last executing test programs: 11.310380771s ago: executing program 3 (id=421): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf25030000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r3, 0x0, r6) 9.289735s ago: executing program 3 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, 0x0) r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(r1, 0x0, 0x0, 0x80800) 8.292572295s ago: executing program 3 (id=432): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 7.181418966s ago: executing program 2 (id=435): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6.178395497s ago: executing program 2 (id=436): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001ffffffff0000000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 5.130236741s ago: executing program 2 (id=441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000004c0)=""/206) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r3, &(0x7f0000000000)=""/64, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r6, r7, 0x4, r4}, 0x10) getdents(r0, &(0x7f0000000140)=""/166, 0xa6) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xfb, 0x80, 0x0, 0x4, 0x6, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0x0, 0xfffffff8, 0x8, 0x4, 0x6, 0x8, 0x0, '\x00', 0x0, 0x7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x3, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) lseek(r0, 0x0, 0x1) 5.009140197s ago: executing program 0 (id=442): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 4.812362462s ago: executing program 1 (id=444): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 4.727209227s ago: executing program 3 (id=445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf25030000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r3, 0x0, r6) 4.142002827s ago: executing program 0 (id=446): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.852424956s ago: executing program 2 (id=447): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000e963953ae968d31217f6736801fe5b03b10f02a8bac0a62d12d0876fd494b3485f4c6f247187b5d37a43908a77944f0e917dbf22bac9346a6d9a1994df327c3e302e8d6f9e4e6660320c04528f6b3b000000000000047cc82bc1dfab5abc454e9b4514ebff55fc0d142baecb3ecc8538bea9f88ca4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_io_uring_setup(0x432c, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x80000008}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x3, 0x8, 0x20}}, 0x188) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x80, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @private=0xa010101}}}}) close(r7) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 3.851134158s ago: executing program 1 (id=448): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3.670141081s ago: executing program 1 (id=449): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3.510947461s ago: executing program 2 (id=450): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.460567181s ago: executing program 3 (id=451): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.459538731s ago: executing program 0 (id=452): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001ffffffff0000000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2.542276628s ago: executing program 2 (id=453): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000"]}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) sendfile(r7, r7, 0x0, 0x1002000ff) 2.540140796s ago: executing program 0 (id=461): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001ffffffff0000000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x5, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2.536292798s ago: executing program 1 (id=454): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2.120154548s ago: executing program 1 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @local}]}, &(0x7f0000000180)=0xc) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000000640)={r4, &(0x7f0000000140)='\x00', 0x4100, &(0x7f0000000300)={@align=0x2, {0x7, 0x1, 0xfffffffb, 0x3}}, 0x1ff, &(0x7f0000000480), &(0x7f0000000600)=0xff}) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000680)=""/90, &(0x7f0000000700)=0x5a) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0436070a2200"], 0xa) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x562, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x77, 0xbd6, 0x1, {0x2, @raw_data="ad31fd3e8dd5644bb1fb36286a5753c1da20865e0eb89bcd72c31ddb8dfeeb656a22406e58c6dc043e233b95763608d21e69095c2028c810167ff854cb7b1f9706c1078e745cf10ac4e77f4e1d23662d9bc39c1317ce3bf569812d0105e22506ba9e970b832a81b8d6f391e25b1540c99ff139aba143fcf27be1d897af2d0e6f2d3fa84c5fbcc880c8333934724f00aeff7f0000000000006313269e5f28f01a4f298e3c4250033f83e8b729d169ad509fa3865789ee00"}, 0x400}) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="b12340097d58c3c5df252e000200"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) 1.231380522s ago: executing program 1 (id=456): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.22566742s ago: executing program 0 (id=465): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r9, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000080) 96.100216ms ago: executing program 0 (id=457): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 0s ago: executing program 3 (id=458): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8382' (ED25519) to the list of known hosts. [ 48.551560][ T5711] cgroup: Unknown subsys name 'net' [ 48.727288][ T5711] cgroup: Unknown subsys name 'cpuset' [ 48.731380][ T5711] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.913276][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.405185][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.406150][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.410223][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.411237][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.414136][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.417331][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.419561][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.422276][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.425046][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.425282][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.425726][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.428929][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.432053][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.432690][ T5731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.436013][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.437445][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.440221][ T5731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.448215][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.452266][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.455590][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.218382][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.221507][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.224006][ T5730] bridge_slave_0: entered allmulticast mode [ 55.226803][ T5730] bridge_slave_0: entered promiscuous mode [ 55.289952][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.293825][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.297015][ T5730] bridge_slave_1: entered allmulticast mode [ 55.300891][ T5730] bridge_slave_1: entered promiscuous mode [ 55.323452][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.326384][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.329277][ T5727] bridge_slave_0: entered allmulticast mode [ 55.332035][ T5727] bridge_slave_0: entered promiscuous mode [ 55.378446][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.381291][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.383699][ T5727] bridge_slave_1: entered allmulticast mode [ 55.386476][ T5727] bridge_slave_1: entered promiscuous mode [ 55.398431][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.400937][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.403303][ T5729] bridge_slave_0: entered allmulticast mode [ 55.406021][ T5729] bridge_slave_0: entered promiscuous mode [ 55.410984][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.425899][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.436482][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.439428][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.442297][ T5729] bridge_slave_1: entered allmulticast mode [ 55.445978][ T5729] bridge_slave_1: entered promiscuous mode [ 55.467366][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.470329][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.473296][ T5728] bridge_slave_0: entered allmulticast mode [ 55.477275][ T5728] bridge_slave_0: entered promiscuous mode [ 55.483574][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.506625][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.509419][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.512370][ T5728] bridge_slave_1: entered allmulticast mode [ 55.516173][ T5728] bridge_slave_1: entered promiscuous mode [ 55.532428][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.538454][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.544052][ T5730] team0: Port device team_slave_0 added [ 55.571162][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.576608][ T5730] team0: Port device team_slave_1 added [ 55.583646][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.589953][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.642019][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.644927][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.654804][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.661726][ T5727] team0: Port device team_slave_0 added [ 55.684027][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.686825][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.697267][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.702921][ T5727] team0: Port device team_slave_1 added [ 55.708501][ T5729] team0: Port device team_slave_0 added [ 55.711678][ T5729] team0: Port device team_slave_1 added [ 55.715582][ T5728] team0: Port device team_slave_0 added [ 55.726710][ T5728] team0: Port device team_slave_1 added [ 55.781398][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.784712][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.795396][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.810798][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.813867][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.822620][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.827374][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.830210][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.839938][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.844480][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.847102][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.856530][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.872828][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.874967][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.882224][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.890188][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.892641][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.902795][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.926452][ T5730] hsr_slave_0: entered promiscuous mode [ 55.929839][ T5730] hsr_slave_1: entered promiscuous mode [ 56.016044][ T5728] hsr_slave_0: entered promiscuous mode [ 56.019488][ T5728] hsr_slave_1: entered promiscuous mode [ 56.022228][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 56.024621][ T5728] Cannot create hsr debugfs directory [ 56.067754][ T5727] hsr_slave_0: entered promiscuous mode [ 56.070853][ T5727] hsr_slave_1: entered promiscuous mode [ 56.073624][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 56.075571][ T5727] Cannot create hsr debugfs directory [ 56.081224][ T5729] hsr_slave_0: entered promiscuous mode [ 56.083657][ T5729] hsr_slave_1: entered promiscuous mode [ 56.085799][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 56.087779][ T5729] Cannot create hsr debugfs directory [ 56.399547][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.411058][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.415838][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.423513][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.427735][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.434054][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.437437][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.442624][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.496419][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.504122][ T5740] Bluetooth: hci3: command tx timeout [ 56.504129][ T5088] Bluetooth: hci0: command tx timeout [ 56.504368][ T5088] Bluetooth: hci2: command tx timeout [ 56.506495][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.507205][ T5744] Bluetooth: hci1: command tx timeout [ 