last executing test programs: 8.200636313s ago: executing program 0 (id=526): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x20000000) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x80fe) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x10001, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018603907800000000f2ffffffffffffff"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="650f78c0f3f2460f356766400f1fc40fc73f66baf80cb87a840483ef66bafc0c66b8c90066ef650f01c2410f23b566c16d003736420f0d1d0e0001003e2665f30f1c45c3", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000004000000"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = io_uring_setup(0x5940, &(0x7f0000000140)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r8, @ANYRES64=r7, @ANYRES32=r4, @ANYRES16, @ANYBLOB="cd015ddba02c8d9e8ee65631717bd9669d68b8313e", @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.500711721s ago: executing program 0 (id=527): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETCARRIER(r3, 0x400454ce, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/softnet_stat\x00') sendmsg(0xffffffffffffffff, 0x0, 0x44004) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), 0x4) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 5.920248508s ago: executing program 0 (id=532): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="6b4b69f1901acc7e89cb2e5b0cf552ccdae6b6f7aa02cf213b2283a4eb41bae7dc333c8a313822252a5bee52ac83a183866a49ca07cc931f2495dd"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000080), &(0x7f00000000c0)="edb13dff7039bb1ceeb124f32f0f41912522db1f1f176400fcc7a32751c917"}}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0xc00) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x3, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7440d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, "968b227ed594f445cc09e95ee3cac38e", 0x0, 0xff}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x7a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xeda8ee9d6943d811, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x103) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b24, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 5.560140341s ago: executing program 1 (id=535): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/mcfilter\x00') preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x5e, 0x0) 5.457409969s ago: executing program 1 (id=536): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='io_uring_poll_arm\x00', r4}, 0x10) shutdown(r3, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)="8c", 0x1}], 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.359813694s ago: executing program 2 (id=537): pipe(&(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) syz_io_uring_setup(0x7584, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000005c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='9', 0x1) 3.846238639s ago: executing program 2 (id=538): symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x40}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x5, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}, @datasec={0xf, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x43, 0x3}, {0x1}, {0x1, 0x7, 0xd}, {0x5, 0x3, 0x200}, {0x1, 0x2, 0x8}, {0x2, 0xc, 0x8}, {0x4, 0x5f2b, 0x4}, {0x4, 0x0, 0x800}, {0x3, 0x9, 0x40}], "26e9"}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @union={0x2, 0x6, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x0, 0x101}, {0xe, 0x5, 0x8}, {0xd, 0x3, 0x2}, {0xf, 0x2, 0x4}, {0x6, 0x2, 0x5}, {0x4, 0x0, 0x36c}]}, @ptr={0xc}, @datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x2, 0xfff, 0x4}, {0x2, 0xfe6, 0x4}], "1652"}]}, {0x0, [0x5f, 0x61, 0x0]}}, &(0x7f00000008c0)=""/4096, 0x141, 0x1000, 0x0, 0x6}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x1, 0xe, 0xa, r1, 0x800, '\x00', r2, r3, 0x1, 0x0, 0x0, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000081000000000000000000001b"], 0x0) 3.777483272s ago: executing program 2 (id=539): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETCARRIER(r3, 0x400454ce, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/softnet_stat\x00') sendmsg(0xffffffffffffffff, 0x0, 0x44004) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), 0x4) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.816073167s ago: executing program 0 (id=540): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x100, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x1ff, 0x400002) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="c6c8854c795e665af1301ecf5e88645e6f27f9dbb6af8a7eaad63142d9b8b4daa7b8ba754b889d8dd33736e9bca69400c6ccd86f4784570e93daeba805a0d53846dc4f06e262a89b19704f283d7261e2d2c59814717268801d261b8116d567342bc76b1683558bd3840496e1c08e2a4162f8a6dba2c7e74309cc5d598cb0b0868839c01b68273bbfadd4", 0x8a, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) write$sequencer(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="02e3796408a1fc0471376ddcec39a6a0fc909ae16b75dba57c2a93771da28fc4774fd37516044284c2c0f4c5cb17550517f92ef834ccd4b1ba36106de4b1adb8f4680a931f4eaec0a9a1e9b11c112cbb775ed2aa5748bc29a3925dfb26b34410ce1bae4f5ae0317e255f6d8e669fce4086232ecb2a9246eaeca390529f544095c8d1900bcf29463f4c3c7580f3b4388920608d82aab5b6170ec40e30910f7f88a2a541bb14c0d0"], 0x8) listen(r6, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)) r9 = socket$packet(0x11, 0x3, 0x300) dup(r9) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) 2.390454231s ago: executing program 1 (id=541): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000337000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x40047435, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) 2.246252726s ago: executing program 2 (id=542): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2e000000}, &(0x7f00000000c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x3ab, @time}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) 2.245839199s ago: executing program 1 (id=543): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/mcfilter\x00') preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x5e, 0x0) 2.240216828s ago: executing program 1 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f, 0x0, @loopback}}}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r2) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x100) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fsmount(r3, 0x0, 0xf2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x800002, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c90a5883880d55810726f6f746d6f64653d30303030303030303030303030300500000036303030302c", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,blksize=0x0000000000001400,blksize=0x0000000000001000,default']) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) socket(0x10, 0x2, 0x0) 2.145613839s ago: executing program 2 (id=545): pipe(&(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) syz_io_uring_setup(0x7584, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000005c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='9', 0x1) 1.934352811s ago: executing program 0 (id=546): symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x40}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x5, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}, @datasec={0xf, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x43, 0x3}, {0x1}, {0x1, 0x7, 0xd}, {0x5, 0x3, 0x200}, {0x1, 0x2, 0x8}, {0x2, 0xc, 0x8}, {0x4, 0x5f2b, 0x4}, {0x4, 0x0, 0x800}, {0x3, 0x9, 0x40}], "26e9"}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @union={0x2, 0x6, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x0, 0x101}, {0xe, 0x5, 0x8}, {0xd, 0x3, 0x2}, {0xf, 0x2, 0x4}, {0x6, 0x2, 0x5}, {0x4, 0x0, 0x36c}]}, @ptr={0xc}, @datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x2, 0xfff, 0x4}, {0x2, 0xfe6, 0x4}], "1652"}]}, {0x0, [0x5f, 0x61, 0x0]}}, &(0x7f00000008c0)=""/4096, 0x141, 0x1000, 0x0, 0x6}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x1, 0xe, 0xa, r1, 0x800, '\x00', r2, r3, 0x1, 0x0, 0x0, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000081000000000000000000001b"], 0x0) 1.879109804s ago: executing program 0 (id=547): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="6b4b69f1901acc7e89cb2e5b0cf552ccdae6b6f7aa02cf213b2283a4eb41bae7dc333c8a313822252a5bee52ac83a183866a49ca07cc931f2495dd"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000080), &(0x7f00000000c0)="edb13dff7039bb1ceeb124f32f0f41912522db1f1f176400fcc7a32751c917"}}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0xc00) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x3, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7440d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, "968b227ed594f445cc09e95ee3cac38e", 0x0, 0xff}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x7a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xeda8ee9d6943d811, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x103) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b24, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 1.402569294s ago: executing program 3 (id=531): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x3cb, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x0, 0x0, 0xffcd, 0x1, 0x0, 0x34}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x14) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) read$msr(r4, &(0x7f0000000a40)=""/102368, 0x18fe0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x5}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0) 755.96753ms ago: executing program 2 (id=548): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='io_uring_poll_arm\x00', r4}, 0x10) shutdown(r3, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)="8c", 0x1}], 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) 699.699798ms ago: executing program 1 (id=549): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETCARRIER(r3, 0x400454ce, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/softnet_stat\x00') sendmsg(0xffffffffffffffff, 0x0, 0x44004) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), 0x4) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 699.040102ms ago: executing program 3 (id=550): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000240)=""/142, 0xfffffffffffffdd6, 0x0, 0x2, 0x2}}, 0x48) 690.363571ms ago: executing program 3 (id=551): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000337000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x40047435, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) 530.0597ms ago: executing program 3 (id=552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/mcfilter\x00') preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x5e, 0x0) 529.721726ms ago: executing program 3 (id=553): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x3cb, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x0, 0x0, 0xffcd, 0x1, 0x0, 0x34}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) read$msr(r3, &(0x7f0000000a40)=""/102368, 0x18fe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000100)={0x5}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000620000/0x2000)=nil, 0x2000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0) 0s ago: executing program 3 (id=554): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x3ab, @time}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCGREP(r1, 0x80284504, &(0x7f0000000040)=""/102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) kernel console output (not intermixed with test programs): e config [ 654.397041][ T5339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 654.407768][ T5339] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.416026][ T5339] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 654.420306][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 654.423770][ T5339] usb 7-1: Product: syz [ 654.425717][ T5339] usb 7-1: Manufacturer: syz [ 654.442679][ T5339] cdc_wdm 7-1:1.0: skipping garbage [ 654.445038][ T5339] cdc_wdm 7-1:1.0: skipping garbage [ 654.447374][ T5339] cdc_wdm 7-1:1.0: skipping garbage [ 654.449997][ T5339] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 654.611022][ T5339] usb 6-1: USB disconnect, device number 22 [ 654.662274][ T7574] tap0: tun_chr_ioctl cmd 1074025678 [ 654.664279][ T7574] tap0: group set to 0 [ 654.671159][ T5560] usb 7-1: USB disconnect, device number 29 [ 654.868293][ T61] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 655.062623][ T61] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 655.066695][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.070451][ T61] usb 8-1: Product: syz [ 655.072455][ T61] usb 8-1: Manufacturer: syz [ 655.074580][ T61] usb 8-1: SerialNumber: syz [ 655.083091][ T61] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 655.100511][ T48] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 655.575672][ T7580] fuse: Bad value for 'fd' [ 655.608374][ T61] usb 8-1: USB disconnect, device number 24 [ 656.158382][ T48] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 656.167385][ T48] ath9k_htc: Failed to initialize the device [ 656.174259][ T61] usb 8-1: ath9k_htc: USB layer deinitialized [ 656.208937][ T7597] 9p: Unknown Cache mode or invalid value fsca [ 656.832595][ T7609] trusted_key: encrypted_key: insufficient parameters specified [ 656.848690][ T7609] trusted_key: encrypted_key: insufficient parameters specified [ 657.148271][ T5872] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 657.348262][ T5872] usb 7-1: Using ep0 maxpacket: 8 [ 657.353605][ T5872] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 657.357216][ T5872] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.378327][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.382993][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.387215][ T5872] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.396081][ T5872] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 657.400076][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.613102][ T5872] usb 7-1: usb_control_msg returned -32 [ 657.615585][ T5872] usbtmc 7-1:16.0: can't read capabilities [ 657.776501][ T7620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.148290][ T48] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 658.345071][ T48] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 658.349114][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.353291][ T48] usb 6-1: Product: syz [ 658.355305][ T48] usb 6-1: Manufacturer: syz [ 658.357479][ T48] usb 6-1: SerialNumber: syz [ 658.378918][ T48] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 658.396232][ T5872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 658.634563][ T48] usb 6-1: USB disconnect, device number 23 [ 658.863183][ T7624] fuse: Bad value for 'fd' [ 659.448290][ T5872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 659.451231][ T5872] ath9k_htc: Failed to initialize the device [ 659.454404][ T48] usb 6-1: ath9k_htc: USB layer deinitialized [ 659.551228][ T7636] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 659.583970][ T39] audit: type=1400 audit(1722429230.674:398): avc: denied { ioctl } for pid=7637 comm="syz.1.411" path="socket:[30394]" dev="sockfs" ino=30394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 659.738981][ T39] audit: type=1400 audit(1722429230.824:399): avc: denied { ioctl } for pid=7639 comm="syz.3.413" path="/dev/btrfs-control" dev="devtmpfs" ino=1152 ioctlcmd=0x64ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 659.759848][ T5339] usb 7-1: USB disconnect, device number 30 [ 659.860656][ T7640] ======================================================= [ 659.860656][ T7640] WARNING: The mand mount option has been deprecated