last executing test programs: 8.695445127s ago: executing program 2 (id=605): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.511223971s ago: executing program 2 (id=606): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x01', 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 8.110087125s ago: executing program 2 (id=609): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2a82, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffba, 0x20004}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r1, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.708114058s ago: executing program 1 (id=610): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x3, 0x0, [{0x5e2796afef1a2f31, 0x9, 0x0, 0x9, 0x1, 0x80000, 0x8}, {0x80000000, 0xffffffff, 0x0, 0x1008, 0x0, 0x110, 0x3}, {0x7, 0x9, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r4], 0x44}}, 0x2000040) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = syz_open_dev$sndctrl(0x0, 0x9, 0x0) socket(0x3, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r5, r10, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)={0x7033, 0x1, [{0x1, 0x1}]}) 6.347139534s ago: executing program 1 (id=615): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x40480924, &(0x7f00000009c0)="000000e50000090000000000000000000100000000000000fd000000010000000a1eca8e66e02e11a21f4d000001000000000000000000000000000000000000000000000000000000002080000600000098ddbde1d497212809318f0bb34c99fefbfffae04b2cc292342bdbda7aa76adc2b0f46470f21291ec712f63c6ddbcb82f643865358b3ae25c6ef137aa2680c21a1760396bfe8489e414b5831a6de5793b3c4df5cc073c7fd4efb080000eeff03ff0097e117a80fb389") ioctl(0xffffffffffffffff, 0x40140921, 0x0) ioctl(0xffffffffffffffff, 0x400c0930, &(0x7f0000000700)='\x00'/12) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendfile(0xffffffffffffffff, r1, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) 5.541409464s ago: executing program 1 (id=618): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.846779714s ago: executing program 2 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='\xb8\xd4g\xd4$\xdci\x9f\xccS\x1cdm\x7f\xafZ\x19\xda@\"\xc3\xe4\xf1\xf6\xba\x9c\x89\xeb\xb8[\xa0\x9b\xde\x14m\tT\x1d\xee\xf2\xc23\x1d\xf0\xce\xc8\xf9\x06\x00\x00\x00\x00\x00\x00\x00M\x10\x92d\xeedP\xb2\x9e\xfa\xf1F\x8c\xfc\xc1C\x8a\x03\b\x01\xda\b\x9b\xac\xf3\xddo\x11:\x19\xae\x92\xabQ\x8cS\x14\x8ef8\n\x01\x1a4\xa6:\xbc&\xa6~\xeb\x82\xd9E\xe70\xcc5\xbf\xb6O\x99z(\x190\x9a\x030\t\xd7a>\x80\x13-\xf1\xf6.s\xf2\xb1\x81v\t#\x955\xe1C\x14\xa3\a\x06\x11\xe24N1\xab\x9f%I5\x1b\xdb\xae\x93l\xc2=\xfd>C\x11\\Lz\xe4%j', &(0x7f0000000680)='c:::\x00\v\xee\xbb\xe6H}`\x06\xc6\xf0t\xb1\xa1P\xc3\x00\xeb\x8f\x06\x00\x01\xf9\v!\xa5\x82V\x9751\xa7\x00\xb4|T\xc0\xe8\xb1\xb2\x1b\x00/L\xc8\x1d\xdb\r\xee\x91\xd1&\xe8\xdb\x1c\x12\xf5R\x19\xaa@\xbb\xba@,Xm\xeb{\n\x95\x03\x00\xd0\xba\xdcw\xed]\x02\x96\xf1\xa0!4hA\xc5\xc8\x16U\xdc\x9b\x82O\xbeoK\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x80ad}], 0x1, 0x2) io_setup(0xc, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(r6, 0x3, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfffffe3b, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307, 0x2}, @enter_looper, @decrefs={0x40046307, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@fda={0x66646185, 0x7, 0x0, 0x6}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x0, 0x31}}, &(0x7f0000000580)}}], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0xfffffffc}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) fsopen(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) 4.770961565s ago: executing program 3 (id=622): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x40480924, &(0x7f00000009c0)="000000e50000090000000000000000000100000000000000fd000000010000000a1eca8e66e02e11a21f4d000001000000000000000000000000000000000000000000000000000000002080000600000098ddbde1d497212809318f0bb34c99fefbfffae04b2cc292342bdbda7aa76adc2b0f46470f21291ec712f63c6ddbcb82f643865358b3ae25c6ef137aa2680c21a1760396bfe8489e414b5831a6de") ioctl(0xffffffffffffffff, 0x40140921, 0x0) ioctl(0xffffffffffffffff, 0x400c0930, &(0x7f0000000700)='\x00'/12) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendfile(0xffffffffffffffff, r1, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) 4.19471474s ago: executing program 0 (id=623): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.080189954s ago: executing program 3 (id=624): ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x3}, {0x40, "481a20001200"}}}}, 0xf) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) openat$proc_mixer(0xffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x42, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.915827019s ago: executing program 0 (id=625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 3.76984529s ago: executing program 2 (id=626): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x4d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x77b, &(0x7f0000000180)={0x0, 0x6614, 0x800, 0x3, 0x272}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_PBUF_RING(0x0, 0x37, 0x1, 0x10, r2, 0x82dd4939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x77) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f0000000140)='./file0\x00') truncate(0x0, 0x900000) 2.878229235s ago: executing program 0 (id=627): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x400, 0x0, 0x20}, 0x50) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a4"], 0x210) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e28, 0xb7, @local, 0xfffffe01}}}, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(0x0, 0x0, 0x8180) 2.785826322s ago: executing program 2 (id=628): openat$iommufd(0xffffffffffffff9c, 0x0, 0x2a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.127375894s ago: executing program 1 (id=629): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x84a4, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xeff0eba3c385d33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)="6e616d656350616365b49c30", 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='p', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff4', 0x22) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='namespace0.0', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='pfn0.0', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './sys/bus/nd/drivers/nd_pmem/bind\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.11607308s ago: executing program 3 (id=630): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.926604539s ago: executing program 0 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000ff"], 0x38}}, 0x4040) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000240)={0x10, 0x0, 0x1ff, 0x9, 0x9f, 0x800, 0x80000001}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x0, 0x24}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}], 0x0, 0x0, 0x0}) 1.878288086s ago: executing program 3 (id=632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x40480924, &(0x7f00000009c0)="000000e50000090000000000000000000100000000000000fd000000010000000a1eca8e66e02e11a21f4d000001000000000000000000000000000000000000000000000000000000002080000600000098ddbde1d497212809318f0bb34c99fefbfffae04b2cc292342bdbda7aa76adc2b0f46470f21291ec712f63c6ddbcb82f643865358b3ae25c6ef137aa2680c21a1760396bfe8489e414b5831a6de") ioctl(0xffffffffffffffff, 0x40140921, 0x0) ioctl(0xffffffffffffffff, 0x400c0930, &(0x7f0000000700)='\x00'/12) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendfile(0xffffffffffffffff, r1, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) 1.77139593s ago: executing program 0 (id=633): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.565730683s ago: executing program 1 (id=634): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$vsock_stream(r1, 0x0, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) migrate_pages(r3, 0x4, &(0x7f0000000080)=0xce, &(0x7f0000000100)=0x5) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x5, 0x8}) r5 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="9e323f62ee0f7263025ee62b0b971aa633dcd5e48e6dc40335239db4ef173ad5be3da0adaa1833c1", 0x28}, {&(0x7f00000003c0)="c0c70b55727910422659", 0xa}, {&(0x7f00000004c0)="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", 0xf00}], 0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0xfc}}) 1.492223378s ago: executing program 0 (id=635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df12c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.272744048s ago: executing program 3 (id=636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e5030000"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) read$FUSE(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=@v3={0x3000000, [{0x4, 0x6}, {0xd}]}, 0x18, 0x2) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 207.233377ms ago: executing program 1 (id=637): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x4e20, 0x800, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x16, 0x0, r5}, {0x8000, 0x1db, 0x7fff, 0x8000, 0xffffffffffffffff, 0x7ff, 0x32, 0x9}, {0x9, 0xffffffffffffffff, 0x8, 0xf}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x2, 0x5, 0x7, 0x8, 0x214}}, 0xe4) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 0s ago: executing program 3 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x19, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) linkat(r1, &(0x7f0000000400)='./my_configfs\x00', r1, &(0x7f0000000380)='./my_configfs/usb_gadget/g1\x00', 0x600) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') symlinkat(&(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ff, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x32, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x5, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xd6c, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4b2b, 0x8000, 0x0, 0x105, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): evsim netdevsim3 netdevsim0: renamed from eth0 [ 49.834073][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.836964][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.843862][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.846721][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.852915][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.864658][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.871237][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.911259][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.921281][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.926345][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.934897][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.943760][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.952211][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.956036][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.963896][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.009720][ T5755] Bluetooth: hci1: command tx timeout [ 50.009726][ T5766] Bluetooth: hci0: command tx timeout [ 50.009734][ T5760] Bluetooth: hci3: command tx timeout [ 50.039034][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.045603][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.048479][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.053866][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.056677][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.061626][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.064741][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.070041][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.098815][ T5755] Bluetooth: hci2: command tx timeout [ 50.101299][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.142564][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.156559][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.177811][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.180507][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.184768][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.187187][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.204445][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.233950][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.236691][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.243717][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.246090][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.256067][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.276572][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.294272][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.312224][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.315192][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.333611][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.336328][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.341209][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.355336][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.359184][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.380335][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.383396][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.652973][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.664312][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.706747][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.717204][ T5751] veth0_vlan: entered promiscuous mode [ 50.725944][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.737703][ T5751] veth1_vlan: entered promiscuous mode [ 50.748163][ T5759] veth0_vlan: entered promiscuous mode [ 50.766210][ T5759] veth1_vlan: entered promiscuous mode [ 50.781640][ T5752] veth0_vlan: entered promiscuous mode [ 50.793028][ T5752] veth1_vlan: entered promiscuous mode [ 50.797434][ T5751] veth0_macvtap: entered promiscuous mode [ 50.808262][ T5751] veth1_macvtap: entered promiscuous mode [ 50.814964][ T5750] veth0_vlan: entered promiscuous mode [ 50.826908][ T5750] veth1_vlan: entered promiscuous mode [ 50.842441][ T5759] veth0_macvtap: entered promiscuous mode [ 50.848125][ T5759] veth1_macvtap: entered promiscuous mode [ 50.859214][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.870427][ T5752] veth0_macvtap: entered promiscuous mode [ 50.875603][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.886087][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.895782][ T5752] veth1_macvtap: entered promiscuous mode [ 50.901638][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.920402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944229][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.949714][ T5750] veth0_macvtap: entered promiscuous mode [ 50.961013][ T5750] veth1_macvtap: entered promiscuous mode [ 50.980748][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.029535][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.051346][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.054154][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.057001][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.069283][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.072486][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.102322][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.106434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.140288][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.146141][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.183236][ T5751] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.200078][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.201446][ T5751] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.205107][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.211282][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.211963][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.214272][ T5759] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.227728][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.239635][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.240948][ T5759] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.246465][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.273872][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.278344][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.306752][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.308999][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.317394][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.379072][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.385870][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.413915][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.427048][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.440445][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.461636][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.518933][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.533767][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.569117][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.603052][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.621763][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653230][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.665867][ T5156] IPVS: starting estimator thread 0... [ 51.803415][ T5913] IPVS: using max 43 ests per chain, 103200 per kthread [ 52.089044][ T5755] Bluetooth: hci0: command tx timeout [ 52.091982][ T5760] Bluetooth: hci1: command tx timeout [ 52.093803][ T5760] Bluetooth: hci3: command tx timeout [ 52.180842][ T5760] Bluetooth: hci2: command tx timeout [ 54.168692][ T5766] Bluetooth: hci3: command tx timeout [ 54.170860][ T5760] Bluetooth: hci0: command tx timeout [ 54.172767][ T5755] Bluetooth: hci1: command tx timeout [ 54.258778][ T5755] Bluetooth: hci2: command tx timeout [ 54.450794][ T5932] process 'syz.0.7' launched '/dev/fd/13' with NULL argv: empty string added [ 56.310794][ T5755] Bluetooth: hci1: command tx timeout [ 56.312577][ T5755] Bluetooth: hci3: command tx timeout [ 56.314308][ T5755] Bluetooth: hci0: command tx timeout [ 56.328678][ T5766] Bluetooth: hci2: command tx timeout [ 56.456372][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 56.459653][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 56.770437][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 56.778072][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 56.833155][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 56.836890][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 58.689760][ T5962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.951750][ T5962] md: personality for level is not loaded! [ 60.570233][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 60.580896][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 62.983768][ T6001] ======================================================= [ 62.983768][ T6001] WARNING: The mand mount option has been deprecated and [ 62.983768][ T6001] and is ignored by this kernel. Remove the mand [ 62.983768][ T6001] option from the mount to silence this warning. [ 62.983768][ T6001] ======================================================= [ 63.648159][ T34] IPVS: starting estimator thread 0... [ 63.799222][ T6015] IPVS: using max 25 ests per chain, 60000 per kthread [ 66.722013][ T6041] syz.1.39: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 66.726442][ T6041] CPU: 3 UID: 0 PID: 6041 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 66.726459][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.726466][ T6041] Call Trace: [ 66.726484][ T6041] [ 66.726490][ T6041] dump_stack_lvl+0x100/0x190 [ 66.726510][ T6041] warn_alloc.cold+0x94/0xa8 [ 66.726526][ T6041] ? __pfx_warn_alloc+0x10/0x10 [ 66.726540][ T6041] ? __lock_acquire+0x49f/0x1a40 [ 66.726571][ T6041] __vmalloc_node_range_noprof+0x136c/0x1630 [ 66.726594][ T6041] ? lock_acquire+0x1b9/0x370 [ 66.726615][ T6041] ? ip_set_sockfn_get+0x18e/0xd20 [ 66.726636][ T6041] ? __lock_acquire+0x49f/0x1a40 [ 66.726656][ T6041] ? trace_contention_end+0x126/0x160 [ 66.726670][ T6041] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 66.726690][ T6041] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 66.726709][ T6041] ? rcu_is_watching+0x12/0xc0 [ 66.726725][ T6041] ? ip_set_sockfn_get+0x18e/0xd20 [ 66.726755][ T6041] __vmalloc_node_noprof+0xad/0xf0 [ 66.726772][ T6041] ? ip_set_sockfn_get+0x18e/0xd20 [ 66.726791][ T6041] ip_set_sockfn_get+0x18e/0xd20 [ 66.726810][ T6041] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 66.726828][ T6041] ? nf_sockopt_find.isra.0+0x222/0x290 [ 66.726847][ T6041] nf_getsockopt+0x7c/0xe0 [ 66.726864][ T6041] ip_getsockopt+0x192/0x1e0 [ 66.726884][ T6041] ? __pfx_ip_getsockopt+0x10/0x10 [ 66.726900][ T6041] ? __pfx_futex_hash+0x10/0x10 [ 66.726915][ T6041] raw_getsockopt+0x4d/0x1f0 [ 66.726932][ T6041] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 66.726945][ T6041] do_sock_getsockopt+0x50a/0x6e0 [ 66.726957][ T6041] ? __lock_acquire+0x49f/0x1a40 [ 66.726975][ T6041] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 66.726987][ T6041] ? percpu_counter_add_batch+0xb9/0x230 [ 66.727010][ T6041] ? find_held_lock+0x2b/0x80 [ 66.727027][ T6041] ? __fget_files+0x21f/0x3d0 [ 66.727041][ T6041] __sys_getsockopt+0x133/0x1d0 [ 66.727060][ T6041] ? __ia32_sys_getsockopt+0xbc/0x160 [ 66.727075][ T6041] __ia32_sys_getsockopt+0xbc/0x160 [ 66.727090][ T6041] ? __do_fast_syscall_32+0x98/0x970 [ 66.727110][ T6041] ? lockdep_hardirqs_on+0x78/0x100 [ 66.727125][ T6041] __do_fast_syscall_32+0xe7/0x970 [ 66.727142][ T6041] do_fast_syscall_32+0x32/0x70 [ 66.727158][ T6041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.727172][ T6041] RIP: 0023:0xf701efec [ 66.727188][ T6041] Code: Unable to access opcode bytes at 0xf701efc2. [ 66.727203][ T6041] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 66.727216][ T6041] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 66.727224][ T6041] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 66.727231][ T6041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.727238][ T6041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.727246][ T6041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.727261][ T6041] [ 66.727289][ T6041] Mem-Info: [ 66.894469][ T6041] active_anon:5326 inactive_anon:149 isolated_anon:0 [ 66.894469][ T6041] active_file:4 inactive_file:55468 isolated_file:0 [ 66.894469][ T6041] unevictable:1768 dirty:386 writeback:0 [ 66.894469][ T6041] slab_reclaimable:8738 slab_unreclaimable:51390 [ 66.894469][ T6041] mapped:23657 shmem:2172 pagetables:1016 [ 66.894469][ T6041] sec_pagetables:298 bounce:0 [ 66.894469][ T6041] kernel_misc_reclaimable:0 [ 66.894469][ T6041] free:26373 free_pcp:16613 free_cma:0 [ 66.912246][ T6041] Node 0 active_anon:48kB inactive_anon:76kB active_file:16kB inactive_file:32kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1404kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.925190][ T6041] Node 1 active_anon:21256kB inactive_anon:520kB active_file:0kB inactive_file:221840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94572kB dirty:1516kB writeback:0kB shmem:5152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5072kB pagetables:2660kB sec_pagetables:32kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.957299][ T6041] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:216kB free_cma:0kB [ 66.976207][ T6041] lowmem_reserve[]: 0 280 280 280 280 [ 66.978852][ T6041] Node 0 DMA32 free:15788kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:76kB active_file:16kB inactive_file:32kB unevictable:3536kB writepending:28kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:7232kB local_pcp:2108kB free_cma:0kB [ 66.990718][ T6041] lowmem_reserve[]: 0 0 0 0 0 [ 66.992754][ T6041] Node 1 DMA32 free:88020kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21256kB inactive_anon:520kB active_file:0kB inactive_file:221200kB unevictable:3536kB writepending:1516kB zspages:2216kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:59092kB local_pcp:11608kB free_cma:0kB [ 67.004779][ T6041] lowmem_reserve[]: 0 0 0 0 0 [ 67.006572][ T6041] Node 0 DMA: 7*4kB (UM) 11*8kB (UM) 6*16kB (M) 20*32kB (UM) 9*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2068kB [ 67.013511][ T6041] Node 0 DMA32: 17*4kB (UME) 51*8kB (ME) 41*16kB (ME) 66*32kB (UME) 54*64kB (UME) 21*128kB (ME) 11*256kB (UME) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 15788kB [ 67.020635][ T6041] Node 1 DMA32: 2*4kB (UE) 10*8kB (UME) 6*16kB (UE) 30*32kB (UME) 9*64kB (UE) 5*128kB (UM) 7*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 18*4096kB (UM) = 88120kB [ 67.045622][ T6041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.051813][ T6041] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 67.055947][ T6041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.060121][ T6041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.063856][ T6041] 57535 total pagecache pages [ 67.065572][ T6041] 183 pages in swap cache [ 67.067332][ T6041] Free swap = 119716kB [ 67.069050][ T6041] Total swap = 124996kB [ 67.070543][ T6041] 524155 pages RAM [ 67.071792][ T6041] 0 pages HighMem/MovableOnly [ 67.073381][ T6041] 211535 pages reserved [ 67.075043][ T6041] 0 pages cma reserved [ 68.380062][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 68.660982][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 68.668829][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.676791][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 69.680512][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 70.491517][ T5755] Bluetooth: hci3: command 0x0405 tx timeout [ 71.010289][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.131715][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458857][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.632945][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.639996][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 71.642843][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 71.645389][ T9] usb 8-1: Product: syz [ 71.646692][ T9] usb 8-1: Manufacturer: syz [ 71.648289][ T9] usb 8-1: SerialNumber: syz [ 71.888266][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 72.184811][ C1] usblp0: nonzero write bulk status received: -71 [ 72.242361][ T50] usb 8-1: USB disconnect, device number 2 [ 72.281880][ T6086] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.469863][ T50] usblp0: removed [ 72.993825][ T6086] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 73.125933][ T6086] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 73.136963][ T6086] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 73.145273][ T6086] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 73.167918][ T6086] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 73.437775][ T6086] pci 0000:00:01.0: Adding to iommu group 1 [ 73.480360][ T6086] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 73.483109][ T6086] pci 0000:00:01.0: vgaarb: bridge control possible [ 73.485793][ T6086] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 73.523344][ T6086] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 73.545601][ T6086] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 73.573403][ T6086] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 73.584274][ T6086] [drm] Found bochs VGA, ID 0xb0c5. [ 73.585919][ T6086] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 73.590328][ T6086] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 77.376714][ T6119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.381386][ T6119] overlayfs: missing 'lowerdir' [ 78.317182][ T6123] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 78.878562][ T6125] syz.3.52 (6125): drop_caches: 2 [ 78.948740][ T29] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 79.101498][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.104787][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.109399][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.113749][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.118334][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.123004][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.127217][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.133047][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.136881][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.140135][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.144686][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.149195][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.153888][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.158157][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.163253][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.168631][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.171669][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.174040][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.177363][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.180642][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.184125][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.187479][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.190909][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.194912][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.199892][ T29] usb 8-1: string descriptor 0 read error: -22 [ 79.201836][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.204416][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.217190][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 79.276912][ T6130] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.392533][ T6130] pi3usb30532 0-0059: Error reading config register -6 [ 79.401482][ T6130] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 79.492568][ T42] audit: type=1800 audit(1786046033.697:2): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file0" dev="overlay" ino=94 res=0 errno=0 [ 79.556998][ T6137] program syz.2.