7-1: USB disconnect, device number 16 [ 105.368378][ T850] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 105.502725][ T7987] block nbd0: Receive control failed (result -32) [ 105.502746][ T65] block nbd0: Receive control failed (result -32) [ 105.519629][ T850] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.525006][ T850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.529465][ T850] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.533318][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.540917][ T850] usb 8-1: config 0 descriptor?? [ 105.743549][ T8009] netlink: 'syz.0.529': attribute type 2 has an invalid length. [ 105.752588][ T850] usb 8-1: USB disconnect, device number 12 [ 105.828338][ T4012] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 105.978819][ T4012] usb 7-1: Using ep0 maxpacket: 8 [ 105.980950][ T4012] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 105.986175][ T4012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.989051][ T4012] usb 7-1: Product: syz [ 105.990702][ T4012] usb 7-1: Manufacturer: syz [ 105.992239][ T4012] usb 7-1: SerialNumber: syz [ 105.995332][ T4012] usb 7-1: config 0 descriptor?? [ 106.006231][ T4012] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 106.188369][ T850] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 106.328339][ T34] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 106.338337][ T850] usb 8-1: Using ep0 maxpacket: 32 [ 106.341209][ T850] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 106.345899][ T850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.350168][ T850] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.353903][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.360227][ T850] usb 8-1: config 0 descriptor?? [ 106.479096][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.484249][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 106.488949][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 106.493545][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.498636][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.502283][ T34] usb 6-1: Product: syz [ 106.504054][ T34] usb 6-1: Manufacturer: syz [ 106.506043][ T34] usb 6-1: SerialNumber: syz [ 106.510576][ T34] usb 6-1: config 0 descriptor?? [ 106.519885][ T34] usb 6-1: selecting invalid altsetting 0 [ 106.573311][ T29] usb 8-1: USB disconnect, device number 13 [ 106.623793][ T4012] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 106.627757][ T4012] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 106.631600][ T4012] usb 7-1: USB disconnect, device number 17 [ 106.720603][ T34] usb 6-1: USB disconnect, device number 11 [ 107.145371][ T8069] netlink: 'syz.0.543': attribute type 2 has an invalid length. [ 107.182797][ T8072] syzkaller0: entered promiscuous mode [ 107.184637][ T8072] syzkaller0: entered allmulticast mode [ 107.568494][ T40] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 107.639487][ T4012] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 107.719244][ T40] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.723225][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.726893][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.732499][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.737359][ T40] usb 7-1: config 0 descriptor?? [ 107.742140][ T40] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 107.789256][ T4012] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.792999][ T4012] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.796758][ T4012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.800184][ T4012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.803781][ T4012] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.808935][ T4012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.813928][ T4012] usb 6-1: config 0 descriptor?? [ 107.908413][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 107.945430][ T40] usb 7-1: USB disconnect, device number 18 [ 108.058406][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 108.061160][ T34] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 108.068885][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.078326][ T34] usb 8-1: Product: syz [ 108.080036][ T34] usb 8-1: Manufacturer: syz [ 108.081942][ T34] usb 8-1: SerialNumber: syz [ 108.085528][ T34] usb 8-1: config 0 descriptor?? [ 108.092593][ T34] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 108.230771][ T4012] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 108.370371][ T40] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 