and [ 659.860656][ T7640] and is ignored by this kernel. Remove the mand [ 659.860656][ T7640] option from the mount to silence this warning. [ 659.860656][ T7640] ======================================================= [ 659.888002][ T39] audit: type=1400 audit(1722429230.974:400): avc: denied { mounton } for pid=7639 comm="syz.3.413" path="/83/file0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 659.927660][ T7640] syz.3.413: attempt to access beyond end of device [ 659.927660][ T7640] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 659.930869][ T7649] libceph: resolve '. [ 659.930869][ T7649] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 659.930869][ T7649] ' (ret=-3): failed [ 659.940954][ T7640] efs: cannot read volume header [ 660.098639][ T39] audit: type=1400 audit(1722429231.174:401): avc: denied { unmount } for pid=6415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 660.332939][ T39] audit: type=1400 audit(1722429231.424:402): avc: denied { connect } for pid=7651 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.767006][ T7390] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 661.011505][ T7390] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.028242][ T7390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.031807][ T7390] usb 5-1: Product: syz [ 661.033599][ T7390] usb 5-1: Manufacturer: syz [ 661.035767][ T7390] usb 5-1: SerialNumber: syz [ 661.051414][ T7390] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.086852][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 661.090571][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 661.204969][ T5417] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.309532][ T39] audit: type=1400 audit(1722429232.394:403): avc: denied { setopt } for pid=7665 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.411302][ T5339] usb 5-1: USB disconnect, device number 19 [ 661.594042][ T7670] trusted_key: encrypted_key: insufficient parameters specified [ 661.597974][ T7670] trusted_key: encrypted_key: insufficient parameters specified [ 661.624612][ T7654] fuse: Unknown parameter '0x0000000000000006' [ 661.870902][ T5872] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 662.080424][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 662.084561][ T5872] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 662.088458][ T5872] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.092183][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.095926][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.106506][ T5872] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.112832][ T5872] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 662.116321][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.248239][ T5417] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 662.252122][ T5417] ath9k_htc: Failed to initialize the device [ 662.256588][ T5339] usb 5-1: ath9k_htc: USB layer deinitialized [ 662.331564][ T5872] usb 8-1: usb_control_msg returned -32 [ 662.333956][ T5872] usbtmc 8-1:16.0: can't read capabilities [ 662.583158][ T39] audit: type=1400 audit(1722429233.674:404): avc: denied { bind } for pid=7675 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 662.598294][ T39] audit: type=1400 audit(1722429233.674:405): avc: denied { name_bind } for pid=7675 comm="syz.2.425" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 662.606973][ T39] audit: type=1400 audit(1722429233.674:406): avc: denied { node_bind } for pid=7675 comm="syz.2.425" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 662.616556][ T39] audit: type=1400 audit(1722429233.674:407): avc: denied { name_connect } for pid=7675 comm="syz.2.425" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 662.628321][ T5339] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 662.847033][ T5339] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 662.851295][ T5339] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 662.859168][ T5339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 662.865941][ T5339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 662.877800][ T5339] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 662.882121][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 662.891328][ T5339] usb 5-1: Product: syz [ 662.892987][ T5339] usb 5-1: Manufacturer: syz [ 662.913431][ T5339] cdc_wdm 5-1:1.0: skipping garbage [ 662.915844][ T5339] cdc_wdm 5-1:1.0: skipping garbage [ 662.929003][ T5339] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 663.150323][ T7672] tap0: tun_chr_ioctl cmd 1074025678 [ 663.152774][ T7672] tap0: group set to 0 [ 663.190679][ T5417] usb 5-1: USB disconnect, device number 20 [ 663.408424][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 663.649787][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 663.653478][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.656861][ T25] usb 6-1: Product: syz [ 663.658822][ T25] usb 6-1: Manufacturer: syz [ 663.660910][ T25] usb 6-1: SerialNumber: syz [ 663.681639][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 663.732406][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 664.302897][ T5560] usb 6-1: USB disconnect, device number 24 [ 664.304950][ T7691] fuse: Unknown parameter '0x0000000000000006' [ 664.433454][ T7699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 664.611048][ T6332] usb 8-1: USB disconnect, device number 25 [ 664.755801][ T7702] 9p: Unknown Cache mode or invalid value fsca [ 664.808342][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 664.814217][ T25] ath9k_htc: Failed to initialize the device [ 664.824221][ T5560] usb 6-1: ath9k_htc: USB layer deinitialized [ 664.913658][ T7704] FAULT_INJECTION: forcing a failure. [ 664.913658][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 664.919147][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.3.435 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 664.923534][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 664.928442][ T7704] Call Trace: [ 664.929939][ T7704] [ 664.931332][ T7704] dump_stack_lvl+0x16c/0x1f0 [ 664.933550][ T7704] should_fail_ex+0x497/0x5b0 [ 664.935736][ T7704] ? fs_reclaim_acquire+0xae/0x160 [ 664.937849][ T7704] should_failslab+0xc2/0x120 [ 664.939541][ T7704] __kmalloc_noprof+0xcb/0x400 [ 664.941504][ T7704] tomoyo_encode2+0x100/0x3e0 [ 664.943451][ T7704] tomoyo_unix_entry+0x33d/0x650 [ 664.945691][ T7704] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 664.948012][ T7704] ? __pfx___lock_acquire+0x10/0x10 [ 664.950576][ T7704] tomoyo_socket_connect_permission+0x321/0x360 [ 664.953873][ T7704] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 664.956774][ T7704] security_socket_connect+0x75/0xc0 [ 664.958862][ T7704] __sys_connect_file+0xae/0x1a0 [ 664.961125][ T7704] __sys_connect+0x149/0x170 [ 664.963361][ T7704] ? __pfx___sys_connect+0x10/0x10 [ 664.965586][ T7704] __x64_sys_connect+0x72/0xb0 [ 664.967682][ T7704] ? lockdep_hardirqs_on+0x7c/0x110 [ 664.970105][ T7704] do_syscall_64+0xcd/0x250 [ 664.972226][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.974759][ T7704] RIP: 0033:0x7fad28b773b9 [ 664.976865][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.984598][ T7704] RSP: 002b:00007fad2999c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 664.987784][ T7704] RAX: ffffffffffffffda RBX: 00007fad28d05f80 RCX: 00007fad28b773b9 [ 664.990823][ T7704] RDX: 000000000000006e RSI: 00000000200008c0 RDI: 0000000000000009 [ 664.993617][ T7704] RBP: 00007fad2999c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 664.996591][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.000137][ T7704] R13: 000000000000000b R14: 00007fad28d05f80 R15: 00007ffd124fdfd8 [ 665.004104][ T7704] [ 665.074461][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 665.074476][ T39] audit: type=1400 audit(1722429236.164:411): avc: denied { map } for pid=7705 comm="syz.1.436" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.676324][ T39] audit: type=1400 audit(1722429236.764:412): avc: denied { map } for pid=7717 comm="syz.1.440" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 665.778301][ T5872] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 665.994993][ T5872] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 666.019730][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.023338][ T5872] usb 8-1: Product: syz [ 666.025225][ T5872] usb 8-1: Manufacturer: syz [ 666.027275][ T5872] usb 8-1: SerialNumber: syz [ 666.036158][ T5872] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 666.067904][ T5872] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 666.088414][ T6332] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 666.320649][ T6332] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 666.324204][ T6332] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 666.328652][ T6332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 666.332201][ T6332] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 666.340871][ T6332] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 666.344883][ T6332] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 666.351795][ T6332] usb 6-1: Product: syz [ 666.353898][ T6332] usb 6-1: Manufacturer: syz [ 666.373027][ T6332] cdc_wdm 6-1:1.0: skipping garbage [ 666.375329][ T6332] cdc_wdm 6-1:1.0: skipping garbage [ 666.377666][ T6332] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 666.502058][ T7714] fuse: Unknown parameter '8Xrootmode' [ 666.555095][ T48] usb 8-1: USB disconnect, device number 26 [ 666.600317][ T7720] tap0: tun_chr_ioctl cmd 1074025678 [ 666.602702][ T7720] tap0: group set to 0 [ 666.617650][ T6332] usb 6-1: USB disconnect, device number 25 [ 667.213928][ T5872] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 667.217008][ T5872] ath9k_htc: Failed to initialize the device [ 667.221165][ T48] usb 8-1: ath9k_htc: USB layer deinitialized [ 667.911139][ T39] audit: type=1400 audit(1722429239.004:413): avc: denied { create } for pid=7752 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 667.967456][ T39] audit: type=1400 audit(1722429239.054:414): avc: denied { mounton } for pid=7752 comm="syz.0.451" path="/69/file1/file0" dev="autofs" ino=31976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 667.983361][ T39] audit: type=1400 audit(1722429239.064:415): avc: denied { read } for pid=7752 comm="syz.0.451" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 667.993007][ T39] audit: type=1400 audit(1722429239.064:416): avc: denied { open } for pid=7752 comm="syz.0.451" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 667.995707][ T4430] bridge_slave_1: left allmulticast mode [ 668.008264][ T39] audit: type=1400 audit(1722429239.064:417): avc: denied { ioctl } for pid=7752 comm="syz.0.451" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 668.011045][ T4430] bridge_slave_1: left promiscuous mode [ 668.025691][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.033372][ T39] audit: type=1400 audit(1722429239.124:418): avc: denied { unmount } for pid=6546 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 668.034167][ T4430] bridge_slave_0: left allmulticast mode [ 668.050588][ T4430] bridge_slave_0: left promiscuous mode [ 668.058464][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.218275][ T7390] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 668.413262][ T7390] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 668.419388][ T7390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.427528][ T7390] usb 7-1: Product: syz [ 668.429745][ T7390] usb 7-1: Manufacturer: syz [ 668.431900][ T7390] usb 7-1: SerialNumber: syz [ 668.440822][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.443273][ T7390] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 668.452713][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.458046][ T4430] bond0 (unregistering): Released all slaves [ 668.475751][ T5417] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 668.839254][ T4430] hsr_slave_0: left promiscuous mode [ 668.843009][ T4430] hsr_slave_1: left promiscuous mode [ 668.846472][ T7768] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 668.856226][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.856407][ T39] audit: type=1400 audit(1722429239.944:419): avc: denied { relabelto } for pid=7767 comm="syz.3.456" name="file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 668.859542][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.875258][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.878313][ T39] audit: type=1400 audit(1722429239.944:420): avc: denied { associate } for pid=7767 comm="syz.3.456" name="file0" dev="tmpfs" ino=635 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 668.892928][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.917924][ T7755] fuse: Unknown parameter '8Xrootmode' [ 668.928964][ T48] usb 7-1: USB disconnect, device number 31 [ 668.962277][ T4430] veth1_macvtap: left promiscuous mode [ 668.964985][ T4430] veth0_macvtap: left promiscuous mode [ 668.967701][ T4430] veth1_vlan: left promiscuous mode [ 668.970483][ T4430] veth0_vlan: left promiscuous mode [ 669.518341][ T5417] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 669.521333][ T5417] ath9k_htc: Failed to initialize the device [ 669.532808][ T48] usb 7-1: ath9k_htc: USB layer deinitialized [ 670.257524][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 670.344452][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 671.225874][ T7782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 671.275276][ T7785] FAULT_INJECTION: forcing a failure. [ 671.275276][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 671.281257][ T7785] CPU: 1 UID: 0 PID: 7785 Comm: syz.2.460 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 671.285873][ T7785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 671.290569][ T7785] Call Trace: [ 671.292066][ T7785] [ 671.293391][ T7785] dump_stack_lvl+0x16c/0x1f0 [ 671.295489][ T7785] should_fail_ex+0x497/0x5b0 [ 671.297611][ T7785] ? fs_reclaim_acquire+0xae/0x160 [ 671.299881][ T7785] should_failslab+0xc2/0x120 [ 671.301972][ T7785] __kmalloc_cache_node_noprof+0x6e/0x350 [ 671.304406][ T7785] ? __get_vm_area_node+0xe1/0x2d0 [ 671.306471][ T7785] __get_vm_area_node+0xe1/0x2d0 [ 671.308567][ T7785] __vmalloc_node_range_noprof+0x276/0x1520 [ 671.311064][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.313496][ T7785] ? kasan_save_stack+0x42/0x60 [ 671.315632][ T7785] ? do_seccomp+0x769/0x2660 [ 671.317748][ T7785] ? do_syscall_64+0xcd/0x250 [ 671.319876][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.322296][ T7785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 671.325070][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.327430][ T7785] __vmalloc_noprof+0x6d/0x90 [ 671.329086][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.330999][ T7785] bpf_prog_alloc_no_stats+0x58/0x440 [ 671.333003][ T7785] bpf_prog_alloc+0x3b/0x240 [ 671.334739][ T7785] bpf_prog_create_from_user+0xb4/0x2d0 [ 671.336899][ T7785] ? __pfx_seccomp_check_filter+0x10/0x10 [ 671.339235][ T7785] do_seccomp+0x7b6/0x2660 [ 671.340971][ T7785] ? __pfx_do_seccomp+0x10/0x10 [ 671.343028][ T7785] ? fput+0x32/0x390 [ 671.344620][ T7785] ? ksys_write+0x1ab/0x260 [ 671.346386][ T7785] ? __pfx_ksys_write+0x10/0x10 [ 671.348386][ T7785] do_syscall_64+0xcd/0x250 [ 671.350329][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.352788][ T7785] RIP: 0033:0x7f39d2d773b9 [ 671.354615][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.362251][ T7785] RSP: 002b:00007f39d3b92048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 671.365683][ T7785] RAX: ffffffffffffffda RBX: 00007f39d2f06058 