56.516771][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.526307][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.530485][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.538812][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.544219][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.551353][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.615308][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.622559][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.633799][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.640044][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.644638][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.651343][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.655636][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.663119][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.746104][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.752632][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.756780][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.763882][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.767988][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.774826][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.778584][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.785927][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.810196][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.855670][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.882165][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.885634][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.915134][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.918274][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.948865][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.994549][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.000016][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.023788][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.026818][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.039037][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.045829][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.048734][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.074469][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.092020][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.095050][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.099769][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.121087][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.124335][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.137294][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.140546][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.163253][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.166339][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.449802][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.506340][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.510137][ T5730] veth0_vlan: entered promiscuous mode [ 57.525922][ T5730] veth1_vlan: entered promiscuous mode [ 57.564287][ T5729] veth0_vlan: entered promiscuous mode [ 57.574571][ T5730] veth0_macvtap: entered promiscuous mode [ 57.579345][ T5729] veth1_vlan: entered promiscuous mode [ 57.587857][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.591546][ T5730] veth1_macvtap: entered promiscuous mode [ 57.608175][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.632471][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.642734][ T5729] veth0_macvtap: entered promiscuous mode [ 57.652504][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.660753][ T5729] veth1_macvtap: entered promiscuous mode [ 57.701345][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.750822][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.764187][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.772973][ T5727] veth0_vlan: entered promiscuous mode [ 57.800679][ T5728] veth0_vlan: entered promiscuous mode [ 57.808555][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.811649][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.821355][ T5728] veth1_vlan: entered promiscuous mode [ 57.836405][ T5727] veth1_vlan: entered promiscuous mode [ 57.847156][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.850770][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.854169][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.923712][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927519][ T5730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.928544][ T5728] veth0_macvtap: entered promiscuous mode [ 57.940980][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.946127][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.947896][ T5730] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 57.955926][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.961813][ T5728] veth1_macvtap: entered promiscuous mode [ 57.962300][ T5730] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 57.971644][ T5730] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 57.971681][ T5727] veth0_macvtap: entered promiscuous mode [ 57.989675][ T5730] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 57.996078][ T5727] veth1_macvtap: entered promiscuous mode [ 58.003965][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.007766][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.008837][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.017217][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.039389][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.057961][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.112950][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.118421][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.149340][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.149762][ T5881] input: syz1 as /devices/virtual/input/input5 [ 58.153010][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.181544][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.185549][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.200909][ T5881] db_root: cannot open: ./my_ [ 58.210093][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.213860][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.255850][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.259536][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.262446][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.295375][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.298918][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.302418][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308126][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.311196][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.314741][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.317543][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320761][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.325283][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.419374][ T5883] overlayfs: upper fs does not support file handles, falling back to index=off. [ 58.583998][ T5744] Bluetooth: hci2: command tx timeout [ 58.588745][ T5744] Bluetooth: hci1: command tx timeout [ 58.591499][ T5088] Bluetooth: hci0: command tx timeout [ 58.993629][ T5822] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 59.160901][ T5822] usb 8-1: config 150 has an invalid interface number: 204 but max is 2 [ 59.169516][ T5822] usb 8-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 59.173792][ T5822] usb 8-1: config 150 has no interface number 0 [ 59.175895][ T5822] usb 8-1: config 150 interface 204 has no altsetting 0 [ 59.178177][ T5822] usb 8-1: config 150 interface 1 has no altsetting 0 [ 59.185203][ T5822] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 59.188687][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.191267][ T5822] usb 8-1: Product: syz [ 59.192622][ T5822] usb 8-1: Manufacturer: syz [ 59.194930][ T5822] usb 8-1: SerialNumber: syz [ 59.417771][ T29] IPVS: starting estimator thread 0... [ 59.490908][ T5822] xr_serial 8-1:150.204: skipping garbage [ 59.493893][ T5822] xr_serial 8-1:150.204: xr_serial converter detected [ 59.573533][ T5907] IPVS: using max 43 ests per chain, 103200 per kthread [ 59.623652][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.777957][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.783273][ T5904] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 59.795745][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.799754][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.803299][ T5904] usb 6-1: Product: syz [ 59.805906][ T5904] usb 6-1: Manufacturer: syz [ 59.807931][ T5904] usb 6-1: SerialNumber: syz [ 59.824917][ T5912] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 59.827803][ T5912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.830896][ T5904] cdc_mbim 6-1:1.0: skipping garbage [ 59.833979][ T5912] vhci_hcd vhci_hcd.0: Device attached [ 60.055899][ T5906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.113502][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 60.116014][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 60.184538][ T5088] Bluetooth: hci3: command tx timeout [ 60.272978][ T5917] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 60.348306][ T5913] vhci_hcd: connection reset by peer [ 60.351934][ T5780] vhci_hcd vhci_hcd.2: stop threads [ 60.354262][ T5780] vhci_hcd vhci_hcd.2: release socket [ 60.357469][ T5780] vhci_hcd vhci_hcd.2: disconnect device [ 60.560028][ T5932] Zero length message leads to an empty skb [ 60.673585][ T64] Bluetooth: hci2: command tx timeout [ 60.676108][ T5744] Bluetooth: hci1: command tx timeout [ 60.678158][ T5088] Bluetooth: hci0: command tx timeout [ 60.722218][ T5906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.731649][ T5904] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 60.742248][ T5904] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 60.757075][ T5904] wwan wwan0: port wwan0mbim0 attached [ 60.772865][ T5904] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 76:9d:50:8d:31:37 [ 60.936899][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.939116][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.942410][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.945083][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.948430][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.950773][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.956080][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.958220][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.960672][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.962855][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.965266][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.967428][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.969553][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.971688][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.976043][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.978439][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.980609][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.982718][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 60.985163][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 60.987402][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 61.066427][ T5442] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 61.096306][ T5904] usb 6-1: USB disconnect, device number 2 [ 61.107626][ T5904] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 61.168079][ T5906] libceph: resolve '400' (ret=-3): failed [ 61.236851][ T5904] wwan wwan0: port wwan0mbim0 disconnected [ 61.392591][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 61.419570][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'. [ 61.458333][ T5822] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 61.462201][ T5822] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 61.789204][ T5822] usb 8-1: USB disconnect, device number 2 [ 61.805506][ T5822] xr_serial 8-1:150.204: device disconnected [ 62.421787][ T5088] Bluetooth: hci3: command tx timeout [ 62.753752][ T5088] Bluetooth: hci0: command tx timeout [ 62.756312][ T5744] Bluetooth: hci1: command tx timeout [ 62.758752][ T64] Bluetooth: hci2: command tx timeout [ 63.275216][ T5980] nbd0: detected capacity change from 0 to 32 [ 63.286781][ T955] block nbd0: Receive control failed (result -22) [ 63.370267][ T1297] block nbd0: Dead connection, failed to find a fallback [ 63.374447][ T1297] block nbd0: shutting down sockets [ 63.378361][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.383071][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.389355][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.392933][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.399758][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.404308][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.411693][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.415345][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.433144][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.436675][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.440842][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.444618][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.450082][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.454469][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.458896][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.462363][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.466719][ T5739] ldm_validate_partition_table(): Disk read failed. [ 63.470697][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.474570][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.475760][ T5988] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 63.479620][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.484232][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read [ 63.487941][ T5739] Dev nbd0: unable to read RDB block 0 [ 63.492143][ T5739] nbd0: unable to read partition table [ 63.507608][ T5739] ldm_validate_partition_table(): Disk read failed. [ 63.514752][ T5739] Dev nbd0: unable to read RDB block 0 [ 63.527169][ T5739] nbd0: unable to read partition table [ 64.553464][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.730469][ T5904] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.748600][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 64.755478][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 64.760478][ T5904] usb 6-1: Product: syz [ 64.764044][ T5904] usb 6-1: Manufacturer: syz [ 64.769196][ T5904] usb 6-1: SerialNumber: syz [ 65.151006][ T5904] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 65.233613][ T29] usb 42-1: device descriptor read/8, error -110 [ 65.425099][ T5904] usb 6-1: USB disconnect, device number 3 [ 65.500938][ T5904] usblp0: removed [ 65.654025][ T29] usb usb42-port1: attempt power cycle [ 65.926998][ T42] audit: type=1804 audit(1786151525.028:2): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.27" name="/newroot/8/file0" dev="tmpfs" ino=63 res=1 errno=0 [ 66.413261][ T29] usb usb42-port1: unable to enumerate USB device [ 66.673182][ T42] audit: type=1326 audit(1786151525.768:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.685437][ T6031] kvm: kvm [6030]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 66.690222][ T42] audit: type=1326 audit(1786151525.