108.398373][ T5821] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 108.488151][ T55] usb 6-1: USB disconnect, device number 12 [ 108.528443][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 108.533138][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.536050][ T40] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 108.539911][ T40] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1112, setting to 1024 [ 108.545292][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.548065][ T40] usb 5-1: Product: syz [ 108.550912][ T40] usb 5-1: Manufacturer: syz [ 108.552496][ T40] usb 5-1: SerialNumber: syz [ 108.568362][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 108.570712][ T5821] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 108.574589][ T5821] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.577992][ T5821] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.582170][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.587560][ T5821] usb 7-1: config 0 descriptor?? [ 108.594712][ T5821] ldusb 7-1:0.0: Interrupt in endpoint not found [ 108.597460][ T5821] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 108.702506][ T34] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 108.705715][ T34] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 108.709485][ T34] usb 8-1: USB disconnect, device number 14 [ 108.764620][ T40] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.776796][ T40] usb 5-1: USB disconnect, device number 15 [ 108.795775][ T5821] usb 7-1: USB disconnect, device number 19 [ 109.030792][ T8128] netlink: 208 bytes leftover after parsing attributes in process `syz.1.556'. [ 109.969478][ T5852] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 110.128450][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 110.131305][ T5852] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.141363][ T5852] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.144558][ T5852] usb 8-1: config 0 has no interface number 0 [ 110.149379][ T5852] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.154633][ T5852] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.160602][ T5852] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.165518][ T5852] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.172034][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.190635][ T5852] usb 8-1: config 0 descriptor?? [ 110.265247][ T5852] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.414876][ T8148] warning: `syz.3.564' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.430256][ T8148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.441106][ T55] usb 8-1: USB disconnect, device number 15 [ 110.453371][ T55] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 110.531619][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 110.708425][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 110.712912][ T34] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 110.720160][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.723635][ T34] usb 6-1: Product: syz [ 110.725477][ T34] usb 6-1: Manufacturer: syz [ 110.727457][ T34] usb 6-1: SerialNumber: syz [ 110.731851][ T34] usb 6-1: config 0 descriptor?? [ 110.742311][ T34] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 111.364511][ T34] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 111.376510][ T34] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 111.384499][ T34] usb 6-1: USB disconnect, device number 13 [ 111.608317][ T5852] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 111.760344][ T5852] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.765490][ T5852] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.769814][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.775044][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.781252][ T5852] usb 7-1: config 0 descriptor?? [ 111.788169][ T5852] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 111.989102][ T5852] usb 7-1: USB disconnect, device number 20 [ 112.042542][ T8175] netlink: 'syz.1.575': attribute type 2 has an invalid length. [ 112.110150][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 112.117195][ T8179] netlink: 312 bytes leftover after parsing attributes in process `syz.3.573'. [ 112.122395][ T8179] netlink: 312 bytes leftover after parsing attributes in process `syz.3.573'. [ 112.458814][ T40] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 112.618384][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 112.621324][ T40] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 