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.572392][ T6137] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 79.615124][ T6137] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 79.618156][ T6137] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 79.623054][ T6137] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 79.631130][ T29] usb 8-1: USB disconnect, device number 3 [ 79.634885][ T6137] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 79.663584][ T6137] pci 0000:00:01.0: Adding to iommu group 1 [ 79.676261][ T6137] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 79.678490][ T6137] pci 0000:00:01.0: vgaarb: bridge control possible [ 79.680757][ T6137] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 79.696685][ T6137] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 79.701131][ T6137] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 79.705240][ T6137] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 79.718178][ T6137] [drm] Found bochs VGA, ID 0xb0c5. [ 79.723178][ T6137] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 79.752107][ T6137] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 79.812752][ T6137] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 80.450815][ T6147] syz.0.56: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.451201][ T6147] CPU: 2 UID: 0 PID: 6147 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(full) [ 80.451238][ T6147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.451249][ T6147] Call Trace: [ 80.451275][ T6147] [ 80.451283][ T6147] dump_stack_lvl+0x100/0x190 [ 80.451468][ T6147] warn_alloc.cold+0x94/0xa8 [ 80.451499][ T6147] ? __pfx_warn_alloc+0x10/0x10 [ 80.451541][ T6147] ? find_held_lock+0x2b/0x80 [ 80.451586][ T6147] ? trace_sched_exit_tp+0x120/0x160 [ 80.451614][ T6147] ? __schedule+0x126e/0x6730 [ 80.451723][ T6147] __vmalloc_node_range_noprof+0x136c/0x1630 [ 80.451764][ T6147] ? ip_set_sockfn_get+0x18e/0xd20 [ 80.451852][ T6147] ? find_held_lock+0x2b/0x80 [ 80.451876][ T6147] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 80.451908][ T6147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.451932][ T6147] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.451952][ T6147] ? lockdep_hardirqs_on+0x78/0x100 [ 80.451973][ T6147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.451992][ T6147] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 80.452019][ T6147] ? rcu_is_watching+0x12/0xc0 [ 80.452039][ T6147] ? ip_set_sockfn_get+0x18e/0xd20 [ 80.452065][ T6147] __vmalloc_node_noprof+0xad/0xf0 [ 80.452087][ T6147] ? ip_set_sockfn_get+0x18e/0xd20 [ 80.452114][ T6147] ip_set_sockfn_get+0x18e/0xd20 [ 80.452140][ T6147] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 80.452170][ T6147] ? nf_sockopt_find.isra.0+0x222/0x290 [ 80.452198][ T6147] nf_getsockopt+0x7c/0xe0 [ 80.452214][ T6147] ip_getsockopt+0x192/0x1e0 [ 80.452233][ T6147] ? __pfx_ip_getsockopt+0x10/0x10 [ 80.452249][ T6147] ? find_held_lock+0x2b/0x80 [ 80.452268][ T6147] raw_getsockopt+0x4d/0x1f0 [ 80.452307][ T6147] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 80.452335][ T6147] do_sock_getsockopt+0x50a/0x6e0 [ 80.452348][ T6147] ? __lock_acquire+0x49f/0x1a40 [ 80.452368][ T6147] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 80.452385][ T6147] ? percpu_counter_add_batch+0xb9/0x230 [ 80.452479][ T6147] ? find_held_lock+0x2b/0x80 [ 80.452504][ T6147] ? __fget_files+0x21f/0x3d0 [ 80.452552][ T6147] __sys_getsockopt+0x133/0x1d0 [ 80.452575][ T6147] ? __ia32_sys_getsockopt+0xbc/0x160 [ 80.452591][ T6147] __ia32_sys_getsockopt+0xbc/0x160 [ 80.452607][ T6147] ? __do_fast_syscall_32+0x98/0x970 [ 80.452623][ T6147] ? lockdep_hardirqs_on+0x78/0x100 [ 80.452637][ T6147] __do_fast_syscall_32+0xe7/0x970 [ 80.452654][ T6147] do_fast_syscall_32+0x32/0x70 [ 80.452670][ T6147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.452686][ T6147] RIP: 0023:0xf700efec [ 80.452701][ T6147] Code: Unable to access opcode bytes at 0xf700efc2. [ 80.452714][ T6147] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 80.452726][ T6147] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 80.452733][ T6147] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 80.452741][ T6147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.452747][ T6147] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.452754][ T6147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.452768][ T6147] [ 80.452819][ T6147] Mem-Info: [ 80.452828][ T6147] active_anon:6408 inactive_anon:176 isolated_anon:0 [ 80.452828][ T6147] active_file:4 inactive_file:54977 isolated_file:0 [ 80.452828][ T6147] unevictable:1768 dirty:645 writeback:0 [ 80.452828][ T6147] slab_reclaimable:8566 slab_unreclaimable:50612 [ 80.452828][ T6147] mapped:25312 shmem:2181 pagetables:1027 [ 80.452828][ T6147] sec_pagetables:300 bounce:0 [ 80.452828][ T6147] kernel_misc_reclaimable:0 [ 80.452828][ T6147] free:23502 free_pcp:13086 free_cma:0 [ 80.452883][ T6147] Node 0 active_anon:52kB inactive_anon:76kB active_file:16kB inactive_file:32kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:32kB writeback:0kB shmem:1564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1408kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.453632][ T6147] Node 1 active_anon:25580kB inactive_anon:628kB active_file:0kB inactive_file:219876kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:101192kB dirty:2548kB writeback:0kB shmem:7160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:5168kB pagetables:2700kB sec_pagetables:36kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.453753][ T6147] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:140kB free_cma:0kB [ 80.453838][ T6147] lowmem_reserve[]: 0 280 280 280 280 [ 80.453916][ T6147] Node 0 DMA32 free:15896kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:76kB active_file:16kB inactive_file:32kB unevictable:1536kB writepending:32kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:6360kB local_pcp:1992kB free_cma:0kB [ 80.453995][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 80.454127][ T6147] Node 1 DMA32 free:76044kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25580kB inactive_anon:628kB active_file:0kB inactive_file:219876kB unevictable:5536kB writepending:2548kB zspages:2204kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45588kB local_pcp:11992kB free_cma:0kB [ 80.454215][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 80.454353][ T6147] Node 0 DMA: 7*4kB (UM) 11*8kB (UM) 6*16kB (M) 20*32kB (UM) 9*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2068kB [ 80.454938][ T6147] Node 0 DMA32: 12*4kB (ME) 55*8kB (UME) 46*16kB (ME) 85*32kB (UME) 60*64kB (UME) 21*128kB (UME) 11*256kB (ME) 3*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 15848kB [ 80.455508][ T6147] Node 1 DMA32: 127*4kB (UME) 56*8kB (UME) 47*16kB (UME) 75*32kB (UME) 34*64kB (UME) 27*128kB (UME) 13*256kB (ME) 7*512kB (UME) 4*1024kB (UM) 7*2048kB (UME) 10*4096kB (M) = 76044kB [ 80.456170][ T6147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.456215][ T6147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.456232][ T6147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.456342][ T6147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.456390][ T6147] 57387 total pagecache pages [ 80.456429][ T6147] 229 pages in swap cache [ 80.456438][ T6147] Free swap = 119716kB [ 80.456548][ T6147] Total swap = 124996kB [ 80.456587][ T6147] 524155 pages RAM [ 80.456677][ T6147] 0 pages HighMem/MovableOnly [ 80.456685][ T6147] 211535 pages reserved [ 80.456716][ T6147] 0 pages cma reserved [ 81.455930][ T24] cfg80211: failed to load regulatory.db [ 83.449113][ T6175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 83.452041][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.460834][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 83.538125][ T6175] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 83.788786][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 83.791465][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.936192][ T6176] vhci_hcd: connection reset by peer [ 83.941680][ T12] vhci_hcd vhci_hcd.2: stop threads [ 83.943746][ T12] vhci_hcd vhci_hcd.2: release socket [ 83.946055][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 85.918803][ T6189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.922186][ T6189] overlayfs: missing 'lowerdir' [ 89.136264][ T29] usb 42-1: device descriptor read/8, error -110 [ 89.357504][ T6224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 89.360235][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.372720][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 89.405614][ T6224] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 89.562685][ T29] usb usb42-port1: attempt power cycle [ 89.659379][ T5901] usb 40-1: SetAddress Request (2) to port 0 [ 89.661780][ T5901] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.158786][ T5156] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.310830][ T5156] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 90.314629][ T5156] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.657438][ T6225] vhci_hcd: connection reset by peer [ 90.672521][ T12] vhci_hcd vhci_hcd.1: stop threads [ 90.677613][ T12] vhci_hcd vhci_hcd.1: release socket [ 90.683161][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 90.714439][ T29] usb usb42-port1: unable to enumerate USB device [ 91.060441][ T5156] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 93.150341][ T6266] input: syz1 as /devices/virtual/input/input5 [ 94.728856][ T5901] usb 40-1: device descriptor read/8, error -110 [ 95.120491][ T5901] usb usb40-port1: attempt power cycle [ 95.681392][ T5901] usb usb40-port1: unable to enumerate USB device [ 96.891316][ T24] usb 8-1: USB disconnect, device number 4 [ 97.113877][ T6281] program syz.3.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.344632][ T6281] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 97.362539][ T6281] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 97.365925][ T6281] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 97.368496][ T6281] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 97.376022][ T6281] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 97.481553][ T6281] pci 0000:00:01.0: Adding to iommu group 1 [ 97.508236][ T6281] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 97.510511][ T6281] pci 0000:00:01.0: vgaarb: bridge control possible [ 97.512634][ T6281] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 97.560057][ T6281] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 97.563740][ T6281] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 97.580676][ T6281] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 97.668514][ T6281] [drm] Found bochs VGA, ID 0xb0c5. [ 97.670431][ T6281] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 97.790512][ T6281] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 98.201266][ T6281] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 98.405627][ T6283] netlink: 'syz.1.100': attribute type 4 has an invalid length. [ 98.434838][ T6283] netlink: 'syz.1.100': attribute type 17 has an invalid length. [ 98.799172][ T6296] syz.2.95 (6296): drop_caches: 2 [ 99.018808][ T24] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 99.193890][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 99.204618][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 99.226030][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.238398][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.239021][ T1349] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.249981][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.254157][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.259147][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 99.263532][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 99.270157][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 99.273265][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 99.276899][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.280627][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.284607][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.288478][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.292756][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 99.297021][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 99.302886][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 99.306156][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 99.310055][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.313658][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.317427][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.321500][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.325400][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 99.329743][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 99.346081][ T24] usb 7-1: string descriptor 0 read error: -22 [ 99.349610][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.352601][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.391700][ T1349] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 99.396737][ T1349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.420685][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.610313][ T1349] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 99.886592][ T1349] usb 7-1: USB disconnect, device number 2 [ 100.657194][ T6308] input: syz1 as /devices/virtual/input/input6 [ 100.692804][ T6310] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.954965][ T6313] syz.3.104: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.959692][ T6313] CPU: 2 UID: 0 PID: 6313 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(full) [ 100.959721][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.959728][ T6313] Call Trace: [ 100.959751][ T6313] [ 100.959758][ T6313] dump_stack_lvl+0x100/0x190 [ 100.959910][ T6313] warn_alloc.cold+0x94/0xa8 [ 100.959931][ T6313] ? __pfx_warn_alloc+0x10/0x10 [ 100.959959][ T6313] ? __lock_acquire+0x49f/0x1a40 [ 100.960000][ T6313] __vmalloc_node_range_noprof+0x136c/0x1630 [ 100.960024][ T6313] ? lock_acquire+0x1b9/0x370 [ 100.960043][ T6313] ? ip_set_sockfn_get+0x18e/0xd20 [ 100.960113][ T6313] ? __lock_acquire+0x49f/0x1a40 [ 100.960132][ T6313] ? trace_contention_end+0x126/0x160 [ 100.960145][ T6313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.960164][ T6313] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 100.960185][ T6313] ? rcu_is_watching+0x12/0xc0 [ 100.960224][ T6313] ? ip_set_sockfn_get+0x18e/0xd20 [ 100.960244][ T6313] __vmalloc_node_noprof+0xad/0xf0 [ 100.960262][ T6313] ? ip_set_sockfn_get+0x18e/0xd20 [ 100.960283][ T6313] ip_set_sockfn_get+0x18e/0xd20 [ 100.960304][ T6313] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 100.960326][ T6313] ? nf_sockopt_find.isra.0+0x222/0x290 [ 100.960345][ T6313] nf_getsockopt+0x7c/0xe0 [ 100.960363][ T6313] ip_getsockopt+0x192/0x1e0 [ 100.960381][ T6313] ? __pfx_ip_getsockopt+0x10/0x10 [ 100.960397][ T6313] ? find_held_lock+0x2b/0x80 [ 100.960414][ T6313] raw_getsockopt+0x4d/0x1f0 [ 100.960432][ T6313] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 100.960455][ T6313] do_sock_getsockopt+0x50a/0x6e0 [ 100.960468][ T6313] ? __lock_acquire+0x49f/0x1a40 [ 100.960488][ T6313] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 100.960501][ T6313] ? percpu_counter_add_batch+0xb9/0x230 [ 100.960570][ T6313] ? find_held_lock+0x2b/0x80 [ 100.960593][ T6313] ? __fget_files+0x21f/0x3d0 [ 100.960621][ T6313] __sys_getsockopt+0x133/0x1d0 [ 100.960642][ T6313] ? __ia32_sys_getsockopt+0xbc/0x160 [ 100.960660][ T6313] __ia32_sys_getsockopt+0xbc/0x160 [ 100.960677][ T6313] ? __do_fast_syscall_32+0x98/0x970 [ 100.960733][ T6313] ? lockdep_hardirqs_on+0x78/0x100 [ 100.960750][ T6313] __do_fast_syscall_32+0xe7/0x970 [ 100.960770][ T6313] do_fast_syscall_32+0x32/0x70 [ 100.960788][ T6313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.960803][ T6313] RIP: 0023:0xf707efec [ 100.960820][ T6313] Code: Unable to access opcode bytes at 0xf707efc2. [ 100.960832][ T6313] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 100.960846][ T6313] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 100.960853][ T6313] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 100.960861][ T6313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.960868][ T6313] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.960876][ T6313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.960891][ T6313] [ 100.960939][ T6313] Mem-Info: [ 101.063290][ T6313] active_anon:5360 inactive_anon:238 isolated_anon:0 [ 101.063290][ T6313] active_file:800 inactive_file:50987 isolated_file:0 [ 101.063290][ T6313] unevictable:1768 dirty:550 writeback:0 [ 101.063290][ T6313] slab_reclaimable:7779 slab_unreclaimable:52011 [ 101.063290][ T6313] mapped:24430 shmem:2176 pagetables:1028 [ 101.063290][ T6313] sec_pagetables:300 bounce:0 [ 101.063290][ T6313] kernel_misc_reclaimable:0 [ 101.063290][ T6313] free:25071 free_pcp:15575 free_cma:0 [ 101.078648][ T6313] Node 0 active_anon:84kB inactive_anon:64kB active_file:16kB inactive_file:32kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1408kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 