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.703607][ T42] audit: type=1326 audit(1786151525.768:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.711806][ T42] audit: type=1326 audit(1786151525.768:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.720308][ T42] audit: type=1326 audit(1786151525.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.728652][ T42] audit: type=1326 audit(1786151525.768:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.746586][ T42] audit: type=1326 audit(1786151525.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.763301][ T42] audit: type=1326 audit(1786151525.768:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.786366][ T42] audit: type=1326 audit(1786151525.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.1.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 66.833484][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.983565][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 66.990729][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.996963][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.005298][ T29] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 67.011463][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 67.022043][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 67.029378][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.040418][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.047714][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.400139][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 67.402461][ T29] usbtmc 5-1:16.0: can't read capabilities [ 67.637474][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.642549][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.648401][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.652165][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.655854][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.672742][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.676089][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.678912][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.682655][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.686368][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.689983][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.705924][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.708966][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.711753][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.714542][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.717344][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.886953][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.909498][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.957288][ T29] usb 5-1: USB disconnect, device number 2 [ 68.078098][ T5808] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 68.087345][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 68.101202][ T6045] cgroup: Unknown subsys name 'rlimit' [ 68.297200][ T5808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.300614][ T5808] usb 7-1: not running at top speed; connect to a high speed hub [ 68.305705][ T5808] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 68.308348][ T5808] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 68.313864][ T5808] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 68.318205][ T5808] usb 7-1: config 14 has no interface number 0 [ 68.324150][ T5808] usb 7-1: config 14 has no interface number 1 [ 68.326370][ T5808] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 68.333927][ T5808] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 68.340387][ T5808] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.350397][ T5808] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 68.354483][ T5808] usb 7-1: config 14 interface 57 has no altsetting 0 [ 68.358765][ T5808] usb 7-1: config 14 interface 228 has no altsetting 0 [ 68.366597][ T5808] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 68.372087][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.377250][ T5808] usb 7-1: Product: syz [ 68.378744][ T5808] usb 7-1: Manufacturer: syz [ 68.381494][ T5808] usb 7-1: SerialNumber: syz [ 69.075374][ T5808] legousbtower 7-1:14.57: interrupt endpoints not found [ 69.314379][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 69.911746][ T5808] legousbtower 7-1:14.228: get version request failed: -71 [ 69.914798][ T5808] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 69.934804][ T5808] usb 7-1: USB disconnect, device number 2 [ 70.013840][ T50] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 70.133517][ T5484] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.158835][ T6068] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 70.166179][ T50] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 70.171599][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 70.176936][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 70.181819][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.189121][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 70.196486][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 70.200700][ T50] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 70.205423][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 70.210266][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 70.215300][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.219790][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 70.225258][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 70.228307][ T50] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 70.231867][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 70.237164][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 70.241520][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.247084][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 70.252509][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 70.280263][ T50] usb 6-1: string descriptor 0 read error: -22 [ 70.282617][ T50] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 70.286356][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.293551][ T5484] usb 5-1: Using ep0 maxpacket: 8 [ 70.296171][ T50] adutux 6-1:168.0: interrupt endpoints not found [ 70.297657][ T5484] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.302921][ T5484] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.306101][ T5484] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 70.309867][ T5484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.315171][ T5484] usb 5-1: config 0 descriptor?? [ 70.322938][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 70.337407][ T6072] netlink: 140 bytes leftover after parsing attributes in process `syz.2.42'. [ 70.718689][ T50] usb 6-1: USB disconnect, device number 4 [ 70.870039][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x2 [ 70.873834][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x0 [ 70.876943][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x0 [ 70.880070][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x0 [ 70.883629][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x0 [ 70.886846][ T5484] saitek 0003:06A3:0CD0.0002: unknown main item tag 0x0 [ 70.907862][ T5484] saitek 0003:06A3:0CD0.0002: hidraw1: USB HID v0.04 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input0 [ 71.065480][ T6064] netlink: 'syz.0.40': attribute type 12 has an invalid length. [ 71.068016][ T6064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40'. [ 71.073501][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 71.074307][ T5808] usb 5-1: USB disconnect, device number 3 [ 71.139904][ T6075] 9pnet_virtio: no channels available for device syz [ 71.318395][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321925][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.357931][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 71.397815][ T6084] binder: 6080:6084 ioctl 400c620e 0 returned -14 [ 72.021316][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 72.863571][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.033542][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 73.112738][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.118113][ T9] usb 5-1: config 0 has no interfaces? [ 73.126116][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.131399][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.138860][ T9] usb 5-1: Product: syz [ 73.142700][ T9] usb 5-1: Manufacturer: syz [ 73.145872][ T9] usb 5-1: SerialNumber: syz [ 73.405136][ T9] usb 5-1: config 0 descriptor?? [ 73.940612][ T6128] ceph: No mds server is up or the cluster is laggy [ 74.252589][ T29] libceph: connect (1)[c::]:6789 error -101 [ 74.357318][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 74.391798][ T5808] usb 5-1: USB disconnect, device number 4 [ 74.599031][ T6164] Bluetooth: MGMT ver 1.23 [ 75.814203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.534819][ T6187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 76.536999][ T6187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.545446][ T6187] vhci_hcd vhci_hcd.0: Device attached [ 76.804669][ T6184] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 76.814084][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 76.820115][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.160369][ T6189] vhci_hcd: connection reset by peer [ 77.165283][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 77.174976][ T5780] vhci_hcd vhci_hcd.1: release socket [ 77.184611][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 77.214344][ T6199] process 'syz.0.59' launched './file0' with NULL argv: empty string added [ 77.222947][ T6200] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 77.225277][ T6200] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.239178][ T6200] vhci_hcd vhci_hcd.0: Device attached [ 77.513685][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 77.521522][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.583464][ T6200] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 78.840429][ T6220] ======================================================= [ 78.840429][ T6220] WARNING: The mand mount option has been deprecated and [ 78.840429][ T6220] and is ignored by this kernel. Remove the mand [ 78.840429][ T6220] option from the mount to silence this warning. [ 78.840429][ T6220] ======================================================= [ 79.225324][ T6201] vhci_hcd: connection reset by peer [ 79.238608][ T5780] vhci_hcd vhci_hcd.3: stop threads [ 79.241091][ T5780] vhci_hcd vhci_hcd.3: release socket [ 79.247871][ T5780] vhci_hcd vhci_hcd.3: disconnect device [ 79.753516][ T5838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.923591][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 79.927252][ T5838] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.930101][ T5838] usb 7-1: config 179 has no interface number 0 [ 79.932321][ T5838] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 79.939675][ T5838] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 79.943633][ T5838] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.947888][ T5838] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 79.952667][ T5838] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.962125][ T5838] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.966580][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.975404][ T6228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.325859][ C1] Unknown status report in ack skb [ 80.661831][ T6239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 80.663950][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.681730][ T6239] vhci_hcd vhci_hcd.0: Device attached [ 80.858039][ T1034] usb 7-1: USB disconnect, device number 3 [ 80.858153][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.862668][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.953534][ T56] usb 38-1: SetAddress Request (2) to port 0 [ 80.962703][ T56] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.065647][ T6241] vhci_hcd: connection reset by peer [ 81.069990][ T5780] vhci_hcd vhci_hcd.0: stop threads [ 81.071783][ T5780] vhci_hcd vhci_hcd.0: release socket [ 81.074988][ T5780] vhci_hcd vhci_hcd.0: disconnect device [ 81.303530][ T1034] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.468313][ T6244] dvmrp0: entered allmulticast mode [ 81.476292][ T6244] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 81.546113][ T34] cfg80211: failed to load regulatory.db [ 81.863962][ T24] usb 40-1: device descriptor read/8, error -110 [ 82.254819][ T24] usb usb40-port1: attempt power cycle [ 82.343429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.821904][ T29] usb 44-1: device descriptor read/8, error -110 [ 82.831440][ T24] usb usb40-port1: unable to enumerate USB device [ 83.163436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.296630][ T29] usb usb44-port1: attempt power cycle [ 84.225732][ T29] usb usb44-port1: unable to enumerate USB device [ 84.296511][ T1034] usb 7-1: unable to get BOS descriptor or descriptor too short [ 84.308121][ T1034] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 84.310743][ T1034] usb 7-1: can't read configurations, error -71 [ 84.355705][ T10] IPVS: starting estimator thread 0... [ 84.443551][ T6280] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.501234][ T5808] IPVS: starting estimator thread 0... [ 84.501634][ T29] IPVS: starting estimator thread 0... [ 84.593583][ T6288] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.603514][ T6287] IPVS: using max 43 ests per chain, 103200 per kthread [ 85.161530][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 85.161548][ T42] audit: type=1326 audit(1786151542.258:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.189808][ T42] audit: type=1326 audit(1786151542.