last executing test programs: 3.403792375s ago: executing program 3 (id=664): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c9009f009b000100107f040007000400040061004000020005010106105948b0e1ec720204000200000016000000070000000102090007022000070208000501000610ff027f00000000000100000003000000061009010200ff0f000001000000050000000501010610fb0206000800000007000000000400000d0108008100b158860602000a01020009000f0c04000200ff0f0d7f0800040080002800020010050400ff007f00"], 0xa4) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="43707511a0ccac586e704a8f22a41d46f166", 0x12}, {&(0x7f0000000180)="1bdfb42a7490c4b1cff6c4b96b7cd03c0300fbc7111fb483f60000efd12fce12fa3199355b2e204b2d9a909329cdde97dcf4563e398e601cccbae1d92fd91385f1ecd9dc746e482d2f1decd7cd216c519af9a0cbb022fb400c3725e2dff1336a3a0c1b3f90e644acd913853a2b23c599a9bbfdb5f9cf081d194a9c6132d31f3856ddaa4d2672778d4350f23a043f7795e1f618ecc61accac3f725dbcb1b3833b1db86ca2eb12ea7569bf29e6bcf886d8860c8e88fd630dea9fc693431807acd98ccb4cc84b6e4982", 0xc8}, {&(0x7f0000000080)="919e4819964e98a1e651d3167d444745c7524283ee4ad51008b30b0ab039d1f5583201f481b45ae7c431ed4c1f8d470bcdb272", 0x33}], 0x3}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x10000000, 0x0, 0x0, 0x7fffffff, 0x806, 0x42c4, 0x1008}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0x17, 0x4ca700) close_range(0xffffffffffffffff, r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = socket(0x2c, 0xa, 0x7) eventfd2(0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0xa, 0x300) 3.286080531s ago: executing program 3 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp={0x3, 0x1, {0x6, 0x0, {0x1}}}}}]}, 0x44}}, 0x0) 3.226014901s ago: executing program 3 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000900), 0x71, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="5f183c5b6abe68d7", 0x8, 0x0, 0x0, 0x0, r8}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="9e30c6f7fe0d7704a21f64946201bf2ce5f0249b1cdc8a2e4b1705a36c9f6f02c2418cc15bbfb1337ee1744df809125df1d36e6d044b2c9e6bf3cce97a6b043c090000000179aa2a7567dff9422680daeebe00"/95, 0x5f, 0x6, 0x0, 0x1, r8}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='jbd2_update_log_tail\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b0000000000950000000000000029e8070a382ec855067d1d725a66e35a9235ed5921bfffe1d7abae8daab9484a26eaefd6afe941d8a2676d537e6c66dc7296b7626bc6c55ab80d620a440a8455ad4995f067bdce33b916bf5fe4cf75e0e45a9ac273e2b1b21694f26b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1c5}}, 0x10) dup(r9) r11 = userfaultfd(0x801) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000000300)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000001740)=""/167, 0xa7}, {&(0x7f0000001800)=""/241, 0xf1}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000001900)=""/189, 0xbd}, {&(0x7f00000019c0)=""/235, 0xeb}], 0x9, &(0x7f0000001b80)=""/123, 0x7b}, 0x9}], 0x1, 0x100, &(0x7f0000001c40)={r12, r13+60000000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009", @ANYRES32=r11], 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.122580017s ago: executing program 1 (id=671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 2.046830287s ago: executing program 1 (id=672): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 1.746301334s ago: executing program 3 (id=674): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000087c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000088c0)={0x0, 0x38, &(0x7f0000008880)={&(0x7f0000008840)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x24}}, 0x0) 1.696328926s ago: executing program 3 (id=676): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x1, 0xd, 0x4, 0x7, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x6, 0x7, 0x2, 0x18, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$inet6(0xa, 0x1, 0x7) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000002c0)='./file0\x00', 0x80100, 0xb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, "5dbd3ebb9b40cd82562c6a338ad904090445679578a8ef624d9c6a851c1517227b3ca338c725033239fea4e1d635e740c51cda6d2a77b525c006e66883425459444e1cf56d60181ccbdfd0cea9d679b1456e5553757141a5fa80feed5b6551b59f202675711f236031cc03e7e64a62357bd44e8a4e265866aa1379facd7dd02a7e25ecdb1233d707fbf52d73e48691850dc510aefcda16f8ec3bb9fceead95b6d5eac3c8c56a6b52480efdd29a781aae622ac253fb174a4a7460340e84011bbdb1d94fb2c1881d1b344ab95d6bfa65830a98600a34dc3388ec02e2138c379643f8528cc3c2d032c430469c832490419866e2128d1412ec38130c07d54cdfc9ae3a7a190614947de1b8f151774ff2a6a771dbd48500fe228f901f4c5585676bd842aa63a2c1697c24be1ac2d2f092172b843126189bdd2aa77631327c80471bcb95d44464fb91b3bc5e57bde7d5849cffc463cd9d915ccd9dd6f5d4754c67307c6152e081e910d1154b688cf50538ac46102661e84297cf5a11a22844a502e08f03649bb3639ed5d977fa5af3b80a92f4f2e5fd6b8a747a6961610d7aec89799c3a21afa1e4167cf7f5d86f21fc770788d4482ad430aafc5b8d55d6d75250c193982727b3ac53b8b715fc34143516a6cb28d2b9fd759dfca7e60133e0dd0d4bfc7c0009d204442039229a772c84b6ce54e24f07873629631e98b3e243da8641b0"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) 1.197258281s ago: executing program 0 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x40, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void}}]}, 0x40}}, 0x0) 1.196983552s ago: executing program 1 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.14733176s ago: executing program 0 (id=679): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x20) 1.147125833s ago: executing program 1 (id=680): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000500), 0x4) 1.037046626s ago: executing program 0 (id=681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000620000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) 1.03678274s ago: executing program 0 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.036570547s