101.090266][ T6313] Node 1 active_anon:21356kB inactive_anon:888kB active_file:3184kB inactive_file:203916kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:101664kB dirty:2164kB writeback:0kB shmem:7168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5080kB pagetables:2704kB sec_pagetables:40kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 101.102331][ T6313] Node 0 DMA free:1916kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:564kB local_pcp:124kB free_cma:0kB [ 101.113295][ T6313] lowmem_reserve[]: 0 280 280 280 280 [ 101.116400][ T6313] Node 0 DMA32 free:15560kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72kB inactive_anon:64kB active_file:16kB inactive_file:32kB unevictable:1536kB writepending:36kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:11280kB local_pcp:3400kB free_cma:0kB [ 101.127872][ T6313] lowmem_reserve[]: 0 0 0 0 0 [ 101.132448][ T6313] Node 1 DMA32 free:82808kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21356kB inactive_anon:888kB active_file:3184kB inactive_file:203916kB unevictable:5536kB writepending:2164kB zspages:2200kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:49944kB local_pcp:12152kB free_cma:0kB [ 101.148504][ T6313] lowmem_reserve[]: 0 0 0 0 0 [ 101.150769][ T6313] Node 0 DMA: 7*4kB (UM) 14*8kB (UM) 7*16kB (M) 20*32kB (UM) 6*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1916kB [ 101.157932][ T6313] Node 0 DMA32: 38*4kB (UME) 46*8kB (ME) 48*16kB (ME) 50*32kB (ME) 54*64kB (UME) 18*128kB (UME) 13*256kB (UME) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 15560kB [ 101.166316][ T6313] Node 1 DMA32: 674*4kB (ME) 230*8kB (UME) 166*16kB (UME) 143*32kB (UME) 44*64kB (UME) 33*128kB (UME) 18*256kB (UME) 12*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 9*4096kB (UM) = 82808kB [ 101.175042][ T6313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.181000][ T6313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.185093][ T6313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.190849][ T6313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.194751][ T6313] 54258 total pagecache pages [ 101.196762][ T6313] 300 pages in swap cache [ 101.199081][ T6313] Free swap = 119716kB [ 101.200829][ T6313] Total swap = 124996kB [ 101.202551][ T6313] 524155 pages RAM [ 101.204123][ T6313] 0 pages HighMem/MovableOnly [ 101.206192][ T6313] 211535 pages reserved [ 101.207938][ T6313] 0 pages cma reserved [ 104.219184][ T6341] input: syz1 as /devices/virtual/input/input7 [ 104.227873][ T42] audit: type=1800 audit(1786046058.427:3): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.110" name="file0" dev="overlay" ino=178 res=0 errno=0 [ 105.459045][ T5901] usb 6-1: USB disconnect, device number 2 [ 106.576951][ T6379] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 109.357363][ T6400] netlink: 'syz.0.120': attribute type 2 has an invalid length. [ 109.394050][ T6400] : entered promiscuous mode [ 109.957449][ T6405] input: syz1 as /devices/virtual/input/input8 [ 110.428831][ T6410] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 110.454522][ T6410] netlink: 'syz.2.122': attribute type 17 has an invalid length. [ 110.718686][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.871088][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 110.874163][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.085463][ T34] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 111.149067][ T5736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.298777][ T5736] usb 6-1: Using ep0 maxpacket: 8 [ 111.302015][ T5736] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 111.304674][ T5736] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.307729][ T5736] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.310832][ T5736] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.313897][ T5736] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.318529][ T5736] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.321486][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.532495][ T5736] usb 6-1: usb_control_msg returned -32 [ 111.534332][ T5736] usbtmc 6-1:16.0: can't read capabilities [ 111.838768][ T6416] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 111.842468][ T6422] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 111.848307][ T50] usb 6-1: USB disconnect, device number 3 [ 114.041576][ T6452] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 114.208752][ T5901] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 114.399040][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 114.407200][ T5901] usb 7-1: config 0 has no interfaces? [ 114.427427][ T5901] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 114.431034][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 114.439591][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 114.444109][ T5901] usb 7-1: Product: syz [ 114.452881][ T5901] usb 7-1: Manufacturer: syz [ 114.466059][ T5901] usb 7-1: SerialNumber: syz [ 114.587738][ T5901] usb 7-1: config 0 descriptor?? [ 114.609333][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 114.620960][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 114.624851][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.636363][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.651438][ T34] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 114.661224][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.676943][ T34] usb 8-1: Product: syz [ 114.678838][ T34] usb 8-1: Manufacturer: syz [ 114.687116][ T34] usb 8-1: SerialNumber: syz [ 114.932793][ T5766] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 115.086624][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.095942][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.351643][ T34] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 115.370793][ T34] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 115.477669][ T34] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.488827][ T34] usb 8-1: USB disconnect, device number 5 [ 115.620593][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.586940][ T24] usb 5-1: USB disconnect, device number 2 [ 116.656294][ T5832] usb 7-1: USB disconnect, device number 3 [ 117.387948][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 117.391670][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 120.487632][ T6579] syz.1.153 uses obsolete (PF_INET,SOCK_PACKET) [ 120.818722][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 121.048757][ T5755] Bluetooth: hci1: command 0x0406 tx timeout [ 122.039131][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 122.044115][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.047004][ T9] usb 7-1: config 179 has no interface number 0 [ 122.049784][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.053541][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.054942][ T6601] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.057144][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.057162][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.057176][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.057206][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.060817][ T6601] overlayfs: failed to set xattr on upper [ 122.063734][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.067596][ T6601] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.076877][ T6587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.096029][ T6601] overlayfs: ...falling back to index=off. [ 122.098314][ T6601] overlayfs: ...falling back to uuid=null. [ 122.187168][ T6601] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 122.559046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.568703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.598643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.640796][ T6587] syzkaller1: entered promiscuous mode [ 122.646092][ T6587] syzkaller1: entered allmulticast mode [ 122.888347][ T6616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 122.890737][ T6616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.903405][ T6616] vhci_hcd vhci_hcd.0: Device attached [ 122.938687][ T6616] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 123.188782][ T29] usb 38-1: SetAddress Request (2) to port 0 [ 123.205996][ T29] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.470516][ T50] usb 7-1: USB disconnect, device number 4 [ 123.470655][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.476881][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 123.535309][ T6617] vhci_hcd: connection reset by peer [ 123.539872][ T13] vhci_hcd vhci_hcd.0: stop threads [ 123.543750][ T13] vhci_hcd vhci_hcd.0: release socket [ 123.546623][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 123.887075][ T5766] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 123.891879][ T6629] Zero length message leads to an empty skb [ 125.506729][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.771463][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 125.849372][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.903978][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.913314][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.972825][ T5861] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 125.981486][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.001508][ T5861] usb 5-1: Product: syz [ 126.013600][ T5861] usb 5-1: Manufacturer: syz [ 126.026113][ T5861] usb 5-1: SerialNumber: syz [ 126.631116][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.634668][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.128420][ T5861] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 127.134256][ T5861] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 127.165227][ T5861] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.183652][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.190337][ T5861] usb 5-1: USB disconnect, device number 3 [ 128.249130][ T29] usb 38-1: device descriptor read/8, error -110 [ 128.690172][ T29] usb usb38-port1: attempt power cycle [ 129.619573][ T29] usb usb38-port1: unable to enumerate USB device [ 131.175571][ T6711] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 131.468837][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 131.684607][ T6717] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 131.696787][ T6720] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 132.411695][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.414100][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018231][ T6747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 133.111911][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 133.810469][ T6746] Bluetooth: MGMT ver 1.23 [ 134.355932][ T29] libceph: connect (1)[c::]:6789 error -101 [ 134.411744][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 134.753045][ T29] libceph: connect (1)[c::]:6789 error -101 [ 134.767217][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 134.856593][ T6765] ceph: No mds server is up or the cluster is laggy [ 134.984752][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 136.295574][ T6780] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 139.012997][ T6818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.660471][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 141.664164][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 144.379499][ T6862] Process accounting resumed [ 144.464806][ T6869] SQUASHFS error: Failed to read block 0x0: -5 [ 144.468050][ T6869] unable to read squashfs_super_block [ 144.747946][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 145.379136][ T1349] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.956510][ T1349] usb 8-1: Using ep0 maxpacket: 32 [ 146.406541][ T1349] usb 8-1: config 0 has no interfaces? [ 146.501264][ T1349] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.519797][ T1349] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.542626][ T1349] usb 8-1: Product: syz [ 146.544524][ T1349] usb 8-1: Manufacturer: syz [ 146.565045][ T1349] usb 8-1: SerialNumber: syz [ 146.594552][ T1349] usb 8-1: config 0 descriptor?? [ 147.175508][ T9] usb 8-1: USB disconnect, device number 6 [ 147.360927][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 147.368049][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 148.298774][ T6935] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.344718][ T6935] kvm: pic: level sensitive irq not supported [ 148.346880][ T6935] kvm: pic: non byte read [ 148.364754][ T6935] kvm: pic: level sensitive irq not supported [ 148.368546][ T6935] kvm: pic: non byte read [ 148.377132][ T6935] kvm: pic: level sensitive irq not supported [ 148.377558][ T6935] kvm: pic: non byte read [ 148.388330][ T6935] kvm: pic: level sensitive irq not supported [ 148.391197][ T6935] kvm: pic: non byte read [ 148.398225][ T6935] kvm: pic: level sensitive irq not supported [ 148.403126][ T6935] kvm: pic: non byte read [ 148.411805][ T6935] kvm: pic: level sensitive irq not supported [ 148.412439][ T6935] kvm: pic: non byte read [ 149.234038][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 149.461050][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 149.608725][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 149.614288][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.619059][ T24] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 149.622615][ T24] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 149.626180][ T24] usb 7-1: config 14 has no interface number 0 [ 149.629797][ T24] usb 7-1: config 14 has no interface number 1 [ 149.632527][ T24] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 149.637110][ T24] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 149.642508][ T24] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 149.647405][ T24] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 149.652586][ T24] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 149.657328][ T24] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.666771][ T24] usb 7-1: config 14 interface 57 has no altsetting 0 [ 149.669969][ T24] usb 7-1: config 14 interface 228 has no altsetting 0 [ 149.682048][ T24] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 149.693297][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.703071][ T24] usb 7-1: Product: syz [ 149.704924][ T24] usb 7-1: Manufacturer: syz [ 149.707851][ T24] usb 7-1: SerialNumber: syz [ 150.136148][ T24] legousbtower 7-1:14.57: interrupt endpoints not found [ 150.336882][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 150.340495][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 150.604504][ T24] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 150.614731][ T7002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 150.617509][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.620824][ T24] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 150.621852][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 150.666253][ T7002] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 150.898740][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 150.900732][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 150.973788][ T7010] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 151.181492][ T7003] vhci_hcd: connection reset by peer [ 151.186310][ T13] vhci_hcd vhci_hcd.3: stop threads [ 151.188736][ T13] vhci_hcd vhci_hcd.3: release socket [ 151.193416][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 151.730373][ C0] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 151.734078][ T1349] usb 7-1: USB disconnect, device number 5 [ 151.751440][ T1349] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 