last executing test programs: 10m25.019968518s ago: executing program 0 (id=626): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaede, 0x1000, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 10m24.96063757s ago: executing program 0 (id=627): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x591083, 0x180) fdatasync(r0) 10m24.960491777s ago: executing program 0 (id=628): syz_emit_ethernet(0x3b2, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) 10m24.899621437s ago: executing program 0 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 10m24.899466526s ago: executing program 0 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000024f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 10m24.640444607s ago: executing program 0 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x1f, 0x10, 0x60}, 0x2c) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 10m24.590307978s ago: executing program 32 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x1f, 0x10, 0x60}, 0x2c) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 8.542409044s ago: executing program 3 (id=3464): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0), &(0x7f0000000440)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0xc9c39e3b45a2d6f7, 0x40, 0x38}, 0x18) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x0, 0x7, 0x6, 0x3]}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 8.040276173s ago: executing program 3 (id=3466): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xcac, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 7.482750775s ago: executing program 2 (id=3468): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) 7.325441811s ago: executing program 4 (id=3469): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000e40)=0x30, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c00078008000640dbf5000011000300686173683a69702c6d61726b000000"], 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7.191239119s ago: executing program 4 (id=3470): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240), 0x0, 0x1c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d1) 7.01136905s ago: executing program 1 (id=3471): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) socket$inet6(0xa, 0x80802, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 6.953985783s ago: executing program 3 (id=3472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x1a) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x1, "c4aaccd94696ecbf345d02bb2514af88d609d88f8aaffc86b6aec4f10946c9d80edb30af80a826c82a71c7ce780b51d7ee4075fe788e4327cfa84263342f538d", {0x7ff, 0x7}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 5.634655755s ago: executing program 1 (id=3473): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="be0956095f8a0f89a64b7ae699ec079d72d1612c0edafb8045dc09c90432a9b70e7157865683168b4ee1ab3d0a27ef337d53558a74e1f8b3d00c6c580f5a74187c3120a670e4321146a363a27e0ca7abe61c8bea174a3c96154d0d33abac1f19671a0c73a1df5f121e77a40c39"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000080)=""/49, 0x31}], 0x2}, 0x40000061) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000001050000001000000002000000000000080000000000002e"], 0x0, 0x50}, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 5.544727021s ago: executing program 2 (id=3474): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0), &(0x7f0000000440)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0xc9c39e3b45a2d6f7, 0x40, 0x38}, 0x18) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x0, 0x7, 0x6, 0x3]}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.381586295s ago: executing program 1 (id=3475): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, 0x0, 0x0, 0x1c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d1) 5.370644523s ago: executing program 4 (id=3476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c00000007000000050000000000000604000000004000000061000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x1a) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000300)={0x1, "c4aaccd94696ecbf345d02bb2514af88d609d88f8aaffc86b6aec4f10946c9d80edb30af80a826c82a71c7ce780b51d7ee4075fe788e4327cfa84263342f538d", {0x7ff, 0x7}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r8, 0xffffffffffffffff, 0x0) 5.210034736s ago: executing program 3 (id=3477): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0), &(0x7f0000000440)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0xc9c39e3b45a2d6f7, 0x40, 0x38}, 0x18) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x0, 0x7, 0x6, 0x3]}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.779560525s ago: executing program 3 (id=3478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="2553593c000000000000000000000000180100002020702500000000002020207b1af8ff000000005abfa100009610000007010000f8ffffffa569b16424b0d5c6b702000008000000b7030000000000008500000070fa0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 4.374686765s ago: executing program 2 (id=3479): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) socket$inet6(0xa, 0x80802, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 2.993428074s ago: executing program 4 (id=3482): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) 2.183452626s ago: executing program 1 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="2553593c000000000000000000000000180100002020702500000000002020207b1af8ff000000005abfa100009610000007010000f8ffffffa569b16424b0d5c6b702000008000000b7030000000000008500000070fa0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 2.053315361s ago: executing program 2 (id=3484): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d1) 1.794490477s ago: executing program 4 (id=3485): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 977.339112ms ago: executing program 2 (id=3486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="2553593c000000000000000000000000180100002020702500000000002020207b1af8ff000000005abfa100009610000007010000f8ffffffa569b16424b0d5c6b702000008000000b7030000000000008500000070fa0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 904.312357ms ago: executing program 3 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffcd0a0000200000"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @private1}}, 0x0, 0x0, 0x3f8, 0x1000, 0x32}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYBLOB="0000000000000000b7020000008000008500000086000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_BATCH(r0, 0x0, 0x2000c891) 543.541993ms ago: executing program 4 (id=3488): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x2, 0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}]}, 0x30}}, 0x0) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d1) 0s ago: executing program 1 (id=3489): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x31}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x101}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) kernel console output (not intermixed with test programs): 0 [ 437.672377][ T29] usb 7-1: config 0 interface 2 has no altsetting 0 [ 437.687012][ T29] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 437.689920][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.692440][ T29] usb 7-1: Product: syz [ 437.693880][ T29] usb 7-1: Manufacturer: syz [ 437.707292][ T29] usb 7-1: SerialNumber: syz [ 437.710094][ T29] usb 7-1: config 0 descriptor?? [ 437.723079][ T171] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.791619][ T171] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.910317][ T171] bridge0: port 3(batadv0) entered disabled state [ 437.917423][ T171] bridge_slave_1: left allmulticast mode [ 437.919289][ T171] bridge_slave_1: left promiscuous mode [ 437.921147][ T171] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.925271][ T171] bridge_slave_0: left allmulticast mode [ 437.927111][ T171] bridge_slave_0: left promiscuous mode [ 437.928952][ T171] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.973523][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.976695][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.986033][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.049536][ T29] usb 7-1: USB disconnect, device number 84 [ 438.095761][T12939] udevd[12939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.331776][ T171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.336881][ T171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.340872][ T171] bond0 (unregistering): Released all slaves [ 438.348141][ T171] bond1 (unregistering): Released all slaves [ 438.355270][ T171] bond2 (unregistering): Released all slaves [ 438.966504][ T5951] Bluetooth: hci4: command tx timeout [ 439.059229][ T171] hsr_slave_0: left promiscuous mode [ 439.062154][ T171] hsr_slave_1: left promiscuous mode [ 439.065951][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.068925][ T171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.081818][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.095330][ T171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.243180][ T171] veth1_macvtap: left promiscuous mode [ 439.254975][ T171] veth0_macvtap: left promiscuous mode [ 439.257617][ T171] veth1_vlan: left promiscuous mode [ 439.259818][ T171] veth0_vlan: left promiscuous mode [ 439.442595][ T29] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 439.616597][ T29] usb 7-1: config 0 has no interfaces? [ 439.618892][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 439.632980][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.645002][ T29] usb 7-1: config 0 descriptor?? [ 439.881427][T12821] usb 7-1: USB disconnect, device number 85 [ 440.156521][ T171] team0 (unregistering): Port device team_slave_1 removed [ 440.205009][ T7749] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 440.230268][ T171] team0 (unregistering): Port device team_slave_0 removed [ 440.354327][ T7749] usb 9-1: Using ep0 maxpacket: 8 [ 440.358289][ T7749] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.362347][ T7749] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.366756][ T7749] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.370605][ T7749] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.376111][ T7749] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.379654][ T7749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.590556][ T7749] usb 9-1: GET_CAPABILITIES returned 0 [ 440.592435][ T7749] usbtmc 9-1:16.0: can't read capabilities [ 440.792273][ T59] usb 9-1: USB disconnect, device number 68 [ 440.818540][T13293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.825860][T13293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.832242][T13293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.838590][T13293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.854201][ T29] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 440.893079][T13293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.909256][T13293] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.915200][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.917480][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.927488][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.929788][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.004544][ T5951] Bluetooth: hci4: command tx timeout [ 441.015731][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 441.022117][ T29] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 441.034218][ T29] usb 7-1: config 0 has no interface number 0 [ 441.039411][ T29] usb 7-1: config 0 interface 2 has no altsetting 0 [ 441.047411][ T29] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 441.051122][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.057376][ T29] usb 7-1: Product: syz [ 441.059165][ T29] usb 7-1: Manufacturer: syz [ 441.061076][ T29] usb 7-1: SerialNumber: syz [ 441.068959][ T29] usb 7-1: config 0 descriptor?? [ 441.142726][ T171] IPVS: stop unused estimator thread 0... [ 441.169526][T13293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.202152][T13293] veth0_vlan: entered promiscuous mode [ 441.212266][T13293] veth1_vlan: entered promiscuous mode [ 441.240066][T13293] veth0_macvtap: entered promiscuous mode [ 441.244398][T13293] veth1_macvtap: entered promiscuous mode [ 441.256268][T13293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.273366][T13293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.280798][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.284607][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.287376][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.290074][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.337894][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.367286][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.369553][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.370831][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.378963][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.408202][ T29] usb 7-1: USB disconnect, device number 86 [ 441.447994][T12939] udevd[12939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.496490][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.499738][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.719237][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2407'. [ 442.094249][ T6003] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 442.256177][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 442.260728][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 442.285237][ T6003] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 442.288902][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 442.292737][ T6003] usb 9-1: SerialNumber: syz [ 442.321066][ T6003] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 442.325820][ T6003] usb-storage 9-1:1.0: USB Mass Storage device detected [ 442.339356][ T6003] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 442.502378][ T53] usb 9-1: USB disconnect, device number 69 [ 443.069281][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.080394][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.083997][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.087841][ T5941] Bluetooth: hci4: command tx timeout [ 443.090881][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.094066][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.152295][T13409] lo speed is unknown, defaulting to 1000 [ 443.293547][T13409] chnl_net:caif_netlink_parms(): no params data found [ 443.397493][T13424] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 443.419006][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.422220][T13424] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 443.433405][T13424] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 443.436397][T13424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2414'. [ 443.439339][T13424] batadv0: entered promiscuous mode [ 443.441138][T13424] batadv0: entered allmulticast mode [ 443.454727][T13424] bond0: (slave batadv0): Releasing backup interface [ 443.460129][T13424] bridge0: port 1(batadv0) entered blocking state [ 443.464526][T13424] bridge0: port 1(batadv0) entered disabled state [ 443.504284][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 443.507328][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 443.515032][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.517886][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.520235][T13409] bridge_slave_0: entered allmulticast mode [ 443.522844][T13409] bridge_slave_0: entered promiscuous mode [ 443.526431][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.528812][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.531098][T13409] bridge_slave_1: entered