ago: executing program 1 (id=683): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c9009f009b000100107f040007000400040061004000020005010106105948b0e1ec720204000200000016000000070000000102090007022000070208000501000610ff027f00000000000100000003000000061009010200ff0f000001000000050000000501010610fb0206000800000007000000000400000d0108008100b158860602000a01020009000f0c04000200ff0f0d7f0800040080002800020010050400ff007f00"], 0xa4) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="43707511a0ccac586e704a8f22a41d46f166", 0x12}, {&(0x7f0000000180)="1bdfb42a7490c4b1cff6c4b96b7cd03c0300fbc7111fb483f60000efd12fce12fa3199355b2e204b2d9a909329cdde97dcf4563e398e601cccbae1d92fd91385f1ecd9dc746e482d2f1decd7cd216c519af9a0cbb022fb400c3725e2dff1336a3a0c1b3f90e644acd913853a2b23c599a9bbfdb5f9cf081d194a9c6132d31f3856ddaa4d2672778d4350f23a043f7795e1f618ecc61accac3f725dbcb1b3833b1db86ca2eb12ea7569bf29e6bcf886d8860c8e88fd630dea9fc693431807acd98ccb4cc84b6e4982", 0xc8}, {&(0x7f0000000080)="919e4819964e98a1e651d3167d444745c7524283ee4ad51008b30b0ab039d1f5583201f481b45ae7c431ed4c1f8d470bcdb272", 0x33}], 0x3}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x10000000, 0x0, 0x0, 0x7fffffff, 0x806, 0x42c4, 0x1008}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0x17, 0x4ca700) close_range(0xffffffffffffffff, r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = socket(0x2c, 0xa, 0x7) eventfd2(0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0xa, 0x300) 956.441658ms ago: executing program 1 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000900), 0x71, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="5f183c5b6abe68d7", 0x8, 0x0, 0x0, 0x0, r8}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="9e30c6f7fe0d7704a21f64946201bf2ce5f0249b1cdc8a2e4b1705a36c9f6f02c2418cc15bbfb1337ee1744df809125df1d36e6d044b2c9e6bf3cce97a6b043c090000000179aa2a7567dff9422680daeebe00"/95, 0x5f, 0x6, 0x0, 0x1, r8}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='jbd2_update_log_tail\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b0000000000950000000000000029e8070a382ec855067d1d725a66e35a9235ed5921bfffe1d7abae8daab9484a26eaefd6afe941d8a2676d537e6c66dc7296b7626bc6c55ab80d620a440a8455ad4995f067bdce33b916bf5fe4cf75e0e45a9ac273e2b1b21694f26b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1c5}}, 0x10) dup(r9) r11 = userfaultfd(0x801) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000000300)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000001740)=""/167, 0xa7}, {&(0x7f0000001800)=""/241, 0xf1}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000001900)=""/189, 0xbd}, {&(0x7f00000019c0)=""/235, 0xeb}], 0x9, &(0x7f0000001b80)=""/123, 0x7b}, 0x9}], 0x1, 0x100, &(0x7f0000001c40)={r12, r13+60000000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009", @ANYRES32=r11], 0x0) socket$nl_route(0x10, 0x3, 0x0) 826.930408ms ago: executing program 0 (id=685): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x44, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x3e8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 759.5395ms ago: executing program 3 (id=688): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 677.080644ms ago: executing program 2 (id=690): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x20) 606.586305ms ago: executing program 2 (id=691): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) 606.424738ms ago: executing program 2 (id=692): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000001000000851000000600000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000003500000000000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff00000004850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) 533.17551ms ago: executing program 2 (id=693): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(r1, r2, 0x0) 533.000482ms ago: executing program 2 (id=694): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046002800518024000080050002000000000009000100adff360dad0000000400060004000900000000000a0034000202020202020000080026009409"], 0x5c}}, 0x0) 476.452683ms ago: executing program 2 (id=695): syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a00090008000000090000000400002c080017"], 0x1c}, 0x1, 0x3000000}, 0x0) 0s ago: executing program 0 (id=696): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x1, 0xd, 0x4, 0x7, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x6, 0x7, 0x2, 0x18, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$inet6(0xa, 0x1, 0x7) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000002c0)='./file0\x00', 0x80100, 0xb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, "5dbd3ebb9b40cd82562c6a338ad904090445679578a8ef624d9c6a851c1517227b3ca338c725033239fea4e1d635e740c51cda6d2a77b525c006e66883425459444e1cf56d60181ccbdfd0cea9d679b1456e5553757141a5fa80feed5b6551b59f202675711f236031cc03e7e64a62357bd44e8a4e265866aa1379facd7dd02a7e25ecdb1233d707fbf52d73e48691850dc510aefcda16f8ec3bb9fceead95b6d5eac3c8c56a6b52480efdd29a781aae622ac253fb174a4a7460340e84011bbdb1d94fb2c1881d1b344ab95d6bfa65830a98600a34dc3388ec02e2138c379643f8528cc3c2d032c430469c832490419866e2128d1412ec38130c07d54cdfc9ae3a7a190614947de1b8f151774ff2a6a771dbd48500fe228f901f4c5585676bd842aa63a2c1697c24be1ac2d2f092172b843126189bdd2aa77631327c80471bcb95d44464fb91b3bc5e57bde7d5849cffc463cd9d915ccd9dd6f5d4754c67307c6152e081e910d1154b688cf50538ac46102661e84297cf5a11a22844a502e08f03649bb3639ed5d977fa5af3b80a92f4f2e5fd6b8a747a6961610d7aec89799c3a21afa1e4167cf7f5d86f21fc770788d4482ad430aafc5b8d55d6d75250c193982727b3ac53b8b715fc34143516a6cb28d2b9fd759dfca7e60133e0dd0d4bfc7c0009d204442039229a772c84b6ce54e24f07873629631e98b3e243da8641b0"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3234' (ED25519) to