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.208001][ T42] audit: type=1326 audit(1786151542.278:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.217994][ T6297] kvm: kvm [6296]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 85.225826][ T42] audit: type=1326 audit(1786151542.288:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.247721][ T42] audit: type=1326 audit(1786151542.288:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.267028][ T42] audit: type=1326 audit(1786151542.288:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.279857][ T42] audit: type=1326 audit(1786151542.288:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.289312][ T42] audit: type=1326 audit(1786151542.288:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 85.300079][ T42] audit: type=1326 audit(1786151542.288:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.84" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 86.150672][ T42] audit: type=1804 audit(1786151543.248:22): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.89" name="/newroot/21/file0" dev="tmpfs" ino=130 res=1 errno=0 [ 86.818654][ T56] usb 38-1: device descriptor read/8, error -110 [ 86.973487][ T5484] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.341692][ T6323] dvmrp0: entered allmulticast mode [ 87.580814][ T6323] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 87.827017][ T56] usb usb38-port1: attempt power cycle [ 88.363546][ T1034] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 88.394508][ T56] usb usb38-port1: unable to enumerate USB device [ 88.536018][ T6336] dvmrp0: entered allmulticast mode [ 88.544691][ T6336] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 88.555659][ T1034] usb 8-1: unable to get BOS descriptor or descriptor too short [ 88.561253][ T1034] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 88.566318][ T1034] usb 8-1: can't read configurations, error -71 [ 89.433508][ T5484] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.454659][ T5484] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 89.463537][ T5484] usb 5-1: can't read configurations, error -71 [ 90.766624][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 92.273479][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.471814][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 92.471826][ T42] audit: type=1326 audit(1786151548.568:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.481938][ T42] audit: type=1326 audit(1786151548.578:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.494001][ T42] audit: type=1326 audit(1786151548.588:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.504995][ T42] audit: type=1326 audit(1786151548.588:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.513785][ T42] audit: type=1326 audit(1786151548.588:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.517375][ T6392] kvm: kvm [6391]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 92.521893][ T42] audit: type=1326 audit(1786151548.588:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.534972][ T42] audit: type=1326 audit(1786151548.588:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.539628][ T6385] dvmrp0: entered allmulticast mode [ 92.541566][ T42] audit: type=1326 audit(1786151548.588:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.541590][ T42] audit: type=1326 audit(1786151548.588:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.541611][ T42] audit: type=1326 audit(1786151548.588:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 92.602354][ T6385] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 95.142250][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.145459][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 95.147905][ T29] usb 6-1: can't read configurations, error -71 [ 96.319475][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.504445][ T6441] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 96.520973][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.547264][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 96.552585][ T29] usb 6-1: can't read configurations, error -71 [ 96.559684][ T29] usb usb6-port1: attempt power cycle [ 97.386157][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 97.424786][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.484751][ T6467] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 97.500723][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 97.504988][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 97.507967][ T29] usb 6-1: can't read configurations, error -71 [ 98.139477][ T6484] xt_ipcomp: unknown flags 1D [ 99.636902][ T6502] ipt_rpfilter: unknown options [ 99.679380][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 99.686669][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 99.736150][ T6499] ceph: No mds server is up or the cluster is laggy [ 101.124491][ T851] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 101.280109][ T6512] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 101.292810][ T851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 101.335501][ T851] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 101.343971][ T851] usb 7-1: can't read configurations, error -71 [ 103.614174][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 103.624862][ T6541] netlink: 140 bytes leftover after parsing attributes in process `syz.3.144'. [ 104.785863][ T5817] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 105.395164][ T5817] usb 8-1: unable to get BOS descriptor or descriptor too short [ 105.398952][ T5817] usb 8-1: not running at top speed; connect to a high speed hub [ 105.404249][ T5817] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 105.408937][ T5817] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 105.415681][ T5817] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 105.422512][ T5817] usb 8-1: config 14 has no interface number 0 [ 105.426468][ T5817] usb 8-1: config 14 has no interface number 1 [ 105.432754][ T5817] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 105.438560][ T5817] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 105.447845][ T5817] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.454935][ T5817] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 105.458888][ T5817] usb 8-1: config 14 interface 57 has no altsetting 0 [ 105.462222][ T5817] usb 8-1: config 14 interface 228 has no altsetting 0 [ 105.473931][ T5817] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 105.479536][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.482547][ T5817] usb 8-1: Product: syz [ 105.484098][ T5817] usb 8-1: Manufacturer: syz [ 105.486700][ T5817] usb 8-1: SerialNumber: syz [ 105.923376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.188786][ T5817] legousbtower 8-1:14.57: interrupt endpoints not found [ 106.396804][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 106.995073][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.007861][ T5817] legousbtower 8-1:14.228: get version request failed: -71 [ 107.020117][ T5817] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 107.067848][ T5817] usb 8-1: USB disconnect, device number 5 [ 107.451441][ T6596] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 107.454224][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.467112][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 107.773505][ T851] usb 44-1: SetAddress Request (6) to port 0 [ 107.773583][ T851] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 108.224361][ T6597] vhci_hcd: connection reset by peer [ 108.229637][ T5780] vhci_hcd vhci_hcd.3: stop threads [ 108.231889][ T5780] vhci_hcd vhci_hcd.3: release socket [ 108.235504][ T5780] vhci_hcd vhci_hcd.3: disconnect device [ 109.885845][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 111.382588][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 112.239331][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.436008][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 112.463438][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.470851][ T24] usb 8-1: config 0 has no interfaces? [ 112.512332][ T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.517711][ T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.524955][ T24] usb 8-1: Product: syz [ 112.528687][ T24] usb 8-1: Manufacturer: syz [ 112.538405][ T24] usb 8-1: SerialNumber: syz [ 112.591554][ T24] usb 8-1: config 0 descriptor?? [ 112.823562][ T851] usb 44-1: device descriptor read/8, error -110 [ 113.214222][ T851] usb usb44-port1: attempt power cycle [ 113.529453][ T24] usb 8-1: USB disconnect, device number 6 [ 113.786022][ T851] usb usb44-port1: unable to enumerate USB device [ 115.387999][ T6702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 115.390619][ T6702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.406791][ T6702] vhci_hcd vhci_hcd.0: Device attached [ 115.570574][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 115.731609][ T5982] blk_print_req_error: 27 callbacks suppressed [ 115.731623][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.731640][ T5982] buffer_io_error: 27 callbacks suppressed [ 115.731646][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.731827][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.731842][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.731987][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.732001][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.732513][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.732529][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.732714][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.732729][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.732913][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.732928][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.733079][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.733094][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.733229][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.733243][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.733320][ T6714] ldm_validate_partition_table(): Disk read failed. [ 115.733818][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.733834][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.734106][ T5982] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.734121][ T5982] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.734623][ T6714] Dev nbd0: unable to read RDB block 0 [ 115.736620][ T6714] nbd0: unable to read partition table [ 115.757882][ T6714] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 115.880958][ T29] usb 40-1: SetAddress Request (6) to port 0 [ 115.881020][ T29] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.964584][ T6714] binder: 6712:6714 ioctl 400c620e 0 returned -14 [ 117.312080][ T6728] capability: warning: `syz.2.185' uses deprecated v2 capabilities in a way that may be insecure [ 117.353071][ T6705] vhci_hcd: connection reset by peer [ 117.365090][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 117.372075][ T5780] vhci_hcd vhci_hcd.1: release socket [ 117.376777][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 118.445168][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 118.461903][ T6755] binder: 6743:6755 ioctl c0306201 800003c0 returned -14 [ 118.969631][ T6762] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.973765][ T6762] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 118.977383][ T6762] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.980397][ T6762] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 119.973609][ T5904] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 120.140339][ T6770] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 120.983530][ T29] usb 40-1: device descriptor read/8, error -110 [ 121.666684][ T29] usb usb40-port1: attempt power cycle [ 122.523716][ T5904] usb 8-1: unable to get BOS descriptor or descriptor too short [ 122.559204][ T5904] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 122.561600][ T5904] usb 8-1: can't read configurations, error -71 [ 122.651781][ T29] usb usb40-port1: unable to enumerate USB device [ 124.185426][ T6825] program syz.2.