153.637094][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 153.687235][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 154.421862][ T1165] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 154.435146][ T7047] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 154.668816][ T5901] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 154.819893][ T5901] usb 8-1: Using ep0 maxpacket: 8 [ 154.823914][ T5901] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.827877][ T5901] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.832742][ T5901] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.841016][ T5901] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 154.844950][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.848433][ T5901] usb 8-1: Product: syz [ 154.872451][ T5901] usb 8-1: Manufacturer: syz [ 154.874731][ T5901] usb 8-1: SerialNumber: syz [ 154.997407][ T7042] Process accounting resumed [ 156.210722][ T7078] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 156.228720][ T5156] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.448414][ T29] usb 44-1: device descriptor read/8, error -110 [ 157.078617][ T5156] usb 5-1: Using ep0 maxpacket: 32 [ 157.084660][ T5156] usb 5-1: config 0 has no interfaces? [ 157.094371][ T5156] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.098170][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.102604][ T5156] usb 5-1: Product: syz [ 157.104165][ T5156] usb 5-1: Manufacturer: syz [ 157.107960][ T5156] usb 5-1: SerialNumber: syz [ 157.113245][ T5156] usb 5-1: config 0 descriptor?? [ 157.525636][ T5861] usb 5-1: USB disconnect, device number 4 [ 157.561105][ T29] usb usb44-port1: attempt power cycle [ 157.897568][ T5901] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 157.929000][ T5901] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.967606][ T5901] usb 8-1: USB disconnect, device number 7 [ 158.000192][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.459274][ T29] usb usb44-port1: unable to enumerate USB device [ 158.577441][ T7108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.354488][ T7055] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 162.362257][ T7161] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 162.595868][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 162.642351][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.759908][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 162.773819][ T29] usb 8-1: config 0 has no interfaces? [ 162.790237][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.794641][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.801030][ T29] usb 8-1: Product: syz [ 162.802953][ T29] usb 8-1: Manufacturer: syz [ 162.805233][ T29] usb 8-1: SerialNumber: syz [ 162.962798][ T29] usb 8-1: config 0 descriptor?? [ 162.997573][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 163.091525][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.580156][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.601105][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.612302][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 163.615834][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.618942][ T24] usb 6-1: Product: syz [ 163.620457][ T24] usb 6-1: Manufacturer: syz [ 163.621935][ T24] usb 6-1: SerialNumber: syz [ 164.272502][ T5823] usb 8-1: USB disconnect, device number 8 [ 164.608690][ T7164] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 165.060224][ T24] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 165.094920][ T24] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 165.212741][ T24] usb 6-1: USB disconnect, device number 4 [ 169.374330][ T7226] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.317355][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.280'. [ 170.348903][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 170.349101][ T5768] Bluetooth: hci3: command 0x0405 tx timeout [ 170.352996][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 170.566065][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 174.568710][ T50] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 174.744551][ T50] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 174.749835][ T50] usb 8-1: config 1 has no interface number 0 [ 174.751821][ T50] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 174.764936][ T50] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 174.772800][ T50] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.833995][ T50] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 174.841722][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.883919][ T50] usb 8-1: Product: syz [ 174.885360][ T50] usb 8-1: Manufacturer: syz [ 174.910765][ T50] usb 8-1: SerialNumber: syz [ 175.048331][ T7301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.487898][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.294'. [ 175.647153][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 176.906256][ T50] usb 8-1: Error in usbnet_get_endpoints (-71) [ 176.973492][ T50] usb 8-1: USB disconnect, device number 9 [ 177.479034][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 177.638883][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 177.672813][ T24] usb 8-1: config 0 has no interfaces? [ 177.747499][ T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.805082][ T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.846549][ T24] usb 8-1: Product: syz [ 177.862592][ T24] usb 8-1: Manufacturer: syz [ 177.871645][ T24] usb 8-1: SerialNumber: syz [ 177.975519][ T24] usb 8-1: config 0 descriptor?? [ 179.621300][ T34] usb 8-1: USB disconnect, device number 10 [ 180.471784][ T7374] netlink: 'syz.2.312': attribute type 2 has an invalid length. [ 180.525851][ T7374] : entered promiscuous mode [ 181.698723][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 181.780877][ T5823] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.809419][ T7387] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 182.339711][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 182.344199][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.348282][ T5823] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 182.351816][ T5823] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 182.355006][ T5823] usb 5-1: config 14 has no interface number 0 [ 182.357353][ T5823] usb 5-1: config 14 has no interface number 1 [ 182.360122][ T5823] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 182.364107][ T5823] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 182.368868][ T5823] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 182.373205][ T5823] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 182.377333][ T5823] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 182.382318][ T5823] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.386792][ T5823] usb 5-1: config 14 interface 57 has no altsetting 0 [ 182.389411][ T5823] usb 5-1: config 14 interface 228 has no altsetting 0 [ 182.393513][ T5823] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 182.396169][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.398459][ T5823] usb 5-1: Product: syz [ 182.399936][ T5823] usb 5-1: Manufacturer: syz [ 182.401294][ T5823] usb 5-1: SerialNumber: syz [ 182.818118][ T5823] legousbtower 5-1:14.57: interrupt endpoints not found [ 183.024903][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 183.028716][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 183.297414][ T5823] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 183.301780][ T5823] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 183.780717][ T7398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 184.136154][ T34] usb 5-1: USB disconnect, device number 5 [ 184.154300][ T34] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 184.838786][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 184.998667][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 185.006762][ T34] usb 7-1: config 0 has no interfaces? [ 185.058341][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.087941][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.112560][ T34] usb 7-1: Product: syz [ 185.122182][ T34] usb 7-1: Manufacturer: syz [ 185.151507][ T34] usb 7-1: SerialNumber: syz [ 185.241170][ T34] usb 7-1: config 0 descriptor?? [ 185.729511][ T7423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.964233][ T5854] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.915700][ T5854] usb 6-1: config 0 has no interfaces? [ 186.971782][ T5903] usb 7-1: USB disconnect, device number 6 [ 187.877974][ T5854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.881910][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.885480][ T5854] usb 6-1: Product: syz [ 187.887265][ T5854] usb 6-1: Manufacturer: syz [ 187.889532][ T5854] usb 6-1: SerialNumber: syz [ 187.965600][ T5854] usb 6-1: config 0 descriptor?? [ 188.268022][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.318'. [ 188.372521][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 188.787859][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'. [ 188.800751][ T7456] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 190.043727][ T5854] usb 6-1: USB disconnect, device number 5 [ 190.442498][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 190.593338][ T7471] ref_ctr_offset mismatch. inode: 0x1d3 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 191.037824][ T7476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.968894][ T7492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.332'. [ 192.117894][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'. [ 194.177457][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179991][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.744015][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.344'. [ 198.930500][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 199.142732][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 199.173204][ T7552] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 200.663597][ T7556] syzkaller0: entered promiscuous mode [ 200.665360][ T7556] syzkaller0: entered allmulticast mode [ 200.904010][ T7562] No source specified [ 203.658757][ T5861] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 203.820857][ T5861] usb 7-1: config 0 has no interfaces? [ 203.829635][ T5861] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.833887][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.837519][ T5861] usb 7-1: Product: syz [ 203.839856][ T5861] usb 7-1: Manufacturer: syz [ 203.841904][ T5861] usb 7-1: SerialNumber: syz [ 203.849731][ T5861] usb 7-1: config 0 descriptor?? [ 204.128614][ T7579] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 204.132693][ T7579] device-mapper: ioctl: error adding target to table [ 204.202607][ T7583] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 204.404550][ T7591] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 204.411856][ T7591] syz_tun: entered promiscuous mode [ 204.421323][ T7591] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 204.444047][ T13] bond0: (slave bond_slave_0): interface is now down [ 204.456659][ T13] bond0: (slave bond_slave_1): interface is now down [ 204.468835][ T13] bond0: (slave syz_tun): interface is now down [ 204.485354][ T13] bond0: now running without any active interface! [ 204.549714][ T7593] binder: 7592:7593 ioctl c0306201 0 returned -14 [ 206.135786][ T50] usb 7-1: USB disconnect, device number 7 [ 208.068313][ T7621] syzkaller0: entered promiscuous mode [ 208.071413][ T7621] syzkaller0: entered allmulticast mode [ 208.361866][ T7631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.539335][ T5736] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.690211][ T5736] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.693852][ T5736] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.696974][ T5736] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.701148][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.710240][ T7629] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.715134][ T5736] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.798682][ T5901] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 208.964577][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 208.969372][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.976119][ T5901] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 208.980505][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.983913][ T5901] usb 6-1: Product: syz [ 208.985694][ T5901] usb 6-1: Manufacturer: syz [ 208.987682][ T5901] usb 6-1: SerialNumber: syz [ 208.994416][ T5901] usb 6-1: config 0 descriptor?? [ 209.000090][ T5901] hub 6-1:0.0: bad descriptor, ignoring hub [ 209.002687][ T5901] hub 6-1:0.0: probe with driver hub failed with error -5 [ 209.023268][ T5901] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9 [ 209.533424][ T5901] IPVS: starting estimator thread 0... [ 209.618917][ T7638] IPVS: using max 43 ests per chain, 103200 per kthread [ 210.658307][ T9] usb 5-1: USB disconnect, device number 6 [ 210.834788][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 211.679123][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.879120][ T5901] usb 6-1: USB disconnect, device number 6 [ 211.979201][ T9] usb 5-1: config 0 has no interfaces? [ 212.110390][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.128900][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.148453][ T9] usb 5-1: Product: syz [ 212.150577][ T9] usb 5-1: Manufacturer: syz [ 212.152861][ T9] usb 5-1: SerialNumber: syz [ 212.187157][ T9] usb 5-1: config 0 descriptor?? [ 213.067551][ T7676] syzkaller0: entered promiscuous mode [ 213.070146][ T7676] syzkaller0: entered allmulticast mode [ 214.284579][ T5156] usb 5-1: USB disconnect, device number 7 [ 214.353120][ T7682] random: crng reseeded on system resumption [ 216.244258][ T5766] Bluetooth: hci0: unexpected event for opcode 0x202d [ 216.518179][ T7709] syzkaller0: entered promiscuous mode [ 216.521038][ T7709] syzkaller0: entered allmulticast mode [ 217.016032][ T7716] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 218.735959][ T7716] syz_tun: entered promiscuous mode [ 218.762915][ T7716] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.768095][ T5599] bond0: (slave bond_slave_0): interface is now down [ 218.779937][ T5599] bond0: (slave bond_slave_1): interface is now down [ 218.787362][ T5599] bond0: (slave syz_tun): interface is now down [ 218.814043][ T5599] bond0: now running without any active interface! [ 219.949140][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.101991][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 220.107887][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.112498][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.125612][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.135389][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.144416][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.159606][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.168728][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.172137][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.185638][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.220363][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.224008][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.228282][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.238109][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.242160][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.246319][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.251127][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.254517][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.258342][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.262953][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.266873][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.272409][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.276015][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.280246][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.284399][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.290198][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 