RCX: 00007f39d2d773b9 [ 671.368829][ T7785] RDX: 0000000020000080 RSI: 0000000000000005 RDI: 0000000000000001 [ 671.372149][ T7785] RBP: 00007f39d3b920a0 R08: 0000000000000000 R09: 0000000000000000 [ 671.375681][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.378996][ T7785] R13: 000000000000006e R14: 00007f39d2f06058 R15: 00007ffdf1b04b68 [ 671.382410][ T7785] [ 671.385488][ T7785] syz.2.460: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 671.396737][ T7785] CPU: 1 UID: 0 PID: 7785 Comm: syz.2.460 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 671.400675][ T7785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 671.405183][ T7785] Call Trace: [ 671.406373][ T7785] [ 671.407289][ T7785] dump_stack_lvl+0x16c/0x1f0 [ 671.409078][ T7785] warn_alloc+0x24d/0x3a0 [ 671.410774][ T7785] ? __pfx_warn_alloc+0x10/0x10 [ 671.412688][ T7785] ? fs_reclaim_acquire+0xae/0x160 [ 671.414693][ T7785] ? trace_kmalloc+0x2d/0xe0 [ 671.416450][ T7785] ? __kasan_kmalloc+0x8a/0xb0 [ 671.418582][ T7785] ? __get_vm_area_node+0x1bc/0x2d0 [ 671.420819][ T7785] __vmalloc_node_range_noprof+0xc1e/0x1520 [ 671.423450][ T7785] ? kasan_save_stack+0x42/0x60 [ 671.425556][ T7785] ? do_seccomp+0x769/0x2660 [ 671.427564][ T7785] ? do_syscall_64+0xcd/0x250 [ 671.429594][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.431961][ T7785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 671.434661][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.437047][ T7785] __vmalloc_noprof+0x6d/0x90 [ 671.439055][ T7785] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 671.441459][ T7785] bpf_prog_alloc_no_stats+0x58/0x440 [ 671.443785][ T7785] bpf_prog_alloc+0x3b/0x240 [ 671.445783][ T7785] bpf_prog_create_from_user+0xb4/0x2d0 [ 671.448136][ T7785] ? __pfx_seccomp_check_filter+0x10/0x10 [ 671.450595][ T7785] do_seccomp+0x7b6/0x2660 [ 671.452509][ T7785] ? __pfx_do_seccomp+0x10/0x10 [ 671.454652][ T7785] ? fput+0x32/0x390 [ 671.456358][ T7785] ? ksys_write+0x1ab/0x260 [ 671.458348][ T7785] ? __pfx_ksys_write+0x10/0x10 [ 671.460428][ T7785] do_syscall_64+0xcd/0x250 [ 671.462417][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.464931][ T7785] RIP: 0033:0x7f39d2d773b9 [ 671.466871][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.474983][ T7785] RSP: 002b:00007f39d3b92048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 671.478265][ T7785] RAX: ffffffffffffffda RBX: 00007f39d2f06058 RCX: 00007f39d2d773b9 [ 671.481670][ T7785] RDX: 0000000020000080 RSI: 0000000000000005 RDI: 0000000000000001 [ 671.485108][ T7785] RBP: 00007f39d3b920a0 R08: 0000000000000000 R09: 0000000000000000 [ 671.488454][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.491814][ T7785] R13: 000000000000006e R14: 00007f39d2f06058 R15: 00007ffdf1b04b68 [ 671.495086][ T7785] [ 671.503095][ T7785] Mem-Info: [ 671.504647][ T7785] active_anon:13345 inactive_anon:1008 isolated_anon:0 [ 671.504647][ T7785] active_file:19683 inactive_file:20603 isolated_file:0 [ 671.504647][ T7785] unevictable:1768 dirty:438 writeback:0 [ 671.504647][ T7785] slab_reclaimable:6470 slab_unreclaimable:81456 [ 671.504647][ T7785] mapped:26366 shmem:2312 pagetables:909 [ 671.504647][ T7785] sec_pagetables:313 bounce:0 [ 671.504647][ T7785] kernel_misc_reclaimable:0 [ 671.504647][ T7785] free:496838 free_pcp:2475 free_cma:0 [ 671.523623][ T7785] Node 0 active_anon:54368kB inactive_anon:4032kB active_file:78732kB inactive_file:82344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105464kB dirty:1752kB writeback:0kB shmem:5712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:3636kB sec_pagetables:1252kB all_unreclaimable? no [ 671.539549][ T7785] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 671.552566][ T7785] Node 0 DMA free:15112kB boost:0kB min:328kB low:408kB high:488kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:24kB free_cma:0kB [ 671.564282][ T7785] lowmem_reserve[]: 0 1313 0 0 0 [ 671.566554][ T7785] Node 0 DMA32 free:333604kB boost:0kB min:28924kB low:36152kB high:43380kB reserved_highatomic:0KB active_anon:55732kB inactive_anon:4032kB active_file:78732kB inactive_file:82344kB unevictable:3536kB writepending:1752kB present:2080628kB managed:1372148kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:388kB free_cma:0kB [ 671.579459][ T7785] lowmem_reserve[]: 0 0 0 0 0 [ 671.581870][ T7785] Node 1 Normal free:1640524kB boost:0kB min:38324kB low:47904kB high:57484kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2380kB local_pcp:0kB free_cma:0kB [ 671.594468][ T7785] lowmem_reserve[]: 0 0 0 0 0 [ 671.596766][ T7785] Node 0 DMA: 18*4kB (U) 16*8kB (U) 20*16kB (U) 16*32kB (U) 12*64kB (U) 10*128kB (U) 7*256kB (U) 6*512kB (U) 5*1024kB (U) 1*2048kB (U) 0*4096kB = 15112kB [ 671.604669][ T7785] Node 0 DMA32: 1404*4kB (U) 1166*8kB (UME) 729*16kB (UME) 728*32kB (UME) 605*64kB (UME) 304*128kB (UME) 149*256kB (UME) 90*512kB (UME) 63*1024kB (UME) 21*2048kB (UME) 3*4096kB (UM) = 331568kB [ 671.613478][ T7785] Node 1 Normal: 13*4kB (UM) 25*8kB (UM) 41*16kB (UM) 42*32kB (UM) 28*64kB (UM) 25*128kB (UM) 8*256kB (UM) 12*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 395*4096kB (M) = 1640524kB [ 671.621707][ T7785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.626094][ T7785] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 671.630204][ T7785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.634400][ T7785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 671.638853][ T7785] 42600 total pagecache pages [ 671.641322][ T7785] 2 pages in swap cache [ 671.643418][ T7785] Free swap = 124048kB [ 671.645367][ T7785] Total swap = 124996kB [ 671.647252][ T7785] 1048443 pages RAM [ 671.649954][ T7785] 0 pages HighMem/MovableOnly [ 671.652138][ T7785] 256085 pages reserved [ 671.655302][ T7785] 0 pages cma reserved [ 671.749948][ T7788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.461'. [ 672.091400][ T7794] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 672.278277][ T5560] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 672.472367][ T5560] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.477523][ T5560] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 672.483714][ T25] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 672.487054][ T5560] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.492304][ T5560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.501500][ T7792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 672.510401][ T5560] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.707731][ T25] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 672.716908][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.725114][ T25] usb 7-1: Product: syz [ 672.727057][ T25] usb 7-1: Manufacturer: syz [ 672.729597][ T25] usb 7-1: SerialNumber: syz [ 672.746685][ T25] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 672.776174][ T5560] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 673.189921][ T7799] fuse: Unknown parameter '8Xrootmode' [ 673.198658][ T5339] usb 7-1: USB disconnect, device number 32 [ 673.843842][ T5560] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 673.856105][ T5560] ath9k_htc: Failed to initialize the device [ 673.881021][ T5339] usb 7-1: ath9k_htc: USB layer deinitialized [ 675.107552][ T5872] usb 6-1: USB disconnect, device number 26 [ 675.257254][ T5366] Bluetooth: hci2: sending frame failed (-49) [ 675.261965][ T5364] Bluetooth: hci2: Entering manufacturer mode failed (-49) [ 675.588559][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 675.588601][ T39] audit: type=1400 audit(1722429246.674:422): avc: denied { view } for pid=7817 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 675.599126][ T39] audit: type=1400 audit(1722429246.684:423): avc: denied { view } for pid=7817 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 675.748221][ T39] audit: type=1326 audit(1722429246.824:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.756625][ T39] audit: type=1326 audit(1722429246.824:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.766018][ T39] audit: type=1326 audit(1722429246.824:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.780678][ T39] audit: type=1326 audit(1722429246.824:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.791773][ T39] audit: type=1326 audit(1722429246.824:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.801690][ T39] audit: type=1326 audit(1722429246.824:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.811153][ T39] audit: type=1326 audit(1722429246.824:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 675.821694][ T39] audit: type=1326 audit(1722429246.824:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.2.472" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d2d773b9 code=0x7ffc0000 [ 676.067733][ T3148] bridge_slave_1: left allmulticast mode [ 676.069766][ T3148] bridge_slave_1: left promiscuous mode [ 676.072362][ T3148] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.077602][ T3148] bridge_slave_0: left allmulticast mode [ 676.085926][ T3148] bridge_slave_0: left promiscuous mode [ 676.088638][ T3148] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.467786][ T3148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.475654][ T3148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.481957][ T3148] bond0 (unregistering): Released all slaves [ 676.605253][ T7833] trusted_key: encrypted_key: insufficient parameters specified [ 676.810294][ T3148] hsr_slave_0: left promiscuous mode [ 676.813629][ T3148] hsr_slave_1: left promiscuous mode [ 676.816883][ T3148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.819750][ T3148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.823239][ T3148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.826485][ T3148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.863896][ T3148] veth1_macvtap: left promiscuous mode [ 676.866051][ T3148] veth0_macvtap: left promiscuous mode [ 676.868499][ T3148] veth1_vlan: left promiscuous mode [ 676.870960][ T3148] veth0_vlan: left promiscuous mode [ 677.767102][ T7838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 677.831978][ T3148] team0 (unregistering): Port device team_slave_1 removed [ 677.935658][ T3148] team0 (unregistering): Port device team_slave_0 removed [ 678.561809][ T5366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.575200][ T5366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.579686][ T5366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.584528][ T5366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.605618][ T5366] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 678.609961][ T5366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.719222][ T7842] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 678.730246][ T7842] team0: Port device netdevsim0 added [ 678.995925][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 679.181991][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.185250][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.188657][ T7846] bridge_slave_0: entered allmulticast mode [ 679.192669][ T7846] bridge_slave_0: entered promiscuous mode [ 679.226665][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.229894][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.233070][ T7846] bridge_slave_1: entered allmulticast mode [ 679.237041][ T7846] bridge_slave_1: entered promiscuous mode [ 679.386354][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.401312][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.521531][ T7846] team0: Port device team_slave_0 added [ 679.599111][ T3148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.614919][ T7846] team0: Port device team_slave_1 added [ 679.717738][ T3148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.733926][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.737011][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.747642][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.755823][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.758965][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.769854][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.815920][ T3148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.958427][ T3148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.982264][ T7846] hsr_slave_0: entered promiscuous mode [ 679.986036][ T7846] hsr_slave_1: entered promiscuous mode [ 679.999391][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.003659][ T7846] Cannot create hsr debugfs directory [ 680.192170][ T3148] bridge_slave_1: left allmulticast mode [ 680.194755][ T3148] bridge_slave_1: left promiscuous mode [ 680.197460][ T3148] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.207097][ T3148] bridge_slave_0: left allmulticast mode [ 680.210642][ T3148] bridge_slave_0: left promiscuous mode [ 680.213266][ T3148] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.513037][ T3148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.521490][ T3148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.529011][ T3148] bond0 (unregistering): Released all slaves [ 680.728364][ T5364] Bluetooth: hci2: command tx timeout [ 681.054339][ T3148] hsr_slave_0: left promiscuous mode [ 681.057323][ T3148] hsr_slave_1: left promiscuous mode [ 681.061553][ T3148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.064490][ T3148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.072299][ T3148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.074977][ T3148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.111420][ T3148] veth1_macvtap: left promiscuous mode [ 681.113978][ T3148] veth0_macvtap: left promiscuous mode [ 681.116587][ T3148] veth1_vlan: left promiscuous mode [ 682.150509][ T3148] team0 (unregistering): Port device team_slave_1 removed [ 682.262231][ T3148] team0 (unregistering): Port device team_slave_0 removed [ 682.798341][ T5364] Bluetooth: hci2: command tx timeout [ 682.803291][ T7887] 9p: Unknown Cache mode or invalid value fsca [ 683.059679][ T7882] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 683.072299][ T7882] team0: Port device netdevsim0 added [ 683.074920][ T7884] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 683.091951][ T7884] team0: Port device netdevsim0 removed [ 683.097491][ T7884] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 683.228237][ T7893] trusted_key: encrypted_key: insufficient parameters specified [ 683.235924][ T7893] trusted_key: encrypted_key: insufficient parameters specified [ 683.266719][ T7846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 683.280988][ T7846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 683.293102][ T7846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 683.315749][ T7846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 683.528368][ T992] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 683.549223][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.634986][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.647622][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.650938][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.672210][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.675503][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.718820][ T992] usb 6-1: Using ep0 maxpacket: 8 [ 683.731913][ T992] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 683.735078][ T992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.761684][ T992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.766009][ T992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.771551][ T7846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.778273][ T7846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.782275][ T992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.789402][ T992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.799511][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.950380][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.986311][ T7846] veth0_vlan: entered promiscuous mode [ 683.994630][ T7846] veth1_vlan: entered promiscuous mode [ 684.022875][ T7846] veth0_macvtap: entered promiscuous mode [ 684.028015][ T7846] veth1_macvtap: entered promiscuous mode [ 684.052069][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.056214][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.060466][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.064597][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.068898][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.073435][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.073693][ T992] usb 6-1: usb_control_msg returned -32 [ 684.077315][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.087415][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.092852][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.104109][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.106856][ T992] usbtmc 6-1:16.0: can't read capabilities [ 684.110285][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.114894][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.124267][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.129226][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.133765][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.137563][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.145200][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.149874][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.162629][ T7846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.166201][ T7846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.169815][ T7846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.173991][ T7846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.248710][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.251612][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.275008][ T3148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.279803][ T3148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.355511][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 684.355529][ T39] audit: type=1400 audit(1722429255.444:473): avc: denied { create } for pid=7915 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 684.375762][ T39] audit: type=1400 audit(1722429255.464:474): avc: denied { bind } for pid=7915 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 684.386893][ T39] audit: type=1400 audit(1722429255.464:475): avc: denied { write } for pid=7915 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 684.714707][ T5366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.721901][ T5366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.725852][ T5366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.730951][ T5366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.734403][ T5366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 684.737442][ T5366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 684.888391][ T5366] Bluetooth: hci2: command tx timeout [ 684.969056][ T6132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.036589][ T6132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.069899][ T7921] chnl_net:caif_netlink_parms(): no params data found [ 685.153208][ T6132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.259872][ T6132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.444370][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.446803][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.450432][ T7921] bridge_slave_0: entered allmulticast mode [ 685.453158][ T7921] bridge_slave_0: entered promiscuous mode [ 685.462327][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.465406][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.469317][ T7921] bridge_slave_1: entered allmulticast mode [ 685.472380][ T7921] bridge_slave_1: entered promiscuous mode [ 685.615108][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.635756][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.755535][ T7921] team0: Port device team_slave_0 added [ 685.780857][ T7921] team0: Port device team_slave_1 added [ 685.887834][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.890860][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.901796][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.906345][ T6132] bridge_slave_1: left allmulticast mode [ 685.909083][ T6132] bridge_slave_1: left promiscuous mode [ 685.911676][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.918541][ T6132] bridge_slave_0: left allmulticast mode [ 685.920833][ T6132] bridge_slave_0: left promiscuous mode [ 685.923302][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.195428][ T6514] usb 6-1: USB disconnect, device number 27 [ 686.281248][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.287779][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.293863][ T6132] bond0 (unregistering): Released all slaves [ 686.309547][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.312430][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.323552][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.499682][ T7921] hsr_slave_0: entered promiscuous mode [ 686.503889][ T7921] hsr_slave_1: entered promiscuous mode [ 686.725921][ T6132] hsr_slave_0: left promiscuous mode [ 686.729239][ T6132] hsr_slave_1: left promiscuous mode [ 686.733065][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.735691][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.749717][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.752489][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.758360][ T5872] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 686.809346][ T5366] Bluetooth: hci0: command tx timeout [ 686.813922][ T6132] veth1_macvtap: left promiscuous mode [ 686.816292][ T6132] veth0_macvtap: left promiscuous mode [ 686.824173][ T6132] veth1_vlan: left promiscuous mode [ 686.826610][ T6132] veth0_vlan: left promiscuous mode [ 686.958346][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 686.969720][ T5872] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 686.969973][ T5364] Bluetooth: hci2: command tx timeout [ 686.973584][ T5872] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 686.983522][ T5872] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 686.987281][ T5872] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 686.992418][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 686.997274][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 687.001844][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 687.011942][ T5872] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 687.015842][ T5872] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 687.019241][ T5872] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 687.024508][ T5872] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 687.024764][ T7949] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 687.029546][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 687.029571][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 687.029590][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 687.030640][ T5872] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 687.051291][ T5872] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 687.054198][ T5872] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 687.057797][ T5872] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 687.062897][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 687.067625][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 687.072624][ T5872] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 687.080532][ T5872] usb 6-1: string descriptor 0 read error: -22 [ 687.083399][ T5872] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 687.087290][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.097638][ T5872] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 687.517211][ C2] vkms_vblank_simulate: vblank timer overrun [ 687.770255][ T6132] team0 (unregistering): Port device team_slave_1 removed [ 687.854208][ T6132] team0 (unregistering): Port device team_slave_0 removed [ 688.878467][ T5364] Bluetooth: hci0: command tx timeout [ 689.366014][ T6514] usb 6-1: USB disconnect, device number 28 [ 689.370661][ T7921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 689.390646][ T7921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 689.399967][ T7921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 689.408103][ T7921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 689.502257][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.517339][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.529555][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.532743][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.561171][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.564312][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.753175][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.793945][ T7921] veth0_vlan: entered promiscuous mode [ 689.803409][ T7921] veth1_vlan: entered promiscuous mode [ 689.822532][ T7921] veth0_macvtap: entered promiscuous mode [ 689.827910][ T7921] veth1_macvtap: entered promiscuous mode [ 689.843516][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.849029][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.852707][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.856644][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.862183][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.866430][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.870324][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.874697][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.881289][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.891644][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.896790][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.901652][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.907849][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.913761][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.918535][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.922680][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.926505][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.932849][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.945879][ T7921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.949781][ T7921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.953373][ T7921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.956326][ T7921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.011572][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.015000][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.041442][ T4445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.045009][ T4445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.137015][ T6132] bridge_slave_1: left allmulticast mode [ 690.139902][ T6132] bridge_slave_1: left promiscuous mode [ 690.142499][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.148039][ T6132] bridge_slave_0: left allmulticast mode [ 690.150601][ T6132] bridge_slave_0: left promiscuous mode [ 690.153050][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.228312][ T832] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 690.448747][ T832] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 690.452870][ T832] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 690.456601][ T832] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.460384][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.466851][ T7992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 690.475444][ T832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 690.480940][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.487644][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.495287][ T6132] bond0 (unregistering): Released all slaves [ 690.658486][ T5560] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 690.860039][ T5560] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.864009][ T5560] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 690.868541][ T5560] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 690.872267][ T5560] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 690.877912][ T5560] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 690.891909][ T5560] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 690.895961][ T5560] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 690.899294][ T6132] hsr_slave_0: left promiscuous mode [ 690.899502][ T5560] usb 8-1: Product: syz [ 690.903071][ T5560] usb 8-1: Manufacturer: syz [ 690.905045][ T6132] hsr_slave_1: left promiscuous mode [ 690.909252][ T5560] cdc_wdm 8-1:1.0: skipping garbage [ 690.912276][ T5560] cdc_wdm 8-1:1.0: skipping garbage [ 690.914537][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.915340][ T5560] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 690.917885][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.920122][ T5560] cdc_wdm 8-1:1.0: Unknown control protocol [ 690.927937][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.933008][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.958583][ T5364] Bluetooth: hci0: command tx timeout [ 690.978124][ T6132] veth1_macvtap: left promiscuous mode [ 690.980735][ T6132] veth0_macvtap: left promiscuous mode [ 690.983290][ T6132] veth1_vlan: left promiscuous mode [ 690.985591][ T6132] veth0_vlan: left promiscuous mode [ 691.335253][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.337531][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.339935][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.342644][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.345076][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.347280][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.349790][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.352541][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.355283][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.357604][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.360247][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.362838][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.365471][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.367983][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.370556][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.373208][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.376240][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.378820][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.381499][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 691.384002][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 691.387780][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 691.392751][ T6514] usb 8-1: USB disconnect, device number 27 [ 691.790474][ T6132] team0 (unregistering): Port device team_slave_1 removed [ 691.868782][ T6132] team0 (unregistering): Port device team_slave_0 removed [ 692.497224][ T8004] tap0: tun_chr_ioctl cmd 1074025678 [ 692.499447][ T8004] tap0: group set to 0 [ 693.038456][ T5364] Bluetooth: hci0: command tx timeout [ 693.057119][ T7390] usb 6-1: USB disconnect, device number 29 [ 693.311014][ T39] audit: type=1326 audit(1722429264.404:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.321410][ T39] audit: type=1326 audit(1722429264.414:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.330413][ T39] audit: type=1326 