last executing test programs: 4.169634903s ago: executing program 3 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 4.02990215s ago: executing program 3 (id=572): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040) 4.029411881s ago: executing program 3 (id=573): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) 3.889868211s ago: executing program 1 (id=576): openat$fb0(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x33) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 3.100086305s ago: executing program 3 (id=583): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.978477072s ago: executing program 1 (id=584): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a00000003000000200000002000000001000000") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000102)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000103)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000104)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000105)=0xf9) 2.87638536s ago: executing program 1 (id=585): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x11, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x5411, &(0x7f0000000100)) sendmsg$key(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYBLOB="021006080a0000002dbd7000fddbdf250800120000000100000000000e00000006006c00020500000100000000000000fe88000000000000"], 0x50}}, 0x4000010) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) r7 = getpid() syz_pidfd_open(r7, 0x0) sched_setscheduler(r7, 0x5, &(0x7f0000000000)=0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2.189657617s ago: executing program 3 (id=588): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(0x0) pipe(&(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.129573348s ago: executing program 2 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) write(0xffffffffffffffff, &(0x7f0000000280)='ACME\n\x00', 0x5) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) 2.129058836s ago: executing program 2 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1280101, 0x0, 0x0, 0x81, 0x5}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000004180)={0x20, 0x0, r4, {0x5, 0x0, 0x6, 0x5e7}}, 0x20) 2.096609015s ago: executing program 3 (id=591): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000480)="bd265a7d307dc091cb3be1b0d816ad080c6e2346be8222cfaee69fe6c00b06c4abb36608ea667ccba9d783d7c14927f71dcc633dbbe4309ef912d21b3cf89a5f", 0x40}, {0x0}, {&(0x7f0000001980)}], 0x3}}], 0x1, 0x4040040) 2.020230666s ago: executing program 1 (id=592): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x30) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="330000f6000000006344b610f1cd92ec3a485f5578efb2ceb0b6b96a66fad112334822436e2fde91a5d2c0b6e6184aea9b85c33e058929802d717e5acecf75c31cb52fbcb626e6765dc113be2c"], 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r6 = syz_open_dev$dvb_demux(0x0, 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) listen(0xffffffffffffffff, 0x100101) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) 2.019879003s ago: executing program 2 (id=593): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a0000000300000020000000200000000100000001") ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000102)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000103)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000104)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000105)=0xf9) 1.730316498s ago: executing program 2 (id=594): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x0, 0x0}) 1.362620916s ago: executing program 0 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x14b100, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='dummy_udc.0', 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.269953781s ago: executing program 0 (id=597): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.022881979s ago: executing program 1 (id=598): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, 0x0}]) 849.457549ms ago: executing program 2 (id=599): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 782.382052ms ago: executing program 2 (id=600): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x11, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x5411, &(0x7f0000000100)) sendmsg$key(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYBLOB="021006080a0000002dbd7000fddbdf250800120000000100000000000e00000006006c00020500000100000000000000fe88000000000000"], 0x50}}, 0x4000010) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) r7 = getpid() syz_pidfd_open(r7, 0x0) sched_setscheduler(r7, 0x5, &(0x7f0000000000)=0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 428.398791ms ago: executing program 0 (id=601): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000001c0)) pipe(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 316.35592ms ago: executing program 0 (id=602): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a0000000300000020000000200000000100000001") ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000102)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000103)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000104)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000105)=0xf9) 64.98612ms ago: executing program 1 (id=603): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x3, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0xd, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x40000a9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484451], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x20, 0x7e, 0x9, 0x9602, 0x40006, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10f0, &(0x7f0000000880)=ANY=[]) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 359.987µs ago: executing program 0 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 0s ago: executing program 0 (id=605): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 0 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) write(0xffffffffffffffff, &(0x7f0000000280)='ACME\n\x00', 0x5) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40073' (ED25519) to the list of known hosts. [ 42.641533][ T5703] cgroup: Unknown subsys name 'net' [ 42.789610][ T5703] cgroup: Unknown subsys name 'cpuset' [ 42.794855][ T5703] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.770792][ T5703] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.215637][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.219818][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.222392][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.227863][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.231552][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.234946][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.238420][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.239924][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.242848][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.244614][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.249982][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.250125][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.253497][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.256467][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.258463][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.262499][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.267119][ T5758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.272015][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.273262][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.277450][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.785745][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.789036][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.791407][ T5754] bridge_slave_0: entered allmulticast mode [ 48.794202][ T5754] bridge_slave_0: entered promiscuous mode [ 48.813468][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.816030][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.818293][ T5754] bridge_slave_1: entered allmulticast mode [ 48.821119][ T5754] bridge_slave_1: entered promiscuous mode [ 48.881587][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.887645][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.938008][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.941179][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.944234][ T5751] bridge_slave_0: entered allmulticast mode [ 48.948157][ T5751] bridge_slave_0: entered promiscuous mode [ 