220.293868][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 220.296981][ T9] usb 5-1: Product: syz [ 220.299398][ T9] usb 5-1: Manufacturer: syz [ 220.301313][ T9] usb 5-1: SerialNumber: syz [ 220.305913][ T9] usb 5-1: config 0 descriptor?? [ 220.317176][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 220.394081][ T7755] random: crng reseeded on system resumption [ 220.634324][ T7756] binder: 7752:7756 ioctl c0306201 80000040 returned -14 [ 220.661415][ T7756] ublk0: read batch cmd buffer failed [ 220.664377][ T7756] ublk0: read batch cmd buffer failed [ 220.775612][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 220.887791][ T5901] usb 5-1: USB disconnect, device number 8 [ 221.446964][ T7760] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 221.457902][ T5901] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 221.665948][ T7772] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 224.098675][ T5156] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.281762][ T5156] usb 5-1: config 0 has no interfaces? [ 224.339196][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 224.921561][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 224.924864][ T5156] usb 5-1: Product: syz [ 224.926422][ T5156] usb 5-1: Manufacturer: syz [ 224.928167][ T5156] usb 5-1: SerialNumber: syz [ 224.932868][ T5156] usb 5-1: config 0 descriptor?? [ 225.753374][ T7845] Mass Storage Function, version: 2009/09/11 [ 225.756649][ T7845] LUN: removable file: (no medium) [ 225.784712][ T7845] LUN: removable file: (no medium) [ 225.938645][ T7849] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 225.976934][ T7849] team0: Port device dummy0 added [ 226.632850][ T7851] netlink: 100 bytes leftover after parsing attributes in process `syz.1.414'. [ 226.785240][ T5903] usb 5-1: USB disconnect, device number 9 [ 227.571063][ T5766] Bluetooth: hci2: unexpected event for opcode 0x201c [ 227.621931][ T7869] x_tables: duplicate underflow at hook 1 [ 227.632647][ T7869] hub 8-0:1.0: USB hub found [ 227.636872][ T7869] hub 8-0:1.0: 1 port detected [ 229.283761][ T7881] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 229.333968][ T7881] binder: 7879:7881 ioctl c0306201 80000040 returned -14 [ 229.347297][ T7881] ublk1: read batch cmd buffer failed [ 229.351518][ T7881] ublk1: read batch cmd buffer failed [ 230.059574][ T5766] Bluetooth: hci3: unexpected event for opcode 0x202d [ 230.567658][ T6968] Bluetooth: (null): Invalid header checksum [ 230.672654][ T6977] Bluetooth: (null): Invalid header checksum [ 230.790102][ T6977] Bluetooth: (null): Invalid header checksum [ 230.848728][ T5736] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 230.899431][ T6977] Bluetooth: (null): Invalid header checksum [ 231.000631][ T5736] usb 7-1: config 0 has no interfaces? [ 231.006760][ T5736] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 231.010351][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 231.013594][ T5736] usb 7-1: Product: syz [ 231.015336][ T5736] usb 7-1: Manufacturer: syz [ 231.017280][ T5736] usb 7-1: SerialNumber: syz [ 231.019374][ T6979] Bluetooth: (null): Invalid header checksum [ 231.022156][ T5736] usb 7-1: config 0 descriptor?? [ 231.120220][ T6956] Bluetooth: (null): Invalid header checksum [ 231.239644][ T6979] Bluetooth: (null): Invalid header checksum [ 231.392936][ T6956] Bluetooth: (null): Invalid header checksum [ 231.868787][ T5156] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 232.020951][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 232.025392][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.032005][ T5156] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 232.035812][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.039176][ T5156] usb 5-1: Product: syz [ 232.040776][ T5156] usb 5-1: Manufacturer: syz [ 232.042848][ T5156] usb 5-1: SerialNumber: syz [ 232.046763][ T5156] usb 5-1: config 0 descriptor?? [ 232.052590][ T5156] hub 5-1:0.0: bad descriptor, ignoring hub [ 232.054974][ T5156] hub 5-1:0.0: probe with driver hub failed with error -5 [ 232.063022][ T5156] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10 [ 233.779996][ T5903] usb 7-1: USB disconnect, device number 8 [ 234.156369][ T42] audit: type=1400 audit(1786046186.360:4): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/ptmx" pid=7954 comm="syz.2.436" [ 234.970885][ T5156] usb 5-1: USB disconnect, device number 10 [ 236.115365][ T5766] Bluetooth: hci1: unexpected event for opcode 0x202d [ 236.230972][ T5736] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.463237][ T5736] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 236.467662][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.019502][ T5736] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 237.042792][ T5736] usb 5-1: USB disconnect, device number 11 [ 240.009176][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 240.192060][ T34] usb 7-1: config 0 has no interfaces? [ 240.225683][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 240.250583][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 240.276480][ T34] usb 7-1: Product: syz [ 240.300445][ T34] usb 7-1: Manufacturer: syz [ 240.317711][ T34] usb 7-1: SerialNumber: syz [ 240.516019][ T34] usb 7-1: config 0 descriptor?? [ 240.643919][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 241.197897][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 241.510104][ T8039] team0: Port device team_slave_0 removed [ 241.909835][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 241.932027][ T50] usb 6-1: device descriptor read/64, error -71 [ 242.114258][ T8059] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 242.120222][ T8059] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 242.128179][ T8059] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 242.143901][ T8059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.157043][ T8059] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 242.341982][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 242.521174][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 242.524997][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.761410][ T50] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 242.814368][ T5854] usb 7-1: USB disconnect, device number 9 [ 242.961777][ T50] usb 6-1: USB disconnect, device number 8 [ 242.968714][ T5823] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 243.122240][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 243.131979][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 243.148035][ T5823] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 243.156508][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.160913][ T5823] usb 5-1: Product: syz [ 243.163099][ T5823] usb 5-1: Manufacturer: syz [ 243.165981][ T5823] usb 5-1: SerialNumber: syz [ 243.174311][ T5823] usb 5-1: config 0 descriptor?? [ 243.180015][ T5823] hub 5-1:0.0: bad descriptor, ignoring hub [ 243.182708][ T5823] hub 5-1:0.0: probe with driver hub failed with error -5 [ 243.196266][ T5823] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 243.406011][ T8091] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 245.235739][ T5766] Bluetooth: hci2: unexpected event for opcode 0x202d [ 245.849989][ T5736] usb 5-1: USB disconnect, device number 12 [ 246.802414][ T8112] 9p: Bad value for 'rfdno' [ 247.335484][ T5766] Bluetooth: hci1: unexpected event for opcode 0x201c [ 247.470121][ T8126] ima: Unable to open file: /e (-2) [ 247.537586][ T8128] x_tables: duplicate underflow at hook 1 [ 247.583098][ T8129] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 247.623260][ T8127] hub 8-0:1.0: USB hub found [ 247.634690][ T8127] hub 8-0:1.0: 1 port detected [ 247.919904][ T8121] ima: policy update failed [ 247.936122][ T42] audit: type=1802 audit(1786046200.130:5): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.463" res=0 errno=0 [ 248.543636][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 248.546829][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 251.865404][ T8175] jffs2: notice: (8175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 253.696054][ T8208] ipt_rpfilter: unknown options [ 254.121459][ T8217] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 254.193876][ T8217] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 254.625554][ T8220] bond1: entered promiscuous mode [ 255.157849][ T8217] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 255.312826][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.315257][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970899][ T42] audit: type=1326 audit(1786046208.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.631343][ T5903] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 256.662075][ T42] audit: type=1326 audit(1786046208.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.671643][ T42] audit: type=1326 audit(1786046208.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 256.682462][ T42] audit: type=1326 audit(1786046208.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.692205][ T42] audit: type=1326 audit(1786046208.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.705561][ T42] audit: type=1326 audit(1786046208.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.715257][ T42] audit: type=1326 audit(1786046208.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.724814][ T42] audit: type=1326 audit(1786046208.130:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.733080][ T42] audit: type=1326 audit(1786046208.130:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.741355][ T42] audit: type=1326 audit(1786046208.140:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.3.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 256.792883][ T5903] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 256.797163][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.858693][ T5903] usb 5-1: config 0 has no interface number 0 [ 256.861862][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.867462][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 256.876390][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 256.880830][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.886938][ T5903] usb 5-1: config 0 descriptor?? [ 256.890552][ T8244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.896191][ T5903] ldusb 5-1:0.55: Interrupt in endpoint not found [ 258.693393][ T5854] usb 5-1: USB disconnect, device number 13 [ 258.788594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 259.023640][ T5903] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 259.189258][ T5903] usb 8-1: Using ep0 maxpacket: 8 [ 259.195691][ T5903] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.201025][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.207699][ T5903] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 259.215223][ T5903] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 259.223041][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 259.229014][ T5903] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.235199][ T5903] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.239006][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.456424][ T5903] usb 8-1: GET_CAPABILITIES returned 0 [ 259.462820][ T5903] usbtmc 8-1:16.0: can't read capabilities [ 259.662534][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.666392][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.670117][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.673462][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.683637][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.687585][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.691884][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.771076][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.774080][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.777312][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.780477][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.784120][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.787193][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.789997][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.824863][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.830264][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.840749][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.845203][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.854763][ T24] usb 8-1: USB disconnect, device number 11 [ 259.971644][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 260.074981][ T5766] Bluetooth: hci0: unexpected event for opcode 0x201c [ 260.107250][ T8280] x_tables: duplicate underflow at hook 1 [ 260.119081][ T8280] hub 8-0:1.0: USB hub found [ 260.122178][ T8280] hub 8-0:1.0: 1 port detected [ 260.130470][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.134423][ T34] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 260.143843][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.148266][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.151452][ T34] usb 6-1: Product: syz [ 260.153154][ T34] usb 6-1: Manufacturer: syz [ 260.155067][ T34] usb 6-1: SerialNumber: syz [ 260.162356][ T34] cdc_mbim 6-1:1.0: skipping garbage [ 260.389448][ T8271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.052088][ T8271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.055506][ T34] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 261.073105][ T34] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 261.095951][ T34] wwan wwan0: port wwan0mbim0 attached [ 261.332671][ T8271] libceph: resolve '400' (ret=-3): failed [ 262.466944][ T8307] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 262.745027][ T34] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 92:27:a2:5d:15:65 [ 262.774776][ T34] usb 6-1: USB disconnect, device number 9 [ 262.779725][ T34] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 263.050765][ T34] wwan wwan0: port wwan0mbim0 disconnected [ 263.998777][ T34] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 264.171100][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.175567][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.185923][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 264.203151][ T34] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 264.206880][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.211992][ T34] usb 6-1: Product: syz [ 264.214150][ T34] usb 6-1: Manufacturer: syz [ 264.216034][ T34] usb 6-1: SerialNumber: syz [ 264.274496][ T34] usb 6-1: config 0 descriptor?? [ 264.279437][ T8319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.394558][ T34] rc_core: IR keymap rc-streamzap not found [ 264.399939][ T34] Registered IR keymap rc-empty [ 264.435656][ T34] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 264.450973][ T34] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 264.643524][ T5861] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 264.694976][ T8342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'. [ 264.757859][ T8345] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 