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.159436][ T6825] infiniband syz0: set active [ 125.161870][ T6825] infiniband syz0: added bond_slave_1 [ 125.167305][ T6825] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 125.169936][ T6825] infiniband syz0: Couldn't open port 1 [ 125.175107][ T6825] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 125.179769][ T6825] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 125.185130][ T6825] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 125.211228][ T6825] RDS/IB: syz0: added [ 125.212832][ T6825] smc: adding ib device syz0 with port count 1 [ 125.214958][ T6825] smc: ib device syz0 port 1 has no pnetid [ 128.173442][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.323436][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 128.380331][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.386377][ T10] usb 7-1: config 0 has no interfaces? [ 128.398079][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 128.405550][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 128.411937][ T10] usb 7-1: Product: syz [ 128.417409][ T10] usb 7-1: Manufacturer: syz [ 128.421816][ T10] usb 7-1: SerialNumber: syz [ 128.434284][ T10] usb 7-1: config 0 descriptor?? [ 128.968379][ T851] usb 7-1: USB disconnect, device number 8 [ 129.781067][ T6909] binder: 6902:6909 ioctl 401c7012 0 returned -22 [ 129.914216][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 132.061005][ T6925] syz.3.226: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.073561][ T6925] CPU: 3 UID: 0 PID: 6925 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(full) [ 132.073577][ T6925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.073599][ T6925] Call Trace: [ 132.073612][ T6925] [ 132.073617][ T6925] dump_stack_lvl+0x100/0x190 [ 132.073642][ T6925] warn_alloc.cold+0x94/0xa8 [ 132.073657][ T6925] ? __pfx_warn_alloc+0x10/0x10 [ 132.073675][ T6925] ? kasan_save_stack+0x3f/0x50 [ 132.073690][ T6925] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 132.073702][ T6925] ? vb2_vmalloc_alloc+0xf9/0x410 [ 132.073719][ T6925] ? __vb2_queue_alloc+0x8d5/0x1160 [ 132.073731][ T6925] ? vb2_core_create_bufs+0x5fa/0xa30 [ 132.073742][ T6925] ? vb2_create_bufs+0x40c/0x830 [ 132.073759][ T6925] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 132.073775][ T6925] ? vidioc_create_bufs+0x7d/0xf0 [ 132.073789][ T6925] ? v4l_create_bufs+0x17d/0x270 [ 132.073803][ T6925] ? video_usercopy+0x3d3/0x14c0 [ 132.073817][ T6925] ? v4l2_ioctl+0x1bd/0x250 [ 132.073832][ T6925] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 132.073847][ T6925] ? vb2_vmalloc_alloc+0x135/0x410 [ 132.073859][ T6925] __vmalloc_node_range_noprof+0x136c/0x1630 [ 132.073883][ T6925] ? vb2_vmalloc_alloc+0x135/0x410 [ 132.073898][ T6925] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.073918][ T6925] ? kasan_save_track+0x14/0x30 [ 132.073931][ T6925] ? __kasan_kmalloc+0xaa/0xb0 [ 132.073945][ T6925] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 132.073962][ T6925] ? vb2_vmalloc_alloc+0x135/0x410 [ 132.073975][ T6925] vmalloc_user_noprof+0x9e/0xe0 [ 132.073992][ T6925] ? vb2_vmalloc_alloc+0x135/0x410 [ 132.074005][ T6925] vb2_vmalloc_alloc+0x135/0x410 [ 132.074018][ T6925] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 132.074032][ T6925] __vb2_queue_alloc+0x8d5/0x1160 [ 132.074052][ T6925] vb2_core_create_bufs+0x5fa/0xa30 [ 132.074066][ T6925] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 132.074082][ T6925] ? lock_acquire+0x1b9/0x370 [ 132.074097][ T6925] vb2_create_bufs+0x40c/0x830 [ 132.074116][ T6925] ? __pfx_vb2_create_bufs+0x10/0x10 [ 132.074133][ T6925] ? v4l_sanitize_colorspace+0x220/0x410 [ 132.074157][ T6925] vb2_ioctl_create_bufs+0x244/0x3e0 [ 132.074174][ T6925] ? v4l2_compat_get_user+0x883/0x11f0 [ 132.074187][ T6925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.074205][ T6925] vidioc_create_bufs+0x7d/0xf0 [ 132.074220][ T6925] v4l_create_bufs+0x17d/0x270 [ 132.074234][ T6925] __video_do_ioctl+0xb2a/0xdf0 [ 132.074265][ T6925] ? trace_kmalloc+0xeb/0x110 [ 132.074284][ T6925] ? __pfx___video_do_ioctl+0x10/0x10 [ 132.074302][ T6925] ? video_usercopy+0x145/0x14c0 [ 132.074321][ T6925] video_usercopy+0x3d3/0x14c0 [ 132.074338][ T6925] ? __pfx___video_do_ioctl+0x10/0x10 [ 132.074356][ T6925] ? __pfx_video_usercopy+0x10/0x10 [ 132.074376][ T6925] ? __fget_files+0x215/0x3d0 [ 132.074389][ T6925] ? hook_file_ioctl_common+0x140/0x440 [ 132.074419][ T6925] v4l2_ioctl+0x1bd/0x250 [ 132.074444][ T6925] v4l2_compat_ioctl32+0x20f/0x2d0 [ 132.074462][ T6925] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 132.074483][ T6925] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 132.074511][ T6925] __do_fast_syscall_32+0xe7/0x970 [ 132.074543][ T6925] ? lockdep_hardirqs_on+0x78/0x100 [ 132.074568][ T6925] do_fast_syscall_32+0x32/0x70 [ 132.074591][ T6925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.074606][ T6925] RIP: 0023:0xf7f56fec [ 132.074619][ T6925] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 132.074637][ T6925] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 132.074649][ T6925] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 132.074656][ T6925] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.074662][ T6925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.074669][ T6925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.074676][ T6925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.074690][ T6925] [ 132.074720][ T6925] Mem-Info: [ 132.226672][ T6925] active_anon:9130 inactive_anon:299 isolated_anon:0 [ 132.226672][ T6925] active_file:71 inactive_file:53036 isolated_file:0 [ 132.226672][ T6925] unevictable:1000 dirty:520 writeback:0 [ 132.226672][ T6925] slab_reclaimable:10652 slab_unreclaimable:64635 [ 132.226672][ T6925] mapped:26202 shmem:4339 pagetables:1199 [ 132.226672][ T6925] sec_pagetables:295 bounce:0 [ 132.226672][ T6925] kernel_misc_reclaimable:0 [ 132.226672][ T6925] free:25718 free_pcp:11084 free_cma:0 [ 132.245478][ T6925] Node 0 active_anon:16kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1268kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.256748][ T6925] Node 1 active_anon:36504kB inactive_anon:1164kB active_file:284kB inactive_file:212272kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:108280kB dirty:2112kB writeback:0kB shmem:15356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4728kB pagetables:3528kB sec_pagetables:44kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.270245][ T6925] Node 0 DMA free:2032kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:4kB free_cma:0kB [ 132.279783][ T6925] lowmem_reserve[]: 0 280 280 280 280 [ 132.281743][ T6925] Node 0 DMA32 free:15560kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:12752kB local_pcp:2384kB free_cma:0kB [ 132.293606][ T6925] lowmem_reserve[]: 0 0 0 0 0 [ 132.297628][ T6925] Node 1 DMA32 free:80552kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36504kB inactive_anon:1164kB active_file:284kB inactive_file:212528kB unevictable:2000kB writepending:2252kB zspages:2680kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:33524kB local_pcp:7944kB free_cma:0kB [ 132.312285][ T6925] lowmem_reserve[]: 0 0 0 0 0 [ 132.317993][ T6925] Node 0 DMA: 6*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 3*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2032kB [ 132.328656][ T6925] Node 0 DMA32: 18*4kB (UME) 74*8kB (UME) 41*16kB (UME) 37*32kB (UME) 38*64kB (UME) 21*128kB (UME) 3*256kB (U) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 15560kB [ 132.335714][ T6925] Node 1 DMA32: 1*4kB (E) 1*8kB (U) 0*16kB 11*32kB (U) 126*64kB (UME) 30*128kB (UM) 37*256kB (UME) 22*512kB (UME) 12*1024kB (UME) 1*2048kB (U) 8*4096kB (M) = 80108kB [ 132.341323][ T6925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.345914][ T6925] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 132.349931][ T6925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.354285][ T6925] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 132.358275][ T6925] 58089 total pagecache pages [ 132.360243][ T6925] 403 pages in swap cache [ 132.362161][ T6925] Free swap = 119148kB [ 132.364378][ T6925] Total swap = 124996kB [ 132.366613][ T6925] 524155 pages RAM [ 132.368261][ T6925] 0 pages HighMem/MovableOnly [ 132.370344][ T6925] 211494 pages reserved [ 132.371861][ T6925] 0 pages cma reserved [ 132.750188][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752219][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.139994][ C3] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 134.144422][ C3] sr 2:0:0:0: [sr0] tag#8 CDB: Test Unit Ready [ 135.235939][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 135.456606][ T6963] bridge_slave_1: left allmulticast mode [ 135.460816][ T6963] bridge_slave_1: left promiscuous mode [ 135.464771][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.617778][ T6963] bridge_slave_0: left allmulticast mode [ 135.620357][ T6963] bridge_slave_0: left promiscuous mode [ 135.629167][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.735767][ T56] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.738534][ T851] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 135.903770][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 135.908473][ T56] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.912304][ T56] usb 5-1: config 0 has no interface number 0 [ 135.914866][ T6968] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 135.922341][ T56] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.928413][ T56] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.938665][ T56] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.953384][ T56] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.961772][ T56] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.965776][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.971378][ T56] usb 5-1: config 0 descriptor?? [ 135.986973][ T56] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 136.284965][ T6982] binder: 6980:6982 ioctl 400c620e 0 returned -14 [ 137.743647][ T5808] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 137.806159][ T29] usb 5-1: USB disconnect, device number 7 [ 137.806227][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 137.844532][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 137.851528][ T6966] ldusb: No device or device unplugged -19 [ 137.902399][ T6993] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 137.915757][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 137.919093][ T5808] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 137.922685][ T5808] usb 6-1: can't read configurations, error -71 [ 138.467880][ T851] usb 8-1: unable to get BOS descriptor or descriptor too short [ 138.471544][ T851] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 138.495087][ T7004] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.541909][ T7004] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 138.546454][ T7004] overlayfs: failed to look up (tracing) for ino (-66) [ 138.600944][ T851] usb 8-1: can't read configurations, error -71 [ 140.611120][ T7030] binder: 7026:7030 ioctl c0306201 800003c0 returned -14 [ 141.650860][ T7041] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 141.653143][ T7041] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 141.684245][ T7041] vhci_hcd vhci_hcd.0: Device attached [ 141.953475][ T5904] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 142.075013][ T5879] usb 38-1: SetAddress Request (6) to port 0 [ 142.075054][ T5879] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 142.132084][ T7046] netlink: 'syz.3.253': attribute type 10 has an invalid length. [ 142.160882][ T5904] usb 8-1: unable to get BOS descriptor or descriptor too short [ 142.164593][ T5904] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 142.164626][ T5904] usb 8-1: can't read configurations, error -71 [ 142.318589][ T7042] vhci_hcd: connection reset by peer [ 142.322841][ T5780] vhci_hcd vhci_hcd.0: stop threads [ 142.324700][ T5780] vhci_hcd vhci_hcd.0: release socket [ 142.326831][ T5780] vhci_hcd vhci_hcd.0: disconnect device [ 142.660393][ T7055] Invalid ELF header magic: != ELF [ 143.683750][ T5904] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.879550][ T7065] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 143.897515][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.936241][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 143.938740][ T5904] usb 5-1: can't read configurations, error -71 [ 144.374259][ T7087] misc userio: Invalid payload size [ 145.023439][ T5484] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 145.266091][ T7092] netlink: 'syz.2.265': attribute type 10 has an invalid length. [ 145.292051][ T5484] usb 7-1: unable to get BOS descriptor or descriptor too short [ 145.297848][ T5484] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 145.300271][ T5484] usb 7-1: can't read configurations, error -71 [ 145.405379][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 145.413013][ T7100] batadv0: entered promiscuous mode [ 145.426687][ T7100] macsec1: entered promiscuous mode [ 145.430756][ T7100] macsec1: entered allmulticast mode [ 145.433144][ T7100] batadv0: entered allmulticast mode [ 145.437491][ T7100] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 145.448217][ T7100] batadv0: left allmulticast mode [ 145.450835][ T7100] batadv0: left promiscuous mode [ 146.713550][ T50] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 146.883769][ T7121] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 147.050731][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 147.061166][ T50] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 147.066316][ T50] usb 8-1: can't read configurations, error -71 [ 147.414826][ T5879] usb 38-1: device descriptor read/8, error -110 [ 147.809554][ T5879] usb usb38-port1: attempt power cycle [ 147.905093][ T7138] cgroup: Unknown subsys name 'rlimit' [ 147.996675][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 148.311098][ T7157] syzkaller0: entered promiscuous mode [ 148.313746][ T7157] syzkaller0: entered allmulticast mode [ 148.628907][ T5879] usb usb38-port1: unable to enumerate USB device [ 149.575760][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.765993][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.771407][ T50] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 149.814419][ T50] usb 5-1: can't read configurations, error -71 [ 155.043965][ T7262] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 155.092265][ T7262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.155492][ T7262] team0: Port device bond0 added [ 155.377960][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 155.377973][ T42] audit: type=1326 audit(1786151608.