48.966966][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.969336][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.971784][ T5742] bridge_slave_0: entered allmulticast mode [ 48.974927][ T5742] bridge_slave_0: entered promiscuous mode [ 48.993919][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.997090][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.000106][ T5751] bridge_slave_1: entered allmulticast mode [ 49.004043][ T5751] bridge_slave_1: entered promiscuous mode [ 49.009214][ T5754] team0: Port device team_slave_0 added [ 49.014672][ T5754] team0: Port device team_slave_1 added [ 49.017800][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.020167][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.022495][ T5742] bridge_slave_1: entered allmulticast mode [ 49.025334][ T5742] bridge_slave_1: entered promiscuous mode [ 49.089604][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.112332][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.114723][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.117152][ T5744] bridge_slave_0: entered allmulticast mode [ 49.120320][ T5744] bridge_slave_0: entered promiscuous mode [ 49.123956][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.126288][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.128449][ T5744] bridge_slave_1: entered allmulticast mode [ 49.131072][ T5744] bridge_slave_1: entered promiscuous mode [ 49.142752][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.157510][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.173192][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.176001][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.184789][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.198768][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.201142][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.210486][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.216429][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.221050][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.225510][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.262913][ T5742] team0: Port device team_slave_0 added [ 49.266762][ T5742] team0: Port device team_slave_1 added [ 49.276956][ T5751] team0: Port device team_slave_0 added [ 49.280458][ T5744] team0: Port device team_slave_0 added [ 49.297745][ T5751] team0: Port device team_slave_1 added [ 49.301622][ T5744] team0: Port device team_slave_1 added [ 49.322998][ T5754] hsr_slave_0: entered promiscuous mode [ 49.325847][ T5754] hsr_slave_1: entered promiscuous mode [ 49.338690][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.340923][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.350895][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.360735][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.363884][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.372405][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.383981][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.386383][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.394763][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.399804][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.402057][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.410117][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.414156][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.416731][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.424762][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.448047][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.450290][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.458323][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.498780][ T5742] hsr_slave_0: entered promiscuous mode [ 49.501996][ T5742] hsr_slave_1: entered promiscuous mode [ 49.504207][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.506144][ T5742] Cannot create hsr debugfs directory [ 49.565627][ T5744] hsr_slave_0: entered promiscuous mode [ 49.568380][ T5744] hsr_slave_1: entered promiscuous mode [ 49.571298][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 49.573537][ T5744] Cannot create hsr debugfs directory [ 49.589154][ T5751] hsr_slave_0: entered promiscuous mode [ 49.592218][ T5751] hsr_slave_1: entered promiscuous mode [ 49.595224][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 49.597876][ T5751] Cannot create hsr debugfs directory [ 49.897667][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.910730][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.913677][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.919736][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.922553][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.927816][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.939589][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.945585][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.000606][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.005523][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.012347][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.020043][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.023597][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.031429][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.044697][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.049250][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.094427][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.104346][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.107987][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.112960][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.119926][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.124692][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.127706][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.131876][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.186611][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.199573][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.204221][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.208334][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.213631][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.216772][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.222291][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.233369][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.237674][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.249600][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.265791][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.268579][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.286226][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.288565][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.304146][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.333461][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.336845][ T5748] Bluetooth: hci3: command tx timeout [ 50.337139][ T5758] Bluetooth: hci0: command tx timeout [ 50.337348][ T64] Bluetooth: hci2: command tx timeout [ 50.337459][ T64] Bluetooth: hci1: command tx timeout [ 50.362845][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.365258][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.379168][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.381651][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.415864][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.458063][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.468604][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.470900][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.480448][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.491252][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.493635][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.512690][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.522662][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.525002][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.541545][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.543834][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.708427][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.726873][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.768365][ T5744] veth0_vlan: entered promiscuous mode [ 50.784599][ T5754] veth0_vlan: entered promiscuous mode [ 50.790491][ T5744] veth1_vlan: entered promiscuous mode [ 50.798223][ T5754] veth1_vlan: entered promiscuous mode [ 