264.760024][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.773798][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 264.811557][ T5861] usb 8-1: config 0 has no interfaces? [ 264.815807][ T5861] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 264.815939][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 264.815957][ T5861] usb 8-1: Product: syz [ 264.815970][ T5861] usb 8-1: Manufacturer: syz [ 264.815983][ T5861] usb 8-1: SerialNumber: syz [ 264.821907][ T5861] usb 8-1: config 0 descriptor?? [ 264.963231][ T8348] wg2 speed is unknown, defaulting to 1000 [ 264.974076][ T8348] wg2 speed is unknown, defaulting to 1000 [ 264.979941][ T8348] wg2 speed is unknown, defaulting to 1000 [ 265.009135][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.024090][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.042089][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 265.058781][ T5901] usb 38-1: SetAddress Request (6) to port 0 [ 265.061092][ T5901] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 265.190527][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.197969][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 265.201454][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 265.204433][ T24] usb 7-1: Product: syz [ 265.206191][ T24] usb 7-1: Manufacturer: syz [ 265.208114][ T24] usb 7-1: SerialNumber: syz [ 265.369657][ T50] wg2 speed is unknown, defaulting to 1000 [ 265.376458][ T8348] infiniband syz2: set active [ 265.383623][ T8348] infiniband syz2: added wg2 [ 265.431939][ T8348] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 265.443203][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.450539][ T8348] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 265.468657][ T8348] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 265.488327][ T8346] vhci_hcd: connection reset by peer [ 265.495063][ T5599] vhci_hcd vhci_hcd.0: stop threads [ 265.497358][ T5599] vhci_hcd vhci_hcd.0: release socket [ 265.500317][ T5599] vhci_hcd vhci_hcd.0: disconnect device [ 265.518025][ T8348] RDS/IB: syz2: added [ 265.520765][ T8348] smc: adding ib device syz2 with port count 1 [ 265.523515][ T8348] smc: ib device syz2 port 1 has no pnetid [ 265.531140][ T50] wg2 speed is unknown, defaulting to 1000 [ 265.539396][ T8348] wg2 speed is unknown, defaulting to 1000 [ 265.702968][ T5861] usb 7-1: USB disconnect, device number 10 [ 265.725848][ T5861] usblp0: removed [ 265.749977][ T8348] wg2 speed is unknown, defaulting to 1000 [ 265.922485][ T8348] wg2 speed is unknown, defaulting to 1000 [ 266.078014][ T8348] wg2 speed is unknown, defaulting to 1000 [ 266.174350][ T5903] usb 6-1: USB disconnect, device number 10 [ 267.383782][ T8031] usb 8-1: USB disconnect, device number 12 [ 268.332757][ T5766] Bluetooth: hci3: unexpected event for opcode 0x201c [ 268.452061][ T8367] x_tables: duplicate underflow at hook 1 [ 268.474064][ T8367] hub 8-0:1.0: USB hub found [ 268.476215][ T8367] hub 8-0:1.0: 1 port detected [ 270.099225][ T5901] usb 38-1: device descriptor read/8, error -110 [ 270.128139][ T8395] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 270.138794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 270.234493][ T8395] team0: Port device dummy0 added [ 270.600305][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 271.394895][ T5901] usb usb38-port1: attempt power cycle [ 272.549668][ T5901] usb usb38-port1: unable to enumerate USB device [ 273.204924][ T8425] binder: 8423:8425 ioctl 400c620e 0 returned -14 [ 274.248886][ T8433] syzkaller0: entered promiscuous mode [ 274.252169][ T8433] syzkaller0: entered allmulticast mode [ 274.751118][ T8446] 9pnet_fd: Insufficient options for proto=fd [ 276.253646][ T8449] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 276.322003][ T8449] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 276.340039][ T8449] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 276.361344][ T8449] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 276.372499][ T8449] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 276.413014][ T8449] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 39689 usecs [ 276.474218][ T8449] pci 0000:00:01.0: Adding to iommu group 1 [ 276.519282][ T8449] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 276.521884][ T8449] pci 0000:00:01.0: vgaarb: bridge control possible [ 276.524459][ T8449] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 276.626994][ T8449] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 276.651914][ T8449] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 276.667431][ T8449] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 276.742737][ T8449] [drm] Found bochs VGA, ID 0xb0c5. [ 276.744828][ T8449] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 276.830917][ T8449] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 277.818719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 278.662392][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 278.662428][ T42] audit: type=1326 audit(1786046230.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 278.729692][ T42] audit: type=1326 audit(1786046230.810:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701efec code=0x7ffc0000 [ 279.557461][ T8495] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 279.605229][ T8495] team0: Port device dummy0 added [ 279.801753][ T42] audit: type=1326 audit(1786046232.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 279.811487][ T42] audit: type=1326 audit(1786046232.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 279.932731][ T42] audit: type=1326 audit(1786046232.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf701efec code=0x7ffc0000 [ 280.273555][ T42] audit: type=1326 audit(1786046232.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 280.850332][ T42] audit: type=1326 audit(1786046232.490:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 280.989588][ T8506] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 281.005071][ T8506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.546'. [ 282.003465][ T8517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 282.006394][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.033128][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 282.309294][ T8031] usb 38-1: SetAddress Request (10) to port 0 [ 282.312659][ T8031] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 282.982126][ T8518] vhci_hcd: connection reset by peer [ 282.994706][ T13] vhci_hcd vhci_hcd.0: stop threads [ 282.997128][ T13] vhci_hcd vhci_hcd.0: release socket [ 283.000511][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 283.625522][ T8542] syzkaller0: entered promiscuous mode [ 283.627811][ T8542] syzkaller0: entered allmulticast mode [ 284.824095][ T8562] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 284.838387][ T42] audit: type=1800 audit(1786046237.040:27): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="file0" dev="overlay" ino=750 res=0 errno=0 [ 287.533131][ T8031] usb 38-1: device descriptor read/8, error -110 [ 287.819032][ T8562] team0: Port device dummy0 added [ 287.832147][ T8574] syz_tun: entered allmulticast mode [ 287.839702][ T8577] syz_tun: left allmulticast mode [ 287.929294][ T8031] usb usb38-port1: attempt power cycle [ 288.648252][ T8031] usb usb38-port1: unable to enumerate USB device [ 289.350611][ T8603] binder: 8599:8603 ioctl 401c7012 0 returned -22 [ 289.716488][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 290.641277][ T8618] netlink: 512 bytes leftover after parsing attributes in process `syz.3.570'. [ 290.681119][ T8617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 290.699696][ T8622] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 291.150315][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.342484][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.471497][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 291.856597][ T6637] wg2 speed is unknown, defaulting to 1000 [ 291.866045][ T5839] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 292.245481][ T8634] netlink: zone id is out of range [ 292.248250][ T8634] netlink: zone id is out of range [ 292.250507][ T8634] netlink: zone id is out of range [ 292.257742][ T8634] netlink: zone id is out of range [ 292.261095][ T8634] netlink: zone id is out of range [ 292.268917][ T8634] netlink: zone id is out of range [ 292.276600][ T8634] netlink: zone id is out of range [ 292.278918][ T8634] netlink: zone id is out of range [ 292.283442][ T8634] netlink: zone id is out of range [ 292.285986][ T8634] netlink: zone id is out of range [ 292.369680][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 292.528675][ T5861] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 292.698706][ T5861] usb 7-1: Using ep0 maxpacket: 8 [ 292.718964][ T5861] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 292.726338][ T5861] usb 7-1: config 0 has no interface number 0 [ 292.731901][ T5861] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.740964][ T5861] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 292.750700][ T5861] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.763129][ T5861] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.773272][ T5861] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 292.781101][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.796678][ T5861] usb 7-1: config 0 descriptor?? [ 292.810840][ T5861] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 293.327489][ T8647] wg2 speed is unknown, defaulting to 1000 [ 293.511360][ T5823] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 293.575588][ T8031] usb 7-1: USB disconnect, device number 11 [ 293.575733][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 293.593901][ T8031] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 293.594173][ T8638] ldusb: No device or device unplugged -19 [ 293.670989][ T5823] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 293.679490][ T5823] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 293.693385][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 293.703478][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.713420][ T5823] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 293.731769][ T5823] usb 5-1: config 168 interface 0 has no altsetting 0 [ 293.741047][ T5823] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 293.747815][ T5823] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 293.758145][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 293.763372][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.767649][ T5823] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 293.773960][ T5823] usb 5-1: config 168 interface 0 has no altsetting 0 [ 293.780244][ T5823] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 293.784370][ T5823] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 293.790207][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 293.796018][ T5823] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.801319][ T5823] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 293.806609][ T5823] usb 5-1: config 168 interface 0 has no altsetting 0 [ 293.814626][ T5823] usb 5-1: string descriptor 0 read error: -22 [ 293.817157][ T5823] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 293.821543][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.831352][ T5823] adutux 5-1:168.0: interrupt endpoints not found [ 294.384642][ T5903] usb 5-1: USB disconnect, device number 14 [ 294.757448][ T8665] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 294.919755][ T5861] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 295.156500][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 295.211700][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.239768][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 295.256267][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 295.286297][ T5861] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 295.299131][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.315887][ T5861] usb 7-1: Product: syz [ 295.327555][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.329097][ T5861] usb 7-1: Manufacturer: syz [ 295.343838][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.354902][ T5861] usb 7-1: SerialNumber: syz [ 295.495898][ T5861] usb 7-1: config 0 descriptor?? [ 295.538672][ T1349] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 295.690886][ T1349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 295.694978][ T1349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.791831][ T5861] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 295.913788][ T1349] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 295.991140][ T5823] usb 7-1: USB disconnect, device number 12 [ 296.252963][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 297.157504][ T8700] syzkaller0: entered promiscuous mode [ 297.160173][ T8700] syzkaller0: entered allmulticast mode [ 297.830464][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 298.218678][ T5861] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 298.313824][ T5902] usb 5-1: USB disconnect, device number 15 [ 298.388661][ T5861] usb 7-1: Using ep0 maxpacket: 32 [ 298.392159][ T5861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.395943][ T5861] usb 7-1: config 0 has no interfaces? [ 298.400312][ T5861] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 298.403516][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 298.406188][ T5861] usb 7-1: Product: syz [ 298.407526][ T5861] usb 7-1: Manufacturer: syz [ 298.409232][ T5861] usb 7-1: SerialNumber: syz [ 298.647912][ T5861] usb 7-1: config 0 descriptor?? [ 298.666689][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 298.671028][ T8743] bridge_slave_1: left allmulticast mode [ 298.673696][ T8743] bridge_slave_1: left promiscuous mode [ 298.680114][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.718128][ T8743] bridge_slave_0: left allmulticast mode [ 298.720836][ T8743] bridge_slave_0: left promiscuous mode [ 298.759414][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.832134][ T8753] efs: cannot read volume header [ 299.439818][ T5861] usb 7-1: USB disconnect, device number 13 [ 299.797684][ T8762] kAFS: unable to lookup cell 'ÿ' [ 301.347256][ T8776] syzkaller0: entered promiscuous mode [ 301.349831][ T8776] syzkaller0: entered allmulticast mode [ 301.385883][ T8031] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 301.571029][ T8031] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 301.574014][ T8031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.789846][ T5902] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 301.793921][ T8031] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 301.950642][ T5902] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.955303][ T5902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.965829][ T5902] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.976242][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.980644][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.991253][ T5902] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.999245][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.008847][ T5902] usb 6-1: Product: syz [ 302.010248][ T5902] usb 6-1: Manufacturer: syz [ 302.024264][ T5902] cdc_wdm 6-1:1.0: skipping garbage [ 302.039344][ T5902] cdc_wdm 6-1:1.0: skipping garbage [ 302.046756][ T5902] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 302.060333][ T5902] cdc_wdm 6-1:1.0: Unknown control protocol [ 302.236986][ T8781] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 302.254009][ T5902] usb 6-1: USB disconnect, device