audit(1722429264.414:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.339132][ T39] audit: type=1326 audit(1722429264.414:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.349042][ T39] audit: type=1326 audit(1722429264.414:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.360431][ T39] audit: type=1326 audit(1722429264.414:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.374264][ T39] audit: type=1326 audit(1722429264.414:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.384218][ T39] audit: type=1326 audit(1722429264.414:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.395109][ T39] audit: type=1326 audit(1722429264.414:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 693.406625][ T39] audit: type=1326 audit(1722429264.414:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab773b9 code=0x7ffc0000 [ 694.153147][ T8028] sg_write: data in/out 73495649/10 bytes for SCSI command 0x9d-- guessing data in; [ 694.153147][ T8028] program syz.3.507 not setting count and/or reply_len properly [ 694.367635][ T8032] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 695.439850][ T5366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 695.444583][ T5366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 695.450316][ T5366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.454625][ T5366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.459565][ T5366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 695.463013][ T5366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.548263][ T25] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 695.607095][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 695.724519][ T6132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.734476][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 695.738721][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 695.745179][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 695.751044][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 695.758858][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 695.765673][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 695.769714][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 695.771605][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.773157][ T25] usb 8-1: Product: syz [ 695.776326][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.778212][ T25] usb 8-1: Manufacturer: syz [ 695.782620][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 695.787655][ T8037] bridge_slave_0: entered allmulticast mode [ 695.790209][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 695.794179][ T8037] bridge_slave_0: entered promiscuous mode [ 695.796115][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 695.799801][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.800391][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 695.802897][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.812121][ T8037] bridge_slave_1: entered allmulticast mode [ 695.816155][ T8037] bridge_slave_1: entered promiscuous mode [ 695.925309][ T6132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.945794][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.972371][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.062309][ T6132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.069176][ T8036] tap0: tun_chr_ioctl cmd 1074025678 [ 696.072664][ T8036] tap0: group set to 0 [ 696.083084][ T8037] team0: Port device team_slave_0 added [ 696.096864][ T8037] team0: Port device team_slave_1 added [ 696.135989][ T25] usb 8-1: USB disconnect, device number 28 [ 696.139075][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 696.222825][ T6132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.234790][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.237775][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.250969][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.260330][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.264423][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.282994][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.387791][ T8037] hsr_slave_0: entered promiscuous mode [ 696.395093][ T8037] hsr_slave_1: entered promiscuous mode [ 696.402909][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.406656][ T8037] Cannot create hsr debugfs directory [ 696.464838][ C2] vkms_vblank_simulate: vblank timer overrun [ 696.676117][ T6132] bridge_slave_1: left allmulticast mode [ 696.678958][ T6132] bridge_slave_1: left promiscuous mode [ 696.681156][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.685900][ T6132] bridge_slave_0: left allmulticast mode [ 696.688006][ T6132] bridge_slave_0: left promiscuous mode [ 696.690734][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.999672][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.006544][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.014187][ T6132] bond0 (unregistering): Released all slaves [ 697.465993][ T6132] hsr_slave_0: left promiscuous mode [ 697.469533][ T6132] hsr_slave_1: left promiscuous mode [ 697.473674][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.476877][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.486951][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.491676][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.532144][ T5364] Bluetooth: hci1: command tx timeout [ 697.532733][ T6132] veth1_macvtap: left promiscuous mode [ 697.537079][ T6132] veth0_macvtap: left promiscuous mode [ 697.539358][ T6132] veth1_vlan: left promiscuous mode [ 697.541343][ T6132] veth0_vlan: left promiscuous mode [ 698.018281][ T5339] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 698.178296][ T5339] usb 8-1: device descriptor read/64, error -71 [ 698.326597][ T6132] team0 (unregistering): Port device team_slave_1 removed [ 698.413194][ T6132] team0 (unregistering): Port device team_slave_0 removed [ 698.458263][ T5339] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 698.630629][ T5339] usb 8-1: device descriptor read/64, error -71 [ 698.748701][ T5339] usb usb8-port1: attempt power cycle [ 699.032553][ T8037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 699.046919][ T8037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 699.053514][ T8037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 699.059857][ T8037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 699.144002][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.159783][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.167843][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.170969][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.178286][ T5339] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 699.190042][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.193119][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.209663][ T5339] usb 8-1: device descriptor read/8, error -71 [ 699.376431][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.432753][ T8037] veth0_vlan: entered promiscuous mode [ 699.441214][ T8037] veth1_vlan: entered promiscuous mode [ 699.468075][ T8037] veth0_macvtap: entered promiscuous mode [ 699.474901][ T8037] veth1_macvtap: entered promiscuous mode [ 699.487956][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.492667][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.496703][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.498243][ T5339] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 699.500604][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.507137][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.511746][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.517700][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.531163][ T5339] usb 8-1: device descriptor read/8, error -71 [ 699.531819][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.542161][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.546217][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.550663][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.554977][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.559634][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.564550][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.570967][ T8037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.574423][ T8037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.577700][ T8037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.581733][ T8037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.608451][ T5364] Bluetooth: hci1: command tx timeout [ 699.637054][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.640177][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.659241][ T5339] usb usb8-port1: unable to enumerate USB device [ 699.659912][ T963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.664796][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.881974][ T5366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.885940][ T5366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.890539][ T5366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.894318][ T5366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.897903][ T5366] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.901819][ T5366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.988382][ T5339] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 700.057001][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 700.169751][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.170503][ T5339] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 700.172564][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.176980][ T5339] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 700.181921][ T8070] bridge_slave_0: entered allmulticast mode [ 700.183599][ T5339] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 700.186956][ T8070] bridge_slave_0: entered promiscuous mode [ 700.189687][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.194642][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.197104][ T8069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 700.198215][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.203119][ T5339] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 700.203547][ T8070] bridge_slave_1: entered allmulticast mode [ 700.211131][ T8070] bridge_slave_1: entered promiscuous mode [ 700.274221][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.281360][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.337741][ T8070] team0: Port device team_slave_0 added [ 700.343520][ T8070] team0: Port device team_slave_1 added [ 700.391353][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.394486][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.405322][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.412197][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.414575][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.424864][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.493424][ T8070] hsr_slave_0: entered promiscuous mode [ 700.496914][ T8070] hsr_slave_1: entered promiscuous mode [ 700.500309][ T8070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.503674][ T8070] Cannot create hsr debugfs directory [ 700.667969][ T8070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.774169][ T8070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.895661][ T8070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.963788][ T8070] bond0: (slave netdevsim0): Releasing backup interface [ 700.978061][ T8070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.171335][ T8070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 701.185108][ T8070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.207603][ T8070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.223343][ T8070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.325360][ T8070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.349351][ T8070] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.358476][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.363090][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.383064][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.386316][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.551469][ T8070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.584687][ T8070] veth0_vlan: entered promiscuous mode [ 701.593354][ T8070] veth1_vlan: entered promiscuous mode [ 701.614044][ T8070] veth0_macvtap: entered promiscuous mode [ 701.620556][ T8070] veth1_macvtap: entered promiscuous mode [ 701.631379][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.635056][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.639674][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.643833][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.647260][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.651419][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.655236][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.659821][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.666259][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.677876][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.684048][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.688245][ T5366] Bluetooth: hci1: command tx timeout [ 701.688380][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.694531][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.698745][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.703266][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.707096][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.711940][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.717593][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.727274][ T8070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.730780][ T8070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.734073][ T8070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.737508][ T8070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.787386][ T4481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.791208][ T4481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.814333][ T6132] bridge_slave_1: left allmulticast mode [ 701.816949][ T6132] bridge_slave_1: left promiscuous mode [ 701.819988][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.825958][ T6132] bridge_slave_0: left allmulticast mode [ 701.828674][ T6132] bridge_slave_0: left promiscuous mode [ 701.831292][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.918374][ T5366] Bluetooth: hci2: command tx timeout [ 702.124268][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.135091][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.140861][ T6132] bond0 (unregistering): Released all slaves [ 702.165917][ T4445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.170253][ T4445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.226465][ T6132] tipc: Left network mode [ 702.455839][ T6132] hsr_slave_0: left promiscuous mode [ 702.460934][ T6132] hsr_slave_1: left promiscuous mode [ 702.464157][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.467491][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.471985][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.475185][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.518549][ T5339] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 702.523443][ T6132] veth1_macvtap: left promiscuous mode [ 702.525854][ T6132] veth0_macvtap: left promiscuous mode [ 702.528259][ T6132] veth1_vlan: left promiscuous mode [ 702.530518][ T6132] veth0_vlan: left promiscuous mode [ 702.749604][ T5339] usb 7-1: Using ep0 maxpacket: 8 [ 702.815753][ T834] usb 5-1: USB disconnect, device number 21 [ 702.820917][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 