the list of known hosts. [ 49.766546][ T5187] cgroup: Unknown subsys name 'net' [ 49.910632][ T5187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.168162][ T5187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.319525][ T4639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.327959][ T4639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.333885][ T4639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.343860][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.347368][ T5201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.350601][ T5201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.375296][ T5212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.378553][ T5212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.382655][ T5212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.384268][ T5209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.385756][ T5212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.390081][ T5209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.391926][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.392137][ T5212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.392815][ T5212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.393487][ T5212] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.393731][ T5212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.395051][ T5209] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.398495][ T5214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.399351][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.403176][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.418727][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.424078][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.426982][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.804784][ T5210] chnl_net:caif_netlink_parms(): no params data found [ 55.838448][ T5199] chnl_net:caif_netlink_parms(): no params data found [ 55.971862][ T5207] chnl_net:caif_netlink_parms(): no params data found [ 55.977029][ T5203] chnl_net:caif_netlink_parms(): no params data found [ 56.135923][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.139845][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.143473][ T5210] bridge_slave_0: entered allmulticast mode [ 56.148644][ T5210] bridge_slave_0: entered promiscuous mode [ 56.192477][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195761][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.199033][ T5199] bridge_slave_0: entered allmulticast mode [ 56.203175][ T5199] bridge_slave_0: entered promiscuous mode [ 56.237557][ T5210] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.241097][ T5210] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.244383][ T5210] bridge_slave_1: entered allmulticast mode [ 56.247662][ T5210] bridge_slave_1: entered promiscuous mode [ 56.296881][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.299712][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.302024][ T5199] bridge_slave_1: entered allmulticast mode [ 56.306410][ T5199] bridge_slave_1: entered promiscuous mode [ 56.414847][ T5210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.466994][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.470233][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.473685][ T5207] bridge_slave_0: entered allmulticast mode [ 56.477789][ T5207] bridge_slave_0: entered promiscuous mode [ 56.543573][ T5199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.548748][ T5210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.552628][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.555570][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.558566][ T5207] bridge_slave_1: entered allmulticast mode [ 56.563164][ T5207] bridge_slave_1: entered promiscuous mode [ 56.593047][ T5199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.665691][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.668625][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.674415][ T5203] bridge_slave_0: entered allmulticast mode [ 56.677773][ T5203] bridge_slave_0: entered promiscuous mode [ 56.682860][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.685939][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.688878][ T5203] bridge_slave_1: entered allmulticast mode [ 56.694498][ T5203] bridge_slave_1: entered promiscuous mode [ 56.730355][ T5210] team0: Port device team_slave_0 added [ 56.736025][ T5210] team0: Port device team_slave_1 added [ 56.909664][ T5207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.916441][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.924906][ T5199] team0: Port device team_slave_0 added [ 56.928523][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.931222][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.942416][ T5210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.950002][ T5207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.956850][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.963770][ T5199] team0: Port device team_slave_1 added [ 56.988481][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.991665][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.002302][ T5210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.094176][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.097244][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.109868][ T5199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.122604][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.125712][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.137113][ T5199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.169478][ T5207] team0: Port device team_slave_0 added [ 57.207138][ T5203] team0: Port