number 11 [ 302.728890][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 304.096876][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 304.289051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 304.309499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 304.312003][ T5861] usb 7-1: USB disconnect, device number 14 [ 304.319692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 304.329061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 304.557542][ T8821] binder: 8813:8821 ioctl c0306201 800003c0 returned -14 [ 305.032339][ T8824] Invalid source name [ 305.034190][ T8824] UBIFS error (pid: 8824): cannot open "./file0", error -22 [ 305.209057][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 305.215251][ T8824] team0: Port device dummy0 removed [ 305.244626][ T8824] bridge_slave_0: left allmulticast mode [ 305.246890][ T8824] bridge_slave_0: left promiscuous mode [ 305.250752][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.272960][ T8824] bridge_slave_1: left allmulticast mode [ 305.275694][ T8824] bridge_slave_1: left promiscuous mode [ 305.280030][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.374674][ T8824] bond0: (slave bond_slave_0): Releasing backup interface [ 305.727549][ T5766] Bluetooth: hci3: unexpected event for opcode 0x201c [ 305.939316][ T8824] bond0: (slave bond_slave_1): Releasing backup interface [ 306.037330][ T8835] x_tables: duplicate underflow at hook 1 [ 306.044808][ T8824] team0: Port device team_slave_0 removed [ 306.062622][ T8835] hub 8-0:1.0: USB hub found [ 306.071447][ T8835] hub 8-0:1.0: 1 port detected [ 306.084837][ T8824] team0: Port device team_slave_1 removed [ 306.097245][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.128224][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.162455][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.168904][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.205501][ T8824] net_ratelimit: 11 callbacks suppressed [ 306.205517][ T8824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.038745][ T5861] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 307.202677][ T5861] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 307.209936][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.434308][ T5861] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 307.449163][ T8851] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 308.040616][ T8872] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 309.207637][ T8882] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 309.211185][ T8882] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 309.214325][ T8882] ================================================================== [ 309.217227][ T8882] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 309.220522][ T8882] Read of size 8 at addr ffff888014255cf0 by task syz.3.638/8882 [ 309.224975][ T8882] [ 309.226667][ T8882] CPU: 0 UID: 0 PID: 8882 Comm: syz.3.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.226697][ T8882] Tainted: [L]=SOFTLOCKUP [ 309.226705][ T8882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.226716][ T8882] Call Trace: [ 309.226750][ T8882] [ 309.226758][ T8882] dump_stack_lvl+0x100/0x190 [ 309.226845][ T8882] print_report+0x13d/0x4b0 [ 309.226880][ T8882] ? __virt_addr_valid+0x239/0x430 [ 309.226923][ T8882] ? dummy_free_request+0x8a/0x90 [ 309.226943][ T8882] kasan_report+0xdf/0x1c0 [ 309.226982][ T8882] ? dummy_free_request+0x8a/0x90 [ 309.227003][ T8882] dummy_free_request+0x8a/0x90 [ 309.227020][ T8882] uvc_function_bind+0x181a/0x1939 [ 309.227041][ T8882] ? __pfx_uvc_function_bind+0x10/0x10 [ 309.227062][ T8882] usb_add_function+0x219/0x890 [ 309.227089][ T8882] configfs_composite_bind+0xd83/0x1960 [ 309.227115][ T8882] ? kernfs_create_link+0x1bd/0x240 [ 309.227211][ T8882] gadget_bind_driver+0x28c/0xbf0 [ 309.227234][ T8882] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 309.227290][ T8882] ? __pfx_gadget_bind_driver+0x10/0x10 [ 309.227313][ T8882] really_probe+0x241/0xa60 [ 309.227376][ T8882] __driver_probe_device+0x20e/0x450 [ 309.227404][ T8882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.227435][ T8882] driver_probe_device+0x4a/0x140 [ 309.227462][ T8882] __driver_attach+0x21f/0x5b0 [ 309.227486][ T8882] ? __pfx___driver_attach+0x10/0x10 [ 309.227518][ T8882] bus_for_each_dev+0x13e/0x1d0 [ 309.227541][ T8882] ? __pfx_bus_for_each_dev+0x10/0x10 [ 309.227562][ T8882] ? bus_add_driver+0x2b5/0x5b0 [ 309.227588][ T8882] bus_add_driver+0x305/0x5b0 [ 309.227611][ T8882] driver_register+0x1e2/0x360 [ 309.227629][ T8882] usb_gadget_register_driver_owner+0x132/0x210 [ 309.227652][ T8882] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 309.227680][ T8882] configfs_write_iter+0x302/0x4e0 [ 309.227700][ T8882] vfs_write+0x6ac/0x1050 [ 309.227719][ T8882] ? __pfx_configfs_write_iter+0x10/0x10 [ 309.227738][ T8882] ? __pfx_vfs_write+0x10/0x10 [ 309.227751][ T8882] ? find_held_lock+0x2b/0x80 [ 309.227780][ T8882] ksys_write+0x12a/0x250 [ 309.227796][ T8882] ? __pfx_ksys_write+0x10/0x10 [ 309.227816][ T8882] __do_fast_syscall_32+0xe7/0x970 [ 309.227845][ T8882] ? lockdep_hardirqs_on+0x78/0x100 [ 309.227870][ T8882] do_fast_syscall_32+0x32/0x70 [ 309.227895][ T8882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.227920][ T8882] RIP: 0023:0xf707efec [ 309.227944][ T8882] Code: Unable to access opcode bytes at 0xf707efc2. [ 309.227965][ T8882] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 309.227984][ T8882] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000340 [ 309.227997][ T8882] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 309.228009][ T8882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.228020][ T8882] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.228030][ T8882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.228047][ T8882] [ 309.228054][ T8882] [ 309.329360][ T8882] Allocated by task 6337: [ 309.330748][ T8882] kasan_save_stack+0x30/0x50 [ 309.332332][ T8882] kasan_save_track+0x14/0x30 [ 309.333881][ T8882] __kasan_kmalloc+0xaa/0xb0 [ 309.335822][ T8882] __kmalloc_flags_noprof+0x371/0x8b0 [ 309.337784][ T8882] alloc_slab_obj_exts+0x5a/0x160 [ 309.339611][ T8882] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 309.341913][ T8882] kmem_cache_alloc_noprof+0x587/0x6a0 [ 309.343629][ T8882] prepare_creds+0x2c/0x950 [ 309.345150][ T8882] ovl_fill_super+0x7fa/0x5e30 [ 309.346733][ T8882] get_tree_nodev+0xdd/0x190 [ 309.348220][ T8882] vfs_get_tree+0x92/0x320 [ 309.349629][ T8882] path_mount+0x7d0/0x23d0 [ 309.351101][ T8882] __ia32_sys_mount+0x292/0x310 [ 309.352914][ T8882] __do_fast_syscall_32+0xe7/0x970 [ 309.354867][ T8882] do_fast_syscall_32+0x32/0x70 [ 309.356494][ T8882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.358601][ T8882] [ 309.359620][ T8882] The buggy address belongs to the object at ffff888014255c00 [ 309.359620][ T8882] which belongs to the cache kmalloc-128 of size 128 [ 309.365331][ T8882] The buggy address is located 112 bytes to the right of [ 309.365331][ T8882] allocated 128-byte region [ffff888014255c00, ffff888014255c80) [ 309.371273][ T8882] [ 309.372307][ T8882] The buggy address belongs to the physical page: [ 309.374908][ T8882] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14255 [ 309.378467][ T8882] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 309.381377][ T8882] page_type: f5(slab) [ 309.383083][ T8882] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 309.386666][ T8882] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 309.390171][ T8882] page dumped because: kasan: bad access detected [ 309.392760][ T8882] page_owner tracks the page as allocated [ 309.394942][ T8882] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5752, tgid 5752 (syz-executor), ts 51172442611, free_ts 41858968214 [ 309.402379][ T8882] post_alloc_hook+0xfd/0x120 [ 309.403985][ T8882] get_page_from_freelist+0xf48/0x3530 [ 309.406125][ T8882] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 309.408591][ T8882] new_slab+0xa2/0x640 [ 309.410283][ T8882] refill_objects+0xe3/0x410 [ 309.412193][ T8882] __pcs_replace_empty_main+0x376/0x680 [ 309.414305][ T8882] __kmalloc_cache_noprof+0x479/0x6c0 [ 309.416316][ T8882] __hw_addr_create+0x57/0x220 [ 309.418292][ T8882] __hw_addr_add_ex+0x32b/0x650 [ 309.420321][ T8882] dev_mc_add+0xb6/0x110 [ 309.422119][ T8882] igmp6_group_added+0x3e4/0x4c0 [ 309.424124][ T8882] __ipv6_dev_mc_inc+0x701/0xbd0 [ 309.426193][ T8882] ipv6_add_dev+0xb87/0x1520 [ 309.428184][ T8882] addrconf_notify+0x5db/0x1ba0 [ 309.430202][ T8882] notifier_call_chain+0x99/0x3f0 [ 309.432318][ T8882] call_netdevice_notifiers_info+0xbe/0x110 [ 309.434771][ T8882] page last free pid 5723 tgid 5723 stack trace: [ 309.437420][ T8882] __free_frozen_pages+0x79f/0x1090 [ 309.439595][ T8882] rcu_core+0x5a2/0x10d0 [ 309.441361][ T8882] handle_softirqs+0x1ea/0x9b0 [ 309.443361][ T8882] __irq_exit_rcu+0x162/0x210 [ 309.445246][ T8882] irq_exit_rcu+0x9/0x30 [ 309.446882][ T8882] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 309.449250][ T8882] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.451710][ T8882] [ 309.452658][ T8882] Memory state around the buggy address: [ 309.455011][ T8882] ffff888014255b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.458311][ T8882] ffff888014255c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.461592][ T8882] >ffff888014255c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.464979][ T8882] ^ [ 309.467972][ T8882] ffff888014255d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.471308][ T8882] ffff888014255d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.474609][ T8882] ================================================================== [ 309.733635][ T8882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 309.736460][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.3.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.740646][ T8882] Tainted: [L]=SOFTLOCKUP [ 309.742294][ T8882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.745921][ T8882] Call Trace: [ 309.747213][ T8882] [ 309.748424][ T8882] dump_stack_lvl+0x100/0x190 [ 309.750260][ T8882] vpanic+0x552/0x970 [ 309.751893][ T8882] ? __pfx_vpanic+0x10/0x10 [ 309.753746][ T8882] ? dummy_free_request+0x8a/0x90 [ 309.755821][ T8882] panic+0xd1/0xe0 [ 309.757340][ T8882] ? __pfx_panic+0x10/0x10 [ 309.758935][ T8882] ? dummy_free_request+0x8a/0x90 [ 309.760839][ T8882] ? preempt_schedule_common+0x42/0xc0 [ 309.762875][ T8882] check_panic_on_warn.cold+0x19/0x34 [ 309.764997][ T8882] end_report.part.0+0x3a/0x90 [ 309.766964][ T8882] kasan_report.cold+0xe/0x18 [ 309.768789][ T8882] ? dummy_free_request+0x8a/0x90 [ 309.770722][ T8882] dummy_free_request+0x8a/0x90 [ 309.772675][ T8882] uvc_function_bind+0x181a/0x1939 [ 309.774740][ T8882] ? __pfx_uvc_function_bind+0x10/0x10 [ 309.776871][ T8882] usb_add_function+0x219/0x890 [ 309.778681][ T8882] configfs_composite_bind+0xd83/0x1960 [ 309.780574][ T8882] ? kernfs_create_link+0x1bd/0x240 [ 309.782387][ T8882] gadget_bind_driver+0x28c/0xbf0 [ 309.784229][ T8882] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 309.786113][ T8882] ? __pfx_gadget_bind_driver+0x10/0x10 [ 309.787991][ T8882] really_probe+0x241/0xa60 [ 309.789612][ T8882] __driver_probe_device+0x20e/0x450 [ 309.791539][ T8882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.793768][ T8882] driver_probe_device+0x4a/0x140 [ 309.795719][ T8882] __driver_attach+0x21f/0x5b0 [ 309.797525][ T8882] ? __pfx___driver_attach+0x10/0x10 [ 309.799651][ T8882] bus_for_each_dev+0x13e/0x1d0 [ 309.801582][ T8882] ? __pfx_bus_for_each_dev+0x10/0x10 [ 309.803614][ T8882] ? bus_add_driver+0x2b5/0x5b0 [ 309.805565][ T8882] bus_add_driver+0x305/0x5b0 [ 309.807474][ T8882] driver_register+0x1e2/0x360 [ 309.809437][ T8882] usb_gadget_register_driver_owner+0x132/0x210 [ 309.811894][ T8882] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 309.814061][ T8882] configfs_write_iter+0x302/0x4e0 [ 309.816059][ T8882] vfs_write+0x6ac/0x1050 [ 309.817822][ T8882] ? __pfx_configfs_write_iter+0x10/0x10 [ 309.819843][ T8882] ? __pfx_vfs_write+0x10/0x10 [ 309.821565][ T8882] ? find_held_lock+0x2b/0x80 [ 309.823375][ T8882] ksys_write+0x12a/0x250 [ 309.825211][ T8882] ? __pfx_ksys_write+0x10/0x10 [ 309.827083][ T8882] __do_fast_syscall_32+0xe7/0x970 [ 309.829147][ T8882] ? lockdep_hardirqs_on+0x78/0x100 [ 309.831169][ T8882] do_fast_syscall_32+0x32/0x70 [ 309.833011][ T8882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.835424][ T8882] RIP: 0023:0xf707efec [ 309.836959][ T8882] Code: Unable to access opcode bytes at 0xf707efc2. [ 309.839478][ T8882] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 309.842693][ T8882] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000340 [ 309.845508][ T8882] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 309.848309][ T8882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.851421][ T8882] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.854244][ T8882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.856826][ T8882] [ 309.858828][ T8882] Kernel Offset: disabled [ 309.860569][ T8882] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:57:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0c1f5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90004807298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6f7212 R15=ffffffff85a0c190 RIP=ffffffff85a0c21f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000346f1ff8 CR3=000000004ffab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000ac0b99 RBX=ffff88801c742540 RCX=ffffffff8bb8b335 RDX=0000000000000000 RSI=ffffffff8e1aa1ca RDI=ffffffff8c400c80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb898ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888096cdf000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffffffff CR3=0000000066084000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffff888021115670 RCX=0000000000000007 RDX=0000000000000003 RSI=ffff8880211156c0 RDI=0000000000000001 RBP=ffff888021114a80 RSP=ffffc90000537cc0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000005 R12=ffff8880211156e8 R13=0000000000000005 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81e54609 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000346f2ff8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 52b6c17544aded91 15c0a93eb8e5269c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fced024b274e42be 50347073966097fd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c3f3cf15394781d 30530aad7f843fb2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8e18ac95bd0745f fdc6b3e5222debfb ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004780 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b5e000010520000 00bc43940000037d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ab00000901b0000 d2180000fcbe0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 66750000000024fb 00bc43830000010e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00bc4bda00bc5d26 ab62000000bc23b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 493a680c9457fae7 f83eaf328a53bfe1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7db94f20aeb6d1c c917ac3f94b090e4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880227dca80 RCX=0000000000000004 RDX=0000000000000003 RSI=ffff8880227dd620 RDI=ffffffff8e18433e RBP=0000000000000287 RSP=ffffc900005e8f10 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8e80a100 R13=0000000000000008 R14=0000000000000100 R15=0000000000000003 RIP=ffffffff8bb8bbd0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000569d8470 CR3=000000004d3b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000