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.387361][ T42] audit: type=1326 audit(1786151608.472:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.400457][ T42] audit: type=1326 audit(1786151608.472:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c74eb code=0x7ffc0000 [ 155.410119][ T42] audit: type=1326 audit(1786151608.472:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.421211][ T42] audit: type=1326 audit(1786151608.472:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.429977][ T42] audit: type=1326 audit(1786151608.472:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.438169][ T42] audit: type=1326 audit(1786151608.472:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.452709][ T42] audit: type=1326 audit(1786151608.472:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.460549][ T42] audit: type=1326 audit(1786151608.472:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 155.467997][ T42] audit: type=1326 audit(1786151608.472:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 156.003430][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 156.280470][ T7273] netlink: 'syz.3.303': attribute type 10 has an invalid length. [ 156.939797][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 156.950193][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 156.955253][ T10] usb 8-1: can't read configurations, error -71 [ 157.004714][ T7293] Config c/1 of g1 needs at least one function. [ 157.007911][ T7293] udc dummy_udc.0: failed to start g1: -22 [ 157.017833][ T7293] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 157.076566][ T7293] UDC core: g1: couldn't find an available UDC or it's busy [ 157.582729][ T7306] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.625890][ T7306] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 157.629110][ T7306] overlayfs: failed to look up (tracing) for ino (-66) [ 159.263489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.173440][ T5879] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 160.476120][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 160.489246][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 160.497859][ T5879] usb 8-1: can't read configurations, error -71 [ 161.803942][ T5808] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 161.840848][ T7339] netlink: 'syz.2.318': attribute type 9 has an invalid length. [ 161.843607][ T7339] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 161.847086][ T7339] netlink: 'syz.2.318': attribute type 8 has an invalid length. [ 162.183865][ T56] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 162.339747][ T7341] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 162.348131][ T56] usb 8-1: unable to get BOS descriptor or descriptor too short [ 162.355045][ T56] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 162.357676][ T56] usb 8-1: can't read configurations, error -71 [ 162.809544][ T7335] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 164.583269][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.591361][ T5808] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 164.597393][ T5808] usb 6-1: can't read configurations, error -71 [ 164.867716][ T7358] pim6reg: entered allmulticast mode [ 164.902403][ T7358] pim6reg: left allmulticast mode [ 165.873471][ T5808] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 166.025309][ T5808] usb 6-1: Using ep0 maxpacket: 32 [ 166.041675][ T5808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.049528][ T5808] usb 6-1: config 0 has no interfaces? [ 166.068309][ T5808] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.072270][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.099318][ T5808] usb 6-1: Product: syz [ 166.112940][ T5808] usb 6-1: Manufacturer: syz [ 166.123232][ T5808] usb 6-1: SerialNumber: syz [ 166.147186][ T5808] usb 6-1: config 0 descriptor?? [ 167.890648][ T7403] kAFS: No cell specified [ 168.228834][ T5808] usb 6-1: USB disconnect, device number 12 [ 168.739885][ T7417] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 168.877265][ T7420] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 168.893702][ T5879] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 168.912574][ T7420] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 169.120563][ T7420] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 169.494151][ T7422] bond1: entered promiscuous mode [ 169.519395][ T7426] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 169.608401][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.614685][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 169.618036][ T5879] usb 8-1: can't read configurations, error -71 [ 171.237912][ T7444] pim6reg: entered allmulticast mode [ 171.270910][ T7441] pim6reg: left allmulticast mode [ 173.073727][ T50] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 173.233242][ T7470] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 173.247847][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 173.253939][ T5808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.258606][ T50] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 173.262072][ T50] usb 8-1: can't read configurations, error -71 [ 173.405181][ T5808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.408610][ T5808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.412149][ T5808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.415243][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.418913][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.572794][ T5808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.580280][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.583654][ T5808] usb 5-1: Product: syz [ 173.585430][ T5808] usb 5-1: Manufacturer: syz [ 173.612198][ T5808] cdc_wdm 5-1:1.0: skipping garbage [ 173.615035][ T5808] cdc_wdm 5-1:1.0: skipping garbage [ 173.623827][ T5808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 173.627132][ T5808] cdc_wdm 5-1:1.0: Unknown control protocol [ 173.815665][ T7467] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 173.828281][ T24] usb 5-1: USB disconnect, device number 12 [ 175.011568][ T7513] syz.0.352 uses obsolete (PF_INET,SOCK_PACKET) [ 176.430062][ T7537] netlink: 'syz.1.354': attribute type 9 has an invalid length. [ 176.433073][ T7537] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 176.435708][ T7537] netlink: 'syz.1.354': attribute type 8 has an invalid length. [ 177.627523][ T7555] 9pnet_virtio: no channels available for device c::: [ 178.013441][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 178.212043][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 178.219289][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 178.224717][ T29] usb 6-1: can't read configurations, error -71 [ 178.873762][ T5808] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 179.183487][ T5808] usb 7-1: Using ep0 maxpacket: 32 [ 179.195571][ T5808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.204127][ T5808] usb 7-1: config 0 has no interfaces? [ 179.220465][ T5808] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 179.224646][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 179.228063][ T5808] usb 7-1: Product: syz [ 179.229798][ T5808] usb 7-1: Manufacturer: syz [ 179.232103][ T5808] usb 7-1: SerialNumber: syz [ 179.258005][ T5808] usb 7-1: config 0 descriptor?? [ 179.463534][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 179.703592][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 179.708908][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.272885][ T7595] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 180.289547][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.294833][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 180.299860][ T29] usb 6-1: can't read configurations, error -71 [ 180.503415][ T5879] usb 7-1: USB disconnect, device number 11 [ 180.913626][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.914899][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 180.921282][ T5740] Bluetooth: hci3: command 0x0405 tx timeout [ 180.925568][ T5740] Bluetooth: hci1: command 0x0406 tx timeout [ 181.027213][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.030935][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.104495][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 181.118782][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 181.122956][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.174791][ T7630] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.451653][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 181.751428][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 181.755715][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 181.758309][ T29] usb 6-1: can't read configurations, error -71 [ 181.761021][ T29] usb usb6-port1: attempt power cycle [ 182.544799][ T5484] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 182.718869][ T7647] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 182.742535][ T5484] usb 8-1: unable to get BOS descriptor or descriptor too short [ 182.746717][ T5484] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 182.749109][ T5484] usb 8-1: can't read configurations, error -71 [ 184.756198][ T5817] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 184.951454][ T5817] usb 8-1: unable to get BOS descriptor or descriptor too short [ 184.957695][ T5817] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 184.963454][ T5817] usb 8-1: can't read configurations, error -71 [ 185.543084][ T7668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.757260][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.760269][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.770562][ T7693] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 185.791276][ T5836] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 185.959094][ T5836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.963048][ T5836] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 185.966300][ T5836] usb 6-1: can't read configurations, error -71 [ 186.223561][ T5817] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 186.428390][ T5817] usb 8-1: unable to get BOS descriptor or descriptor too short [ 186.433502][ T5808] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 186.436840][ T5817] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 186.441286][ T5817] usb 8-1: can't read configurations, error -71 [ 186.961527][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 186.961607][ T42] audit: type=1326 audit(1786151640.052:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 186.978878][ T42] audit: type=1326 audit(1786151640.052:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 186.987500][ T42] audit: type=1326 audit(1786151640.052:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 186.996051][ T42] audit: type=1326 audit(1786151640.052:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.004530][ T42] audit: type=1326 audit(1786151640.052:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.012928][ T42] audit: type=1326 audit(1786151640.062:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.034002][ T42] audit: type=1326 audit(1786151640.062:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.050721][ T42] audit: type=1326 audit(1786151640.062:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.068980][ T42] audit: type=1326 audit(1786151640.062:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.086495][ T42] audit: type=1326 audit(1786151640.072:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 187.182857][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 187.192476][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 187.608110][ T7719] cgroup: Unknown subsys name 'rlimit' [ 189.067294][ T24] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 189.203460][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 189.233780][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 189.237011][ T5808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 189.244777][ T5808] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 189.249256][ T24] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 189.252522][ T5808] usb 7-1: can't read configurations, error -71 [ 189.256705][ T24] usb 8-1: can't read configurations, error -71 [ 189.380608][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.385433][ T34] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 189.387918][ T34] usb 6-1: can't read configurations, error -71 [ 189.786197][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.790477][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.865571][ T7747] cgroup: Unknown subsys name 'rlimit' [ 190.724809][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.733503][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.033685][ T5879] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 192.049485][ T7785] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.229578][ T5879] usb 7-1: unable to get BOS descriptor or descriptor too short [ 192.244703][ T5879] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 192.249924][ T5879] usb 7-1: can't read configurations, error -71 [ 192.270502][ T7784] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 192.305161][ T7784] bond1: entered promiscuous mode [ 192.307233][ T7784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.350157][ T7785] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 192.368721][ T7785] overlayfs: failed to look up (tracing) for ino (-66) [ 193.993594][ T5879] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 194.185278][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.187502][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.306571][ T7799] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 194.336267][ T7813] syz.0.430: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.342140][ T7813] CPU: 3 UID: 0 PID: 7813 Comm: syz.0.430 Not tainted syzkaller #0 PREEMPT(full) [ 194.342175][ T7813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.342188][ T7813] Call Trace: [ 194.342197][ T7813] [ 194.342206][ T7813] dump_stack_lvl+0x100/0x190 [ 194.342240][ T7813] warn_alloc.cold+0x94/0xa8 [ 194.342263][ T7813] ? __pfx_warn_alloc+0x10/0x10 [ 194.342287][ T7813] ? __pfx_stack_trace_save+0x10/0x10 [ 194.342321][ T7813] ? kasan_save_stack+0x3f/0x50 [ 194.342349][ T7813] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 194.342370][ T7813] ? vb2_vmalloc_alloc+0xf9/0x410 [ 194.342392][ T7813] ? __vb2_queue_alloc+0x8d5/0x1160 [ 194.342410][ T7813] ? vb2_core_create_bufs+0x5fa/0xa30 [ 194.342428][ T7813] ? vb2_create_bufs+0x40c/0x830 [ 194.342455][ T7813] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 194.342482][ T7813] ? vidioc_create_bufs+0x7d/0xf0 [ 194.342504][ T7813] ? v4l_create_bufs+0x17d/0x270 [ 194.342527][ T7813] ? video_usercopy+0x3d3/0x14c0 [ 194.342551][ T7813] ? v4l2_ioctl+0x1bd/0x250 [ 194.342576][ T7813] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 194.342602][ T7813] ? vb2_vmalloc_alloc+0x135/0x410 [ 194.342624][ T7813] __vmalloc_node_range_noprof+0x136c/0x1630 [ 194.342663][ T7813] ? vb2_vmalloc_alloc+0x135/0x410 [ 194.342690][ T7813] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.342724][ T7813] ? kasan_save_track+0x14/0x30 [ 194.342748][ T7813] ? __kasan_kmalloc+0xaa/0xb0 [ 194.342772][ T7813] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 194.342792][ T7813] ? vb2_vmalloc_alloc+0x135/0x410 [ 194.342838][ T7813] vmalloc_user_noprof+0x9e/0xe0 [ 194.342870][ T7813] ? vb2_vmalloc_alloc+0x135/0x410 [ 194.342896][ T7813] vb2_vmalloc_alloc+0x135/0x410 [ 194.342914][ T7813] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 194.342937][ T7813] __vb2_queue_alloc+0x8d5/0x1160 [ 194.342971][ T7813] vb2_core_create_bufs+0x5fa/0xa30 [ 194.342994][ T7813] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 194.343020][ T7813] ? lock_acquire+0x1b9/0x370 [ 194.343043][ T7813] vb2_create_bufs+0x40c/0x830 [ 194.343077][ T7813] ? __pfx_vb2_create_bufs+0x10/0x10 [ 194.343108][ T7813] ? v4l_sanitize_colorspace+0x220/0x410 [ 194.343145][ T7813] vb2_ioctl_create_bufs+0x244/0x3e0 [ 194.343184][ T7813] ? v4l2_compat_get_user+0x883/0x11f0 [ 194.343211][ T7813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.343246][ T7813] vidioc_create_bufs+0x7d/0xf0 [ 194.343273][ T7813] v4l_create_bufs+0x17d/0x270 [ 194.343318][ T7813] __video_do_ioctl+0xb2a/0xdf0 [ 194.343354][ T7813] ? trace_kmalloc+0xeb/0x110 [ 194.343384][ T7813] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.343417][ T7813] ? video_usercopy+0x145/0x14c0 [ 194.343453][ T7813] video_usercopy+0x3d3/0x14c0 [ 194.343482][ T7813] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.343512][ T7813] ? __pfx_video_usercopy+0x10/0x10 [ 194.343547][ T7813] ? __fget_files+0x215/0x3d0 [ 194.343565][ T7813] ? hook_file_ioctl_common+0x140/0x440 [ 194.343599][ T7813] v4l2_ioctl+0x1bd/0x250 [ 194.343630][ T7813] v4l2_compat_ioctl32+0x20f/0x2d0 [ 194.343654][ T7813] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 194.343677][ T7813] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 194.343711][ T7813] __do_fast_syscall_32+0xe7/0x970 [ 194.343743][ T7813] ? lockdep_hardirqs_on+0x78/0x100 [ 194.343771][ T7813] do_fast_syscall_32+0x32/0x70 [ 194.343799][ T7813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.343824][ T7813] RIP: 0023:0xf702efec [ 194.343846][ T7813] Code: Unable to access opcode bytes at 0xf702efc2. [ 194.343881][ T7813] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 194.343904][ T7813] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 194.343917][ T7813] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.343929][ T7813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.343941][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.343953][ T7813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.343980][ T7813] [ 194.533559][ T5879] usb 7-1: unable to get BOS descriptor or descriptor too short [ 194.539951][ T7813] Mem-Info: [ 194.541297][ T7813] active_anon:5827 inactive_anon:328 isolated_anon:0 [ 194.541297][ T7813] active_file:660 inactive_file:42378 isolated_file:0 [ 194.541297][ T7813] unevictable:1000 dirty:556 writeback:0 [ 194.541297][ T7813] slab_reclaimable:10090 slab_unreclaimable:76493 [ 194.541297][ T7813] mapped:24457 shmem:1516 pagetables:1210 [ 194.541297][ T7813] sec_pagetables:296 bounce:0 [ 194.541297][ T7813] kernel_misc_reclaimable:0 [ 194.541297][ T7813] free:23878 free_pcp:12835 free_cma:0 [ 194.542341][ T5879] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 194.558105][ T7813] Node 0 active_anon:20kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1268kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 194.575639][ T7813] Node 1 active_anon:23288kB inactive_anon:1280kB active_file:2640kB inactive_file:169512kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99700kB dirty:2224kB writeback:0kB shmem:4060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4784kB pagetables:3572kB sec_pagetables:48kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 194.592645][ T7813] Node 0 DMA free:1988kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:36kB free_cma:0kB [ 194.604889][ T7813] lowmem_reserve[]: 0 280 280 280 280 [ 194.607308][ T7813] Node 0 DMA32 free:15376kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:3800kB free_cma:0kB [ 194.625218][ T7813] lowmem_reserve[]: 0 0 0 0 0 [ 194.629479][ T7813] Node 1 DMA32 free:78148kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23288kB inactive_anon:1280kB active_file:2640kB inactive_file:169512kB unevictable:2000kB writepending:2224kB zspages:2616kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:36772kB local_pcp:2612kB free_cma:0kB [ 194.637468][ T5879] usb 7-1: can't read configurations, error -71 [ 194.648244][ T7813] lowmem_reserve[]: 0 0 0 0 0 [ 194.650127][ T7813] Node 0 DMA: 5*4kB (UM) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1988kB [ 194.655994][ T7813] Node 0 DMA32: 244*4kB (UME) 78*8kB (UME) 57*16kB (UME) 50*32kB (UME) 34*64kB (UE) 19*128kB (UME) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 15376kB [ 194.662152][ T7813] Node 1 DMA32: 12*4kB (UME) 237*8kB (UME) 139*16kB (UM) 44*32kB (UM) 248*64kB (UM) 77*128kB (UME) 55*256kB (UME) 26*512kB (M) 11*1024kB (UM) 2*2048kB (UM) 1*4096kB (M) = 78152kB [ 194.664190][ T5879] usb usb7-port1: attempt power cycle [ 194.667973][ T7813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.673002][ T7813] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 194.676318][ T7813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.679369][ T7813] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 194.682334][ T7813] 44950 total pagecache pages [ 194.684054][ T7813] 417 pages in swap cache [ 194.685542][ T7813] Free swap = 119156kB [ 194.686972][ T7813] Total swap = 124996kB [ 194.688407][ T7813] 524155 pages RAM [ 194.689691][ T7813] 0 pages HighMem/MovableOnly [ 194.691221][ T7813] 211494 pages reserved [ 194.692569][ T7813] 0 pages cma reserved [ 194.953540][ T7613] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 195.173430][ T5817] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 195.195342][ T7613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.219044][ T7613] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 195.224892][ T7613] usb 6-1: can't read configurations, error -71 [ 195.854968][ T5817] usb 8-1: Using ep0 maxpacket: 8 [ 196.380384][ T5817] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.403440][ T7613] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 196.644957][ T7830] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 196.782995][ T7613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.797360][ T7613] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 196.808282][ T7613] usb 6-1: can't read configurations, error -71 [ 196.906417][ T5817] usb 8-1: config 0 has no interface number 0 [ 197.283466][ T5484] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 197.405021][ T5817] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.456212][ T7834] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 197.489620][ T5484] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.494598][ T5484] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 197.498009][ T5484] usb 7-1: can't read configurations, error -71 [ 197.552414][ T5817] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.556585][ T5817] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.561123][ T5817] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.566977][ T5817] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.569797][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.583018][ T5817] usb 8-1: config 0 descriptor?? [ 197.603096][ T5817] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 197.747776][ T7843] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 198.147876][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 198.147878][ T7613] usb 8-1: USB disconnect, device number 33 [ 198.163262][ T7613] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 198.163540][ T7819] ldusb: No device or device unplugged -19 [ 199.108730][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.112668][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.142163][ T7865] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 199.450986][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 199.461219][ T7869] batadv0: entered promiscuous mode [ 199.464186][ T7869] macsec1: entered promiscuous mode [ 199.466598][ T7869] macsec1: entered allmulticast mode [ 199.468918][ T7869] batadv0: entered allmulticast mode [ 199.472524][ T7869] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 199.484351][ T7869] batadv0: left allmulticast mode [ 199.490958][ T7869] batadv0: left promiscuous mode [ 199.765143][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.769252][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.776919][ T7877] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 199.973467][ T5484] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 200.003466][ T7613] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 200.132135][ T7875] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 200.141061][ T5484] usb 7-1: unable to get BOS descriptor or descriptor too short [ 200.144256][ T5484] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 200.146573][ T5484] usb 7-1: can't read configurations, error -71 [ 200.163743][ T7879] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 200.680767][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.684235][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.694752][ T7882] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 203.192735][ T7613] usb 8-1: unable to get BOS descriptor or descriptor too short [ 203.195910][ T7613] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 203.198317][ T7613] usb 8-1: can't read configurations, error -71 [ 203.227152][ T56] usb 5-1: USB disconnect, device number 13 [ 203.333004][ T56] ================================================================== [ 203.335624][ T56] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 203.338278][ T56] Write of size 8 at addr ffff888073288350 by task kworker/1:1/56 [ 203.341897][ T56] [ 203.343059][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 203.343080][ T56] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.343091][ T56] Workqueue: usb_hub_wq hub_event [ 203.343120][ T56] Call Trace: [ 203.343127][ T56] [ 203.343133][ T56] dump_stack_lvl+0x100/0x190 [ 203.343153][ T56] print_report+0x13d/0x4b0 [ 203.343175][ T56] ? __virt_addr_valid+0x239/0x430 [ 203.343194][ T56] ? snd_usb_midi_v2_free+0x52d/0x670 [ 203.343212][ T56] kasan_report+0xdf/0x1c0 [ 203.343234][ T56] ? snd_usb_midi_v2_free+0x52d/0x670 [ 203.343253][ T56] snd_usb_midi_v2_free+0x52d/0x670 [ 203.343271][ T56] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 203.343294][ T56] snd_usb_midi_v2_free_all+0x85/0xe0 [ 203.343312][ T56] snd_usb_audio_free+0x4e/0x120 [ 203.343334][ T56] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 203.343355][ T56] release_card_device+0xb2/0x1a0 [ 203.343370][ T56] ? __pfx_release_card_device+0x10/0x10 [ 203.343386][ T56] device_release+0xd2/0x270 [ 203.343405][ T56] kobject_put+0x1f7/0x640 [ 203.343421][ T56] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 203.343438][ T56] put_device+0x1f/0x30 [ 203.343453][ T56] snd_card_free_when_closed+0x2b/0x40 [ 203.343469][ T56] usb_audio_disconnect+0x210/0x680 [ 203.343491][ T56] usb_unbind_interface+0x1dd/0x9e0 [ 203.343517][ T56] ? __pfx_usb_unbind_interface+0x10/0x10 [ 203.343539][ T56] device_remove+0x12a/0x180 [ 203.343558][ T56] device_release_driver_internal+0x44e/0x620 [ 203.343582][ T56] bus_remove_device+0x2bc/0x560 [ 203.343600][ T56] ? __pfx_bus_remove_device+0x10/0x10 [ 203.343617][ T56] ? __pfx_device_remove_attrs+0x10/0x10 [ 203.343637][ T56] device_del+0x376/0x9b0 [ 203.343656][ T56] ? __pfx_device_del+0x10/0x10 [ 203.343674][ T56] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 