702.824785][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 702.827980][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 702.833627][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 702.849097][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 702.854301][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 702.859493][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 702.872483][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 702.876343][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 702.881680][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 702.886016][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 702.893774][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 702.901869][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 702.906533][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 702.912901][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 702.916324][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 702.919611][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 702.923682][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 702.928114][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 702.936723][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 702.942214][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 702.949982][ T5339] usb 7-1: string descriptor 0 read error: -22 [ 702.952645][ T5339] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 702.956522][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.965647][ T5339] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 703.573750][ T6132] team0 (unregistering): Port device team_slave_1 removed [ 703.662341][ T6132] team0 (unregistering): Port device team_slave_0 removed [ 703.708300][ T5339] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 703.762326][ T5366] Bluetooth: hci1: command tx timeout [ 703.890638][ T5339] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.894679][ T5339] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 703.899378][ T5339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.903351][ T5339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 703.908421][ T5339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 703.915314][ T5339] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 703.919699][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 703.923243][ T5339] usb 5-1: Product: syz [ 703.925400][ T5339] usb 5-1: Manufacturer: syz [ 703.935146][ T5339] cdc_wdm 5-1:1.0: skipping garbage [ 703.937630][ T5339] cdc_wdm 5-1:1.0: skipping garbage [ 703.998306][ T5366] Bluetooth: hci2: command tx timeout [ 704.266316][ T8100] tap0: tun_chr_ioctl cmd 1074025678 [ 704.268830][ T8100] tap0: group set to 0 [ 704.645553][ T5364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 704.653703][ T5364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.657223][ T5364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.670996][ T5364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.675042][ T5364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 704.678728][ T5364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.723087][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.725967][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.847845][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 704.966748][ T4430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.977459][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.982030][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.985213][ T8103] bridge_slave_0: entered allmulticast mode [ 704.989500][ T8103] bridge_slave_0: entered promiscuous mode [ 704.994088][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.996870][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.999877][ T8103] bridge_slave_1: entered allmulticast mode [ 705.003139][ T8103] bridge_slave_1: entered promiscuous mode [ 705.057420][ T4430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.068355][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.075699][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.143534][ T4430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.155243][ T8103] team0: Port device team_slave_0 added [ 705.163198][ T8103] team0: Port device team_slave_1 added [ 705.210198][ T5339] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 705.211603][ T4430] team0: Port device netdevsim0 removed [ 705.212750][ T5339] cdc_wdm 5-1:1.0: Unknown control protocol [ 705.215305][ T5339] usb 5-1: USB disconnect, device number 22 [ 705.217516][ T4430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.260026][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.262698][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.275064][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.287508][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.290597][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.304582][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.366730][ T8103] hsr_slave_0: entered promiscuous mode [ 705.370564][ T8103] hsr_slave_1: entered promiscuous mode [ 705.372931][ T8103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.375554][ T8103] Cannot create hsr debugfs directory [ 705.468566][ T4430] bridge_slave_1: left allmulticast mode [ 705.472044][ T4430] bridge_slave_1: left promiscuous mode [ 705.474605][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.481453][ T4430] bridge_slave_0: left allmulticast mode [ 705.483922][ T4430] bridge_slave_0: left promiscuous mode [ 705.486466][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.738960][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.745007][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.750143][ T4430] bond0 (unregistering): Released all slaves [ 705.968365][ T8117] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 705.989262][ T8117] team0: Port device netdevsim0 added [ 706.025097][ T8117] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 706.039875][ T8117] team0: Port device netdevsim0 removed [ 706.045612][ T8117] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 706.088421][ T5364] Bluetooth: hci2: command tx timeout [ 706.162043][ T4430] hsr_slave_0: left promiscuous mode [ 706.168948][ T4430] hsr_slave_1: left promiscuous mode [ 706.179522][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.182883][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.186573][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.190647][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.245323][ T5339] usb 7-1: USB disconnect, device number 33 [ 706.259722][ T4430] veth1_macvtap: left promiscuous mode [ 706.262106][ T4430] veth0_macvtap: left promiscuous mode [ 706.264519][ T4430] veth1_vlan: left promiscuous mode [ 706.266827][ T4430] veth0_vlan: left promiscuous mode [ 706.521147][ T834] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 706.678307][ T834] usb 5-1: device descriptor read/64, error -71 [ 706.729815][ T5364] Bluetooth: hci3: command tx timeout [ 706.957481][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 706.958430][ T834] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 707.038045][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 707.109424][ T834] usb 5-1: device descriptor read/64, error -71 [ 707.228770][ T834] usb usb5-port1: attempt power cycle [ 707.662012][ T834] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 707.699283][ T834] usb 5-1: device descriptor read/8, error -71 [ 707.809647][ T8103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.816970][ T8103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.823584][ T8103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.831040][ T8103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 707.913818][ T8103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.930864][ T8103] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.939676][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.942530][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.951872][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.954945][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.978415][ T834] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 708.013758][ T834] usb 5-1: device descriptor read/8, error -71 [ 708.126832][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.132545][ T834] usb usb5-port1: unable to enumerate USB device [ 708.158538][ T5364] Bluetooth: hci2: command tx timeout [ 708.161463][ T8103] veth0_vlan: entered promiscuous mode [ 708.169695][ T8103] veth1_vlan: entered promiscuous mode [ 708.196214][ T8103] veth0_macvtap: entered promiscuous mode [ 708.204670][ T8103] veth1_macvtap: entered promiscuous mode [ 708.219547][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.224303][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.228467][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.232183][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.236545][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.241253][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.245891][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.254119][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.258019][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.263072][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.266722][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.270457][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.274758][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.280414][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.285419][ T8103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.289518][ T8103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.292706][ T8103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.295646][ T8103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.337230][ T3148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.340924][ T3148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.358691][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.361726][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.473801][ T8155] FAULT_INJECTION: forcing a failure. [ 708.473801][ T8155] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 708.481080][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.1.519 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 708.485642][ T8155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 708.490269][ T8155] Call Trace: [ 708.491727][ T8155] [ 708.493012][ T8155] dump_stack_lvl+0x16c/0x1f0 [ 708.495001][ T8155] should_fail_ex+0x497/0x5b0 [ 708.496989][ T8155] ? fs_reclaim_acquire+0xae/0x160 [ 708.499182][ T8155] should_fail_alloc_page+0xe7/0x130 [ 708.501430][ T8155] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 708.503965][ T8155] __alloc_pages_noprof+0x194/0x2460 [ 708.505883][ T8155] ? hlock_class+0x4e/0x130 [ 708.507627][ T8155] ? __lock_acquire+0xbdd/0x3cb0 [ 708.509831][ T8155] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 708.512193][ T8155] ? __pfx___lock_acquire+0x10/0x10 [ 708.514401][ T8155] ? v4l2_m2m_fop_poll+0xd6/0x120 [ 708.516303][ T8155] ? __pfx_lock_release+0x10/0x10 [ 708.518195][ T8155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.520271][ T8155] ? policy_nodemask+0xea/0x4e0 [ 708.522367][ T8155] alloc_pages_mpol_noprof+0x275/0x610 [ 708.524515][ T8155] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 708.526609][ T8155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 708.528737][ T8155] ? __pollwait+0x26e/0x4c0 [ 708.530454][ T8155] ? __pfx___pollwait+0x10/0x10 [ 708.532214][ T8155] get_free_pages_noprof+0xc/0x40 [ 708.534089][ T8155] __pollwait+0x292/0x4c0 [ 708.535653][ T8155] ? __pfx___pollwait+0x10/0x10 [ 708.537404][ T8155] drm_poll+0x8f/0x110 [ 708.538869][ T8155] do_select+0xca0/0x17b0 [ 708.540440][ T8155] ? __pfx_drm_poll+0x10/0x10 [ 708.542160][ T8155] ? __pfx_do_select+0x10/0x10 [ 708.543939][ T8155] ? mark_lock+0xb5/0xc60 [ 708.545500][ T8155] ? hlock_class+0x4e/0x130 [ 708.547126][ T8155] ? mark_lock+0xb5/0xc60 [ 708.548680][ T8155] ? __pfx___lock_acquire+0x10/0x10 [ 708.550519][ T8155] ? __pfx___pollwait+0x10/0x10 [ 708.552374][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.554072][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.555759][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.557480][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.559201][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.560914][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.562593][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.564236][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.565972][ T8155] ? __pfx_pollwake+0x10/0x10 [ 708.567631][ T8155] ? __pfx___might_resched+0x10/0x10 [ 708.569512][ T8155] ? __pfx_lock_release+0x10/0x10 [ 708.571275][ T8155] ? __might_fault+0xe3/0x190 [ 708.573063][ T8155] ? core_sys_select+0x459/0xb80 [ 708.574953][ T8155] core_sys_select+0x459/0xb80 [ 708.576673][ T8155] ? __pfx_core_sys_select+0x10/0x10 [ 708.578670][ T8155] ? get_pid_task+0xfc/0x250 [ 708.580730][ T8155] ? set_user_sigmask+0x217/0x2a0 [ 708.582766][ T8155] ? __pfx_set_user_sigmask+0x10/0x10 [ 708.584652][ T8155] do_pselect.constprop.0+0x1a0/0x1f0 [ 708.586468][ T8155] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 708.588508][ T8155] __x64_sys_pselect6+0x183/0x240 [ 708.590612][ T8155] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 708.592760][ T8155] do_syscall_64+0xcd/0x250 [ 708.594541][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.596876][ T8155] RIP: 0033:0x7f2b72d773b9 [ 708.598796][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.606904][ T8155] RSP: 002b:00007f2b73ad4048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 708.610206][ T8155] RAX: ffffffffffffffda RBX: 00007f2b72f06058 RCX: 00007f2b72d773b9 [ 708.613486][ T8155] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 708.616817][ T8155] RBP: 00007f2b73ad40a0 R08: 0000000000000000 R09: 0000000000000000 [ 708.619970][ T8155] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 708.623153][ T8155] R13: 000000000000006e R14: 00007f2b72f06058 R15: 00007ffde26cd7d8 [ 708.626412][ T8155] [ 708.798479][ T5364] Bluetooth: hci3: command tx timeout [ 709.396893][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 709.401862][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 709.630170][ T992] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 709.830203][ T992] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.835787][ T992] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 709.840923][ T992] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.844887][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.854453][ T8165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.866116][ T992] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.057637][ T8171] program syz.0.