50.809552][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.831608][ T5744] veth0_macvtap: entered promiscuous mode [ 50.835114][ T5754] veth0_macvtap: entered promiscuous mode [ 50.841016][ T5754] veth1_macvtap: entered promiscuous mode [ 50.847266][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.855516][ T5744] veth1_macvtap: entered promiscuous mode [ 50.892188][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.910371][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.923076][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.929267][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.941460][ T5751] veth0_vlan: entered promiscuous mode [ 50.953946][ T5742] veth0_vlan: entered promiscuous mode [ 50.963213][ T5751] veth1_vlan: entered promiscuous mode [ 50.974169][ T5742] veth1_vlan: entered promiscuous mode [ 51.001606][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.066452][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.068047][ T5742] veth0_macvtap: entered promiscuous mode [ 51.070807][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.082148][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.085280][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.085622][ T5742] veth1_macvtap: entered promiscuous mode [ 51.094374][ T5751] veth0_macvtap: entered promiscuous mode [ 51.108688][ T5751] veth1_macvtap: entered promiscuous mode [ 51.117578][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.121975][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.131753][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.150850][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.161538][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.164871][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.166606][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.174034][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.182983][ T5754] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.201995][ T5754] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.210856][ T5754] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.220117][ T5754] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.242137][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.256748][ T789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.268699][ T789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.314134][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.320324][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.351332][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.353852][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.359197][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.362009][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.386978][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.398974][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.459708][ T5904] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 51.469939][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.489142][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.526215][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.529496][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.532259][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.534965][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.577138][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.585221][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.593279][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.603680][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.636950][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.666486][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.667722][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.116174][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.276306][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 52.306084][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.369295][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.385286][ T5893] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 52.388141][ T5893] usb 5-1: can't read configurations, error -71 [ 52.416271][ T5758] Bluetooth: hci0: command tx timeout [ 52.427136][ T5758] Bluetooth: hci1: command tx timeout [ 52.428265][ T5745] Bluetooth: hci3: command tx timeout [ 52.432254][ T5748] Bluetooth: hci2: command tx timeout [ 52.466038][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 52.479612][ T41] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.485050][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 52.495760][ T41] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 52.499584][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.507339][ T41] usb 6-1: config 0 descriptor?? [ 52.683801][ T5944] null_blk: disk nullb1 created [ 52.715859][ T5947] Bluetooth: MGMT ver 1.23 [ 52.835814][ T5961] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 53.014543][ T41] usbhid 6-1:0.0: can't add hid device: -71 [ 53.018118][ T41] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 53.067651][ T41] usb 6-1: USB disconnect, device number 2 [ 53.582657][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 53.596788][ T5988] vlan2: entered promiscuous mode [ 53.599101][ T5988] ip6gretap0: entered promiscuous mode [ 53.836144][ T5993] syzkaller0: entered promiscuous mode [ 53.838619][ T5993] syzkaller0: entered allmulticast mode [ 53.885106][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 54.091229][ T6007] IPVS: length: 217 != 24 [ 54.153526][ T6011] binder: 6010:6011 ioctl c00c6211 0 returned -14 [ 54.199511][ T6005] Zero length message leads to an empty skb [ 54.466071][ T5114] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.496723][ T5745] Bluetooth: hci1: command tx timeout [ 54.496745][ T5748] Bluetooth: hci0: command tx timeout [ 54.506391][ T5748] Bluetooth: hci3: command tx timeout [ 54.506417][ T5745] Bluetooth: hci2: command tx timeout [ 54.616292][ T5114] usb 5-1: Using ep0 maxpacket: 8 [ 54.629219][ T5114] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.635832][ T5114] usb 5-1: config 0 has no interface number 0 [ 54.644724][ T5114] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.651112][ T5114] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.655011][ T5114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.671614][ T5114] usb 5-1: config 0 descriptor?? [ 54.681511][ T5114] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 54.851965][ T6048] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 54.883123][ T34] usb 5-1: USB disconnect, device number 4 [ 55.426045][ T5114] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.538577][ T6094] random: crng reseeded on system resumption [ 55.548537][ T6094] Restarting kernel threads ... [ 55.551725][ T6094] Done restarting kernel threads. [ 55.586068][ T5114] usb 7-1: Using ep0 maxpacket: 8 [ 55.595455][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 55.606037][ T5114] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.609315][ T6097] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 55.610878][ T5114] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.620569][ T5114] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 55.627692][ T5114] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 55.631971][ T5114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.635345][ T5114] usb 7-1: Product: syz [ 55.637653][ T5114] usb 7-1: Manufacturer: syz [ 55.639789][ T5114] usb 7-1: SerialNumber: syz [ 55.655562][ T5114] usb 7-1: config 0 descriptor?? [ 55.662991][ T6073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.663285][ T6101] binder: 6100:6101 ioctl c00c6211 0 returned -14 [ 55.872239][ T5114] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 55.892999][ T5114] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 56.039918][ T6119] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 56.042459][ T6119] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 56.046144][ T6119] udc dummy_udc.0: failed to start g1: -22 [ 56.048466][ T6119] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 56.056327][ T6119] UDC core: g1: couldn't find an available UDC or it's busy [ 56.079953][ C3] powermate: config urb returned -71 [ 56.083061][ T41] usb 7-1: USB disconnect, device number 2 [ 56.083956][ C3] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 56.088823][ C3] powermate: config urb returned -71 [ 56.090968][ C3] powermate: usb_submit_urb(config) failed [ 56.406067][ T919] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.556706][ T919] usb 6-1: Using ep0 maxpacket: 8 [ 56.571292][ T919] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 56.576265][ T5745] Bluetooth: hci2: command tx timeout [ 56.578306][ T5745] Bluetooth: hci3: command tx timeout [ 56.580406][ T5748] Bluetooth: hci1: command tx timeout [ 56.582490][ T919] usb 6-1: config 0 has no interface number 0 [ 56.582924][ T919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.583462][ T919] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.586922][ T5745] Bluetooth: hci0: command tx timeout [ 56.592151][ T919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.612007][ T919] usb 6-1: config 0 descriptor?? [ 56.618846][ T919] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 56.818387][ T919] usb 6-1: USB disconnect, device number 3 [ 57.300149][ T6149] binder: 6148:6149 ioctl c00c6211 0 returned -14 [ 57.434798][ T6154] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 57.438457][ T6154] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 57.441719][ T6154] udc dummy_udc.0: failed to start g1: -22 [ 57.443774][ T6154] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 57.449189][ T6154] UDC core: g1: couldn't find an available UDC or it's busy [ 58.376815][ T6175] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 58.379756][ T6175] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 58.382923][ T6175] udc dummy_udc.0: failed to start g1: -22 [ 58.385514][ T6175] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 58.393115][ T6175] UDC core: g1: couldn't find an available UDC or it's busy [ 58.434704][ T6179] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 58.791652][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.795322][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.800274][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.807002][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.812894][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.817710][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.822241][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.827963][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.831745][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.835831][ T6193] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 59.363658][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 59.371925][ T6199] vlan2: entered promiscuous mode [ 59.565169][ T6202] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 59.647859][ T6210] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 59.715495][ T6216] random: crng reseeded on system resumption [ 59.723736][ T6216] Restarting kernel threads ... [ 59.726285][ T6216] Done restarting kernel threads. [ 59.772778][ T6218] syzkaller0: entered promiscuous mode [ 59.774883][ T6218] syzkaller0: entered allmulticast mode [ 59.956053][ T919] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.126030][ T919] usb 8-1: Using ep0 maxpacket: 16 [ 60.129843][ T919] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.134235][ T919] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.137227][ T919] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 60.140871][ T919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.148007][ T919] usb 8-1: config 0 descriptor?? [ 60.456013][ T5114] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.606003][ T5114] usb 7-1: Using ep0 maxpacket: 8 [ 60.611647][ T919] usbhid 8-1:0.0: can't add hid device: -71 [ 60.613605][ T919] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 60.615522][ T5114] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 60.618009][ T919] usb 8-1: USB disconnect, device number 2 [ 60.619390][ T5114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.624087][ T5114] usb 7-1: Product: syz [ 60.625821][ T5114] usb 7-1: Manufacturer: syz [ 60.627818][ T5114] usb 7-1: SerialNumber: syz [ 60.631971][ T5114] usb 7-1: config 0 descriptor?? [ 60.639648][ T5114] gspca_main: sq930x-2.14.0 probing 2770:930c [ 60.991443][ T6234] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 61.276474][ T5114] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 61.506070][ T5114] gspca_sq930x: Sensor ov9630 not yet treated [ 61.508120][ T5114] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 61.514518][ T5114] usb 7-1: USB disconnect, device number 3 [ 62.159826][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.163039][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.204916][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.211935][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.276063][ T5842] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.306170][ T5842] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.309747][ T5842] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.313501][ T5842] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.430952][ T6274] syzkaller0: entered promiscuous mode [ 62.433206][ T6274] syzkaller0: entered allmulticast mode [ 62.686127][ T919] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.741547][ T6287] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 62.856003][ T919] usb 8-1: Using ep0 maxpacket: 8 [ 62.860940][ T919] usb 8-1: unable to get BOS descriptor or descriptor too short [ 62.864876][ T919] usb 8-1: config 4 has an invalid interface number: 96 but max is 0 [ 62.867668][ T919] usb 8-1: config 4 has no interface number 0 [ 62.869711][ T919] usb 8-1: config 4 interface 96 has no altsetting 0 [ 62.873678][ T919] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=4b.37 [ 62.876801][ T919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.879638][ T919] usb 8-1: Product: syz [ 62.881401][ T919] usb 8-1: Manufacturer: syz [ 62.883437][ T919] usb 8-1: SerialNumber: syz [ 63.144785][ T919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:4.96/input/input9 [ 63.149976][ T5137] bcm5974 8-1:4.96: could not read from device [ 63.156694][ T5137] bcm5974 8-1:4.96: could not read from device [ 63.158850][ T919] usb 8-1: USB disconnect, device number 3 [ 63.164375][ T5137] bcm5974 8-1:4.96: could not read from device [ 63.437831][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 63.448035][ T6295] vlan2: entered promiscuous mode [ 63.450356][ T6295] ip6gretap0: entered promiscuous mode [ 63.563461][ T6299] syzkaller0: entered promiscuous mode [ 63.565817][ T6299] syzkaller0: entered allmulticast mode [ 64.528083][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 64.542461][ T6319] vlan2: entered promiscuous mode [ 64.544160][ T6319] ip6gretap0: entered promiscuous mode [ 64.858684][ T6329] UDC core: g1: couldn't find an available UDC or it's busy [ 66.847204][ T6363] binder: 6362:6363 ioctl c00c6211 0 returned -14 [ 67.522124][ T6369] random: crng reseeded on system resumption [ 67.529381][ T6369] Restarting kernel threads ... [ 67.531330][ T6369] Done restarting kernel threads. [ 67.568542][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 67.885396][ T6394] random: crng reseeded on system resumption [ 67.893692][ T6394] Restarting kernel threads ... [ 67.901169][ T6394] Done restarting kernel threads. [ 68.704768][ T6410] binder: 6409:6410 ioctl c00c6211 0 returned -14 [ 68.761269][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 69.308620][ T6415] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 69.323459][ T6415] sound umpC3D2: No UMP Group is found in FB [ 70.466465][ T6444] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 70.899045][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.902105][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.456359][ T6459] syzkaller0: entered promiscuous mode [ 71.458647][ T6459] syzkaller0: entered allmulticast mode [ 71.484427][ T6460] warning: `syz.2.186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.490608][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 71.610983][ T6462] binder: 6461:6462 ioctl c00c6211 0 returned -14 [ 72.966193][ T5532] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.136076][ T5532] usb 6-1: Using ep0 maxpacket: 16 [ 73.140635][ T5532] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 73.144893][ T5532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.149593][ T5532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.153653][ T5532] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 73.159075][ T5532] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 73.162882][ T5532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.170701][ T5532] usb 6-1: config 0 descriptor?? [ 73.603329][ T5532] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0002/input/input13 [ 73.672202][ T5532] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0002/input/input14 [ 73.778781][ T5532] kye 0003:0458:5013.0002: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 73.794014][ T5532] usb 6-1: USB disconnect, device number 4 [ 73.796621][ T6492] binder: 6491:6492 ioctl c00c6211 0 returned -14 [ 73.816958][ T6493] fido_id[6493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 76.280670][ T6563] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 76.462883][ T6574] fuse: Bad value for 'fd' [ 76.510714][ T6576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.573322][ T6585] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 76.600401][ T6587] fuse: Bad value for 'fd' [ 76.758276][ T6595] fuse: Bad value for 'fd' [ 76.872190][ T6609] fuse: Bad value for 'fd' [ 77.431517][ T6626] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.255'. [ 77.435298][ T6626] veth0_to_bond: default FDB implementation only supports local addresses [ 77.446893][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.449468][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.662829][ T42] audit: type=1326 audit(1785643557.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.670420][ T42] audit: type=1326 audit(1785643557.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.679402][ T42] audit: type=1326 audit(1785643557.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.686266][ T42] audit: type=1326 audit(1785643557.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.692948][ T42] audit: type=1326 audit(1785643557.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.699662][ T42] audit: type=1326 audit(1785643557.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.706224][ T42] audit: type=1326 audit(1785643557.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.712572][ T42] audit: type=1326 audit(1785643557.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.716015][ T5894] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 77.719236][ T42] audit: type=1326 audit(1785643557.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.727830][ T42] audit: type=1326 audit(1785643557.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 77.762645][ T6632] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.880065][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 77.883705][ T5894] usb 6-1: not running at top speed; connect to a high speed hub [ 77.888621][ T5894] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 77.892711][ T5894] usb 6-1: language id specifier not provided by device, defaulting to English [ 77.901127][ T5894] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 77.904035][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.907115][ T5894] usb 6-1: SerialNumber: syz [ 78.120861][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.126850][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.151529][ T5894] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 78.204243][ T5894] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.214098][ T5894] usb 6-1: USB disconnect, device number 5 [ 78.232033][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 78.461887][ T6650] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 78.954189][ T6665] syzkaller0: entered promiscuous mode [ 78.957283][ T6665] syzkaller0: entered allmulticast mode [ 80.082279][ T6667] syzkaller0: entered promiscuous mode [ 80.084062][ T6667] syzkaller0: entered allmulticast mode [ 80.126260][ T6680] syzkaller0: entered promiscuous mode [ 80.130176][ T6680] syzkaller0: entered allmulticast mode [ 81.055978][ T5114] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.129921][ T6713] syzkaller0: entered promiscuous mode [ 81.131662][ T6713] syzkaller0: entered allmulticast mode [ 81.143481][ T3385] cfg80211: failed to load regulatory.db [ 81.236108][ T5114] usb 7-1: Using ep0 maxpacket: 8 [ 81.247932][ T5114] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.251141][ T5114] usb 7-1: config 0 has no interface number 0 [ 81.252872][ T5114] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.260521][ T5114] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.265629][ T5114] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.273419][ T5114] usb 7-1: config 0 descriptor?? [ 81.281588][ T5114] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 81.483708][ T5114] usb 7-1: USB disconnect, device number 4 [ 82.306514][ T3385] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.356098][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 82.362702][ T6733] vlan2: entered promiscuous mode [ 82.746015][ T3385] usb 7-1: Using ep0 maxpacket: 16 [ 83.271965][ T3385] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.275305][ T3385] usb 7-1: config 0 interface 0 has no altsetting 0 [ 83.277357][ T3385] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 83.280066][ T3385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.283796][ T3385] usb 7-1: config 0 descriptor?? [ 83.546137][ T5821] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.716103][ T5821] usb 8-1: Using ep0 maxpacket: 8 [ 83.723107][ T5821] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.725711][ T5821] usb 8-1: config 0 has no interface number 0 [ 83.727946][ T5821] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.732077][ T5821] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.736853][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.759355][ T5821] usb 8-1: config 0 descriptor?? [ 83.785491][ T5821] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 83.987578][ T5821] usb 8-1: USB disconnect, device number 4 [ 83.990724][ T3385] usbhid 7-1:0.0: can't add hid device: -71 [ 84.292291][ T3385] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 84.295421][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 84.341661][ T3385] usb 7-1: USB disconnect, device number 5 [ 84.454792][ T6759] syzkaller0: entered promiscuous mode [ 84.456963][ T6759] syzkaller0: entered allmulticast mode [ 85.259338][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 85.423218][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 85.461110][ T6768] vlan2: entered promiscuous mode [ 85.462972][ T6768] ip6gretap0: entered promiscuous mode [ 85.522147][ T6781] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.541309][ T6781] CIFS: Attempting to mount //127.0.0.1/share [ 86.241617][ T6781] CIFS: VFS: Error connecting to socket. Aborting operation. [ 86.244214][ T6781] CIFS: VFS: cifs_mount failed w/return code = -4 [ 86.273332][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 86.334657][ T6804] syzkaller0: entered promiscuous mode [ 86.337204][ T6804] syzkaller0: entered allmulticast mode [ 86.635342][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 87.274199][ T6830] CIFS: Attempting to mount //127.0.0.1/share [ 87.290802][ T6816] vlan2: entered promiscuous mode [ 87.330410][ T6817] syzkaller0: entered promiscuous mode [ 87.332756][ T6817] syzkaller0: entered allmulticast mode [ 87.412356][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 87.979197][ T6830] CIFS: VFS: Error connecting to socket. Aborting operation. [ 87.982468][ T6830] CIFS: VFS: cifs_mount failed w/return code = -4 [ 88.338600][ T6853] syzkaller0: entered promiscuous mode [ 88.340330][ T6853] syzkaller0: entered allmulticast mode [ 88.615217][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 89.172898][ T6867] vlan2: entered promiscuous mode [ 89.249188][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 89.449423][ T6884] CIFS: Attempting to mount //127.0.0.1/share [ 89.485561][ T6887] syzkaller0: entered promiscuous mode [ 89.487467][ T6887] syzkaller0: entered allmulticast mode [ 90.161100][ T6884] CIFS: VFS: Error connecting to socket. Aborting operation. [ 90.164158][ T6884] CIFS: VFS: cifs_mount failed w/return code = -4 [ 90.367039][ T6890] syzkaller0: entered promiscuous mode [ 90.368754][ T6890] syzkaller0: entered allmulticast mode [ 91.322657][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 91.330676][ T6910] vlan2: entered promiscuous mode [ 91.505630][ T6926] CIFS: Attempting to mount //127.0.0.1/share [ 92.194566][ T6926] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.197181][ T6926] CIFS: VFS: cifs_mount failed w/return code = -4 [ 92.374023][ T6950] syzkaller0: entered promiscuous mode [ 92.377731][ T6950] syzkaller0: entered allmulticast mode [ 92.534602][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 93.348403][ T6957] vlan2: entered promiscuous mode [ 93.451956][ T6966] CIFS: Attempting to mount //127.0.0.1/share [ 94.161305][ T6966] CIFS: VFS: Error connecting to socket. Aborting operation. [ 94.163705][ T6966] CIFS: VFS: cifs_mount failed w/return code = -4 [ 94.504680][ T6989] syzkaller0: entered promiscuous mode [ 94.506799][ T6989] syzkaller0: entered allmulticast mode [ 94.812232][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 94.885767][ T7016] CIFS: Attempting to mount //127.0.0.1/share [ 95.556687][ T7016] CIFS: VFS: Error connecting to socket. Aborting operation. [ 95.559633][ T7016] CIFS: VFS: cifs_mount failed w/return code = -4 [ 95.745153][ T7012] vlan2: entered promiscuous mode [ 95.893189][ T7045] binder: 7043:7045 ioctl c00c6211 0 returned -14 [ 96.008108][ T7054] CIFS: Attempting to mount //127.0.0.1/share [ 96.040574][ T7057] fuse: Bad value for 'fd' [ 96.140625][ T7064] syzkaller0: entered promiscuous mode [ 96.142316][ T7064] syzkaller0: entered allmulticast mode [ 96.723749][ T7054] CIFS: VFS: Error connecting to socket. Aborting operation. [ 96.728811][ T7054] CIFS: VFS: cifs_mount failed w/return code = -4 [ 96.841575][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 96.914787][ T7078] fuse: Bad value for 'fd' [ 97.022325][ T7083] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 97.081124][ T7083] sound umpC3D2: No UMP Group is found in FB [ 97.118146][ T7089] CIFS: Attempting to mount //127.0.0.1/share [ 97.125498][ T7089] CIFS: VFS: Error connecting to socket. Aborting operation. [ 97.129162][ T7089] CIFS: VFS: cifs_mount failed w/return code = -111 [ 97.220354][ T7070] vlan2: entered promiscuous mode [ 97.407662][ T7102] binder: 7101:7102 ioctl c00c6211 0 returned -14 [ 97.583753][ T7112] fuse: Bad value for 'fd' [ 97.663723][ T7114] syzkaller0: entered promiscuous mode [ 97.666356][ T7114] syzkaller0: entered allmulticast mode [ 97.891955][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 98.634520][ T7120] vlan2: entered promiscuous mode [ 98.643925][ T7136] CIFS: Attempting to mount //127.0.0.1/share [ 99.036125][ T846] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 99.205983][ T846] usb 7-1: Using ep0 maxpacket: 8 [ 99.211238][ T846] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.214067][ T846] usb 7-1: config 0 has no interface number 0 [ 99.216577][ T846] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.220048][ T846] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.223730][ T846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.229691][ T846] usb 7-1: config 0 descriptor?? [ 99.234307][ T846] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 99.351908][ T7136] CIFS: VFS: Error connecting to socket. Aborting operation. [ 99.355185][ T7136] CIFS: VFS: cifs_mount failed w/return code = -4 [ 99.436527][ T846] usb 7-1: USB disconnect, device number 6 [ 100.109462][ T7168] CIFS: Attempting to mount //127.0.0.1/share [ 100.117837][ T7168] CIFS: VFS: Error connecting to socket. Aborting operation. [ 100.121061][ T7168] CIFS: VFS: cifs_mount failed w/return code = -111 [ 100.206815][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 100.221504][ T7170] vlan2: entered promiscuous mode [ 101.039227][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 101.047709][ T7192] vlan2: entered promiscuous mode [ 101.186109][ T5821] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.490208][ T7211] CIFS: Attempting to mount //127.0.0.1/share [ 101.493357][ T7211] CIFS: VFS: Error connecting to socket. Aborting operation. [ 101.496029][ T7211] CIFS: VFS: cifs_mount failed w/return code = -111 [ 101.916016][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 101.919436][ T5821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.922214][ T5821] usb 6-1: config 0 has no interface number 0 [ 101.924206][ T5821] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.927652][ T5821] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.930745][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.939340][ T5821] usb 6-1: config 0 descriptor?? [ 101.942983][ T5821] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 101.975621][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 101.994142][ T7220] vlan2: entered promiscuous mode [ 102.148811][ T5851] usb 6-1: USB disconnect, device number 6 [ 102.234522][ T7231] binder: 7230:7231 ioctl c00c6211 0 returned -14 [ 102.733330][ T7240] syzkaller0: entered promiscuous mode [ 102.735125][ T7240] syzkaller0: entered allmulticast mode [ 103.011014][ T7249] fuse: Unknown parameter 'group_i00000000000000000000' [ 103.235011][ T7256] CIFS: Attempting to mount //127.0.0.1/share [ 103.256015][ T5851] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 103.406525][ T5851] usb 7-1: Using ep0 maxpacket: 16 [ 103.413094][ T5851] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.417380][ T5851] usb 7-1: config 0 interface 0 has no altsetting 0 [ 103.419914][ T5851] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 103.422639][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.431148][ T5851] usb 7-1: config 0 descriptor?? [ 103.536129][ T5532] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 103.685998][ T5532] usb 6-1: Using ep0 maxpacket: 8 [ 103.690881][ T5532] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.694061][ T5532] usb 6-1: config 0 has no interface number 0 [ 103.696424][ T5532] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.699894][ T5532] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.703205][ T5532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.708362][ T5532] usb 6-1: config 0 descriptor?? [ 103.712320][ T5532] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 103.901166][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 103.903494][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 103.909665][ T5851] usb 7-1: USB disconnect, device number 7 [ 103.920247][ T5835] usb 6-1: USB disconnect, device number 7 [ 103.959023][ T7256] CIFS: VFS: Error connecting to socket. Aborting operation. [ 103.961324][ T7256] CIFS: VFS: cifs_mount failed w/return code = -4 [ 104.453683][ T7266] syzkaller0: entered promiscuous mode [ 104.455763][ T7266] syzkaller0: entered allmulticast mode [ 104.667073][ T7274] binder: 7273:7274 ioctl c00c6211 0 returned -14 [ 105.046392][ T7283] CIFS: Attempting to mount //127.0.0.1/share [ 105.097645][ T7285] fuse: Unknown parameter 'group_id00000000000000000000' [ 105.336017][ T846] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.426045][ T5821] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 105.496101][ T846] usb 7-1: Using ep0 maxpacket: 16 [ 105.499972][ T846] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.504374][ T846] usb 7-1: config 0 interface 0 has no altsetting 0 [ 105.507180][ T846] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.510841][ T846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.516061][ T846] usb 7-1: config 0 descriptor?? [ 105.576079][ T5821] usb 8-1: Using ep0 maxpacket: 8 [ 105.578672][ T5821] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.581026][ T5821] usb 8-1: config 0 has no interface number 0 [ 105.582732][ T5821] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.585545][ T5821] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.588327][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.592050][ T5821] usb 8-1: config 0 descriptor?? [ 105.600748][ T5821] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 105.769099][ T7283] CIFS: VFS: Error connecting to socket. Aborting operation. [ 105.771431][ T7283] CIFS: VFS: cifs_mount failed w/return code = -4 [ 105.807419][ T5821] usb 8-1: USB disconnect, device number 5 [ 106.106078][ T846] usbhid 7-1:0.0: can't add hid device: -71 [ 106.410563][ T7303] syzkaller0: entered promiscuous mode [ 106.412856][ T7303] syzkaller0: entered allmulticast mode [ 106.510313][ T846] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 106.666444][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 106.679040][ T7311] vlan2: entered promiscuous mode [ 106.710412][ T846] usb 7-1: USB disconnect, device number 8 [ 106.758957][ T7317] binder: 7316:7317 ioctl c00c6211 0 returned -14 [ 106.916188][ T7325] CIFS: Attempting to mount //127.0.0.1/share [ 