allmulticast mode [ 443.535370][T13409] bridge_slave_1: entered promiscuous mode [ 443.569237][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.573777][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.601568][ T62] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.625562][T13409] team0: Port device team_slave_0 added [ 443.628885][T13409] team0: Port device team_slave_1 added [ 443.671299][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.673558][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.681615][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.686123][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.688320][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.696783][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.738701][T13409] hsr_slave_0: entered promiscuous mode [ 443.741718][T13409] hsr_slave_1: entered promiscuous mode [ 443.795030][T13409] debugfs: 'hsr0' already exists in 'hsr' [ 443.797450][T13409] Cannot create hsr debugfs directory [ 443.817536][ T62] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.904641][ T62] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.988422][ T62] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.073620][ T62] bridge0: port 2(batadv0) entered disabled state [ 444.078163][ T62] bridge_slave_0: left allmulticast mode [ 444.079962][ T62] bridge_slave_0: left promiscuous mode [ 444.081841][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.201544][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2416'. [ 444.207855][ T62] dvmrp0 (unregistering): left allmulticast mode [ 444.314395][ T62] team0: Port device bridge1 removed [ 444.439901][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.444206][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.447776][ T62] bond0 (unregistering): Released all slaves [ 444.607965][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.614244][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.722155][ T62] hsr_slave_0: left promiscuous mode [ 444.725067][ T62] hsr_slave_1: left promiscuous mode [ 444.727531][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.730411][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.754884][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.757781][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.806045][ T62] veth1_macvtap: left promiscuous mode [ 444.808269][ T62] veth0_macvtap: left promiscuous mode [ 444.810502][ T62] veth1_vlan: left promiscuous mode [ 444.812577][ T62] veth0_vlan: left promiscuous mode [ 444.904207][T12821] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 444.938959][ T40] audit: type=1800 audit(1762967185.171:4097): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2420" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 445.062147][T12821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.065350][T12821] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.068339][T12821] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 445.074217][T12821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.083030][T12821] usb 9-1: config 0 descriptor?? [ 445.092506][T12821] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 445.097926][T12821] dvb-usb: bulk message failed: -22 (3/0) [ 445.136134][T12821] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.140435][T12821] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.146421][T12821] usb 9-1: media controller created [ 445.153454][T12821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.167252][T12821] dvb-usb: bulk message failed: -22 (6/0) [ 445.172376][T12821] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.174265][ T5951] Bluetooth: hci3: command tx timeout [ 445.181136][T12821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input26 [ 445.195566][T12821] dvb-usb: schedule remote query interval to 150 msecs. [ 445.201348][T12821] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 445.364277][T12821] dvb-usb: bulk message failed: -22 (1/0) [ 445.366254][T12821] dvb-usb: error while querying for an remote control event. [ 445.423631][T12821] usb 9-1: USB disconnect, device number 70 [ 445.449510][T12821] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 445.955160][ T62] team0 (unregistering): Port device team_slave_1 removed [ 445.981687][T13461] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 446.483969][ T24] lo speed is unknown, defaulting to 1000 [ 446.485965][ T24] infiniband syz0: ib_query_port failed (-19) [ 446.773362][T13409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.783864][T13409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.791668][T13409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.798281][T13409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.859193][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.254514][ T5951] Bluetooth: hci3: command tx timeout [ 447.365289][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.392537][ T62] IPVS: stop unused estimator thread 0... [ 447.402873][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.405268][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.416259][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.418743][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.550212][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.578388][T13409] veth0_vlan: entered promiscuous mode [ 447.585968][T13409] veth1_vlan: entered promiscuous mode [ 447.603407][T13409] veth0_macvtap: entered promiscuous mode [ 447.609799][T13409] veth1_macvtap: entered promiscuous mode [ 447.623438][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.631612][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.640533][ T171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.644219][ T171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.648568][ T171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.652183][ T171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.688030][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.691332][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.702728][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.706368][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.165853][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 448.994443][T13523] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 449.324467][ T5951] Bluetooth: hci3: command tx timeout [ 449.809274][T13539] netlink: 'syz.1.2439': attribute type 20 has an invalid length. [ 449.812832][T13539] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.817931][T13539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.821337][T13539] IPv6: NLM_F_CREATE should be set when creating new route [ 450.359108][T13546] overlayfs: missing 'lowerdir' [ 450.407288][T13548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.404182][ T5951] Bluetooth: hci3: command tx timeout [ 451.649156][T13574] netlink: 'syz.3.2449': attribute type 10 has an invalid length. [ 451.666691][T13574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.675841][T13574] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 451.680879][T13574] netlink: 'syz.3.2449': attribute type 10 has an invalid length. [ 451.683364][T13574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2449'. [ 451.686872][T13574] batadv0: entered promiscuous mode [ 451.688893][T13574] batadv0: entered allmulticast mode [ 451.692586][T13574] bond0: (slave batadv0): Releasing backup interface [ 451.697606][T13574] bridge0: port 3(batadv0) entered blocking state [ 451.700336][T13574] bridge0: port 3(batadv0) entered disabled state [ 452.024415][ T76] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 452.031881][ T76] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 452.314193][ T7749] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 452.474192][ T7749] usb 7-1: Using ep0 maxpacket: 32 [ 452.485298][ T7749] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.493015][ T7749] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.497248][ T7749] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.500614][ T7749] usb 7-1: Product: syz [ 452.502385][ T7749] usb 7-1: Manufacturer: syz [ 452.505202][ T7749] usb 7-1: SerialNumber: syz [ 452.509389][ T7749] usb 7-1: config 0 descriptor?? [ 452.514045][ T7749] hub 7-1:0.0: bad descriptor, ignoring hub [ 452.516726][ T7749] hub 7-1:0.0: probe with driver hub failed with error -5 [ 452.824491][ T24] usb 7-1: USB disconnect, device number 87 [ 453.119338][T13594] loop6: detected capacity change from 0 to 524288000 [ 453.228854][T13594] vlan2: entered allmulticast mode [ 453.231205][T13594] hsr_slave_1: entered allmulticast mode [ 453.824422][T12821] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 453.994215][T12821] usb 7-1: Using ep0 maxpacket: 32 [ 454.005876][T12821] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 454.008454][T12821] usb 7-1: config 0 has no interface number 0 [ 454.010426][T12821] usb 7-1: config 0 interface 2 has no altsetting 0 [ 454.025364][T12821] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 454.028605][T12821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.031317][T12821] usb 7-1: Product: syz [ 454.032701][T12821] usb 7-1: Manufacturer: syz [ 454.036056][T12821] usb 7-1: SerialNumber: syz [ 454.040053][T12821] usb 7-1: config 0 descriptor?? [ 454.055673][T13611] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 454.079191][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.085946][T13611] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 454.094387][T13611] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 454.096899][T13611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2460'. [ 454.099784][T13611] batadv0: entered promiscuous mode [ 454.101408][T13611] batadv0: entered allmulticast mode [ 454.104721][T13611] bond0: (slave batadv0): Releasing backup interface [ 454.109265][T13611] bridge0: port 3(batadv0) entered blocking state [ 454.112047][T13611] bridge0: port 3(batadv0) entered disabled state [ 454.320568][T13601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.325731][T13601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.341351][T12821] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.392708][T12821] usb 7-1: USB disconnect, device number 88 [ 454.428494][T13613] udevd[13613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.594803][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 454.599215][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 455.519031][T13655] tipc: Enabling of bearer rejected, failed to enable media [ 456.864305][ T24] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 457.024324][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 457.027443][ T24] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 457.029948][ T24] usb 9-1: config 0 has no interface number 0 [ 457.032026][ T24] usb 9-1: config 0 interface 2 has no altsetting 0 [ 457.036856][ T24] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 457.039709][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.042326][ T24] usb 9-1: Product: syz [ 457.043685][ T24] usb 9-1: Manufacturer: syz [ 457.045598][ T24] usb 9-1: SerialNumber: syz [ 457.050080][ T24] usb 9-1: config 0 descriptor?? [ 457.064224][ T7749] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 457.224235][ T7749] usb 7-1: Using ep0 maxpacket: 32 [ 457.229455][ T7749] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 457.232916][ T7749] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 457.237853][ T7749] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 457.243271][ T7749] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 457.248293][ T7749] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.252388][ T7749] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 457.255951][ T7749] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 457.258690][ T7749] usb 7-1: Product: syz [ 457.260054][ T7749] usb 7-1: Manufacturer: syz [ 457.261568][ T7749] usb 7-1: SerialNumber: syz [ 457.269948][ T7749] usb 7-1: config 0 descriptor?? [ 457.273280][ T7749] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 457.277258][ T7749] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 457.309029][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.313422][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.322668][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.345793][ T24] usb 9-1: USB disconnect, device number 71 [ 457.361507][T13578] udevd[13578]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.482379][ T7749] usb 7-1: USB disconnect, device number 89 [ 457.486725][ T7749] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 458.124205][ T5944] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 458.274283][ T5944] usb 9-1: Using ep0 maxpacket: 16 [ 458.277319][ T5944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.281279][ T5944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.284733][ T5944] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 458.287400][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.291456][ T5944] usb 9-1: config 0 descriptor?? [ 458.414982][T12821] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 458.454239][ T59] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 458.584196][T12821] usb 7-1: Using ep0 maxpacket: 32 [ 458.587790][T12821] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 458.590481][T12821] usb 7-1: config 0 has no interface number 0 [ 458.592596][T12821] usb 7-1: config 0 interface 2 has no altsetting 0 [ 458.597307][T12821] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 458.600384][T12821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.603190][T12821] usb 7-1: Product: syz [ 458.604885][T12821] usb 7-1: Manufacturer: syz [ 458.605778][ T59] usb 8-1: config 0 has no interfaces? [ 458.606515][T12821] usb 7-1: SerialNumber: syz [ 458.608758][ T59] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 458.608773][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.613696][T12821] usb 7-1: config 0 descriptor?? [ 458.619796][ T59] usb 8-1: config 0 descriptor?? [ 458.838006][ T6002] usb 8-1: USB disconnect, device number 71 [ 458.889450][T13707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.894989][T13707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.910396][ T5944] usbhid 9-1:0.0: can't add hid device: -71 [ 458.916537][T12821] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.920882][ T5944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 458.950771][ T5944] usb 9-1: USB disconnect, device number 72 [ 458.975441][T12821] usb 7-1: USB disconnect, device number 90 [ 458.997220][T13578] udevd[13578]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.698406][ T24] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 459.854323][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 459.858080][ T24] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 459.861395][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 459.865745][ T24] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 459.869929][ T24] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 459.874911][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.879401][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 459.882820][ T24] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 459.886255][ T24] usb 7-1: Product: syz [ 459.887881][ T24] usb 7-1: Manufacturer: syz [ 459.889639][ T24] usb 7-1: SerialNumber: syz [ 459.893716][ T24] usb 7-1: config 0 descriptor?? [ 459.902183][ T24] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 459.907787][ T24] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 459.924321][ T59] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 460.004259][ T6002] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 460.084210][ T59] usb 9-1: Using ep0 maxpacket: 32 [ 460.087914][ T59] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 460.090813][ T59] usb 9-1: config 0 has no interface number 0 [ 460.093090][ T59] usb 9-1: config 0 interface 2 has no altsetting 0 [ 460.098530][ T59] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 460.101917][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.105206][ T59] usb 9-1: Product: syz [ 460.106921][ T59] usb 9-1: Manufacturer: syz [ 460.108796][ T59] usb 9-1: SerialNumber: syz [ 460.111931][ T24] usb 7-1: USB disconnect, device number 91 [ 460.112289][ T59] usb 9-1: config 0 descriptor?? [ 460.118761][ T24] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 460.165826][ T6002] usb 6-1: config 0 has no interfaces? [ 460.168174][ T6002] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 460.172235][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.178105][ T6002] usb 6-1: config 0 descriptor?? [ 460.368197][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.371044][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.376839][ T59] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.388589][ T6002] usb 6-1: USB disconnect, device number 68 [ 460.391272][ T59] usb 9-1: USB disconnect, device number 73 [ 460.415646][T13578] udevd[13578]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.824177][T12821] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 460.934417][ T59] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 460.985010][T12821] usb 8-1: Using ep0 maxpacket: 16 [ 460.990156][T12821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.993530][T12821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.998010][T12821] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 461.000940][T12821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.005421][T12821] usb 8-1: config 0 descriptor?? [ 461.084213][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 461.087099][ T59] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 461.089735][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.093448][ T59] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 461.096883][ T59] usb 7-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 461.100871][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 461.104967][ T59] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 461.107743][ T59] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 461.110358][ T59] usb 7-1: Product: syz [ 461.111712][ T59] usb 7-1: Manufacturer: syz [ 461.113207][ T59] usb 7-1: SerialNumber: syz [ 461.116471][ T59] usb 7-1: config 0 descriptor?? [ 461.122117][ T59] ldusb 7-1:0.0: Interrupt in endpoint not found [ 461.327645][ T6003] usb 7-1: USB disconnect, device number 92 [ 461.622604][T12821] usbhid 8-1:0.0: can't add hid device: -71 [ 461.624727][T12821] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 461.633102][T12821] usb 8-1: USB disconnect, device number 72 [ 462.134325][ T6002] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 462.294280][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 462.297755][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 462.304176][ T6002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 462.311849][ T6002] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 462.315350][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 462.318343][ T6002] usb 7-1: Product: syz [ 462.319766][ T6002] usb 7-1: Manufacturer: syz [ 462.321571][ T6002] usb 7-1: SerialNumber: syz [ 462.324937][ T6002] usb 7-1: config 0 descriptor?? [ 462.328255][ T6002] hub 7-1:0.0: bad descriptor, ignoring hub [ 462.330620][ T6002] hub 7-1:0.0: probe with driver hub failed with error -5 [ 462.434345][T12821] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 462.584282][T12821] usb 8-1: Using ep0 maxpacket: 32 [ 462.588950][T12821] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.591758][T12821] usb 8-1: config 0 has no interface number 0 [ 462.594910][T12821] usb 8-1: config 0 interface 2 has no altsetting 0 [ 462.607276][T12821] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 462.610950][T12821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.613883][T12821] usb 8-1: Product: syz [ 462.615902][T12821] usb 8-1: Manufacturer: syz [ 462.617754][T12821] usb 8-1: SerialNumber: syz [ 462.621572][T12821] usb 8-1: config 0 descriptor?? [ 462.655139][ T5944] usb 7-1: USB disconnect, device number 93 [ 462.744253][ T6003] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 462.890418][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.894725][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.899410][ T6003] usb 9-1: config 0 has no interfaces? [ 462.901697][ T6003] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 462.905507][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.908209][T12821] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.916080][ T6003] usb 9-1: config 0 descriptor?? [ 462.939625][T12821] usb 8-1: USB disconnect, device number 73 [ 463.007137][T13578] udevd[13578]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.133872][ T53] usb 9-1: USB disconnect, device number 74 [ 464.653511][T13800] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 465.090896][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2527'. [ 466.218219][T13847] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 466.854254][ T53] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 467.024201][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 467.030718][ T53] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 467.038925][ T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 467.049595][ T53] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 467.059719][ T53] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 467.074440][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 467.081140][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 467.085229][ T53] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 467.093327][ T53] usb 7-1: Product: syz [ 467.101355][ T53] usb 7-1: Manufacturer: syz [ 467.103363][ T53] usb 7-1: SerialNumber: syz [ 467.133366][ T53] usb 7-1: config 0 descriptor?? [ 467.137860][ T53] ldusb 7-1:0.0: Interrupt in endpoint not found [ 467.339621][ T53] usb 7-1: USB disconnect, device number 94 [ 468.310063][T13890] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 468.537332][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.539783][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.543091][T13893] bridge0: entered allmulticast mode [ 468.562655][T13893] bridge0: port 3(batadv0) entered disabled state [ 468.625607][T13893] bridge_slave_1: left allmulticast mode [ 468.627593][T13893] bridge_slave_1: left promiscuous mode [ 468.629457][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.665785][T13893] bridge_slave_0: left allmulticast mode [ 468.672308][T13893] bridge_slave_0: left promiscuous mode [ 468.674384][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.578839][T13924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 472.744216][ T6002] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 472.884432][ T6002] usb 8-1: device descriptor read/64, error -71 [ 473.124291][ T6002] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 473.275612][ T6002] usb 8-1: device descriptor read/64, error -71 [ 473.404928][ T6002] usb usb8-port1: attempt power cycle [ 473.754280][ T6002] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 473.775033][ T6002] usb 8-1: device descriptor read/8, error -71 [ 474.084243][ T6002] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 474.104645][ T6002] usb 8-1: device descriptor read/8, error -71 [ 474.214468][ T6002] usb usb8-port1: unable to enumerate USB device [ 475.802911][T14023] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 475.806377][T14023] batadv0: left allmulticast mode [ 475.808331][T14023] batadv0: left promiscuous mode [ 475.810236][T14023] bridge0: port 3(batadv0) entered disabled state [ 475.867057][T14023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.870265][T14023] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 475.878690][T14024] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 475.882072][T14024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2592'. [ 475.887080][T14024] batadv0: entered promiscuous mode [ 475.889319][T14024] batadv0: entered allmulticast mode [ 475.895010][T14024] bond0: (slave batadv0): Releasing backup interface [ 475.901710][T14024] bridge0: port 3(batadv0) entered blocking state [ 475.905088][T14024] bridge0: port 3(batadv0) entered disabled state [ 476.112741][T14010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 478.152973][T14001] Set syz1 is full, maxelem 65536 reached [ 479.264258][ T843] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 479.324379][ T5977] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 479.394293][ T843] usb 7-1: device descriptor read/64, error -71 [ 479.474371][ T5977] usb 9-1: Using ep0 maxpacket: 32 [ 479.479006][ T5977] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 479.482595][ T5977] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 479.487342][ T5977] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 479.491802][ T5977] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 479.496059][ T5977] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 479.501428][ T5977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 479.506700][ T5977] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 479.510458][ T5977] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 479.513905][ T5977] usb 9-1: Product: syz [ 479.515499][ T5977] usb 9-1: Manufacturer: syz [ 479.517114][ T5977] usb 9-1: SerialNumber: syz [ 479.524312][ T5977] usb 9-1: config 0 descriptor?? [ 479.527549][ T5977] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 479.531311][ T5977] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 479.581133][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'. [ 479.634214][ T843] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 479.728755][T14061] ldusb 9-1:0.0: Couldn't submit interrupt_in_urb -90 [ 479.733052][ T5977] usb 9-1: USB disconnect, device number 75 [ 479.745003][ T5977] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 479.764298][ T843] usb 7-1: device descriptor read/64, error -71 [ 479.805871][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 479.874765][ T843] usb usb7-port1: attempt power cycle [ 479.966243][T14076] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 479.969559][T14076] batadv0: left promiscuous mode [ 479.971610][T14076] batadv0: left allmulticast mode [ 479.975361][T14076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.979899][T14076] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 479.985914][T14076] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 479.988735][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2605'. [ 479.991587][T14076] batadv0: entered promiscuous mode [ 479.993330][T14076] batadv0: entered allmulticast mode [ 479.996904][T14076] bond0: (slave batadv0): Releasing backup interface [ 480.001106][T14076] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 480.234273][ T843] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 480.254686][ T843] usb 7-1: device descriptor read/8, error -71 [ 480.554250][ T843] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 480.574836][ T843] usb 7-1: device descriptor read/8, error -71 [ 480.684581][ T843] usb usb7-port1: unable to enumerate USB device [ 482.738652][T14114] netlink: 'syz.3.2616': attribute type 10 has an invalid length. [ 482.741413][T14114] batadv0: left allmulticast mode [ 482.743169][T14114] batadv0: left promiscuous mode [ 482.745707][T14114] bridge0: port 3(batadv0) entered disabled state [ 482.750714][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.754760][T14114] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 482.762758][T14114] netlink: 'syz.3.2616': attribute type 10 has an invalid length. [ 482.766340][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2616'. [ 482.770313][T14114] batadv0: entered promiscuous mode [ 482.772697][T14114] batadv0: entered allmulticast mode [ 482.776636][T14114] bond0: (slave batadv0): Releasing backup interface [ 482.782690][T14114] bridge0: port 3(batadv0) entered blocking state [ 482.785905][T14114] bridge0: port 3(batadv0) entered disabled state [ 486.100791][T14144] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 486.425452][T14150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 486.427468][T14150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 486.430209][T14150] vhci_hcd vhci_hcd.0: Device attached [ 486.504362][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2624'. [ 486.809240][ T29] usb 46-1: SetAddress Request (2) to port 0 [ 486.811516][ T29] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 486.864349][ T843] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 487.014220][ T843] usb 6-1: Using ep0 maxpacket: 32 [ 487.017364][ T843] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 487.021007][ T843] usb 6-1: config 0 has no interface number 0 [ 487.023628][ T843] usb 6-1: config 0 interface 2 has no altsetting 0 [ 487.029746][ T843] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 487.033779][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.038291][ T843] usb 6-1: Product: syz [ 487.040093][ T843] usb 6-1: Manufacturer: syz [ 487.042066][ T843] usb 6-1: SerialNumber: syz [ 487.045518][ T843] usb 6-1: config 0 descriptor?? [ 487.259669][T14151] vhci_hcd: connection reset by peer [ 487.263487][ T12] vhci_hcd: stop threads [ 487.265020][ T12] vhci_hcd: release socket [ 487.267384][ T12] vhci_hcd: disconnect device [ 487.306148][T14160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.309852][T14160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.316780][ T843] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.331562][ T843] usb 6-1: USB disconnect, device number 69 [ 487.362258][T14171] udevd[14171]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.151722][T14201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 489.574234][ T5944] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 489.734308][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 489.740252][ T5944] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.758698][ T5944] usb 6-1: config 0 has no interface number 0 [ 489.761366][ T5944] usb 6-1: config 0 interface 2 has no altsetting 0 [ 489.795135][ T5944] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 489.818180][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.821565][ T5944] usb 6-1: Product: syz [ 489.823374][ T5944] usb 6-1: Manufacturer: syz [ 490.108221][ T5944] usb 6-1: SerialNumber: syz [ 490.125550][ T5944] usb 6-1: config 0 descriptor?? [ 490.400044][T14208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.403741][T14208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.413230][ T5944] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.481415][ T5944] usb 6-1: USB disconnect, device number 70 [ 491.884248][ T29] usb 46-1: device descriptor read/8, error -110 [ 492.362990][ T29] usb usb46-port1: attempt power cycle [ 492.953971][ T29] usb usb46-port1: unable to enumerate USB device [ 493.053769][T14258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 495.471082][T14279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 495.473822][T14279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 