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 710.608384][ T5030] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 710.790762][ T5030] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 710.796937][ T5030] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 710.801500][ T5030] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 710.805314][ T5030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 710.809990][ T5030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 710.816158][ T5030] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 710.820058][ T5030] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 710.823451][ T5030] usb 5-1: Product: syz [ 710.825292][ T5030] usb 5-1: Manufacturer: syz [ 710.828434][ T992] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 710.831659][ T5030] cdc_wdm 5-1:1.0: skipping garbage [ 710.833957][ T5030] cdc_wdm 5-1:1.0: skipping garbage [ 710.837534][ T5030] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 710.840111][ T5030] cdc_wdm 5-1:1.0: Unknown control protocol [ 710.878610][ T5364] Bluetooth: hci3: command tx timeout [ 711.014340][ T992] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 711.017628][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.020414][ T992] usb 6-1: Product: syz [ 711.022231][ T992] usb 6-1: Manufacturer: syz [ 711.024059][ T992] usb 6-1: SerialNumber: syz [ 711.030672][ T992] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 711.051034][ T833] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 711.203414][ C0] wdm_int_callback: 9 callbacks suppressed [ 711.203432][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 711.208618][ C0] wdm_int_callback: 9 callbacks suppressed [ 711.208630][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 711.212616][ T992] usb 5-1: USB disconnect, device number 27 [ 711.213522][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 711.214020][ T8175] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 711.221982][ T8183] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 711.268210][ T5030] usb 6-1: USB disconnect, device number 30 [ 711.485174][ T8181] fuse: Unknown parameter '0x0000000000000006' [ 711.726657][ T5366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.732026][ T5366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.735798][ T5366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.743938][ T5366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.747951][ T5366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 711.751591][ T5366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 711.910398][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 711.973479][ T8192] trusted_key: encrypted_key: insufficient parameters specified [ 711.977464][ T8192] trusted_key: encrypted_key: insufficient parameters specified [ 712.051134][ T6132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.079078][ T833] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 712.082433][ T833] ath9k_htc: Failed to initialize the device [ 712.085877][ T5030] usb 6-1: ath9k_htc: USB layer deinitialized [ 712.147668][ T6132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.156228][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.164817][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.167888][ T8186] bridge_slave_0: entered allmulticast mode [ 712.174383][ T8186] bridge_slave_0: entered promiscuous mode [ 712.181791][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.184890][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.188049][ T8186] bridge_slave_1: entered allmulticast mode [ 712.196079][ T8186] bridge_slave_1: entered promiscuous mode [ 712.231974][ T8200] 9p: Unknown Cache mode or invalid value fsca [ 712.258255][ T832] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 712.277115][ T6132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.285543][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.292038][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.352304][ T8186] team0: Port device team_slave_0 added [ 712.363554][ T8186] team0: Port device team_slave_1 added [ 712.419069][ T6132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.438301][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 712.442831][ T832] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 712.446480][ T832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 712.454746][ T834] usb 7-1: USB disconnect, device number 34 [ 712.455519][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 712.461889][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 712.465953][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.466401][ T832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.475490][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.478253][ T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 712.489520][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.497360][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.503801][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.506084][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.519776][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.580936][ T8186] hsr_slave_0: entered promiscuous mode [ 712.584694][ T8186] hsr_slave_1: entered promiscuous mode [ 712.587981][ T8186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.592195][ T8186] Cannot create hsr debugfs directory [ 712.695306][ T6132] bridge_slave_1: left allmulticast mode [ 712.698008][ T6132] bridge_slave_1: left promiscuous mode [ 712.701009][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.707572][ T6132] bridge_slave_0: left allmulticast mode [ 712.711982][ T6132] bridge_slave_0: left promiscuous mode [ 712.714551][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.720421][ T832] usb 5-1: usb_control_msg returned -32 [ 712.723128][ T832] usbtmc 5-1:16.0: can't read capabilities [ 712.918232][ T834] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 712.968295][ T5366] Bluetooth: hci3: command tx timeout [ 712.989894][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.995419][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.000650][ T6132] bond0 (unregistering): Released all slaves [ 713.108499][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 713.115638][ T834] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 713.118958][ T834] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 713.121592][ T834] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 713.125155][ T834] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 713.130627][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 713.134228][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 713.138502][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 713.143247][ T834] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 713.146995][ T834] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 713.152485][ T834] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 713.156080][ T834] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 713.160719][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 713.165096][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 713.169753][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 713.175255][ T834] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 713.179091][ T834] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 713.182184][ T834] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 713.185926][ T834] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 713.190645][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 713.194952][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 713.199813][ T834] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 713.207102][ T834] usb 7-1: string descriptor 0 read error: -22 [ 713.210103][ T834] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 713.214019][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.223847][ T834] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 713.426205][ T834] usb 7-1: USB disconnect, device number 35 [ 713.453944][ T6132] hsr_slave_0: left promiscuous mode [ 713.456776][ T6132] hsr_slave_1: left promiscuous mode [ 713.462335][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.465722][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.471304][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.474561][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.513530][ T6132] veth1_macvtap: left promiscuous mode [ 713.515883][ T6132] veth0_macvtap: left promiscuous mode [ 713.518450][ T6132] veth1_vlan: left promiscuous mode [ 713.520737][ T6132] veth0_vlan: left promiscuous mode [ 713.852839][ T5366] Bluetooth: hci0: command tx timeout [ 714.334615][ T48] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 714.559015][ T48] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 714.562741][ T48] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 714.567031][ T48] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 714.573479][ T48] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 714.577994][ T48] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 714.585365][ T48] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 714.590288][ T48] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 714.593403][ T48] usb 7-1: Product: syz [ 714.594991][ T48] usb 7-1: Manufacturer: syz [ 714.606069][ T48] cdc_wdm 7-1:1.0: skipping garbage [ 714.619421][ T48] cdc_wdm 7-1:1.0: skipping garbage [ 714.632965][ T48] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 714.635385][ T48] cdc_wdm 7-1:1.0: Unknown control protocol [ 714.661092][ T6132] team0 (unregistering): Port device team_slave_1 removed [ 714.750951][ T6132] team0 (unregistering): Port device team_slave_0 removed [ 714.815996][ T48] usb 7-1: USB disconnect, device number 36 [ 714.979750][ T992] usb 5-1: USB disconnect, device number 28 [ 715.015021][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 715.015035][ T39] audit: type=1326 audit(1722429286.104:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.540" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba703773b9 code=0x0 [ 715.163370][ T8229] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.166798][ T8229] UDF-fs: Scanning with blocksize 512 failed [ 715.172380][ T8229] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.175563][ T8229] UDF-fs: Scanning with blocksize 1024 failed [ 715.182010][ T8229] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.185140][ T8229] UDF-fs: Scanning with blocksize 2048 failed [ 715.188078][ T8229] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.192618][ T8229] UDF-fs: Scanning with blocksize 4096 failed [ 715.232026][ T39] audit: type=1400 audit(1722429286.324:512): avc: denied { ioctl } for pid=8227 comm="syz.0.540" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 715.621576][ T8239] 9p: Unknown Cache mode or invalid value fsca [ 715.696934][ T8186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.712519][ T8186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.721517][ T8186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.730633][ T8186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.817115][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.833624][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.842874][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.845832][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.861265][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.864232][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.918439][ T5366] Bluetooth: hci0: command tx timeout [ 715.930356][ T48] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 715.966839][ T8261] trusted_key: encrypted_key: insufficient parameters specified [ 715.971022][ T8261] trusted_key: encrypted_key: insufficient parameters specified [ 715.978565][ T5339] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 716.046838][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.086474][ T8186] veth0_vlan: entered promiscuous mode [ 716.095215][ T8186] veth1_vlan: entered promiscuous mode [ 716.113921][ T48] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 716.117784][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.124556][ T48] usb 6-1: Product: syz [ 716.125787][ T8186] veth0_macvtap: entered promiscuous mode [ 716.126442][ T48] usb 6-1: Manufacturer: syz [ 716.131501][ T48] usb 6-1: SerialNumber: syz [ 716.133587][ T8186] veth1_macvtap: entered promiscuous mode [ 716.146993][ T48] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 716.149670][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.154829][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.161526][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.161757][ T6332] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 716.165745][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.173683][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.177959][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.178333][ T5339] usb 7-1: Using ep0 maxpacket: 8 [ 716.184208][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.185866][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 716.190527][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 716.193204][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 716.193447][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.196683][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 716.196704][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 716.201270][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.205574][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 716.214143][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.217434][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 716.221758][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.226945][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 716.230093][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.233467][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 716.237918][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.241068][ T61] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 716.241234][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 716.241271][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 716.241290][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 716.241310][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 716.241328][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 716.242368][ T5339] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 716.248071][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.250631][ T5339] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 716.258865][ T8186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.262081][ T5339] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 716.266908][ T8186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.270755][ T5339] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 716.270776][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 716.270796][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 716.270815][ T5339] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 716.273416][ T5339] usb 7-1: string descriptor 0 read error: -22 [ 716.275886][ T8186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.277464][ T5339] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 716.281256][ T8186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.284067][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.332265][ T5339] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 716.371970][ T5339] usb 6-1: USB disconnect, device number 31 [ 716.375880][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.379401][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.402144][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.405542][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.418520][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 716.422822][ T61] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 716.425970][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.431682][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.435489][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.439491][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.445662][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.449678][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.535141][ T6514] usb 7-1: USB disconnect, device number 37 [ 716.580497][ T8244] fuse: Unknown parameter '8Xrootmode' [ 716.662565][ T61] usb 5-1: usb_control_msg returned -32 [ 716.665004][ T61] usbtmc 5-1:16.0: can't read capabilities [ 717.208496][ T6332] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 717.211417][ T6332] ath9k_htc: Failed to initialize the device [ 717.217219][ T5339] usb 6-1: ath9k_htc: USB layer deinitialized [ 717.618312][ T5339] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 717.828006][ T5339] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 717.831900][ T5339] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 717.835751][ T5339] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.839433][ T5339] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 717.843956][ T5339] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 717.853884][ T5339] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.862085][ T8291] 9p: Unknown Cache mode or invalid value fsca [ 717.862128][ T8291] 9pnet: Tag 65535 still in use [ 717.863954][ C3] ------------[ cut here ]------------ [ 717.864065][ C3] refcount_t: underflow; use-after-free. [ 717.864395][ C3] WARNING: CPU: 3 PID: 5339 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 717.864430][ C3] Modules linked in: [ 717.864442][ C3] CPU: 3 UID: 0 PID: 5339 Comm: kworker/3:3 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 717.864463][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 717.864476][ C3] Workqueue: usb_hub_wq hub_event [ 717.864498][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 717.864541][ C3] Code: ff 89 de e8 a8 05 08 fd 84 db 0f 85 66 ff ff ff e8 fb 0a 08 fd c6 05 57 14 79 0b 01 90 48 c7 c7 80 1f b0 8b e8 97 51 ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 d8 0a 08 fd 0f b6 1d 32 14 79 0b 31 [ 717.864559][ C3] RSP: 0018:ffffc90000908d90 EFLAGS: 00010082 [ 717.864575][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814cc379 [ 717.864588][ C3] RDX: ffff88801d484880 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 717.864600][ C3] RBP: ffff888052bca888 R08: 0000000000000001 R09: 0000000000000000 [ 717.864612][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 717.864625][ C3] R13: ffff888052bca888 R14: ffff888024e84000 R15: 0000000000000000 [ 717.864637][ C3] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 717.864730][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.864745][ C3] CR2: 0000001b3391dff8 CR3: 0000000060cea000 CR4: 0000000000350ef0 [ 717.864757][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 717.864769][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 717.864781][ C3] Call Trace: [ 717.864789][ C3] [ 717.864796][ C3] ? show_regs+0x8c/0xa0 [ 717.864822][ C3] ? __warn+0xe5/0x3c0 [ 717.864841][ C3] ? __wake_up_klogd.part.0+0x99/0xf0 [ 717.864868][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 717.864891][ C3] ? report_bug+0x3c0/0x580 [ 717.864913][ C3] ? handle_bug+0x3d/0x70 [ 717.864931][ C3] ? exc_invalid_op+0x17/0x50 [ 717.864950][ C3] ? asm_exc_invalid_op+0x1a/0x20 [ 717.864972][ C3] ? __warn_printk+0x199/0x350 [ 717.864990][ C3] ? __warn_printk+0x1a6/0x350 [ 717.865009][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 717.865031][ C3] p9_req_put+0x1f4/0x250 [ 717.865074][ C3] req_done+0x1e7/0x2f0 [ 717.865096][ C3] ? __pfx_req_done+0x10/0x10 [ 717.865116][ C3] ? __pfx_req_done+0x10/0x10 [ 717.865135][ C3] vring_interrupt+0x31b/0x400 [ 717.865160][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 717.865184][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 717.865209][ C3] handle_irq_event+0xab/0x1e0 [ 717.865231][ C3] handle_edge_irq+0x263/0xd10 [ 717.865253][ C3] __common_interrupt+0xdf/0x250 [ 717.865277][ C3] common_interrupt+0xab/0xd0 [ 717.865297][ C3] [ 717.865304][ C3] [ 717.865312][ C3] asm_common_interrupt+0x26/0x40 [ 717.865333][ C3] RIP: 0010:console_flush_all+0xa19/0xd70 [ 717.865357][ C3] Code: e8 5c 72 26 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 ca 22 1f 00 48 85 db 0f 85 8b 01 00 00 e8 8c 27 1f 00 fb 48 8b 04 24 <4c> 89 fa 83 e2 07 0f b6 00 38 d0 7f 08 84 c0 0f 85 a9 02 00 00 41 [ 717.865374][ C3] RSP: 0018:ffffc9000352f508 EFLAGS: 00000293 [ 717.865389][ C3] RAX: fffff520006a5ec8 RBX: 0000000000000000 RCX: ffffffff816b5396 [ 717.865402][ C3] RDX: ffff88801d484880 RSI: ffffffff816b53a4 RDI: 0000000000000007 [ 717.865415][ C3] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 717.865426][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 717.865436][ C3] R13: ffffffff8e9cd8b8 R14: ffffffff8e9cd860 R15: ffffc9000352f640 [ 717.865448][ C3] ? console_flush_all+0xa06/0xd70 [ 717.865470][ C3] ? console_flush_all+0xa14/0xd70 [ 717.865492][ C3] ? console_flush_all+0xa14/0xd70 [ 717.865514][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 717.865537][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.865554][ C3] console_unlock+0xae/0x290 [ 717.865575][ C3] ? __pfx_console_unlock+0x10/0x10 [ 717.865598][ C3] ? mark_held_locks+0x9f/0xe0 [ 717.865617][ C3] ? dev_printk_emit+0xfb/0x140 [ 717.865639][ C3] vprintk_emit+0x11a/0x5a0 [ 717.865662][ C3] dev_printk_emit+0xfb/0x140 [ 717.865682][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 717.865703][ C3] ? hlock_class+0x4e/0x130 [ 717.865730][ C3] __dev_printk+0xf5/0x270 [ 717.865754][ C3] _dev_info+0xe5/0x120 [ 717.865777][ C3] ? __pfx__dev_info+0x10/0x10 [ 717.865800][ C3] ? kasan_quarantine_put+0x10a/0x240 [ 717.865819][ C3] ? usb_match_device+0xd5/0x570 [ 717.865843][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 717.865869][ C3] ? usb_cache_string+0xf2/0x150 [ 717.865889][ C3] usb_new_device+0x85f/0x1a10 [ 717.865911][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 717.865931][ C3] hub_event+0x2db0/0x4e20 [ 717.865954][ C3] ? __pfx_hub_event+0x10/0x10 [ 717.865974][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.865994][ C3] ? __pfx_lock_release+0x10/0x10 [ 717.866015][ C3] process_one_work+0x9c5/0x1b40 [ 717.866038][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.866058][ C3] ? __pfx_process_one_work+0x10/0x10 [ 717.866080][ C3] ? assign_work+0x1a0/0x250 [ 717.866100][ C3] worker_thread+0x6c8/0xf20 [ 717.866122][ C3] ? __kthread_parkme+0x148/0x220 [ 717.866147][ C3] ? __pfx_worker_thread+0x10/0x10 [ 717.866169][ C3] kthread+0x2c1/0x3a0 [ 717.866184][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.866209][ C3] ? __pfx_kthread+0x10/0x10 [ 717.866224][ C3] ret_from_fork+0x45/0x80 [ 717.866248][ C3] ? __pfx_kthread+0x10/0x10 [ 717.866264][ C3] ret_from_fork_asm+0x1a/0x30 [ 717.866291][ C3] [ 717.866300][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 717.866310][ C3] CPU: 3 UID: 0 PID: 5339 Comm: kworker/3:3 Not tainted 6.11.0-rc1-syzkaller-00046-gc91a7dee0555 #0 [ 717.866329][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 717.866341][ C3] Workqueue: usb_hub_wq hub_event [ 717.866360][ C3] Call Trace: [ 717.866367][ C3] [ 717.866374][ C3] dump_stack_lvl+0x3d/0x1f0 [ 717.866395][ C3] panic+0x6f5/0x7a0 [ 717.866413][ C3] ? __pfx_panic+0x10/0x10 [ 717.866431][ C3] ? show_trace_log_lvl+0x363/0x500 [ 717.866457][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 717.866476][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 717.866498][ C3] check_panic_on_warn+0xab/0xb0 [ 717.866516][ C3] __warn+0xf1/0x3c0 [ 717.866534][ C3] ? __wake_up_klogd.part.0+0x99/0xf0 [ 717.866555][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 717.866576][ C3] report_bug+0x3c0/0x580 [ 717.866594][ C3] handle_bug+0x3d/0x70 [ 717.866612][ C3] exc_invalid_op+0x17/0x50 [ 717.866630][ C3] asm_exc_invalid_op+0x1a/0x20 [ 717.866649][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 717.866671][ C3] Code: ff 89 de e8 a8 05 08 fd 84 db 0f 85 66 ff ff ff e8 fb 0a 08 fd c6 05 57 14 79 0b 01 90 48 c7 c7 80 1f b0 8b e8 97 51 ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 d8 0a 08 fd 0f b6 1d 32 14 79 0b 31 [ 717.866687][ C3] RSP: 0018:ffffc90000908d90 EFLAGS: 00010082 [ 717.866702][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814cc379 [ 717.866713][ C3] RDX: ffff88801d484880 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 717.866725][ C3] RBP: ffff888052bca888 R08: 0000000000000001 R09: 0000000000000000 [ 717.866736][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 717.866748][ C3] R13: ffff888052bca888 R14: ffff888024e84000 R15: 0000000000000000 [ 717.866761][ C3] ? __warn_printk+0x199/0x350 [ 717.866779][ C3] ? __warn_printk+0x1a6/0x350 [ 717.866799][ C3] p9_req_put+0x1f4/0x250 [ 717.866820][ C3] req_done+0x1e7/0x2f0 [ 717.866840][ C3] ? __pfx_req_done+0x10/0x10 [ 717.866864][ C3] ? __pfx_req_done+0x10/0x10 [ 717.866883][ C3] vring_interrupt+0x31b/0x400 [ 717.866907][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 717.866931][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 717.866954][ C3] handle_irq_event+0xab/0x1e0 [ 717.866976][ C3] handle_edge_irq+0x263/0xd10 [ 717.866997][ C3] __common_interrupt+0xdf/0x250 [ 717.867019][ C3] common_interrupt+0xab/0xd0 [ 717.867039][ C3] [ 717.867045][ C3] [ 717.867052][ C3] asm_common_interrupt+0x26/0x40 [ 717.867072][ C3] RIP: 0010:console_flush_all+0xa19/0xd70 [ 717.867095][ C3] Code: e8 5c 72 26 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 ca 22 1f 00 48 85 db 0f 85 8b 01 00 00 e8 8c 27 1f 00 fb 48 8b 04 24 <4c> 89 fa 83 e2 07 0f b6 00 38 d0 7f 08 84 c0 0f 85 a9 02 00 00 41 [ 717.867109][ C3] RSP: 0018:ffffc9000352f508 EFLAGS: 00000293 [ 717.867123][ C3] RAX: fffff520006a5ec8 RBX: 0000000000000000 RCX: ffffffff816b5396 [ 717.867136][ C3] RDX: ffff88801d484880 RSI: ffffffff816b53a4 RDI: 0000000000000007 [ 717.867147][ C3] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 717.867159][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 717.867169][ C3] R13: ffffffff8e9cd8b8 R14: ffffffff8e9cd860 R15: ffffc9000352f640 [ 717.867183][ C3] ? console_flush_all+0xa06/0xd70 [ 717.867206][ C3] ? console_flush_all+0xa14/0xd70 [ 717.867230][ C3] ? console_flush_all+0xa14/0xd70 [ 717.867254][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 717.867278][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.867298][ C3] console_unlock+0xae/0x290 [ 717.867321][ C3] ? __pfx_console_unlock+0x10/0x10 [ 717.867343][ C3] ? mark_held_locks+0x9f/0xe0 [ 717.867362][ C3] ? dev_printk_emit+0xfb/0x140 [ 717.867384][ C3] vprintk_emit+0x11a/0x5a0 [ 717.867408][ C3] dev_printk_emit+0xfb/0x140 [ 717.867430][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 717.867451][ C3] ? hlock_class+0x4e/0x130 [ 717.867479][ C3] __dev_printk+0xf5/0x270 [ 717.867502][ C3] _dev_info+0xe5/0x120 [ 717.867526][ C3] ? __pfx__dev_info+0x10/0x10 [ 717.867549][ C3] ? kasan_quarantine_put+0x10a/0x240 [ 717.867567][ C3] ? usb_match_device+0xd5/0x570 [ 717.867589][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 717.867608][ C3] ? usb_cache_string+0xf2/0x150 [ 717.867628][ C3] usb_new_device+0x85f/0x1a10 [ 717.867648][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 717.867669][ C3] hub_event+0x2db0/0x4e20 [ 717.867694][ C3] ? __pfx_hub_event+0x10/0x10 [ 717.867714][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.867733][ C3] ? __pfx_lock_release+0x10/0x10 [ 717.867755][ C3] process_one_work+0x9c5/0x1b40 [ 717.867777][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 717.867796][ C3] ? __pfx_process_one_work+0x10/0x10 [ 717.867819][ C3] ? assign_work+0x1a0/0x250 [ 717.867838][ C3] worker_thread+0x6c8/0xf20 [ 717.867865][ C3] ? __kthread_parkme+0x148/0x220 [ 717.867890][ C3] ? __pfx_worker_thread+0x10/0x10 [ 717.867910][ C3] kthread+0x2c1/0x3a0 [ 717.867925][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.867948][ C3] ? __pfx_kthread+0x10/0x10 [ 717.867963][ C3] ret_from_fork+0x45/0x80 [ 717.867986][ C3] ? __pfx_kthread+0x10/0x10 [ 717.868001][ C3] ret_from_fork_asm+0x1a/0x30 [ 717.868026][ C3] [ 717.873886][ C3] Kernel Offset: disabled VM DIAGNOSIS: 12:34:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132b290 RDX=ffff8880224c8000 RSI=ffffffff8132b2d8 RDI=ffffffff93242880 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff2648510 R10=ffffffff93242887 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b2d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555562abd500 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33919ff8 CR3=0000000025d3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 616373663d656863 61632c796e613d73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a85e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a923d100 00007f70a86d5440 00007f70a86d0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70a86d5498 00007f70a86d5490 00007f70a86d5488 00007f70a86d5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132b290 RDX=ffff8880186c4880 RSI=ffffffff8132b2d8 RDI=ffffffff93242880 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff2648510 R10=ffffffff93242887 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b2d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=000000001b9d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7793e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7794d5488 00007fc7794d5480 00007fc7794d5478 00007fc7794d5450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc77a03d100 00007fc7794d5440 00007fc7794d0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7794d5498 00007fc7794d5490 00007fc7794d5488 00007fc7794d5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132b290 RDX=ffff8880186d8000 RSI=ffffffff8132b2d8 RDI=ffffffff93242880 RBP=0000000000000002 RSP=ffffc90000858fd0 R8 =0000000000000001 R9 =fffffbfff2648510 R10=ffffffff93242887 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b2d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f70a855aea0 CR3=000000002540e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=a17156aaa0ad47ee 490365869bf2c510 a17156aaa0ad47ee 490365869bf2c510 a17156aaa0ad47ee 490365869bf2c510 a17156aaa0ad47ee 490365869bf2c510 ZMM18=c86c3ffbf5208cd2 eb7c9eae333a5302 c86c3ffbf5208cd2 eb7c9eae333a5302 c86c3ffbf5208cd2 eb7c9eae333a5302 c86c3ffbf5208cd2 eb7c9eae333a5302 ZMM19=b405000000000000 000000000000000a b405000000000000 0000000000000009 b405000000000000 0000000000000008 b405000000000000 0000000000000007 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e 13830f1e13830f1e ZMM22=9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 9c0e1a459c0e1a45 ZMM23=2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba 2c6555ba2c6555ba ZMM24=19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be 19cf33be19cf33be ZMM25=210c4387210c4387 210c4387210c4387 210c4387210c4387 210c4387210c4387 210c4387210c4387 210c4387210c4387 210c4387210c4387 210c4387210c4387 ZMM26=d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 d0050d01d0050d01 ZMM27=381837f6381837f6 381837f6381837f6 381837f6381837f6 381837f6381837f6 381837f6381837f6 381837f6381837f6 381837f6381837f6 381837f6381837f6 ZMM28=000000c0000000bf 000000be000000bd 000000bc000000bb 000000ba000000b9 000000b8000000b7 000000b6000000b5 000000b4000000b3 000000b2000000b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 1c0a00001c0a0000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe1245 RDI=ffffffff9519a720 RBP=ffffffff9519a6e0 RSP=ffffc90000908810 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6f776b203a6d6d43 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fe11e0 R15=0000000000000000 RIP=ffffffff84fe126f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3391dff8 CR3=0000000060cea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b73af2f80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b72de5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000312e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000