107.634024][ T7325] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.636921][ T7325] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.711499][ T7333] fuse: Unknown parameter 'group_id00000000000000000000' [ 107.966045][ T5894] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 108.116039][ T5894] usb 8-1: Using ep0 maxpacket: 16 [ 108.119350][ T5894] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.122959][ T5894] usb 8-1: config 0 interface 0 has no altsetting 0 [ 108.125363][ T5894] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 108.128870][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.160614][ T5894] usb 8-1: config 0 descriptor?? [ 108.300996][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 108.312532][ T7344] vlan2: entered promiscuous mode [ 108.403696][ T7346] binder: 7345:7346 ioctl c00c6211 0 returned -14 [ 108.642634][ T5894] usbhid 8-1:0.0: can't add hid device: -71 [ 108.644716][ T5894] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 108.654668][ T5894] usb 8-1: USB disconnect, device number 6 [ 109.749195][ T7369] syzkaller0: entered promiscuous mode [ 109.751606][ T7369] syzkaller0: entered allmulticast mode [ 109.984898][ T7375] binder: 7374:7375 ioctl c00c6211 0 returned -14 [ 110.221183][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 110.227465][ T7377] vlan2: entered promiscuous mode [ 110.892313][ T7390] syzkaller0: entered promiscuous mode [ 110.894099][ T7390] syzkaller0: entered allmulticast mode [ 111.660538][ T7407] binder: 7406:7407 ioctl c00c6211 0 returned -14 [ 111.666516][ T5532] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 111.836010][ T5532] usb 8-1: Using ep0 maxpacket: 8 [ 111.840395][ T5532] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.843859][ T5532] usb 8-1: config 0 has no interface number 0 [ 111.846975][ T5532] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.851452][ T5532] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.855555][ T5532] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.862113][ T5532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.872768][ T5532] usb 8-1: config 0 descriptor?? [ 111.895571][ T5532] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.987641][ T7411] syzkaller0: entered promiscuous mode [ 111.990086][ T7411] syzkaller0: entered allmulticast mode [ 112.080548][ T7405] iowarrior 8-1:0.1: Error -90 while submitting URB [ 112.086663][ T5835] usb 8-1: USB disconnect, device number 7 [ 112.655666][ T7433] syzkaller0: entered promiscuous mode [ 112.658559][ T7433] syzkaller0: entered allmulticast mode [ 113.424720][ T7448] binder: 7447:7448 ioctl c00c6211 0 returned -14 [ 113.775005][ T7454] syzkaller0: entered promiscuous mode [ 113.777526][ T7454] syzkaller0: entered allmulticast mode [ 114.106875][ T7464] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 114.352840][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 114.359012][ T7472] vlan2: entered promiscuous mode [ 114.360715][ T7472] syz_tun: entered promiscuous mode [ 114.563748][ T7476] syzkaller0: entered promiscuous mode [ 114.566181][ T7476] syzkaller0: entered allmulticast mode [ 115.067843][ T7489] binder: 7488:7489 ioctl c00c6211 0 returned -14 [ 115.770057][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 115.780841][ T7496] vlan2: entered promiscuous mode [ 115.782491][ T7496] syz_tun: entered promiscuous mode [ 115.814856][ T7498] UDC core: g1: couldn't find an available UDC or it's busy [ 117.162745][ T7531] binder: 7530:7531 ioctl c00c6211 0 returned -14 [ 117.528856][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 117.535729][ T7533] vlan2: entered promiscuous mode [ 117.538909][ T7533] syz_tun: entered promiscuous mode [ 118.001024][ T7544] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 118.003282][ T7544] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 118.005785][ T7544] ================================================================== [ 118.008317][ T7544] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 118.010748][ T7544] Read of size 8 at addr ffff888028cff7f0 by task syz.0.606/7544 [ 118.014788][ T7544] [ 118.015949][ T7544] CPU: 3 UID: 0 PID: 7544 Comm: syz.0.606 Not tainted syzkaller #0 PREEMPT(full) [ 118.015966][ T7544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.015974][ T7544] Call Trace: [ 118.015986][ T7544] [ 118.015991][ T7544] dump_stack_lvl+0x100/0x190 [ 118.016008][ T7544] print_report+0x13d/0x4b0 [ 118.016026][ T7544] ? __virt_addr_valid+0x239/0x430 [ 118.016040][ T7544] ? dummy_free_request+0x8a/0x90 [ 118.016051][ T7544] kasan_report+0xdf/0x1c0 [ 118.016067][ T7544] ? dummy_free_request+0x8a/0x90 [ 118.016083][ T7544] dummy_free_request+0x8a/0x90 [ 118.016093][ T7544] uvc_function_bind+0x181a/0x1939 [ 118.016107][ T7544] ? __pfx_uvc_function_bind+0x10/0x10 [ 118.016118][ T7544] usb_add_function+0x219/0x890 [ 118.016136][ T7544] configfs_composite_bind+0xd83/0x1960 [ 118.016156][ T7544] ? kernfs_create_link+0x1bd/0x240 [ 118.016172][ T7544] gadget_bind_driver+0x28c/0xbf0 [ 118.016184][ T7544] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 118.016201][ T7544] ? __pfx_gadget_bind_driver+0x10/0x10 [ 118.016213][ T7544] really_probe+0x241/0xa60 [ 118.016230][ T7544] __driver_probe_device+0x20e/0x450 [ 118.016245][ T7544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.016260][ T7544] driver_probe_device+0x4a/0x140 [ 118.016275][ T7544] __driver_attach+0x21f/0x5b0 [ 118.016291][ T7544] ? __pfx___driver_attach+0x10/0x10 [ 118.016305][ T7544] bus_for_each_dev+0x13e/0x1d0 [ 118.016318][ T7544] ? __pfx_bus_for_each_dev+0x10/0x10 [ 118.016359][ T7544] ? bus_add_driver+0x2b5/0x5b0 [ 118.016383][ T7544] bus_add_driver+0x305/0x5b0 [ 118.016400][ T7544] driver_register+0x1e2/0x360 [ 118.016417][ T7544] usb_gadget_register_driver_owner+0x132/0x210 [ 118.016430][ T7544] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 118.016446][ T7544] configfs_write_iter+0x302/0x4e0 [ 118.016459][ T7544] vfs_write+0x6ac/0x1050 [ 118.016469][ T7544] ? __pfx_configfs_write_iter+0x10/0x10 [ 118.016479][ T7544] ? __pfx_vfs_write+0x10/0x10 [ 118.016488][ T7544] ? find_held_lock+0x2b/0x80 [ 118.016505][ T7544] ksys_write+0x12a/0x250 [ 118.016515][ T7544] ? __pfx_ksys_write+0x10/0x10 [ 118.016526][ T7544] __do_fast_syscall_32+0xe7/0x970 [ 118.016546][ T7544] do_fast_syscall_32+0x32/0x70 [ 118.016561][ T7544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.016575][ T7544] RIP: 0023:0xf701efec [ 118.016589][ T7544] Code: Unable to access opcode bytes at 0xf701efc2. [ 118.016603][ T7544] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 118.016617][ T7544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 118.016625][ T7544] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 118.016633][ T7544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.016642][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.016650][ T7544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.016660][ T7544] [ 118.016665][ T7544] [ 118.105413][ T7544] Allocated by task 111: [ 118.105424][ T7544] kasan_save_stack+0x30/0x50 [ 118.105443][ T7544] kasan_save_track+0x14/0x30 [ 118.105457][ T7544] __kasan_kmalloc+0xaa/0xb0 [ 118.105470][ T7544] __kmalloc_flags_noprof+0x371/0x8b0 [ 118.105483][ T7544] __pcs_replace_empty_main+0x41a/0x680 [ 118.105495][ T7544] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 118.105510][ T7544] free_iova_fast+0x270/0x4b0 [ 118.105526][ T7544] fq_ring_free_locked+0x1ac/0x370 [ 118.105539][ T7544] fq_flush_timeout+0x22f/0x340 [ 118.105551][ T7544] call_timer_fn+0x19a/0x610 [ 118.105565][ T7544] __run_timers+0x757/0xb00 [ 118.105580][ T7544] run_timer_base+0x114/0x190 [ 118.105595][ T7544] run_timer_softirq+0x1a/0x50 [ 118.105610][ T7544] handle_softirqs+0x1ea/0x9b0 [ 118.105622][ T7544] __irq_exit_rcu+0x162/0x210 [ 118.105634][ T7544] irq_exit_rcu+0x9/0x30 [ 118.105646][ T7544] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 118.105660][ T7544] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.105672][ T7544] [ 118.105675][ T7544] The buggy address belongs to the object at ffff888028cff700 [ 118.105675][ T7544] which belongs to the cache kmalloc-128 of size 128 [ 118.105684][ T7544] The buggy address is located 112 bytes to the right of [ 118.105684][ T7544] allocated 128-byte region [ffff888028cff700, ffff888028cff780) [ 118.105694][ T7544] [ 118.105697][ T7544] The buggy address belongs to the physical page: [ 118.105702][ T7544] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28cff [ 118.105715][ T7544] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 118.105723][ T7544] page_type: f5(slab) [ 118.105733][ T7544] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 118.105743][ T7544] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.105749][ T7544] page dumped because: kasan: bad access detected [ 118.105754][ T7544] page_owner tracks the page as allocated [ 118.105758][ T7544] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5742, tgid 5742 (syz-executor), ts 50520361645, free_ts 16441241802 [ 118.105776][ T7544] post_alloc_hook+0xfd/0x120 [ 118.105788][ T7544] get_page_from_freelist+0xf48/0x3530 [ 118.105801][ T7544] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 118.105814][ T7544] new_slab+0xa2/0x640 [ 118.105824][ T7544] refill_objects+0xe3/0x410 [ 118.105836][ T7544] __pcs_replace_empty_main+0x376/0x680 [ 118.105847][ T7544] __kmalloc_cache_noprof+0x479/0x6c0 [ 118.105858][ T7544] __hw_addr_create+0x57/0x220 [ 118.105870][ T7544] __hw_addr_add_ex+0x32b/0x650 [ 118.105879][ T7544] dev_mc_add+0xb6/0x110 [ 118.105890][ T7544] igmp_group_added+0x83a/0x9a0 [ 118.105901][ T7544] ____ip_mc_inc_group+0x7e3/0x10d0 [ 118.105911][ T7544] ip_mc_up+0x154/0x390 [ 118.105921][ T7544] inetdev_event+0x6c3/0x17f0 [ 118.105933][ T7544] notifier_call_chain+0x99/0x3f0 [ 118.105946][ T7544] call_netdevice_notifiers_info+0xbe/0x110 [ 118.105957][ T7544] page last free pid 10 tgid 10 stack trace: [ 118.105963][ T7544] __free_frozen_pages+0x79f/0x1090 [ 118.105981][ T7544] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 118.105994][ T7544] __apply_to_page_range+0xb1d/0x1520 [ 118.106010][ T7544] __kasan_release_vmalloc+0xd7/0xe0 [ 118.106022][ T7544] purge_vmap_node+0x210/0xb40 [ 118.106035][ T7544] __purge_vmap_area_lazy+0x90a/0xc00 [ 118.106048][ T7544] drain_vmap_area_work+0x27/0x40 [ 118.106062][ T7544] process_one_work+0xa23/0x1940 [ 118.106084][ T7544] worker_thread+0x5ef/0xe50 [ 118.106101][ T7544] kthread+0x370/0x450 [ 118.106116][ T7544] ret_from_fork+0x72b/0xd50 [ 118.106130][ T7544] ret_from_fork_asm+0x1a/0x30 [ 118.106146][ T7544] [ 118.106149][ T7544] Memory state around the buggy address: [ 118.106156][ T7544] ffff888028cff680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.106164][ T7544] ffff888028cff700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.106173][ T7544] >ffff888028cff780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.106180][ T7544] ^ [ 118.106187][ T7544] ffff888028cff800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.106196][ T7544] ffff888028cff880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.106204][ T7544] ================================================================== [ 118.108890][ T7544] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.108902][ T7544] CPU: 3 UID: 0 PID: 7544 Comm: syz.0.606 Not tainted syzkaller #0 PREEMPT(full) [ 118.108917][ T7544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.108924][ T7544] Call Trace: [ 118.108929][ T7544] [ 118.108934][ T7544] dump_stack_lvl+0x100/0x190 [ 118.108949][ T7544] vpanic+0x552/0x970 [ 118.108962][ T7544] ? __pfx_vpanic+0x10/0x10 [ 118.108976][ T7544] ? dummy_free_request+0x8a/0x90 [ 118.108988][ T7544] panic+0xd1/0xe0 [ 118.108999][ T7544] ? __pfx_panic+0x10/0x10 [ 118.109010][ T7544] ? dummy_free_request+0x8a/0x90 [ 118.109022][ T7544] ? preempt_schedule_common+0x42/0xc0 [ 118.109038][ T7544] check_panic_on_warn.cold+0x19/0x34 [ 118.109050][ T7544] end_report.part.0+0x3a/0x90 [ 118.109065][ T7544] kasan_report.cold+0xe/0x18 [ 118.109086][ T7544] ? dummy_free_request+0x8a/0x90 [ 118.109098][ T7544] dummy_free_request+0x8a/0x90 [ 118.109108][ T7544] uvc_function_bind+0x181a/0x1939 [ 118.109124][ T7544] ? __pfx_uvc_function_bind+0x10/0x10 [ 118.109137][ T7544] usb_add_function+0x219/0x890 [ 118.109157][ T7544] configfs_composite_bind+0xd83/0x1960 [ 118.109177][ T7544] ? kernfs_create_link+0x1bd/0x240 [ 118.109193][ T7544] gadget_bind_driver+0x28c/0xbf0 [ 118.109205][ T7544] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 118.109222][ T7544] ? __pfx_gadget_bind_driver+0x10/0x10 [ 118.109234][ T7544] really_probe+0x241/0xa60 [ 118.109251][ T7544] __driver_probe_device+0x20e/0x450 [ 118.109267][ T7544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.109283][ T7544] driver_probe_device+0x4a/0x140 [ 118.109298][ T7544] __driver_attach+0x21f/0x5b0 [ 118.109313][ T7544] ? __pfx___driver_attach+0x10/0x10 [ 118.109328][ T7544] bus_for_each_dev+0x13e/0x1d0 [ 118.109340][ T7544] ? __pfx_bus_for_each_dev+0x10/0x10 [ 118.109352][ T7544] ? bus_add_driver+0x2b5/0x5b0 [ 118.109367][ T7544] bus_add_driver+0x305/0x5b0 [ 118.109381][ T7544] driver_register+0x1e2/0x360 [ 118.109398][ T7544] usb_gadget_register_driver_owner+0x132/0x210 [ 118.109411][ T7544] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 118.109427][ T7544] configfs_write_iter+0x302/0x4e0 [ 118.109438][ T7544] vfs_write+0x6ac/0x1050 [ 118.109448][ T7544] ? __pfx_configfs_write_iter+0x10/0x10 [ 118.109460][ T7544] ? __pfx_vfs_write+0x10/0x10 [ 118.109469][ T7544] ? find_held_lock+0x2b/0x80 [ 118.109486][ T7544] ksys_write+0x12a/0x250 [ 118.109496][ T7544] ? __pfx_ksys_write+0x10/0x10 [ 118.109507][ T7544] __do_fast_syscall_32+0xe7/0x970 [ 118.109523][ T7544] do_fast_syscall_32+0x32/0x70 [ 118.109538][ T7544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.109552][ T7544] RIP: 0023:0xf701efec [ 118.109567][ T7544] Code: Unable to access opcode bytes at 0xf701efc2. [ 118.109572][ T7544] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 118.109583][ T7544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 118.109590][ T7544] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 118.109597][ T7544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.109603][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.109609][ T7544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.109619][ T7544] [ 118.110143][ T7544] Kernel Offset: disabled VM DIAGNOSIS: 04:06:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ebe7f40 RBP=ffffffff8ebe7f40 RSP=ffffc900045ff3c0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e55d1a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f855c0 CR3=0000000042c7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000015b191 RBX=ffff88801c742540 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a99ad RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f4a190 CR3=00000000670dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffff888051ad13c0 RCX=ffffffff8292325b RDX=1ffff11009e25e41 RSI=ffffffff828bcde2 RDI=ffff888051ad13c0 RBP=ffff88804f12f1a0 RSP=ffffc90002e0f9a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88804f23da40 R13=ffff888051ad13c0 R14=ffff888051ad13c8 R15=ffffc90002e0fdb0 RIP=ffffffff8209ae0b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8e92854880 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9eec7225d0 CR3=0000000060f5f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c40000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000001000000 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 372f6b636f6c622f 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00323a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563a9a7359f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e921f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1b454f4e435c05 525f4443461e454f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e435c051819045e 4f4d4e4b4d051a04 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004453faa314167f 0000000563a9a724 0000000000000141 0045534142415441 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 652a369dfc7d651c 7300647307cad34f 70002a5d392d311a 64333722362a2441 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7ffffe7f7f7f 7f767f7f6ffbdf7f 7f777b7d7b7f7f7f 6f7b7777fe7f6f7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563a9a731970 0000563a9a72a650 0000563a9a725510 0000563a9a7311b0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d4f521f1b00 3a3130303033303a 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000701 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc9002622f298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000034353754 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6f71e8 R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73c872c CR3=0000000050c02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000