495.477290][T14279] vhci_hcd vhci_hcd.0: Device attached [ 495.533405][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2657'. [ 495.834243][ T29] usb 46-1: SetAddress Request (6) to port 0 [ 495.978370][ T29] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 496.391317][T14295] block device autoloading is deprecated and will be removed. [ 496.561189][T14280] vhci_hcd: connection reset by peer [ 496.563155][ T76] vhci_hcd: stop threads [ 496.565167][ T76] vhci_hcd: release socket [ 496.566934][ T76] vhci_hcd: disconnect device [ 497.017851][T14301] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 501.091223][ T29] usb 46-1: device descriptor read/8, error -110 [ 501.654455][ T6002] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 501.669722][ T29] usb usb46-port1: attempt power cycle [ 501.804246][ T6002] usb 6-1: Using ep0 maxpacket: 32 [ 501.807625][ T6002] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 501.810129][ T6002] usb 6-1: config 0 has no interface number 0 [ 501.812053][ T6002] usb 6-1: config 0 interface 2 has no altsetting 0 [ 501.816673][ T6002] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 501.819511][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.821985][ T6002] usb 6-1: Product: syz [ 501.823319][ T6002] usb 6-1: Manufacturer: syz [ 501.825247][ T6002] usb 6-1: SerialNumber: syz [ 501.827836][ T6002] usb 6-1: config 0 descriptor?? [ 502.071333][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.075488][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.083676][ T6002] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.088183][ T6002] usb 6-1: invalid MIDI in EP 0 [ 502.130787][ T6002] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 502.136995][ T6002] usb 6-1: USB disconnect, device number 71 [ 502.166238][T14389] udevd[14389]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.225684][ T29] usb usb46-port1: unable to enumerate USB device [ 506.046066][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.048221][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.195510][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.198884][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.208370][T14489] bridge0: entered allmulticast mode [ 507.243853][T14489] bridge0: port 3(batadv0) entered disabled state [ 507.257617][T14489] bridge_slave_1: left allmulticast mode [ 507.259383][T14489] bridge_slave_1: left promiscuous mode [ 507.261685][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.273716][T14489] bridge_slave_0: left allmulticast mode [ 507.276460][T14489] bridge_slave_0: left promiscuous mode [ 507.281176][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.244728][T14533] netlink: 'syz.4.2718': attribute type 10 has an invalid length. [ 510.247487][T14533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2718'. [ 512.572593][T14492] Set syz1 is full, maxelem 65536 reached [ 512.830570][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2727'. [ 516.367539][T14631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 519.294417][T14688] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 519.296963][T14688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 519.300572][T14688] vhci_hcd vhci_hcd.0: Device attached [ 519.364320][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 519.574357][ T5796] usb 46-1: SetAddress Request (10) to port 0 [ 519.576401][ T5796] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 520.129835][T14689] vhci_hcd: connection reset by peer [ 520.133958][ T1142] vhci_hcd: stop threads [ 520.135440][ T1142] vhci_hcd: release socket [ 520.136900][ T1142] vhci_hcd: disconnect device [ 522.805685][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.808919][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.812768][T14733] bridge0: entered allmulticast mode [ 522.822132][T14733] bridge0: port 3(batadv0) entered disabled state [ 522.826988][T14733] bridge_slave_1: left allmulticast mode [ 522.829041][T14733] bridge_slave_1: left promiscuous mode [ 522.830984][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.848386][T14733] bridge_slave_0: left allmulticast mode [ 522.850684][T14733] bridge_slave_0: left promiscuous mode [ 522.852953][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.688076][ T5796] usb 46-1: device descriptor read/8, error -110 [ 525.189527][ T5796] usb usb46-port1: attempt power cycle [ 525.754773][ T5796] usb usb46-port1: unable to enumerate USB device [ 527.164175][T14770] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 527.166262][T14770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 527.176410][T14770] vhci_hcd vhci_hcd.0: Device attached [ 527.524209][ T5977] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 527.557798][ T29] usb 46-1: SetAddress Request (14) to port 0 [ 527.560704][ T29] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 527.574237][T14736] Set syz1 is full, maxelem 65536 reached [ 527.694301][ T5977] usb 8-1: Using ep0 maxpacket: 32 [ 527.702412][ T5977] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 527.714452][ T5977] usb 8-1: config 0 has no interface number 0 [ 527.716442][ T5977] usb 8-1: config 0 interface 2 has no altsetting 0 [ 527.720193][ T5977] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 527.724985][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.727591][ T5977] usb 8-1: Product: syz [ 527.728939][ T5977] usb 8-1: Manufacturer: syz [ 527.730415][ T5977] usb 8-1: SerialNumber: syz [ 527.739203][ T5977] usb 8-1: config 0 descriptor?? [ 528.007803][T14775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.011693][T14775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.025053][ T5977] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.030735][ T5977] usb 8-1: invalid MIDI in EP 0 [ 528.093333][ T5977] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 528.103560][T14769] udevd[14769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.109882][ T5977] usb 8-1: USB disconnect, device number 78 [ 528.468879][T14772] vhci_hcd: connection reset by peer [ 528.471525][ T76] vhci_hcd: stop threads [ 528.473296][ T76] vhci_hcd: release socket [ 528.475790][ T76] vhci_hcd: disconnect device [ 530.764366][ T7749] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 530.934201][ T7749] usb 8-1: Using ep0 maxpacket: 32 [ 530.937566][ T7749] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 530.942541][ T7749] usb 8-1: config 0 has no interface number 0 [ 530.945398][ T7749] usb 8-1: config 0 interface 2 has no altsetting 0 [ 530.959475][ T7749] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 530.963602][ T7749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.967391][ T7749] usb 8-1: Product: syz [ 530.969002][ T7749] usb 8-1: Manufacturer: syz [ 530.970574][ T7749] usb 8-1: SerialNumber: syz [ 530.982098][ T7749] usb 8-1: config 0 descriptor?? [ 531.360876][T14815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.391905][T14815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.426503][ T7749] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.433542][ T7749] usb 8-1: invalid MIDI in EP 0 [ 531.728504][ T7749] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 531.741848][ T7749] usb 8-1: USB disconnect, device number 79 [ 531.811737][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.604371][ T29] usb 46-1: device descriptor read/8, error -110 [ 533.174832][ T29] usb usb46-port1: attempt power cycle [ 534.178400][ T29] usb usb46-port1: unable to enumerate USB device [ 535.694943][T14872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 535.697550][T14872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 535.705361][T14872] vhci_hcd vhci_hcd.0: Device attached [ 535.750442][T14872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2800'. [ 535.984835][ T59] usb 40-1: SetAddress Request (2) to port 0 [ 536.124337][ T843] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 536.154385][ T59] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 536.170540][T14873] vhci_hcd: connection closed [ 536.170757][ T1146] vhci_hcd: stop threads [ 536.174990][ T1146] vhci_hcd: release socket [ 536.177057][ T1146] vhci_hcd: disconnect device [ 536.284303][ T843] usb 7-1: Using ep0 maxpacket: 32 [ 536.288629][ T843] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.292009][ T843] usb 7-1: config 0 has no interface number 0 [ 536.294792][ T843] usb 7-1: config 0 interface 2 has no altsetting 0 [ 536.300874][ T843] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 536.304744][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.308223][ T843] usb 7-1: Product: syz [ 536.310017][ T843] usb 7-1: Manufacturer: syz [ 536.312009][ T843] usb 7-1: SerialNumber: syz [ 536.316731][ T843] usb 7-1: config 0 descriptor?? [ 536.424320][ T9] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 536.574250][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 536.577958][ T9] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.580470][ T9] usb 9-1: config 0 has no interface number 0 [ 536.582390][ T9] usb 9-1: config 0 interface 2 has no altsetting 0 [ 536.587221][ T9] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 536.590160][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.592624][ T9] usb 9-1: Product: syz [ 536.594564][ T9] usb 9-1: Manufacturer: syz [ 536.596079][ T9] usb 9-1: SerialNumber: syz [ 536.600103][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.603619][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.614922][ T9] usb 9-1: config 0 descriptor?? [ 536.683674][ T843] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.687253][ T843] usb 7-1: invalid MIDI in EP 0 [ 536.708677][ T843] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 536.712739][ T843] usb 7-1: USB disconnect, device number 99 [ 536.747560][T14891] udevd[14891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.826980][T14881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.830537][T14881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.837481][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.843514][ T9] usb 9-1: invalid MIDI out EP 0 [ 536.948391][ T9] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 536.953398][ T9] usb 9-1: USB disconnect, device number 76 [ 536.964409][T14890] udevd[14890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.175983][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2806'. [ 538.694897][T14931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 538.697502][T14931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 538.702976][T14931] vhci_hcd vhci_hcd.0: Device attached [ 538.748748][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2813'. [ 538.844195][ T5977] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 539.004862][ T5977] usb 9-1: Using ep0 maxpacket: 32 [ 539.008135][ T5977] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 539.010775][ T5977] usb 9-1: config 0 has no interface number 0 [ 539.013218][ T5977] usb 9-1: config 0 interface 2 has no altsetting 0 [ 539.017504][ T5977] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 539.020580][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.023124][ T5977] usb 9-1: Product: syz [ 539.024544][ T5977] usb 9-1: Manufacturer: syz [ 539.026106][ T5977] usb 9-1: SerialNumber: syz [ 539.033413][ T5977] usb 9-1: config 0 descriptor?? [ 539.119233][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2815'. [ 539.216947][T14932] vhci_hcd: connection reset by peer [ 539.223281][ T12] vhci_hcd: stop threads [ 539.225150][ T12] vhci_hcd: release socket [ 539.226672][ T12] vhci_hcd: disconnect device [ 539.404291][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.407785][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.424453][ T5977] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.427617][ T5977] usb 9-1: invalid MIDI out EP 0 [ 539.475093][ T5977] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 539.480332][T14876] udevd[14876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.486540][ T5977] usb 9-1: USB disconnect, device number 77 [ 541.244289][ T59] usb 40-1: device descriptor read/8, error -110 [ 541.864778][ T59] usb usb40-port1: attempt power cycle [ 542.444647][ T59] usb usb40-port1: unable to enumerate USB device [ 545.587251][T15053] bridge0: entered allmulticast mode [ 545.646592][T15053] bridge0: port 1(batadv0) entered disabled state [ 546.514243][ T7749] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 546.664246][ T7749] usb 7-1: Using ep0 maxpacket: 32 [ 546.668410][ T7749] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 546.672034][ T7749] usb 7-1: config 0 has no interface number 0 [ 546.675345][ T7749] usb 7-1: config 0 interface 2 has no altsetting 0 [ 546.680546][ T7749] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 546.684472][ T7749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.687899][ T7749] usb 7-1: Product: syz [ 546.689637][ T7749] usb 7-1: Manufacturer: syz [ 546.691579][ T7749] usb 7-1: SerialNumber: syz [ 546.704607][ T7749] usb 7-1: config 0 descriptor?? [ 546.989671][T15069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.999537][T15069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.010994][ T7749] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.013844][ T7749] usb 7-1: invalid MIDI out EP 0 [ 547.087401][ T7749] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 547.092217][ T7749] usb 7-1: USB disconnect, device number 100 [ 547.093272][T14875] udevd[14875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.140092][T15078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 547.142309][T15078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 547.156695][T15078] vhci_hcd vhci_hcd.0: Device attached [ 547.196662][T15078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2849'. [ 547.435318][ T59] usb 46-1: SetAddress Request (18) to port 0 [ 547.466363][ T59] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 547.723357][T15079] vhci_hcd: connection reset by peer [ 547.725401][T14802] vhci_hcd: stop threads [ 547.727172][T14802] vhci_hcd: release socket [ 547.729039][T14802] vhci_hcd: disconnect device [ 548.339558][T15104] netlink: 'syz.4.2857': attribute type 10 has an invalid length. [ 548.342493][T15104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2857'. [ 548.346459][T15104] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 549.404894][T15125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 549.407692][T15125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 549.425362][T15125] vhci_hcd vhci_hcd.0: Device attached [ 549.642262][T15125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2863'. [ 549.754459][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 549.757264][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 549.979887][T15126] vhci_hcd: connection reset by peer [ 549.983572][ T1142] vhci_hcd: stop threads [ 549.986962][ T1142] vhci_hcd: release socket [ 549.988852][ T1142] vhci_hcd: disconnect device [ 551.250242][T15159] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 552.660285][ T59] usb 46-1: device descriptor read/8, error -110 [ 553.085709][ T59] usb usb46-port1: attempt power cycle [ 553.771485][ T59] usb usb46-port1: unable to enumerate USB device [ 554.090526][T15207] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.169631][T15220] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 554.171728][T15220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 554.174725][T15220] vhci_hcd vhci_hcd.0: Device attached [ 554.641277][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 554.750666][T15221] vhci_hcd: connection closed [ 554.751257][ T62] vhci_hcd: stop threads [ 554.754692][ T62] vhci_hcd: release socket [ 554.757311][ T62] vhci_hcd: disconnect device [ 554.924764][ T29] usb 42-1: device descriptor read/8, error -110 [ 555.351520][ T29] usb usb42-port1: attempt power cycle [ 556.247754][ T29] usb usb42-port1: unable to enumerate USB device [ 557.024838][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 558.325575][T15298] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2903'. [ 559.324337][ T5939] Bluetooth: hci4: command 0x0406 tx timeout [ 560.431336][T15329] tipc: Enabling of bearer rejected, failed to enable media [ 560.915009][T15333] overlayfs: missing 'lowerdir' [ 564.840831][T15382] overlayfs: missing 'lowerdir' [ 564.868675][T15383] tipc: Enabling of bearer rejected, failed to enable media [ 567.522505][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.524748][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.159265][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2939'. [ 570.716061][T15466] overlayfs: missing 'lowerdir' [ 571.194193][ T843] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 571.318839][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2950'. [ 571.355391][ T843] usb 8-1: config 0 has no interfaces? [ 571.357153][ T843] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 571.360001][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.364174][ T843] usb 8-1: config 0 descriptor?? [ 571.593436][ T6021] usb 8-1: USB disconnect, device number 80 [ 574.377947][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2959'. [ 578.854518][T15567] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 578.857219][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 578.860460][T15567] vhci_hcd vhci_hcd.0: Device attached [ 578.909248][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2971'. [ 579.164352][ T8016] usb 42-1: SetAddress Request (6) to port 0 [ 579.177216][ T8016] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 579.636357][T15568] vhci_hcd: connection reset by peer [ 579.641821][ T12] vhci_hcd: stop threads [ 579.644285][ T12] vhci_hcd: release socket [ 579.645838][ T12] vhci_hcd: disconnect device [ 579.675986][T15582] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 579.678707][T15582] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 579.682929][T15582] vhci_hcd vhci_hcd.0: Device attached [ 579.974275][ T29] usb 40-1: SetAddress Request (6) to port 0 [ 579.977016][ T29] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 580.290308][T15583] vhci_hcd: connection reset by peer [ 580.295309][ T1146] vhci_hcd: stop threads [ 580.297166][ T1146] vhci_hcd: release socket [ 580.299391][ T1146] vhci_hcd: disconnect device [ 582.777503][T15605] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.217825][T15619] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 583.219941][T15619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 583.222924][T15619] vhci_hcd vhci_hcd.0: Device attached [ 583.269127][T15619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2983'. [ 583.594256][ T6003] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 583.754199][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 583.761531][ T6003] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 583.764294][ T6003] usb 7-1: config 0 has no interface number 0 [ 583.766432][ T6003] usb 7-1: config 0 interface 2 has no altsetting 0 [ 583.776037][ T6003] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 583.783688][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.788394][ T6003] usb 7-1: Product: syz [ 583.790945][ T6003] usb 7-1: Manufacturer: syz [ 583.794085][ T6003] usb 7-1: SerialNumber: syz [ 583.798717][ T6003] usb 7-1: config 0 descriptor?? [ 583.848065][T15620] vhci_hcd: connection closed [ 583.848255][ T46] vhci_hcd: stop threads [ 583.851217][ T46] vhci_hcd: release socket [ 583.854151][ T46] vhci_hcd: disconnect device [ 584.454400][ T8016] usb 42-1: device descriptor read/8, error -110 [ 584.652890][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.655744][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.828576][ T6003] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 584.831031][ T6003] usb 7-1: invalid MIDI out EP 0 [ 584.881202][ T8016] usb usb42-port1: attempt power cycle [ 584.892897][ T6003] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 584.901408][ T6003] usb 7-1: USB disconnect, device number 101 [ 584.939633][T15646] udevd[15646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.084719][ T29] usb 40-1: device descriptor read/8, error -110 [ 586.385479][ T29] usb usb40-port1: attempt power cycle [ 586.680884][ T8016] usb usb42-port1: unable to enumerate USB device [ 586.966858][ T29] usb usb40-port1: unable to enumerate USB device [ 587.913356][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'. [ 589.914350][ T6002] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 590.184219][ T6002] usb 8-1: Using ep0 maxpacket: 32 [ 590.189987][ T6002] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 590.193352][ T6002] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 590.201565][ T6002] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 590.206853][ T6002] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 590.215879][ T6002] usb 8-1: config 0 interface 0 has no altsetting 0 [ 590.222350][ T6002] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 590.227802][ T6002] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 590.232493][ T6002] usb 8-1: Product: syz [ 590.236143][ T6002] usb 8-1: Manufacturer: syz [ 590.237611][ T6002] usb 8-1: SerialNumber: syz [ 590.290452][ T6002] usb 8-1: config 0 descriptor?? [ 590.295192][ T6002] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 590.298801][ T6002] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 590.505099][ T9] usb 8-1: USB disconnect, device number 81 [ 590.508662][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 591.250288][T15742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 591.252407][T15742] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 591.256418][T15742] vhci_hcd vhci_hcd.0: Device attached [ 591.271411][T15742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3011'. [ 591.524239][ T6002] usb 44-1: SetAddress Request (2) to port 0 [ 591.526246][ T6002] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 591.883701][T15745] vhci_hcd: connection reset by peer [ 591.886176][ T1146] vhci_hcd: stop threads [ 591.887610][ T1146] vhci_hcd: release socket [ 591.889113][ T1146] vhci_hcd: disconnect device [ 593.634208][ T7749] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 593.644433][T15784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 593.646829][T15784] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 593.691742][T15784] vhci_hcd vhci_hcd.0: Device attached [ 593.804239][ T7749] usb 9-1: Using ep0 maxpacket: 32 [ 593.807337][ T7749] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 593.810028][ T7749] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 593.824816][ T7749] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 593.829566][ T7749] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 593.835291][ T7749] usb 9-1: config 0 interface 0 has no altsetting 0 [ 593.842078][ T7749] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 593.845446][ T7749] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 593.848151][ T7749] usb 9-1: Product: syz [ 593.849506][ T7749] usb 9-1: Manufacturer: syz [ 593.854172][ T7749] usb 9-1: SerialNumber: syz [ 593.864604][ T7749] usb 9-1: config 0 descriptor?? [ 593.887090][ T7749] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 593.895350][ T7749] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 594.004185][ T59] usb 40-1: SetAddress Request (10) to port 0 [ 594.006202][ T59] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 594.193601][ T7749] usb 9-1: USB disconnect, device number 78 [ 594.198984][ T7749] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 594.529033][T15785] vhci_hcd: connection reset by peer [ 594.531338][ T1142] vhci_hcd: stop threads [ 594.533118][ T1142] vhci_hcd: release socket [ 594.537356][ T1142] vhci_hcd: disconnect device [ 596.604277][ T6002] usb 44-1: device descriptor read/8, error -110 [ 596.884320][T12821] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 597.044356][T12821] usb 7-1: Using ep0 maxpacket: 32 [ 597.128067][T12821] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 597.130602][T12821] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 597.134375][T12821] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 597.138081][T12821] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 597.142369][T12821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 597.146748][T12821] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 597.149713][T12821] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 597.152424][T12821] usb 7-1: Product: syz [ 597.153784][T12821] usb 7-1: Manufacturer: syz [ 597.156312][T12821] usb 7-1: SerialNumber: syz [ 597.158993][T12821] usb 7-1: config 0 descriptor?? [ 597.165265][T12821] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 597.172007][T12821] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 597.385159][ T7749] usb 7-1: USB disconnect, device number 102 [ 597.394494][ T7749] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 597.565519][ T6002] usb usb44-port1: attempt power cycle [ 598.235046][ T6002] usb usb44-port1: unable to enumerate USB device [ 599.084284][ T59] usb 40-1: device descriptor read/8, error -110 [ 599.635852][ T59] usb usb40-port1: attempt power cycle [ 600.534269][ T59] usb usb40-port1: unable to enumerate USB device [ 600.909810][T15885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 600.912618][T15885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 600.916283][T15885] vhci_hcd vhci_hcd.0: Device attached [ 600.946089][T15885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3046'. [ 602.734272][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 602.739959][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 602.843900][T15886] vhci_hcd: connection reset by peer [ 602.846496][ T12] vhci_hcd: stop threads [ 602.850878][ T12] vhci_hcd: release socket [ 602.852616][ T12] vhci_hcd: disconnect device [ 604.946822][T15927] overlayfs: missing 'lowerdir' [ 607.955454][ T29] usb 44-1: device descriptor read/8, error -110 [ 608.885249][ T29] usb usb44-port1: attempt power cycle [ 609.101687][T15972] tipc: Enabling of bearer rejected, failed to enable media [ 609.459158][ T29] usb usb44-port1: unable to enumerate USB device [ 609.870475][T15981] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 609.872636][T15981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 609.881034][T15981] vhci_hcd vhci_hcd.0: Device attached [ 610.214586][ T29] usb 46-1: SetAddress Request (22) to port 0 [ 610.217567][ T29] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 610.596117][T15982] vhci_hcd: connection reset by peer [ 610.600750][ T12] vhci_hcd: stop threads [ 610.602766][ T12] vhci_hcd: release socket [ 610.612861][ T12] vhci_hcd: disconnect device [ 614.974753][T16017] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 615.244414][ T29] usb 46-1: device descriptor read/8, error -110 [ 615.764842][ T29] usb usb46-port1: attempt power cycle [ 615.885805][T16040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 615.887889][T16040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 615.890593][T16040] vhci_hcd vhci_hcd.0: Device attached [ 615.912453][T16040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3080'. [ 616.364388][ T6021] usb 40-1: SetAddress Request (14) to port 0 [ 616.367040][ T6021] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 616.487169][T16045] vhci_hcd: connection reset by peer [ 616.493439][ T1146] vhci_hcd: stop threads [ 616.498269][ T1146] vhci_hcd: release socket [ 616.503415][ T1146] vhci_hcd: disconnect device [ 616.505166][ T29] usb usb46-port1: unable to enumerate USB device [ 618.448920][T16074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 618.451744][T16074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 618.460888][T16074] vhci_hcd vhci_hcd.0: Device attached [ 618.804478][ T8016] usb 42-1: SetAddress Request (10) to port 0 [ 618.807358][ T8016] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 618.966205][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 619.027839][T16065] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 619.030572][T16065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.060682][T16065] vhci_hcd vhci_hcd.0: Device attached [ 619.328346][T16073] vhci_hcd: connection closed [ 619.453976][ T76] vhci_hcd: stop threads [ 619.464023][ T76] vhci_hcd: release socket [ 619.556253][ T76] vhci_hcd: disconnect device [ 619.878479][T16075] vhci_hcd: connection reset by peer [ 619.881024][ T12] vhci_hcd: stop threads [ 619.882879][ T12] vhci_hcd: release socket [ 619.885049][ T12] vhci_hcd: disconnect device [ 620.531597][T16091] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 622.501104][ T6021] usb 40-1: device descriptor read/8, error -110 [ 622.885112][ T6021] usb usb40-port1: attempt power cycle [ 624.075238][ T6021] usb usb40-port1: unable to enumerate USB device [ 625.148864][ T8016] usb 42-1: device descriptor read/8, error -110 [ 625.750818][ T8016] usb usb42-port1: attempt power cycle [ 626.874657][ T8016] usb usb42-port1: unable to enumerate USB device [ 627.738162][T16154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 628.926094][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.928243][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.784208][ T53] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 629.984166][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 629.990363][ T53] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 629.992965][ T53] usb 7-1: config 0 has no interface number 0 [ 629.995479][ T53] usb 7-1: config 0 interface 2 has no altsetting 0 [ 629.999579][ T53] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 630.002411][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.005498][ T53] usb 7-1: Product: syz [ 630.007265][ T53] usb 7-1: Manufacturer: syz [ 630.009171][ T53] usb 7-1: SerialNumber: syz [ 630.026115][ T53] usb 7-1: config 0 descriptor?? [ 630.319616][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.322416][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.345204][ T53] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.372711][ T53] usb 7-1: USB disconnect, device number 103 [ 630.414696][T16199] udevd[16199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.463999][T16191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 633.849781][T16243] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 635.754870][T16287] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 635.756957][T16287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.759811][T16287] vhci_hcd vhci_hcd.0: Device attached [ 635.793073][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3131'. [ 636.662720][ T2105] usb 42-1: SetAddress Request (14) to port 0 [ 636.664863][ T2105] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 637.124510][T16288] vhci_hcd: connection reset by peer [ 637.247089][T16292] vhci_hcd: stop threads [ 637.248958][T16292] vhci_hcd: release socket [ 637.251024][T16292] vhci_hcd: disconnect device [ 637.759530][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 637.763925][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 637.767083][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 