112.626377][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.630906][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.636576][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.641657][ T40] usb 7-1: config 0 descriptor?? [ 112.648819][ T40] ldusb 7-1:0.0: Interrupt in endpoint not found [ 112.652500][ T40] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 112.698491][ T4012] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 112.828557][ T4012] usb 8-1: device descriptor read/64, error -71 [ 112.847805][ T40] usb 7-1: USB disconnect, device number 21 [ 113.089647][ T4012] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 113.218437][ T4012] usb 8-1: device descriptor read/64, error -71 [ 113.328773][ T4012] usb usb8-port1: attempt power cycle [ 113.398444][ T55] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.461833][ T8240] binder: 8239:8240 unknown command 0 [ 113.464134][ T8240] binder: 8239:8240 ioctl c0306201 800001c0 returned -22 [ 113.578307][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 113.580669][ T55] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.584449][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.587973][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.593896][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.597146][ T55] usb 6-1: Product: syz [ 113.599174][ T55] usb 6-1: Manufacturer: syz [ 113.601161][ T55] usb 6-1: SerialNumber: syz [ 113.610855][ T55] usb 6-1: 0:2 : does not exist [ 113.671785][ T8250] capability: warning: `syz.0.596' uses 32-bit capabilities (legacy support in use) [ 113.678688][ T4012] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 113.700249][ T4012] usb 8-1: device descriptor read/8, error -71 [ 113.757101][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 113.886469][ T55] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 113.948463][ T4012] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 113.968760][ T4012] usb 8-1: device descriptor read/8, error -71 [ 114.078644][ T4012] usb usb8-port1: unable to enumerate USB device [ 114.179247][ T55] usb 6-1: USB disconnect, device number 14 [ 114.311806][ T6284] udevd[6284]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.749190][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.754394][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.759213][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.763795][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.767811][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.773309][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.779649][ T9] usb 7-1: config 0 descriptor?? [ 114.818475][ T4012] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 114.989765][ T4012] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.994828][ T4012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.999264][ T4012] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.005329][ T4012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.011892][ T4012] usb 6-1: config 0 descriptor?? [ 115.019610][ T4012] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 115.201249][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.218118][ T9] usb 6-1: USB disconnect, device number 15 [ 115.453860][ T5821] usb 7-1: USB disconnect, device number 22 [ 115.478743][ T8269] binder: 8268:8269 unknown command 0 [ 115.481217][ T8269] binder: 8268:8269 ioctl c0306201 800001c0 returned -22 [ 115.678708][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 115.838352][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 115.843591][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 115.849189][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.852519][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.857950][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.869792][ T9] usb 6-1: config 0 descriptor?? [ 115.879507][ T9] ldusb 6-1:0.0: Interrupt in endpoint not found [ 115.886288][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 116.080392][ T9] usb 6-1: USB disconnect, device number 16 [ 116.298387][ T5800] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 116.428363][ T55] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 116.448405][ T5800] usb 7-1: Using ep0 maxpacket: 8 [ 116.450741][ T5800] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.454510][ T5800] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 116.457116][ T5800] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.460444][ T5800] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.464095][ T5800] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.467246][ T5800] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.471414][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.578369][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 116.580532][ T55] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 116.586389][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.589020][ T55] usb 5-1: Product: syz [ 116.590390][ T55] usb 5-1: Manufacturer: syz [ 116.591869][ T55] usb 5-1: SerialNumber: syz [ 116.594771][ T55] usb 5-1: config 0 descriptor?? [ 116.598969][ T55] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 116.633136][ T8290] syz.1.610 (8290): drop_caches: 2 [ 116.682278][ T5800] usb 7-1: usb_control_msg returned -32 [ 116.684084][ T5800] usbtmc 7-1:16.0: can't read capabilities [ 117.213398][ T55] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 117.216646][ T55] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 117.220092][ T55] usb 5-1: USB disconnect, device number 16 [ 118.038691][ T55] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 118.199045][ T55] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.203966][ T55] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.208670][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.213069][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.217071][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.223174][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.231999][ T55] usb 5-1: config 0 descriptor?? [ 118.649794][ T55] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.850746][ T2314] usb 5-1: USB disconnect, device number 17 [ 118.938330][ T55] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 119.066943][ T2314] usb 7-1: USB disconnect, device number 23 [ 119.089312][ T55] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 119.096626][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.102205][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.106889][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.164660][ T8314] syzkaller0: entered promiscuous mode [ 119.166495][ T8314] syzkaller0: entered allmulticast mode [ 119.334302][ T8318] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 119.368987][ T55] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -71 [ 119.385951][ T55] usb 8-1: USB disconnect, device number 20 [ 119.494653][ T5741] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 119.743589][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 119.747527][ T8345] netlink: 348 bytes leftover after parsing attributes in process `syz.1.626'. [ 119.751683][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 119.755527][ T8345] netlink: 348 bytes leftover after parsing attributes in process `syz.1.626'. [ 119.761189][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 119.808399][ T850] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 119.978995][ T850] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 119.983218][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.986158][ T850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.989314][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.992978][ T850] usb 5-1: config 0 descriptor?? [ 120.064980][ T8349] smc: net device vlan1 applied user defined pnetid SYZ2 [ 120.121168][ T850] ath6kl: Failed to submit usb control message: -71 [ 120.128952][ T850] ath6kl: unable to send the bmi data to the device: -71 [ 120.132236][ T850] ath6kl: Unable to send get target info: -71 [ 120.147886][ T850] ath6kl: Failed to init ath6kl core: -71 [ 120.198031][ T850] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 120.211851][ T850] usb 5-1: USB disconnect, device number 18 [ 120.214186][ T8339] ================================================================== [ 120.214198][ T8339] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 120.214218][ T8339] Read of size 1 at addr ffff8880259d6320 by task syz.0.627/8339 [ 120.224774][ T8339] [ 120.225715][ T8339] CPU: 2 UID: 0 PID: 8339 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT(full) [ 120.225740][ T8339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.225763][ T8339] Call Trace: [ 120.225781][ T8339] [ 120.225789][ T8339] dump_stack_lvl+0x100/0x190 [ 120.225817][ T8339] print_report+0x13d/0x4b0 [ 120.225842][ T8339] ? __virt_addr_valid+0x239/0x430 [ 120.225863][ T8339] ? string+0x471/0x4d0 [ 120.225883][ T8339] kasan_report+0xdf/0x1c0 [ 120.225912][ T8339] ? string+0x471/0x4d0 [ 120.225932][ T8339] string+0x471/0x4d0 [ 120.225947][ T8339] ? __pfx_string+0x10/0x10 [ 120.225959][ T8339] ? __lock_acquire+0x49f/0x1a40 [ 120.225971][ T8339] vsnprintf+0x422/0x1300 [ 120.225987][ T8339] ? __pfx_vsnprintf+0x10/0x10 [ 120.226002][ T8339] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.226017][ T8339] ? is_bpf_text_address+0x94/0x1a0 [ 120.226035][ T8339] snprintf+0xc7/0x100 [ 120.226072][ T8339] ? __pfx_snprintf+0x10/0x10 [ 120.226087][ T8339] ? arch_stack_walk+0xa6/0xf0 [ 120.226109][ T8339] dev_vprintk_emit+0x375/0x3e0 [ 120.226125][ T8339] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 120.226140][ T8339] ? __kasan_kmalloc+0xaa/0xb0 [ 120.226154][ T8339] ? __kmalloc_noprof+0x322/0x820 [ 120.226167][ T8339] ? raw_alloc_io_data+0x14d/0x1c0 [ 120.226178][ T8339] ? raw_ioctl+0x1214/0x2b80 [ 120.226188][ T8339] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.226204][ T8339] ? __do_fast_syscall_32+0xe7/0x970 [ 120.226219][ T8339] ? do_fast_syscall_32+0x32/0x70 [ 120.226235][ T8339] dev_printk_emit+0xd2/0x10d [ 120.226247][ T8339] ? __pfx_dev_printk_emit+0x10/0x10 [ 120.226262][ T8339] __dev_printk+0xcb/0x100 [ 120.226275][ T8339] _dev_err+0xef/0x127 [ 120.226293][ T8339] ? __pfx__dev_err+0x10/0x10 [ 120.226305][ T8339] ? dummy_queue+0x3ca/0xb00 [ 120.226316][ T8339] ? find_held_lock+0x2b/0x80 [ 120.226332][ T8339] ? raw_process_ep0_io+0x314/0x9c0 [ 120.226346][ T8339] raw_process_ep0_io.cold+0x65/0x7f [ 120.226366][ T8339] raw_ioctl+0x1248/0x2b80 [ 120.226380][ T8339] ? __pfx_raw_ioctl+0x10/0x10 [ 120.226392][ T8339] ? __pfx_raw_ioctl+0x10/0x10 [ 120.226404][ T8339] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.226422][ T8339] __do_fast_syscall_32+0xe7/0x970 [ 120.226438][ T8339] ? lockdep_hardirqs_on+0x78/0x100 [ 120.226453][ T8339] do_fast_syscall_32+0x32/0x70 [ 120.226469][ T8339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.226484][ T8339] RIP: 0023:0xf702efec [ 120.226501][ T8339] Code: Unable to access opcode bytes at 0xf702efc2. [ 120.226506][ T8339] RSP: 002b:00000000f541b4a4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 120.226519][ T8339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 120.226525][ T8339] RDX: 00000000f541b4e8 RSI: 00000000f73f7ff4 RDI: 00000000f541b4f0 [ 120.226532][ T8339] RBP: 00000000f541b4f0 R08: 0000000000000000 R09: 0000000000000000 [ 120.226538][ T8339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.226544][ T8339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.226554][ T8339] [ 120.226558][ T8339] [ 120.338322][ T8339] Allocated by task 6946: [ 120.339970][ T8339] kasan_save_stack+0x30/0x50 [ 120.341787][ T8339] kasan_save_track+0x14/0x30 [ 120.343662][ T8339] __kasan_kmalloc+0xaa/0xb0 [ 120.345483][ T8339] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 120.347926][ T8339] kvasprintf+0xbc/0x150 [ 120.349627][ T8339] kvasprintf_const+0x66/0x1a0 [ 120.351579][ T8339] kobject_set_name_vargs+0x5a/0x140 [ 120.353686][ T8339] dev_set_name+0xc7/0x100 [ 120.355474][ T8339] usb_add_gadget+0x520/0x920 [ 120.357156][ T8339] usb_add_gadget_udc+0x26/0x70 [ 120.358771][ T8339] dummy_udc_probe+0x69e/0x960 [ 120.360670][ T8339] platform_probe+0x106/0x1d0 [ 120.362584][ T8339] really_probe+0x241/0xa60 [ 120.364393][ T8339] __driver_probe_device+0x20e/0x450 [ 120.366486][ T8339] device_driver_attach+0xd1/0x220 [ 120.368521][ T8339] bind_store+0xf4/0x190 [ 120.370204][ T8339] drv_attr_store+0x74/0xb0 [ 120.372034][ T8339] sysfs_kf_write+0xf2/0x150 [ 120.373883][ T8339] kernfs_fop_write_iter+0x3e0/0x5f0 [ 120.375969][ T8339] vfs_write+0x6ac/0x1050 [ 120.377690][ T8339] ksys_write+0x12a/0x250 [ 120.379137][ T8339] __do_fast_syscall_32+0xe7/0x970 [ 120.381115][ T8339] do_fast_syscall_32+0x32/0x70 [ 120.383080][ T8339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.385574][ T8339] [ 120.386551][ T8339] Freed by task 8349: [ 120.388135][ T8339] kasan_save_stack+0x30/0x50 [ 120.389981][ T8339] kasan_save_track+0x14/0x30 [ 120.391888][ T8339] kasan_save_free_info+0x3b/0x70 [ 120.393688][ T8339] __kasan_slab_free+0x5f/0x80 [ 120.395389][ T8339] kfree+0x22b/0x6c0 [ 120.396949][ T8339] kfree_const+0x5a/0x70 [ 120.398661][ T8339] kobject_put+0x218/0x640 [ 120.400435][ T8339] put_device+0x1f/0x30 [ 120.402114][ T8339] platform_remove+0x5f/0x80 [ 120.403953][ T8339] device_remove+0xcb/0x180 [ 120.405762][ T8339] device_release_driver_internal+0x44e/0x620 [ 120.408053][ T8339] unbind_store+0xf8/0x110 [ 120.409485][ T8339] drv_attr_store+0x74/0xb0 [ 120.411308][ T8339] sysfs_kf_write+0xf2/0x150 [ 120.413186][ T8339] kernfs_fop_write_iter+0x3e0/0x5f0 [ 120.415277][ T8339] vfs_write+0x6ac/0x1050 [ 120.416997][ T8339] ksys_write+0x12a/0x250 [ 120.418723][ T8339] __do_fast_syscall_32+0xe7/0x970 [ 120.420794][ T8339] do_fast_syscall_32+0x32/0x70 [ 120.422763][ T8339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.424855][ T8339] [ 120.425821][ T8339] The buggy address belongs to the object at ffff8880259d6320 [ 120.425821][ T8339] which belongs to the cache kmalloc-16 of size 16 [ 120.431132][ T8339] The buggy address is located 0 bytes inside of [ 120.431132][ T8339] freed 16-byte region [ffff8880259d6320, ffff8880259d6330) [ 120.436337][ T8339] [ 120.437318][ T8339] The buggy address belongs to the physical page: [ 120.439849][ T8339] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x259d6 [ 120.443282][ T8339] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 120.446028][ T8339] page_type: f5(slab) [ 120.447312][ T8339] raw: 00fff00000000000 ffff88801bc42640 dead000000000100 dead000000000122 [ 120.450399][ T8339] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 120.453777][ T8339] page dumped because: kasan: bad access detected [ 120.456322][ T8339] page_owner tracks the page as allocated [ 120.458555][ T8339] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5732, tgid 5732 (syz-executor), ts 50667698935, free_ts 50613145230 [ 120.465648][ T8339] post_alloc_hook+0xfd/0x120 [ 120.467549][ T8339] get_page_from_freelist+0xf48/0x3530 [ 120.469707][ T8339] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 120.472098][ T8339] new_slab+0xa2/0x640 [ 120.473694][ T8339] ___slab_alloc+0x5d1/0x800 [ 120.475156][ T8339] __kmalloc_cache_node_noprof+0x391/0x6c0 [ 120.477339][ T8339] hugetlb_cgroup_css_alloc+0x4e5/0x740 [ 120.479468][ T8339] cgroup_apply_control_enable+0x602/0xdd0 [ 120.481796][ T8339] cgroup_mkdir+0x57f/0x1330 [ 120.483648][ T8339] kernfs_iop_mkdir+0x111/0x190 [ 120.485577][ T8339] vfs_mkdir+0x361/0x850 [ 120.486998][ T8339] filename_mkdirat+0x48b/0x5e0 [ 120.488726][ T8339] __ia32_sys_mkdirat+0x88/0xc0 [ 120.490663][ T8339] __do_fast_syscall_32+0xe7/0x970 [ 120.492706][ T8339] do_fast_syscall_32+0x32/0x70 [ 120.494644][ T8339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.497124][ T8339] page last free pid 5734 tgid 5734 stack trace: [ 120.499093][ T8339] __free_frozen_pages+0x79f/0x1090 [ 120.500956][ T8339] qlist_free_all+0x47/0xf0 [ 120.502723][ T8339] kasan_quarantine_reduce+0x1a0/0x1f0 [ 120.504854][ T8339] __kasan_slab_alloc+0x69/0x90 [ 120.506777][ T8339] __kmalloc_cache_noprof+0x265/0x6c0 [ 120.508839][ T8339] ref_tracker_alloc+0x190/0x590 [ 120.510648][ T8339] netdev_queue_update_kobjects+0x2db/0x6f0 [ 120.512467][ T8339] netdev_register_kobject+0x2e9/0x410 [ 120.514531][ T8339] register_netdevice+0x15b6/0x25a0 [ 120.516543][ T8339] cfg80211_register_netdevice+0x149/0x310 [ 120.518761][ T8339] ieee80211_if_add+0x1108/0x1a70 [ 120.520453][ T8339] ieee80211_register_hw+0x3c40/0x4580 [ 120.522293][ T8339] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 120.524525][ T8339] hwsim_new_radio_nl+0xc6b/0x13f0 [ 120.526568][ T8339] genl_family_rcv_msg_doit+0x214/0x300 [ 120.528748][ T8339] genl_rcv_msg+0x560/0x800 [ 120.530434][ T8339] [ 120.531202][ T8339] Memory state around the buggy address: [ 120.533380][ T8339] ffff8880259d6200: fa fb fc fc 00 07 fc fc fa fb fc fc 00 00 fc fc [ 120.536505][ T8339] ffff8880259d6280: fa fb fc fc 00 00 fc fc fa fb fc fc 00 04 fc fc [ 120.539615][ T8339] >ffff8880259d6300: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 120.542753][ T8339] ^ [ 120.544660][ T8339] ffff8880259d6380: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 120.547398][ T8339] ffff8880259d6400: 00 00 fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 120.550477][ T8339] ================================================================== [ 120.578497][ T8339] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.580989][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT(full) [ 120.583851][ T8339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.587040][ T8339] Call Trace: [ 120.588135][ T8339] [ 120.589077][ T8339] dump_stack_lvl+0x100/0x190 [ 120.590584][ T8339] vpanic+0x552/0x970 [ 120.591873][ T8339] ? __pfx_vpanic+0x10/0x10 [ 120.593321][ T8339] ? string+0x471/0x4d0 [ 120.594717][ T8339] panic+0xd1/0xe0 [ 120.596190][ T8339] ? __pfx_panic+0x10/0x10 [ 120.597708][ T8339] ? string+0x471/0x4d0 [ 120.599153][ T8339] ? preempt_schedule_common+0x42/0xc0 [ 120.600877][ T8339] check_panic_on_warn.cold+0x19/0x34 [ 120.602594][ T8339] end_report.part.0+0x3a/0x90 [ 120.604107][ T8339] kasan_report.cold+0xe/0x18 [ 120.605629][ T8339] ? string+0x471/0x4d0 [ 120.606976][ T8339] string+0x471/0x4d0 [ 120.608245][ T8339] ? __pfx_string+0x10/0x10 [ 120.609673][ T8339] ? __lock_acquire+0x49f/0x1a40 [ 120.611236][ T8339] vsnprintf+0x422/0x1300 [ 120.612652][ T8339] ? __pfx_vsnprintf+0x10/0x10 [ 120.614214][ T8339] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.616292][ T8339] ? is_bpf_text_address+0x94/0x1a0 [ 120.617901][ T8339] snprintf+0xc7/0x100 [ 120.619232][ T8339] ? __pfx_snprintf+0x10/0x10 [ 120.620779][ T8339] ? arch_stack_walk+0xa6/0xf0 [ 120.622368][ T8339] dev_vprintk_emit+0x375/0x3e0 [ 120.623948][ T8339] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 120.625735][ T8339] ? __kasan_kmalloc+0xaa/0xb0 [ 120.627299][ T8339] ? __kmalloc_noprof+0x322/0x820 [ 120.628967][ T8339] ? raw_alloc_io_data+0x14d/0x1c0 [ 120.630621][ T8339] ? raw_ioctl+0x1214/0x2b80 [ 120.632186][ T8339] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.633983][ T8339] ? __do_fast_syscall_32+0xe7/0x970 [ 120.635672][ T8339] ? do_fast_syscall_32+0x32/0x70 [ 120.637680][ T8339] dev_printk_emit+0xd2/0x10d [ 120.639672][ T8339] ? __pfx_dev_printk_emit+0x10/0x10 [ 120.641911][ T8339] __dev_printk+0xcb/0x100 [ 120.643797][ T8339] _dev_err+0xef/0x127 [ 120.645509][ T8339] ? __pfx__dev_err+0x10/0x10 [ 120.647509][ T8339] ? dummy_queue+0x3ca/0xb00 [ 120.649420][ T8339] ? find_held_lock+0x2b/0x80 [ 120.651390][ T8339] ? raw_process_ep0_io+0x314/0x9c0 [ 120.653565][ T8339] raw_process_ep0_io.cold+0x65/0x7f [ 120.655777][ T8339] raw_ioctl+0x1248/0x2b80 [ 120.657636][ T8339] ? __pfx_raw_ioctl+0x10/0x10 [ 120.659632][ T8339] ? __pfx_raw_ioctl+0x10/0x10 [ 120.661214][ T8339] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.663480][ T8339] __do_fast_syscall_32+0xe7/0x970 [ 120.665636][ T8339] ? lockdep_hardirqs_on+0x78/0x100 [ 120.667817][ T8339] do_fast_syscall_32+0x32/0x70 [ 120.669856][ T8339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.672522][ T8339] RIP: 0023:0xf702efec [ 120.674222][ T8339] Code: Unable to access opcode bytes at 0xf702efc2. [ 120.676342][ T8339] RSP: 002b:00000000f541b4a4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 120.678995][ T8339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 120.681599][ T8339] RDX: 00000000f541b4e8 RSI: 00000000f73f7ff4 RDI: 00000000f541b4f0 [ 120.684102][ T8339] RBP: 00000000f541b4f0 R08: 0000000000000000 R09: 0000000000000000 [ 120.687323][ T8339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.690594][ T8339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.693832][ T8339] [ 120.695809][ T8339] Kernel Offset: disabled [ 120.697619][ T8339] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:03:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000023dc2f RBX=ffffffff8e891480 RCX=ffffffff8bb82335 RDX=0000000000000000 RSI=ffffffff8e1a2c97 RDI=ffffffff8c3fe580 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb808ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000005fa3d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000206425 RBX=ffff88801c742540 RCX=ffffffff8bb82335 RDX=0000000000000000 RSI=ffffffff8e1a2c97 RDI=ffffffff8c3fe580 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb808ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0bf204f1f0 CR3=0000000028e8f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f305 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000434f1c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b6e3227 R15=ffffffff85a0f2a0 RIP=ffffffff85a0f32f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e115c CR3=000000004fba9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88802b533c68 RCX=ffffffff91c37201 RDX=0000000000000000 RSI=ffffffff8c3fe500 RDI=ffffffff8e466938 RBP=0000000000000003 RSP=ffffc900066c7868 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b846 R12=ffffc900066c7990 R13=ffffc900066c7940 R14=ffffc900066c7940 R15=ffffc900066c7974 RIP=ffffffff81edeee0 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0bf2c2a880 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3d177a CR3=0000000025276000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfffc00 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a446be0e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a446ca250 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bf25f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bf2552c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bf25f1b20 0000560f24cfa788 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a446bd510 0000560a446c7410 0000000000000031 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000