203.343697][ T56] usb_disable_device+0x367/0x810 [ 203.343716][ T56] ? mark_held_locks+0x40/0x70 [ 203.343741][ T56] usb_disconnect+0x2e2/0x9a0 [ 203.343761][ T56] hub_event+0x1c4f/0x4a60 [ 203.343787][ T56] ? __lock_acquire+0x49f/0x1a40 [ 203.343810][ T56] ? do_raw_spin_unlock+0x145/0x1e0 [ 203.343857][ T56] ? __pfx_hub_event+0x10/0x10 [ 203.343875][ T56] ? debug_object_deactivate+0x2e4/0x3b0 [ 203.343903][ T56] ? rcu_is_watching+0x12/0xc0 [ 203.343922][ T56] process_one_work+0xa23/0x1940 [ 203.343948][ T56] ? __pfx_process_one_work+0x10/0x10 [ 203.343972][ T56] ? __pfx_hub_event+0x10/0x10 [ 203.343992][ T56] worker_thread+0x5ef/0xe50 [ 203.344020][ T56] ? __pfx_worker_thread+0x10/0x10 [ 203.344041][ T56] ? kthread+0x13a/0x450 [ 203.344060][ T56] ? __pfx_worker_thread+0x10/0x10 [ 203.344079][ T56] kthread+0x370/0x450 [ 203.344097][ T56] ? __pfx_kthread+0x10/0x10 [ 203.344116][ T56] ret_from_fork+0x72b/0xd50 [ 203.344136][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 203.344154][ T56] ? __switch_to+0x800/0x10f0 [ 203.344176][ T56] ? __pfx_kthread+0x10/0x10 [ 203.344195][ T56] ret_from_fork_asm+0x1a/0x30 [ 203.344219][ T56] [ 203.344225][ T56] [ 203.440694][ T56] Allocated by task 9: [ 203.442075][ T56] kasan_save_stack+0x30/0x50 [ 203.443548][ T56] kasan_save_track+0x14/0x30 [ 203.445040][ T56] __kasan_kmalloc+0xaa/0xb0 [ 203.446550][ T56] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 203.448404][ T56] snd_ump_endpoint_new+0x93/0x470 [ 203.450122][ T56] create_midi2_ump+0x2dd/0x920 [ 203.452060][ T56] snd_usb_midi_v2_create+0x11fa/0x4070 [ 203.454206][ T56] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 203.456554][ T56] usb_audio_probe+0xf05/0x3b10 [ 203.458537][ T56] usb_probe_interface+0x303/0x8f0 [ 203.460558][ T56] really_probe+0x241/0xa60 [ 203.462248][ T56] __driver_probe_device+0x20e/0x450 [ 203.464292][ T56] driver_probe_device+0x4a/0x140 [ 203.466321][ T56] __device_attach_driver+0x1df/0x320 [ 203.468487][ T56] bus_for_each_drv+0x159/0x1e0 [ 203.470419][ T56] __device_attach+0x1e4/0x4d0 [ 203.472282][ T56] device_initial_probe+0xaf/0xd0 [ 203.474290][ T56] bus_probe_device+0x64/0x160 [ 203.476256][ T56] device_add+0x121d/0x1970 [ 203.478042][ T56] usb_set_configuration+0xd97/0x1c60 [ 203.479713][ T56] usb_generic_driver_probe+0xa1/0xe0 [ 203.481436][ T56] usb_probe_device+0xef/0x400 [ 203.483256][ T56] really_probe+0x241/0xa60 [ 203.485096][ T56] __driver_probe_device+0x20e/0x450 [ 203.486894][ T56] driver_probe_device+0x4a/0x140 [ 203.488484][ T56] __device_attach_driver+0x1df/0x320 [ 203.490113][ T56] bus_for_each_drv+0x159/0x1e0 [ 203.492023][ T56] __device_attach+0x1e4/0x4d0 [ 203.493917][ T56] device_initial_probe+0xaf/0xd0 [ 203.495838][ T56] bus_probe_device+0x64/0x160 [ 203.497641][ T56] device_add+0x121d/0x1970 [ 203.499373][ T56] usb_new_device.cold+0x685/0x115c [ 203.501310][ T56] hub_event+0x30a3/0x4a60 [ 203.503068][ T56] process_one_work+0xa23/0x1940 [ 203.505083][ T56] worker_thread+0x5ef/0xe50 [ 203.506888][ T56] kthread+0x370/0x450 [ 203.508598][ T56] ret_from_fork+0x72b/0xd50 [ 203.510489][ T56] ret_from_fork_asm+0x1a/0x30 [ 203.512458][ T56] [ 203.513460][ T56] Freed by task 56: [ 203.515052][ T56] kasan_save_stack+0x30/0x50 [ 203.517042][ T56] kasan_save_track+0x14/0x30 [ 203.518976][ T56] kasan_save_free_info+0x3b/0x70 [ 203.521081][ T56] __kasan_slab_free+0x5f/0x80 [ 203.523089][ T56] kfree+0x22b/0x6c0 [ 203.524717][ T56] snd_rawmidi_dev_free+0x3e/0x60 [ 203.526699][ T56] __snd_device_free+0x1a3/0x300 [ 203.528746][ T56] snd_device_free_all+0xf3/0x220 [ 203.530772][ T56] release_card_device+0x77/0x1a0 [ 203.532745][ T56] device_release+0xd2/0x270 [ 203.534583][ T56] kobject_put+0x1f7/0x640 [ 203.536314][ T56] put_device+0x1f/0x30 [ 203.537908][ T56] snd_card_free_when_closed+0x2b/0x40 [ 203.540025][ T56] usb_audio_disconnect+0x210/0x680 [ 203.542144][ T56] usb_unbind_interface+0x1dd/0x9e0 [ 203.544220][ T56] device_remove+0x12a/0x180 [ 203.545801][ T56] device_release_driver_internal+0x44e/0x620 [ 203.548247][ T56] bus_remove_device+0x2bc/0x560 [ 203.550226][ T56] device_del+0x376/0x9b0 [ 203.552025][ T56] usb_disable_device+0x367/0x810 [ 203.553990][ T56] usb_disconnect+0x2e2/0x9a0 [ 203.555684][ T56] hub_event+0x1c4f/0x4a60 [ 203.557436][ T56] process_one_work+0xa23/0x1940 [ 203.559428][ T56] worker_thread+0x5ef/0xe50 [ 203.561335][ T56] kthread+0x370/0x450 [ 203.563006][ T56] ret_from_fork+0x72b/0xd50 [ 203.564718][ T56] ret_from_fork_asm+0x1a/0x30 [ 203.566269][ T56] [ 203.567070][ T56] The buggy address belongs to the object at ffff888073288000 [ 203.567070][ T56] which belongs to the cache kmalloc-4k of size 4096 [ 203.572260][ T56] The buggy address is located 848 bytes inside of [ 203.572260][ T56] freed 4096-byte region [ffff888073288000, ffff888073289000) [ 203.577560][ T56] [ 203.578507][ T56] The buggy address belongs to the physical page: [ 203.580574][ T56] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73288 [ 203.583970][ T56] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.587321][ T56] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 203.590073][ T56] page_type: f5(slab) [ 203.591282][ T56] raw: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 203.593847][ T56] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 203.596378][ T56] head: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 203.599025][ T56] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 203.601497][ T56] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 203.604029][ T56] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 203.606538][ T56] page dumped because: kasan: bad access detected [ 203.608444][ T56] page_owner tracks the page as allocated [ 203.610156][ T56] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 110, tgid 110 (kworker/u33:5), ts 181163368778, free_ts 180979556076 [ 203.616221][ T56] post_alloc_hook+0xfd/0x120 [ 203.617624][ T56] get_page_from_freelist+0xf48/0x3530 [ 203.619504][ T56] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 203.621346][ T56] new_slab+0xa2/0x640 [ 203.622635][ T56] refill_objects+0xe3/0x410 [ 203.624088][ T56] __pcs_replace_empty_main+0x376/0x680 [ 203.625713][ T56] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 203.627647][ T56] kmalloc_reserve+0xe8/0x350 [ 203.629112][ T56] __alloc_skb+0x185/0x710 [ 203.630525][ T56] nsim_dev_trap_report_work+0x2af/0xd20 [ 203.632277][ T56] process_one_work+0xa23/0x1940 [ 203.633754][ T56] worker_thread+0x5ef/0xe50 [ 203.635168][ T56] kthread+0x370/0x450 [ 203.636422][ T56] ret_from_fork+0x72b/0xd50 [ 203.637825][ T56] ret_from_fork_asm+0x1a/0x30 [ 203.639744][ T56] page last free pid 5739 tgid 5739 stack trace: [ 203.641798][ T56] __free_frozen_pages+0x79f/0x1090 [ 203.643355][ T56] qlist_free_all+0x47/0xf0 [ 203.644779][ T56] kasan_quarantine_reduce+0x1a0/0x1f0 [ 203.646720][ T56] __kasan_slab_alloc+0x69/0x90 [ 203.648199][ T56] __kvmalloc_node_noprof+0x2eb/0x970 [ 203.649793][ T56] seq_read_iter+0x819/0x1270 [ 203.651255][ T56] kernfs_fop_read_iter+0x46c/0x610 [ 203.652887][ T56] vfs_read+0x82e/0xb40 [ 203.654119][ T56] ksys_read+0x12a/0x250 [ 203.655390][ T56] do_syscall_64+0x115/0x840 [ 203.656844][ T56] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.658652][ T56] [ 203.659367][ T56] Memory state around the buggy address: [ 203.661098][ T56] ffff888073288200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.663472][ T56] ffff888073288280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.665873][ T56] >ffff888073288300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.668387][ T56] ^ [ 203.670391][ T56] ffff888073288380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.672805][ T56] ffff888073288400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.675080][ T56] ================================================================== [ 203.732098][ T56] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.734321][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 203.737110][ T56] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.740276][ T56] Workqueue: usb_hub_wq hub_event [ 203.741816][ T56] Call Trace: [ 203.742839][ T56] [ 203.743764][ T56] dump_stack_lvl+0x100/0x190 [ 203.745269][ T56] vpanic+0x552/0x970 [ 203.746493][ T56] ? __pfx_vpanic+0x10/0x10 [ 203.747857][ T56] ? snd_usb_midi_v2_free+0x52d/0x670 [ 203.749479][ T56] panic+0xd1/0xe0 [ 203.750622][ T56] ? __pfx_panic+0x10/0x10 [ 203.751953][ T56] ? snd_usb_midi_v2_free+0x52d/0x670 [ 203.753537][ T56] ? preempt_schedule_common+0x42/0xc0 [ 203.755213][ T56] ? check_panic_on_warn+0x1f/0x90 [ 203.756779][ T56] check_panic_on_warn.cold+0x19/0x34 [ 203.758353][ T56] end_report.part.0+0x3a/0x90 [ 203.759859][ T56] kasan_report.cold+0xe/0x18 [ 203.761306][ T56] ? snd_usb_midi_v2_free+0x52d/0x670 [ 203.762901][ T56] snd_usb_midi_v2_free+0x52d/0x670 [ 203.764524][ T56] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 203.766238][ T56] snd_usb_midi_v2_free_all+0x85/0xe0 [ 203.767921][ T56] snd_usb_audio_free+0x4e/0x120 [ 203.769483][ T56] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 203.771201][ T56] release_card_device+0xb2/0x1a0 [ 203.772794][ T56] ? __pfx_release_card_device+0x10/0x10 [ 203.774577][ T56] device_release+0xd2/0x270 [ 203.776028][ T56] kobject_put+0x1f7/0x640 [ 203.777385][ T56] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 203.779102][ T56] put_device+0x1f/0x30 [ 203.780429][ T56] snd_card_free_when_closed+0x2b/0x40 [ 203.782035][ T56] usb_audio_disconnect+0x210/0x680 [ 203.783584][ T56] usb_unbind_interface+0x1dd/0x9e0 [ 203.785217][ T56] ? __pfx_usb_unbind_interface+0x10/0x10 [ 203.786935][ T56] device_remove+0x12a/0x180 [ 203.788371][ T56] device_release_driver_internal+0x44e/0x620 [ 203.790160][ T56] bus_remove_device+0x2bc/0x560 [ 203.791605][ T56] ? __pfx_bus_remove_device+0x10/0x10 [ 203.793385][ T56] ? __pfx_device_remove_attrs+0x10/0x10 [ 203.795138][ T56] device_del+0x376/0x9b0 [ 203.796569][ T56] ? __pfx_device_del+0x10/0x10 [ 203.798095][ T56] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 203.799872][ T56] usb_disable_device+0x367/0x810 [ 203.801826][ T56] ? mark_held_locks+0x40/0x70 [ 203.803788][ T56] usb_disconnect+0x2e2/0x9a0 [ 203.805745][ T56] hub_event+0x1c4f/0x4a60 [ 203.807450][ T56] ? __lock_acquire+0x49f/0x1a40 [ 203.809077][ T56] ? do_raw_spin_unlock+0x145/0x1e0 [ 203.810762][ T56] ? __pfx_hub_event+0x10/0x10 [ 203.812503][ T56] ? debug_object_deactivate+0x2e4/0x3b0 [ 203.814692][ T56] ? rcu_is_watching+0x12/0xc0 [ 203.816689][ T56] process_one_work+0xa23/0x1940 [ 203.818659][ T56] ? __pfx_process_one_work+0x10/0x10 [ 203.820883][ T56] ? __pfx_hub_event+0x10/0x10 [ 203.822849][ T56] worker_thread+0x5ef/0xe50 [ 203.824703][ T56] ? __pfx_worker_thread+0x10/0x10 [ 203.826819][ T56] ? kthread+0x13a/0x450 [ 203.828538][ T56] ? __pfx_worker_thread+0x10/0x10 [ 203.830122][ T56] kthread+0x370/0x450 [ 203.831405][ T56] ? __pfx_kthread+0x10/0x10 [ 203.832851][ T56] ret_from_fork+0x72b/0xd50 [ 203.834303][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 203.835965][ T56] ? __switch_to+0x800/0x10f0 [ 203.837421][ T56] ? __pfx_kthread+0x10/0x10 [ 203.839052][ T56] ret_from_fork_asm+0x1a/0x30 [ 203.840951][ T56] [ 203.842777][ T56] Kernel Offset: disabled [ 203.844104][ T56] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:14:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000411b29 RBX=ffffffff8e891480 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032ee7ff8 CR3=0000000077f47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000077ef28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b6e3220 R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032e0bff8 CR3=0000000077f47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000035fd67 RBX=ffff88801c7f4a80 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=ffffed10038fe950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a4ca32d000 CR3=000000004ade0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001d4 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00030c0800060800 0408000600749004 0000009f00000001 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 013fb20000000000 0000000000000000 00000001ffffffff ffffffffdf086803 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002005603280200 5403280200520302 d802005003000484 004c030404004803 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040800400302d402 002e03aaaaaaaaaa 01ffffffffffffff fff5082403020400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20030002000e0328 02000c032802000a 0302d80200080300 0484000403040400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff fff5082403020400 20030002000e0328 02000c032802000a ZMM25=13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 13d6e19513d6e195 ZMM26=3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a 3513bb0a3513bb0a ZMM27=84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 84445fc384445fc3 ZMM28=000001400000013f 0000013e0000013d 0000013c0000013b 0000013a00000139 0000013800000137 0000013600000135 0000013400000133 0000013200000131 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=850c0000850c0000 850c0000850c0000 850c0000850c0000 850c0000850c0000 850c0000850c0000 850c0000850c0000 850c0000850c0000 850c0000850c0000 info registers vcpu 3 CPU#3 RAX=00000001000008fb RBX=ffff88801c2d8480 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000000 RBP=ffff888025220038 RSP=ffffc9000df8f528 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92001bf1eaa R13=0000000000000000 R14=1ffff11004a44001 R15=0000000000000000 RIP=ffffffff81b6ac1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3554ff CR3=0000000077f47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000028000000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000