637.775201][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 637.778007][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 637.892533][T16301] chnl_net:caif_netlink_parms(): no params data found [ 638.083170][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.085584][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.087932][T16301] bridge_slave_0: entered allmulticast mode [ 638.090558][T16301] bridge_slave_0: entered promiscuous mode [ 638.099664][ T62] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.106706][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.109115][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.111463][T16301] bridge_slave_1: entered allmulticast mode [ 638.121664][T16301] bridge_slave_1: entered promiscuous mode [ 638.277282][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.281288][ T62] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.317276][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.405685][ T62] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.448993][T16301] team0: Port device team_slave_0 added [ 638.452399][T16301] team0: Port device team_slave_1 added [ 638.487677][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.489848][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.499601][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.505049][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.507773][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.518884][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.597856][ T62] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.910212][T16301] hsr_slave_0: entered promiscuous mode [ 638.963421][T16301] hsr_slave_1: entered promiscuous mode [ 639.557568][ T62] bond0 (unregistering): Released all slaves [ 639.804290][ T5951] Bluetooth: hci2: command tx timeout [ 640.302505][T16350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 640.304848][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 640.318353][T16350] vhci_hcd vhci_hcd.0: Device attached [ 640.489526][ T62] hsr_slave_0: left promiscuous mode [ 640.495042][ T62] hsr_slave_1: left promiscuous mode [ 640.531865][ T62] veth1_macvtap: left promiscuous mode [ 640.537067][ T62] veth0_macvtap: left promiscuous mode [ 640.539885][ T62] veth1_vlan: left promiscuous mode [ 640.542669][ T62] veth0_vlan: left promiscuous mode [ 640.615615][ T29] usb 40-1: SetAddress Request (18) to port 0 [ 640.618183][ T29] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 641.041144][T16351] vhci_hcd: connection reset by peer [ 641.062379][ T76] vhci_hcd: stop threads [ 641.064435][ T76] vhci_hcd: release socket [ 641.066506][ T76] vhci_hcd: disconnect device [ 641.724303][ T2105] usb 42-1: device descriptor read/8, error -110 [ 641.884205][ T5951] Bluetooth: hci2: command tx timeout [ 642.125201][ T2105] usb usb42-port1: attempt power cycle [ 642.316632][T16301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 642.321665][T16301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 642.326819][T16301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 642.330987][T16301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 642.494052][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.592987][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.624777][T16301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.628157][T16301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.643548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.646493][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.652031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.654320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.718731][ T2105] usb usb42-port1: unable to enumerate USB device [ 642.721937][ T62] IPVS: stop unused estimator thread 0... [ 642.773333][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.029894][T16301] veth0_vlan: entered promiscuous mode [ 643.039005][T16301] veth1_vlan: entered promiscuous mode [ 643.094180][T16301] veth0_macvtap: entered promiscuous mode [ 643.103891][T16301] veth1_macvtap: entered promiscuous mode [ 643.280456][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.329678][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.389109][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.394267][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.398319][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.402257][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.593843][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.604355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.698890][T16111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.702271][T16111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.974219][ T5951] Bluetooth: hci2: command tx timeout [ 645.598484][T16445] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 645.600641][T16445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 645.610563][T16445] vhci_hcd vhci_hcd.0: Device attached [ 645.644393][ T29] usb 40-1: device descriptor read/8, error -110 [ 645.735833][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3156'. [ 645.944517][T16423] usb 44-1: SetAddress Request (10) to port 0 [ 645.954223][T16423] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 645.979053][T16447] vhci_hcd: connection reset by peer [ 645.981486][ T171] vhci_hcd: stop threads [ 645.983394][ T171] vhci_hcd: release socket [ 645.985824][ T171] vhci_hcd: disconnect device [ 646.045073][ T5951] Bluetooth: hci2: command tx timeout [ 646.146057][ T29] usb usb40-port1: attempt power cycle [ 646.360253][T16466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 646.362395][T16466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 646.386914][T16466] vhci_hcd vhci_hcd.0: Device attached [ 646.539218][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'. [ 646.664203][ T2105] usb 42-1: SetAddress Request (18) to port 0 [ 646.667189][ T2105] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 646.774940][ T29] usb usb40-port1: unable to enumerate USB device [ 646.887410][T16475] tipc: Enabling of bearer rejected, failed to enable media [ 646.928872][T16467] vhci_hcd: connection reset by peer [ 646.932720][ T76] vhci_hcd: stop threads [ 646.935890][ T76] vhci_hcd: release socket [ 646.937728][ T76] vhci_hcd: disconnect device [ 648.376905][T16490] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 648.379253][T16490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.387355][T16490] vhci_hcd vhci_hcd.0: Device attached [ 648.421969][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3167'. [ 648.654536][ T8016] usb 46-1: SetAddress Request (26) to port 0 [ 648.664259][ T6002] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 648.667990][ T8016] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 648.827454][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 648.830799][ T6002] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 648.833746][ T6002] usb 7-1: config 0 has no interface number 0 [ 648.836434][ T6002] usb 7-1: config 0 interface 2 has no altsetting 0 [ 648.840539][ T6002] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 648.845974][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.850163][ T6002] usb 7-1: Product: syz [ 648.851978][ T6002] usb 7-1: Manufacturer: syz [ 648.854493][ T6002] usb 7-1: SerialNumber: syz [ 648.862373][ T6002] usb 7-1: config 0 descriptor?? [ 649.079710][T16491] vhci_hcd: connection reset by peer [ 649.083787][T16111] vhci_hcd: stop threads [ 649.089924][T16111] vhci_hcd: release socket [ 649.094248][T16111] vhci_hcd: disconnect device [ 649.415710][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.419163][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.440203][ T6002] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.605911][ T6002] usb 7-1: USB disconnect, device number 104 [ 650.137828][T16532] tipc: Enabling of bearer rejected, failed to enable media [ 651.018801][T16423] usb 44-1: device descriptor read/8, error -110 [ 651.269009][T16544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 651.271510][T16544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.281908][T16544] vhci_hcd vhci_hcd.0: Device attached [ 651.378975][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3176'. [ 651.434783][T16423] usb usb44-port1: attempt power cycle [ 651.724481][ T2105] usb 42-1: device descriptor read/8, error -110 [ 652.126732][T16423] usb usb44-port1: unable to enumerate USB device [ 652.195109][ T2105] usb usb42-port1: attempt power cycle [ 652.265268][T16545] vhci_hcd: connection closed [ 652.266621][ T12] vhci_hcd: stop threads [ 652.270006][ T12] vhci_hcd: release socket [ 652.271543][ T12] vhci_hcd: disconnect device [ 652.771190][ T2105] usb usb42-port1: unable to enumerate USB device [ 653.813972][ T8016] usb 46-1: device descriptor read/8, error -110 [ 654.226077][ T8016] usb usb46-port1: attempt power cycle [ 654.369924][T16573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 654.372292][T16573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 654.436342][T16573] vhci_hcd vhci_hcd.0: Device attached [ 654.634314][ T8016] usb 46-1: SetAddress Request (28) to port 0 [ 654.637479][ T8016] usb 46-1: new SuperSpeed USB device number 28 using vhci_hcd [ 654.662256][T16572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 654.664868][T16572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 654.670685][T16572] vhci_hcd vhci_hcd.0: Device attached [ 654.741836][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 654.934438][T16423] usb 40-1: SetAddress Request (22) to port 0 [ 654.936808][T16423] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 655.105059][T16581] vhci_hcd: connection reset by peer [ 655.108172][T16292] vhci_hcd: stop threads [ 655.109562][T16292] vhci_hcd: release socket [ 655.111620][T16292] vhci_hcd: disconnect device [ 655.159610][T16574] vhci_hcd: connection reset by peer [ 655.161783][ T62] vhci_hcd: stop threads [ 655.163175][ T62] vhci_hcd: release socket [ 655.166481][ T62] vhci_hcd: disconnect device [ 655.911889][T16597] tipc: Enabling of bearer rejected, failed to enable media [ 659.877785][ T8016] usb 46-1: device descriptor read/8, error -110 [ 660.218992][T16423] usb 40-1: device descriptor read/8, error -110 [ 660.338468][T16631] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 660.341188][T16631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 660.350633][T16631] vhci_hcd vhci_hcd.0: Device attached [ 660.664979][ T8016] usb 46-1: SetAddress Request (29) to port 0 [ 660.667511][ T8016] usb 46-1: new SuperSpeed USB device number 29 using vhci_hcd [ 660.816614][T16423] usb usb40-port1: attempt power cycle [ 661.600621][T16632] vhci_hcd: connection reset by peer [ 661.616531][ T12] vhci_hcd: stop threads [ 661.618341][ T12] vhci_hcd: release socket [ 661.620274][ T12] vhci_hcd: disconnect device [ 661.705297][T16423] usb usb40-port1: unable to enumerate USB device [ 662.793615][T16661] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 662.796450][T16661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 662.801349][T16661] vhci_hcd vhci_hcd.0: Device attached [ 662.844200][ T843] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 663.014212][ T843] usb 6-1: Using ep0 maxpacket: 32 [ 663.018583][ T843] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 663.021925][ T843] usb 6-1: config 0 has no interface number 0 [ 663.024375][ T843] usb 6-1: config 0 interface 2 has no altsetting 0 [ 663.032575][ T843] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 663.036485][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.039830][ T843] usb 6-1: Product: syz [ 663.041482][ T843] usb 6-1: Manufacturer: syz [ 663.043144][ T843] usb 6-1: SerialNumber: syz [ 663.046852][ T843] usb 6-1: config 0 descriptor?? [ 663.242274][T16662] vhci_hcd: connection closed [ 663.243983][ T12] vhci_hcd: stop threads [ 663.247535][ T12] vhci_hcd: release socket [ 663.248996][ T12] vhci_hcd: disconnect device [ 663.306746][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.309622][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.319384][ T843] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.260820][ T843] usb 6-1: invalid MIDI out EP 0 [ 664.297170][ T843] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 664.546593][T16687] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 664.549319][T16687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 664.560993][T16687] vhci_hcd vhci_hcd.0: Device attached [ 664.629828][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3205'. [ 664.939943][ T843] usb 6-1: USB disconnect, device number 72 [ 664.977864][T16685] udevd[16685]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.638772][T16688] vhci_hcd: connection closed [ 665.644950][ T1146] vhci_hcd: stop threads [ 665.658684][ T1146] vhci_hcd: release socket [ 665.664179][ T1146] vhci_hcd: disconnect device [ 665.724452][ T8016] usb 46-1: device descriptor read/8, error -110 [ 665.793019][T16709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 665.795163][T16709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 665.807058][T16709] vhci_hcd vhci_hcd.0: Device attached [ 665.834462][ T8016] usb usb46-port1: unable to enumerate USB device [ 666.094203][T16423] usb 40-1: SetAddress Request (26) to port 0 [ 666.097303][T16423] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 666.856841][T16710] vhci_hcd: connection reset by peer [ 666.860933][T16292] vhci_hcd: stop threads [ 666.864507][T16292] vhci_hcd: release socket [ 666.868627][T16292] vhci_hcd: disconnect device [ 666.919639][T16725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 666.922127][T16725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 666.926507][T16725] vhci_hcd vhci_hcd.0: Device attached [ 666.985748][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3212'. [ 667.224846][ T8016] usb 46-1: SetAddress Request (30) to port 0 [ 667.233020][ T8016] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 667.493373][T16726] vhci_hcd: connection reset by peer [ 667.499351][ T1146] vhci_hcd: stop threads [ 667.501182][ T1146] vhci_hcd: release socket [ 667.503164][ T1146] vhci_hcd: disconnect device [ 671.107893][T16777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 671.110335][T16777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 671.294234][T16423] usb 40-1: device descriptor read/8, error -110 [ 671.321557][T16777] vhci_hcd vhci_hcd.0: Device attached [ 671.572063][T16777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 671.644199][T16481] usb 44-1: SetAddress Request (14) to port 0 [ 671.647747][T16481] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 671.793236][T16423] usb usb40-port1: attempt power cycle [ 672.015329][T16789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 672.018041][T16789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 672.022358][T16789] vhci_hcd vhci_hcd.0: Device attached [ 672.170674][T16789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3225'. [ 672.284959][T16778] vhci_hcd: connection reset by peer [ 672.289118][ T62] vhci_hcd: stop threads [ 672.290558][ T62] vhci_hcd: release socket [ 672.292044][ T62] vhci_hcd: disconnect device [ 672.295951][ T2105] usb 42-1: SetAddress Request (22) to port 0 [ 672.298435][ T2105] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 672.308742][ T8016] usb 46-1: device descriptor read/8, error -110 [ 672.375462][T16423] usb usb40-port1: unable to enumerate USB device [ 672.708602][ T8016] usb usb46-port1: attempt power cycle [ 672.901499][T16790] vhci_hcd: connection reset by peer [ 672.903986][T16292] vhci_hcd: stop threads [ 672.905955][T16292] vhci_hcd: release socket [ 672.910707][T16292] vhci_hcd: disconnect device [ 673.282067][ T8016] usb usb46-port1: unable to enumerate USB device [ 676.684447][T16481] usb 44-1: device descriptor read/8, error -110 [ 677.161294][T16481] usb usb44-port1: attempt power cycle [ 677.404275][ T2105] usb 42-1: device descriptor read/8, error -110 [ 677.835336][T16481] usb usb44-port1: unable to enumerate USB device [ 677.914866][ T2105] usb usb42-port1: attempt power cycle [ 678.834256][ T2105] usb usb42-port1: unable to enumerate USB device [ 680.434875][T16890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 680.437650][T16890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 680.440355][T16890] vhci_hcd vhci_hcd.0: Device attached [ 680.469469][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3248'. [ 680.841244][T16891] vhci_hcd: connection closed [ 680.843298][T16292] vhci_hcd: stop threads [ 680.846611][T16292] vhci_hcd: release socket [ 680.848095][T16292] vhci_hcd: disconnect device [ 680.854283][ T2105] usb 40-1: enqueue for inactive port 0 [ 681.406844][ T2105] usb usb40-port1: attempt power cycle [ 682.144389][ T2105] usb usb40-port1: unable to enumerate USB device [ 682.608944][ T8016] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 682.774513][ T8016] usb 8-1: Using ep0 maxpacket: 32 [ 682.805974][ T8016] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 682.809974][ T8016] usb 8-1: config 0 has no interface number 0 [ 682.812266][ T8016] usb 8-1: config 0 interface 2 has no altsetting 0 [ 682.821600][ T8016] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 682.825541][ T8016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.830344][ T8016] usb 8-1: Product: syz [ 682.832381][ T8016] usb 8-1: Manufacturer: syz [ 682.835139][ T8016] usb 8-1: SerialNumber: syz [ 682.847145][ T8016] usb 8-1: config 0 descriptor?? [ 683.115915][T16919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.129167][T16919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.137608][ T8016] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.202786][ T8016] usb 8-1: USB disconnect, device number 82 [ 683.263160][T16936] udevd[16936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.739677][T16974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 686.741740][T16974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.744587][T16974] vhci_hcd vhci_hcd.0: Device attached [ 687.254354][ T8016] usb 42-1: SetAddress Request (26) to port 0 [ 687.257068][ T8016] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 688.003367][T16976] vhci_hcd: connection reset by peer [ 688.014242][ T171] vhci_hcd: stop threads [ 688.016114][ T171] vhci_hcd: release socket [ 688.018106][ T171] vhci_hcd: disconnect device [ 688.149067][T16953] Set syz1 is full, maxelem 65536 reached [ 690.368097][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.370897][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.587764][T17034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 691.590716][T17034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 691.604201][T17034] vhci_hcd vhci_hcd.0: Device attached [ 691.622025][T17035] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 691.624986][T17035] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 691.629046][T17035] vhci_hcd vhci_hcd.0: Device attached [ 692.012563][T17043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 692.012597][T17043] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 692.012881][T17043] vhci_hcd vhci_hcd.0: Device attached [ 692.124386][T16481] usb 46-1: SetAddress Request (34) to port 0 [ 692.126571][T16481] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 692.140297][T17035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'. [ 692.165159][ T2105] usb 44-1: SetAddress Request (18) to port 0 [ 692.170831][ T2105] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 692.416343][T17036] vhci_hcd: connection reset by peer [ 692.587537][T16292] vhci_hcd: stop threads [ 692.588925][T16292] vhci_hcd: release socket [ 692.590397][T16292] vhci_hcd: disconnect device [ 692.790751][T17038] vhci_hcd: connection reset by peer [ 692.794780][ T171] vhci_hcd: stop threads [ 692.795500][T17045] vhci_hcd: connection reset by peer [ 692.796606][ T171] vhci_hcd: release socket [ 692.796659][ T171] vhci_hcd: disconnect device [ 692.803914][ T171] vhci_hcd: stop threads [ 692.805818][ T171] vhci_hcd: release socket [ 692.808093][ T8016] usb 42-1: device descriptor read/8, error -110 [ 692.808461][ T171] vhci_hcd: disconnect device [ 693.279861][ T8016] usb usb42-port1: attempt power cycle [ 693.844764][ T8016] usb usb42-port1: unable to enumerate USB device [ 695.048799][T17074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 696.336247][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3294'. [ 697.235996][T16481] usb 46-1: device descriptor read/8, error -110 [ 697.254209][ T2105] usb 44-1: device descriptor read/8, error -110 [ 697.624787][T16481] usb usb46-port1: attempt power cycle [ 697.817489][ T2105] usb usb44-port1: attempt power cycle [ 698.535448][ T2105] usb usb44-port1: unable to enumerate USB device [ 698.543419][T16481] usb usb46-port1: unable to enumerate USB device [ 699.709329][T17143] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 702.634397][T17186] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 702.637063][T17186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 702.640613][T17186] vhci_hcd vhci_hcd.0: Device attached [ 702.964295][ T2105] usb 40-1: SetAddress Request (34) to port 0 [ 702.977255][ T2105] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 703.527762][T17195] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 703.618463][T17187] vhci_hcd: connection reset by peer [ 703.620584][ T62] vhci_hcd: stop threads [ 703.622055][ T62] vhci_hcd: release socket [ 703.623810][ T62] vhci_hcd: disconnect device [ 704.343220][T17210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 704.345804][T17210] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 704.798619][T17210] vhci_hcd vhci_hcd.0: Device attached [ 705.172395][T16481] usb 46-1: SetAddress Request (38) to port 0 [ 705.174560][T16481] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 705.307634][T17205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3315'. [ 705.633669][T17229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 705.635742][T17229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.639283][T17229] vhci_hcd vhci_hcd.0: Device attached [ 705.744676][T17223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 705.747403][T17223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.750425][T17223] vhci_hcd vhci_hcd.0: Device attached [ 705.833680][T17229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3319'. [ 705.853834][T17211] vhci_hcd: connection reset by peer [ 705.856664][ T46] vhci_hcd: stop threads [ 705.858543][ T46] vhci_hcd: release socket [ 705.864193][ T46] vhci_hcd: disconnect device [ 705.956357][T17232] vhci_hcd: connection closed [ 705.960874][ T62] vhci_hcd: stop threads [ 705.963764][ T62] vhci_hcd: release socket [ 705.966421][ T62] vhci_hcd: disconnect device [ 706.090674][ T59] usb 42-1: enqueue for inactive port 0 [ 706.214704][T17230] vhci_hcd: connection closed [ 706.224381][T16292] vhci_hcd: stop threads [ 706.227987][T16292] vhci_hcd: release socket [ 706.229842][T16292] vhci_hcd: disconnect device [ 706.614892][ T59] usb usb42-port1: attempt power cycle [ 708.044310][ T2105] usb 40-1: device descriptor read/8, error -110 [ 708.995392][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 708.998383][ T59] usb usb42-port1: unable to enumerate USB device [ 709.275116][ T2105] usb usb40-port1: attempt power cycle [ 710.204711][T16481] usb 46-1: device descriptor read/8, error -110 [ 710.244654][ T2105] usb usb40-port1: unable to enumerate USB device [ 710.426191][T17284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 710.428347][T17284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 710.448003][T17284] vhci_hcd vhci_hcd.0: Device attached [ 710.694388][T16481] usb 46-1: SetAddress Request (39) to port 0 [ 710.697663][T16481] usb 46-1: new SuperSpeed USB device number 39 using vhci_hcd [ 710.860888][T17286] vhci_hcd: connection reset by peer [ 710.870161][ T171] vhci_hcd: stop threads [ 710.872040][ T171] vhci_hcd: release socket [ 710.877575][ T171] vhci_hcd: disconnect device [ 712.284980][T17314] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 712.287119][T17314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 712.289874][T17314] vhci_hcd vhci_hcd.0: Device attached [ 712.302432][T17314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3337'. [ 712.801777][T17318] vhci_hcd: connection closed [ 712.802032][ T12] vhci_hcd: stop threads [ 712.811782][ T12] vhci_hcd: release socket [ 712.859407][ T12] vhci_hcd: disconnect device [ 715.727842][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.730395][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.736175][T17353] bridge0: entered allmulticast mode [ 715.746181][T17353] bridge_slave_1: left allmulticast mode [ 715.748566][T17353] bridge_slave_1: left promiscuous mode [ 715.751053][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.758588][T17353] bridge_slave_0: left allmulticast mode [ 715.760929][T17353] bridge_slave_0: left promiscuous mode [ 715.763405][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.815104][T16481] usb 46-1: device descriptor read/8, error -110 [ 716.168032][T17363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 716.170114][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 716.174435][T17363] vhci_hcd vhci_hcd.0: Device attached [ 716.204781][T16481] usb usb46-port1: attempt power cycle [ 716.280696][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3346'. [ 716.393136][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 717.571373][ T59] usb 42-1: SetAddress Request (34) to port 0 [ 717.573370][ T59] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 718.039806][T16481] usb usb46-port1: unable to enumerate USB device [ 718.209963][T17364] vhci_hcd: connection reset by peer [ 718.211919][ T12] vhci_hcd: stop threads [ 718.213291][ T12] vhci_hcd: release socket [ 718.215691][ T12] vhci_hcd: disconnect device [ 719.065788][T17407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 719.068074][T17407] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 719.071627][T17407] vhci_hcd vhci_hcd.0: Device attached [ 719.110202][T17407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3360'. [ 719.354780][T12821] usb 44-1: SetAddress Request (22) to port 0 [ 719.361496][T12821] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 719.557878][T17409] vhci_hcd: connection reset by peer [ 719.564644][ T76] vhci_hcd: stop threads [ 719.566278][ T76] vhci_hcd: release socket [ 719.567789][ T76] vhci_hcd: disconnect device [ 720.501185][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 722.503286][T17463] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 722.505353][T17463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 722.508059][T17463] vhci_hcd vhci_hcd.0: Device attached [ 722.774336][ T8016] usb 46-1: SetAddress Request (42) to port 0 [ 722.776551][ T8016] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 722.969316][T17464] vhci_hcd: connection reset by peer [ 722.979170][ T46] vhci_hcd: stop threads [ 722.980986][ T46] vhci_hcd: release socket [ 722.982443][ T46] vhci_hcd: disconnect device [ 723.244290][ T59] usb 42-1: device descriptor read/8, error -110 [ 723.598521][T17488] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 723.601278][T17488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.607927][T17488] vhci_hcd vhci_hcd.0: Device attached [ 723.794495][ T59] usb 42-1: SetAddress Request (35) to port 0 [ 723.798065][ T59] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 724.127875][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 724.179354][T17489] vhci_hcd: connection reset by peer [ 724.181818][ T62] vhci_hcd: stop threads [ 724.183228][ T62] vhci_hcd: release socket [ 724.184808][ T62] vhci_hcd: disconnect device [ 724.445114][T12821] usb 44-1: device descriptor read/8, error -110 [ 724.845704][T12821] usb usb44-port1: attempt power cycle [ 725.485223][T12821] usb usb44-port1: unable to enumerate USB device [ 726.450284][T17545] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 726.452448][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 726.471141][T17545] vhci_hcd vhci_hcd.0: Device attached [ 726.718385][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 727.224711][T17546] vhci_hcd: connection closed [ 727.224925][ T76] vhci_hcd: stop threads [ 727.227857][ T76] vhci_hcd: release socket [ 727.229321][ T76] vhci_hcd: disconnect device [ 727.884689][ T8016] usb 46-1: device descriptor read/8, error -110 [ 728.275085][ T8016] usb usb46-port1: attempt power cycle [ 728.946221][ T8016] usb usb46-port1: unable to enumerate USB device [ 729.099231][ T59] usb 42-1: device descriptor read/8, error -110 [ 729.102177][T17601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 729.104414][T17601] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 729.111877][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 729.116771][T17601] vhci_hcd vhci_hcd.0: Device attached [ 729.186214][T17601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'. [ 729.214779][ T59] usb usb42-port1: attempt power cycle [ 729.429447][ T8016] usb 40-1: SetAddress Request (38) to port 0 [ 729.431425][ T8016] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 729.466042][T17602] vhci_hcd: connection closed [ 729.466237][ T62] vhci_hcd: stop threads [ 729.469256][ T62] vhci_hcd: release socket [ 729.471149][ T62] vhci_hcd: disconnect device [ 729.474948][ T8016] usb 40-1: enqueue for inactive port 0 [ 729.854644][ T59] usb usb42-port1: unable to enumerate USB device [ 729.933985][ T8016] usb usb40-port1: attempt power cycle [ 730.578916][ T8016] usb usb40-port1: unable to enumerate USB device [ 731.973189][T17639] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 731.975984][T17639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 731.980126][T17639] vhci_hcd vhci_hcd.0: Device attached [ 731.994852][T17639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3412'. [ 732.556911][T17650] vhci_hcd: connection closed [ 732.557092][ T76] vhci_hcd: stop threads [ 732.559970][ T76] vhci_hcd: release socket [ 732.561407][ T76] vhci_hcd: disconnect device [ 736.010011][T17707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 736.012791][T17707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 736.017996][T17707] vhci_hcd vhci_hcd.0: Device attached [ 736.064338][ T59] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 736.181557][T17707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3422'. [ 736.214399][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 736.224158][ T59] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 736.227166][ T59] usb 6-1: config 0 has no interface number 0 [ 736.229266][ T59] usb 6-1: config 0 interface 2 has no altsetting 0 [ 736.252510][ T59] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 736.255914][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.259247][ T59] usb 6-1: Product: syz [ 736.260930][ T59] usb 6-1: Manufacturer: syz [ 736.262825][ T59] usb 6-1: SerialNumber: syz [ 736.288825][ T59] usb 6-1: config 0 descriptor?? [ 736.294526][T16481] usb 44-1: SetAddress Request (26) to port 0 [ 736.296684][T16481] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 737.044753][T17708] vhci_hcd: connection reset by peer [ 737.047473][ T62] vhci_hcd: stop threads [ 737.048926][ T62] vhci_hcd: release socket [ 737.051654][T17695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.055294][ T62] vhci_hcd: disconnect device [ 737.057364][T17695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.070648][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.073628][ T59] usb 6-1: invalid MIDI out EP 0 [ 737.096869][ T59] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 737.102511][ T59] usb 6-1: USB disconnect, device number 73 [ 737.122372][T17720] udevd[17720]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.626391][T17728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 737.629200][T17728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 737.632934][T17728] vhci_hcd vhci_hcd.0: Device attached [ 737.994797][ T59] usb 46-1: SetAddress Request (46) to port 0 [ 738.084014][ T59] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 739.326570][T17744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 739.328652][T17744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 739.413097][T17744] vhci_hcd vhci_hcd.0: Device attached [ 739.574234][T17729] vhci_hcd: connection reset by peer [ 739.579453][ T76] vhci_hcd: stop threads [ 739.581290][ T76] vhci_hcd: release socket [ 739.583275][ T76] vhci_hcd: disconnect device [ 739.681582][T17744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3432'. [ 740.668744][T17745] vhci_hcd: connection closed [ 740.668988][ T62] vhci_hcd: stop threads [ 740.672288][ T62] vhci_hcd: release socket [ 740.674455][ T62] vhci_hcd: disconnect device [ 741.406050][T16481] usb 44-1: device descriptor read/8, error -110 [ 741.794862][T16481] usb usb44-port1: attempt power cycle [ 742.428158][T16481] usb usb44-port1: unable to enumerate USB device [ 742.780344][T17793] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 742.782597][T17793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.790390][T17793] vhci_hcd vhci_hcd.0: Device attached [ 742.934386][T17793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3443'. [ 743.482607][T17809] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 743.484727][T17809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 743.569241][T17809] vhci_hcd vhci_hcd.0: Device attached [ 745.554216][ T29] usb 42-1: SetAddress Request (38) to port 0 [ 745.556443][ T29] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 746.533578][T17794] vhci_hcd: connection reset by peer [ 746.627616][ T62] vhci_hcd: stop threads [ 746.629010][ T62] vhci_hcd: release socket [ 746.643116][ T62] vhci_hcd: disconnect device [ 746.922960][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 747.763298][ T59] usb 46-1: device descriptor read/8, error -110 [ 747.785486][T17810] vhci_hcd: connection reset by peer [ 747.794179][ T171] vhci_hcd: stop threads [ 747.795990][ T171] vhci_hcd: release socket [ 747.798446][ T171] vhci_hcd: disconnect device [ 747.814409][T17845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 747.816516][T17845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 747.819183][T17845] vhci_hcd vhci_hcd.0: Device attached [ 748.159404][ T59] usb usb46-port1: attempt power cycle [ 748.174269][ T2105] usb 44-1: SetAddress Request (30) to port 0 [ 748.179745][ T2105] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 748.386947][T17846] vhci_hcd: connection reset by peer [ 748.389199][ T171] vhci_hcd: stop threads [ 748.391048][ T171] vhci_hcd: release socket [ 748.392836][ T171] vhci_hcd: disconnect device [ 748.735151][ T59] usb usb46-port1: unable to enumerate USB device [ 750.614799][ T29] usb 42-1: device descriptor read/8, error -110 [ 751.014812][ T29] usb usb42-port1: attempt power cycle [ 751.365904][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 751.574918][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 751.578875][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 751.582250][ T24] usb 6-1: config 0 has no interface number 0 [ 751.585572][ T24] usb 6-1: config 0 interface 2 has no altsetting 0 [ 751.591477][ T24] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 751.595700][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.598958][ T24] usb 6-1: Product: syz [ 751.600840][ T24] usb 6-1: Manufacturer: syz [ 751.602790][ T24] usb 6-1: SerialNumber: syz [ 751.608494][ T24] usb 6-1: config 0 descriptor?? [ 751.617693][ T29] usb usb42-port1: unable to enumerate USB device [ 751.836149][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.838228][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.888406][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.892475][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.912075][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.915526][ T24] usb 6-1: invalid MIDI out EP 0 [ 752.008508][ T24] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 752.015593][ T24] usb 6-1: USB disconnect, device number 74 [ 752.030280][T17911] udevd[17911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.244473][ T2105] usb 44-1: device descriptor read/8, error -110 [ 753.884409][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 753.904831][ T2105] usb usb44-port1: attempt power cycle [ 754.506714][ T2105] usb usb44-port1: unable to enumerate USB device [ 755.388899][ T6002] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 755.534787][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 755.537806][ T6002] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 755.540330][ T6002] usb 7-1: config 0 has no interface number 0 [ 755.542374][ T6002] usb 7-1: config 0 interface 2 has no altsetting 0 [ 755.598673][ T6002] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 755.601556][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.604061][ T6002] usb 7-1: Product: syz [ 755.614309][ T6002] usb 7-1: Manufacturer: syz [ 755.616969][ T6002] usb 7-1: SerialNumber: syz [ 755.627507][ T6002] usb 7-1: config 0 descriptor?? [ 755.706748][T17963] tipc: Enabling of bearer rejected, failed to enable media [ 755.889150][T17959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.897957][T17959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.905803][ T6002] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.914396][ T6002] usb 7-1: invalid MIDI out EP 0 [ 755.946230][ T6002] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 755.952211][ T6002] usb 7-1: USB disconnect, device number 105 [ 755.968959][T17911] udevd[17911]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.541761][T17969] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 756.544590][T17969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.548400][T17969] vhci_hcd vhci_hcd.0: Device attached [ 757.032079][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3478'. [ 757.036165][ T2105] usb 44-1: SetAddress Request (34) to port 0 [ 757.039234][ T2105] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 757.330022][T17970] vhci_hcd: connection reset by peer [ 757.336683][ T62] vhci_hcd: stop threads [ 757.338508][ T62] vhci_hcd: release socket [ 757.342602][ T62] vhci_hcd: disconnect device [ 757.664286][T17988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 757.666395][T17988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.669372][T17988] vhci_hcd vhci_hcd.0: Device attached [ 757.715082][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3483'. [ 757.984046][ T59] usb 40-1: SetAddress Request (42) to port 0 [ 758.282851][ T59] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 758.464349][T17989] vhci_hcd: connection reset by peer [ 758.479927][ T76] vhci_hcd: stop threads [ 758.481722][ T76] vhci_hcd: release socket [ 758.483832][ T76] vhci_hcd: disconnect device [ 758.821206][T18003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 758.823471][T18003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.826437][T18003] vhci_hcd vhci_hcd.0: Device attached [ 758.862365][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3486'. [ 759.294318][ T29] usb 42-1: SetAddress Request (42) to port 0 [ 759.296965][ T29] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 759.494486][T18004] vhci_hcd: connection reset by peer [ 759.496426][ T46] vhci_hcd: stop threads [ 759.497907][ T46] vhci_hcd: release socket [ 759.499440][ T46] vhci_hcd: disconnect device [ 759.573636][T18017] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000031: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc [ 759.577940][T18017] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 759.580803][T18017] CPU: 3 UID: 0 PID: 18017 Comm: syz.1.3489 Not tainted syzkaller #0 PREEMPT(full) [ 759.586049][T18017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 759.590292][T18017] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 759.592560][T18017] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 759.599388][T18017] RSP: 0018:ffffc900048df650 EFLAGS: 00010282 [ 759.601443][T18017] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 759.604766][T18017] RDX: 0000000000000000 RSI: ffffffff8b5f3342 RDI: dffffc0000000031 [ 759.608047][T18017] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 759.611342][T18017] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b5f3342 [ 759.614679][T18017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.617939][T18017] FS: 0000000000000000(0000) GS:ffff888097b0d000(0063) knlGS:00000000f546cb40 [ 759.621637][T18017] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 759.624414][T18017] CR2: 000000000c351ae2 CR3: 0000000020a6e000 CR4: 0000000000352ef0 [ 759.627700][T18017] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 759.631006][T18017] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 759.634311][T18017] Call Trace: [ 759.635745][T18017] [ 759.637005][T18017] __kasan_check_byte+0x13/0x50 [ 759.639088][T18017] lock_acquire+0xfc/0x350 [ 759.641001][T18017] ? __pfx___might_resched+0x10/0x10 [ 759.643234][T18017] down_write+0x92/0x200 [ 759.645033][T18017] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 759.647401][T18017] ? __pfx_down_write+0x10/0x10 [ 759.649461][T18017] kernfs_remove_by_name_ns+0x3d/0x110 [ 759.651760][T18017] driver_remove_file+0x4a/0x60 [ 759.653844][T18017] bus_remove_driver+0x224/0x2c0 [ 759.655942][T18017] driver_unregister+0x76/0xb0 [ 759.657982][T18017] comedi_device_detach_locked+0x12f/0xa50 [ 759.660432][T18017] do_devconfig_ioctl+0x555/0x710 [ 759.662600][T18017] ? __mutex_lock+0x1c5/0x1060 [ 759.664631][T18017] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 759.666980][T18017] ? kasan_save_stack+0x42/0x60 [ 759.669038][T18017] ? kasan_save_stack+0x33/0x60 [ 759.670958][T18017] ? kasan_save_track+0x14/0x30 [ 759.672629][T18017] ? __kasan_save_free_info+0x3b/0x60 [ 759.674623][T18017] ? __kasan_slab_free+0x5f/0x80 [ 759.676487][T18017] ? kfree+0x2b8/0x6d0 [ 759.678074][T18017] ? tomoyo_path_number_perm+0x470/0x580 [ 759.680097][T18017] ? security_file_ioctl_compat+0x9b/0x240 [ 759.682341][T18017] comedi_unlocked_ioctl+0x165d/0x2f00 [ 759.684345][T18017] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 759.686503][T18017] ? kasan_quarantine_put+0x10a/0x240 [ 759.688553][T18017] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.690510][T18017] ? find_held_lock+0x2b/0x80 [ 759.692248][T18017] ? tomoyo_path_number_perm+0x295/0x580 [ 759.694471][T18017] ? tomoyo_path_number_perm+0x18d/0x580 [ 759.696458][T18017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 759.698691][T18017] comedi_compat_ioctl+0x1d0/0x990 [ 759.700642][T18017] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 759.703044][T18017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.705480][T18017] ? do_vfs_ioctl+0x128/0x14f0 [ 759.707534][T18017] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 759.709516][T18017] ? find_held_lock+0x2b/0x80 [ 759.711291][T18017] ? hook_file_ioctl_common+0x145/0x410 [ 759.713345][T18017] ? __fget_files+0x20e/0x3c0 [ 759.715021][T18017] ? __ia32_compat_sys_openat+0xf0/0x210 [ 759.717118][T18017] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 759.719287][T18017] __ia32_compat_sys_ioctl+0x242/0x370 [ 759.721317][T18017] __do_fast_syscall_32+0x7c/0x300 [ 759.723349][T18017] do_fast_syscall_32+0x32/0x80 [ 759.725160][T18017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.727459][T18017] RIP: 0023:0xf709d579 [ 759.728749][T18017] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 759.735931][T18017] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 759.739218][T18017] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 759.742125][T18017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.745137][T18017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.747995][T18017] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 759.751123][T18017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.753614][T18017] [ 759.754670][T18017] Modules linked in: [ 759.756226][T18017] ---[ end trace 0000000000000000 ]--- [ 759.761080][T18017] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 759.763337][T18017] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 759.776629][T18017] RSP: 0018:ffffc900048df650 EFLAGS: 00010282 [ 759.779787][T18017] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 759.782487][T18017] RDX: 0000000000000000 RSI: ffffffff8b5f3342 RDI: dffffc0000000031 [ 759.785257][T18017] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 759.787992][T18017] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b5f3342 [ 759.790721][T18017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.793433][T18017] FS: 0000000000000000(0000) GS:ffff888097a0d000(0063) knlGS:00000000f546cb40 [ 759.796474][T18017] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 759.798763][T18017] CR2: 00005644799aaf40 CR3: 0000000020a6e000 CR4: 0000000000352ef0 [ 759.801505][T18017] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 759.804222][T18017] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 759.806867][T18017] Kernel panic - not syncing: Fatal exception [ 759.809507][T18017] Kernel Offset: disabled [ 759.811000][T18017] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:11:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000001facb8c RBX=0000000000000000 RCX=ffffffff8b5d72a9 RDX=ffffed1005646656 RSI=ffffffff8bf07540 RDI=ffffffff8191bf0d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a7733 CR3=000000004ac5c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b542520 RCX=ffffffff81b05431 RDX=ffff8880299bc900 RSI=ffffffff81b0540b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004787620 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=dffffc0000000000 R13=ffffed10056a84a5 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b0540d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d9faffc CR3=000000000e182000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b542500 RCX=ffffffff81b05431 RDX=ffff8880272c2480 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002d2f4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056a84a1 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81bc5242 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ff6e40 CR3=000000004b336000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7496ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85268e75 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc900048defc0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9adc5da0 R15=ffffffff85268e10 RIP=ffffffff85268e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c351ae2 CR3=0000000020a6e000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000