device team_slave_0 added [ 57.212986][ T5203] team0: Port device team_slave_1 added [ 57.280591][ T5207] team0: Port device team_slave_1 added [ 57.378029][ T5199] hsr_slave_0: entered promiscuous mode [ 57.383627][ T5199] hsr_slave_1: entered promiscuous mode [ 57.429734][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.433098][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.442504][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.448766][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.452216][ T5213] Bluetooth: hci3: command tx timeout [ 57.452232][ T5201] Bluetooth: hci2: command tx timeout [ 57.455328][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.461339][ T5201] Bluetooth: hci0: command tx timeout [ 57.463817][ T5213] Bluetooth: hci1: command tx timeout [ 57.468092][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.512777][ T5210] hsr_slave_0: entered promiscuous mode [ 57.516189][ T5210] hsr_slave_1: entered promiscuous mode [ 57.519346][ T5210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.522890][ T5210] Cannot create hsr debugfs directory [ 57.525995][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.528907][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.539340][ T5207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.545967][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.548970][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.560371][ T5207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.862983][ T5203] hsr_slave_0: entered promiscuous mode [ 57.869141][ T5203] hsr_slave_1: entered promiscuous mode [ 57.872718][ T5203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.875989][ T5203] Cannot create hsr debugfs directory [ 57.927388][ T5207] hsr_slave_0: entered promiscuous mode [ 57.931944][ T5207] hsr_slave_1: entered promiscuous mode [ 57.934809][ T5207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.938138][ T5207] Cannot create hsr debugfs directory [ 58.355251][ T5199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.373056][ T5199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.380758][ T5199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.388255][ T5199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.440099][ T5210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.460554][ T5210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.471325][ T5210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.483251][ T5210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.526666][ T5207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.538490][ T5207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.546808][ T5207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.568336][ T5207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.634783][ T5203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.646869][ T5203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.654108][ T5203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.662531][ T5203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.670537][ T5199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.734884][ T5199] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.750026][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.753642][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.769160][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.772811][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.867894][ T5210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.915594][ T5207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.933728][ T5210] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.953364][ T5207] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.971961][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.975076][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.980387][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.983489][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.994882][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.997849][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.020172][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.023439][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.034459][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.082898][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.102346][ T5210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.106628][ T5210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.152527][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.155815][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.162861][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.166053][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.203736][ T5199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.296917][ T5199] veth0_vlan: entered promiscuous mode [ 59.310209][ T5199] veth1_vlan: entered promiscuous mode [ 59.356908][ T5210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.374599][ T5199] veth0_macvtap: entered promiscuous mode [ 59.391736][ T5199] veth1_macvtap: entered promiscuous mode [ 59.429507][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.438877][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.454573][ T5210] veth0_vlan: entered promiscuous mode [ 59.473194][ T5199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.477045][ T5199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.482733][ T5199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.486320][ T5199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.508044][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.530732][ T5210] veth1_vlan: entered promiscuous mode [ 59.533320][ T5201] Bluetooth: hci3: command tx timeout [ 59.533431][ T5213] Bluetooth: hci0: command tx timeout [ 59.534365][ T5209] Bluetooth: hci2: command tx timeout [ 59.534400][ T5209] Bluetooth: hci1: command tx timeout [ 59.547172][ T5207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.601907][ T5210] veth0_macvtap: entered promiscuous mode [ 59.648048][ T5210] veth1_macvtap: entered promiscuous mode [ 59.655660][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.659050][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.666797][ T5203] veth0_vlan: entered promiscuous mode [ 59.706788][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.710199][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.712415][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.720869][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.727208][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.745607][ T5203] veth1_vlan: entered promiscuous mode [ 59.752950][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.757097][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.763476][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.767824][ T5207] veth0_vlan: entered promiscuous mode [ 59.787834][ T5210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.792520][ T5210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.795449][ T5210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.798732][ T5210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.832290][ T5207] veth1_vlan: entered promiscuous mode [ 59.865417][ T5203] veth0_macvtap: entered promiscuous mode [ 59.899424][ T5203] veth1_macvtap: entered promiscuous mode [ 59.953422][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.956040][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.957545][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.963149][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.964636][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.972630][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.978342][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.990949][ T5207] veth0_macvtap: entered promiscuous mode [ 60.001585][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.005997][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.010644][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.015825][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.023966][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.031054][ T5203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.034690][ T5203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.037953][ T5203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.041904][ T5203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.064435][ T5207] veth1_macvtap: entered promiscuous mode [ 60.087936][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.100944][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.156069][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.159938][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.165982][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.169967][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.174211][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.178401][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.185124][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.222377][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.226597][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.240318][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.248009][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.257137][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.262218][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.272875][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.310119][ T5207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.314424][ T5207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.318639][ T5207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.323688][ T5207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.422334][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.425303][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.472302][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.476616][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.539887][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.550095][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.611345][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.633839][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.641666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.992311][ T5273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.090991][ T5273] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 61.434236][ T5283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.616259][ T5213] Bluetooth: hci0: command tx timeout [ 61.617108][ T5201] Bluetooth: hci1: command tx timeout [ 61.618662][ T5213] Bluetooth: hci2: command tx timeout [ 61.621641][ T5214] Bluetooth: hci3: command tx timeout [ 61.824457][ T5289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7'. [ 62.409215][ T5297] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9'. [ 62.431133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.472999][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 62.491499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.497215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.697365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.797274][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 62.902201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.025289][ T5305] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 63.049455][ T5305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.691112][ T5201] Bluetooth: hci2: command tx timeout [ 63.694620][ T5201] Bluetooth: hci1: command tx timeout [ 64.233669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.251315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.161623][ T5324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 65.381659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.551814][ T5321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 66.142002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.598093][ T5344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 66.692197][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 66.726386][ T5352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 67.551210][ T5362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 67.554067][ T5362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.567108][ T5363] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'. [ 67.572204][ T5362] vhci_hcd vhci_hcd.0: Device attached [ 67.616022][ T5364] usbip_core: unknown command [ 67.618067][ T5364] vhci_hcd: unknown pdu 589373486 [ 67.620224][ T5364] usbip_core: unknown command [ 67.638817][ T1089] vhci_hcd: stop threads [ 67.641091][ T1089] vhci_hcd: release socket [ 67.645999][ T1089] vhci_hcd: disconnect device [ 67.986599][ T5371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.30'. [ 68.141136][ T5191] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.353729][ T5191] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 68.358484][ T5191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.362657][ T5191] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.391720][ T5191] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.395991][ T5191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.751055][ T5191] cdc_ncm 5-1:1.0: skipping garbage [ 68.758048][ T5191] cdc_ncm 5-1:1.0: skipping garbage [ 68.770976][ T5191] cdc_ncm 5-1:1.0: skipping garbage [ 68.773446][ T5191] cdc_ncm 5-1:1.0: skipping garbage [ 68.776126][ T5191] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 68.781342][ T5191] cdc_ncm 5-1:1.0: bind() failure [ 68.806632][ T5191] usb 5-1: USB disconnect, device number 2 [ 68.815269][ T5214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.826079][ T5214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.843208][ T5214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.848384][ T5214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.857534][ T5214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.861115][ T5214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.928745][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 69.145515][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.241045][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.263064][ T5380] chnl_net:caif_netlink_parms(): no params data found [ 69.357743][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.467347][ T5393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.34'. [ 69.491929][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.552202][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 69.608961][ T5380] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.614149][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.618767][ T5380] bridge_slave_0: entered allmulticast mode [ 69.624779][ T5380] bridge_slave_0: entered promiscuous mode [ 69.630494][ T5380] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.634113][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.638251][ T5380] bridge_slave_1: entered allmulticast mode [ 69.642682][ T5380] bridge_slave_1: entered promiscuous mode [ 69.805041][ T5380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.816347][ T5380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.116523][ T5380] team0: Port device team_slave_0 added [ 70.172218][ T5380] team0: Port device team_slave_1 added [ 70.185088][ T45] bridge_slave_1: left allmulticast mode [ 70.188205][ T45] bridge_slave_1: left promiscuous mode [ 70.191866][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.204220][ T45] bridge_slave_0: left allmulticast mode [ 70.206811][ T45] bridge_slave_0: left promiscuous mode [ 70.209416][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.432702][ T5407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.37'. [ 70.727121][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.794948][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.825198][ T45] bond0 (unregistering): Released all slaves [ 70.891069][ T5201] Bluetooth: hci4: command tx timeout [ 71.009350][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.021141][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.065839][ T5380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.197156][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.203804][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.238802][ T5380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.393955][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396981][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556662][ T45] hsr_slave_0: left promiscuous mode [ 71.560286][ T45] hsr_slave_1: left promiscuous mode [ 71.567609][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.570428][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.581019][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.583747][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.650697][ T45] veth1_macvtap: left promiscuous mode [ 71.654947][ T45] veth0_macvtap: left promiscuous mode [ 71.657458][ T45] veth1_vlan: left promiscuous mode [ 71.660160][ T45] veth0_vlan: left promiscuous mode [ 72.319322][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 72.972225][ T5201] Bluetooth: hci4: command tx timeout [ 72.978479][ T45] team0 (unregistering): Port device team_slave_1 removed [ 73.070704][ T45] team0 (unregistering): Port device team_slave_0 removed [ 74.367945][ T5380] hsr_slave_0: entered promiscuous mode [ 74.373660][ T5380] hsr_slave_1: entered promiscuous mode [ 74.377335][ T5380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.382561][ T5380] Cannot create hsr debugfs directory [ 74.583913][ T5433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'. [ 74.746543][ T5437] netlink: 64 bytes leftover after parsing attributes in process `syz.1.44'. [ 75.040661][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 75.053306][ T5201] Bluetooth: hci4: command tx timeout [ 75.553114][ T5461] netlink: 64 bytes leftover after parsing attributes in process `syz.1.48'. [ 75.712248][ T5380] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.729329][ T5380] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.746926][ T5380] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.765405][ T5380] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.924812][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.956124][ T5380] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.972015][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.975718][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.991928][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.995689][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.285469][ T5380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.416999][ T5380] veth0_vlan: entered promiscuous mode [ 76.436623][ T5380] veth1_vlan: entered promiscuous mode [ 76.515614][ T5380] veth0_macvtap: entered promiscuous mode [ 76.548304][ T5380] veth1_macvtap: entered promiscuous mode [ 76.648557][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.657017][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.661922][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.668412][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.678164][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.698515][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.714699][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.749705][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.754948][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.759911][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.765980][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.770087][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.775679][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.783434][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.791485][ T5380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.794837][ T5380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.798671][ T5380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802840][ T5380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.961552][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.964983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.037178][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.064222][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.070467][ T5494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.52'. [ 77.132404][ T5201] Bluetooth: hci4: command tx timeout [ 77.607488][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 77.731663][ T5509] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 77.763338][ T5509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.520648][ T5514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 78.523624][ T5514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.528165][ T5514] vhci_hcd vhci_hcd.0: Device attached [ 78.539183][ T5515] usbip_core: unknown command [ 78.541693][ T5515] vhci_hcd: unknown pdu 589373486 [ 78.543990][ T5515] usbip_core: unknown command [ 78.546947][ T83] vhci_hcd: stop threads [ 78.548386][ T83] vhci_hcd: release socket [ 78.550283][ T83] vhci_hcd: disconnect device [ 78.891258][ T5524] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 78.911791][ T5524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.026405][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.223725][ T25] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 79.228531][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.237915][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.250362][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.254425][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.664983][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 79.667290][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 79.669183][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 79.671798][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 79.673740][ T25] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 79.677391][ T25] cdc_ncm 5-1:1.0: bind() failure [ 79.692660][ T25] usb 5-1: USB disconnect, device number 3 [ 80.020487][ T5528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.60'. [ 80.969021][ T5538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 80.971267][ T5538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.991205][ T5538] vhci_hcd vhci_hcd.0: Device attached [ 81.003984][ T5539] usbip_core: unknown command [ 81.006171][ T5539] vhci_hcd: unknown pdu 589373486 [ 81.008339][ T5539] usbip_core: unknown command [ 81.011851][ T1090] vhci_hcd: stop threads [ 81.013372][ T1090] vhci_hcd: release socket [ 81.015223][ T1090] vhci_hcd: disconnect device [ 81.422045][ T973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.658507][ T8] cfg80211: failed to load regulatory.db [ 81.665715][ T973] usb 6-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 81.679750][ T973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.697478][ T973] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.713902][ T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.746227][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.032380][ T5547] netlink: 64 bytes leftover after parsing attributes in process `syz.3.65'. [ 82.054346][ T5548] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 82.067520][ T5548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.258623][ T973] cdc_ncm 6-1:1.0: skipping garbage [ 82.260526][ T973] cdc_ncm 6-1:1.0: skipping garbage [ 82.266129][ T973] cdc_ncm 6-1:1.0: skipping garbage [ 82.268097][ T973] cdc_ncm 6-1:1.0: skipping garbage [ 82.273985][ T973] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 82.278527][ T973] cdc_ncm 6-1:1.0: bind() failure [ 82.289648][ T973] usb 6-1: USB disconnect, device number 2 [ 83.126180][ T5558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.67'. [ 83.285916][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'. [ 84.293883][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 85.738981][ T5586] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 85.788519][ T5586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.076325][ T5607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.82'. [ 88.377902][ T5615] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 88.441925][ T5615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.167764][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 89.853703][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.124036][ T5644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 91.227745][ T5645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.318955][ T5650] netlink: 64 bytes leftover after parsing attributes in process `syz.3.92'. [ 91.402558][ T5651] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 91.412296][ T5651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.329739][ T5657] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 92.332611][ T5657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.350706][ T5657] vhci_hcd vhci_hcd.0: Device attached [ 92.370744][ T5658] usbip_core: unknown command [ 92.373488][ T5658] vhci_hcd: unknown pdu 589373486 [ 92.375935][ T5658] usbip_core: unknown command [ 92.421081][ T46] vhci_hcd: stop threads [ 92.423114][ T46] vhci_hcd: release socket [ 92.424998][ T46] vhci_hcd: disconnect device [ 92.821130][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.008848][ T56] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 93.019021][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.026894][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.044356][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.049409][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.439202][ T56] cdc_ncm 5-1:1.0: skipping garbage [ 93.452321][ T56] cdc_ncm 5-1:1.0: skipping garbage [ 93.454803][ T56] cdc_ncm 5-1:1.0: skipping garbage [ 93.457187][ T56] cdc_ncm 5-1:1.0: skipping garbage [ 93.459682][ T56] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 93.465153][ T56] cdc_ncm 5-1:1.0: bind() failure [ 93.471321][ T56] usb 5-1: USB disconnect, device number 4 [ 94.064489][ T5680] netlink: 64 bytes leftover after parsing attributes in process `syz.2.101'. [ 94.311032][ T5682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 94.756392][ T5690] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 94.820178][ T5690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.267167][ T5700] netlink: 64 bytes leftover after parsing attributes in process `syz.2.105'. [ 95.295694][ T5704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.106'. [ 95.354131][ T5705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.107'. [ 95.864323][ T5718] netlink: 64 bytes leftover after parsing attributes in process `syz.0.109'. [ 96.607869][ T5722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 96.610865][ T5722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.616614][ T5722] vhci_hcd vhci_hcd.0: Device attached [ 96.631985][ T5723] usbip_core: unknown command [ 96.634158][ T5723] vhci_hcd: unknown pdu 589373486 [ 96.642114][ T5723] usbip_core: unknown command [ 96.653910][ T45] vhci_hcd: stop threads [ 96.655772][ T45] vhci_hcd: release socket [ 96.657885][ T45] vhci_hcd: disconnect device [ 97.050994][ T973] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 97.243371][ T973] usb 8-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 97.247864][ T973] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.260882][ T973] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.273047][ T973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.277389][ T973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.295195][ T5728] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 97.321759][ T5728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.619421][ T973] cdc_ncm 8-1:1.0: skipping garbage [ 97.630848][ T973] cdc_ncm 8-1:1.0: skipping garbage [ 97.634962][ T973] cdc_ncm 8-1:1.0: skipping garbage [ 97.637387][ T973] cdc_ncm 8-1:1.0: skipping garbage [ 97.639728][ T973] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 97.651241][ T973] cdc_ncm 8-1:1.0: bind() failure [ 97.661674][ T973] usb 8-1: USB disconnect, device number 2 [ 98.411441][ T5742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.116'. [ 98.521010][ T5743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.115'. [ 99.137638][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.119'. [ 99.611579][ T5758] netlink: 64 bytes leftover after parsing attributes in process `syz.0.120'. [ 99.736317][ T5761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.121'. [ 100.234849][ T5769] netlink: 'syz.1.122': attribute type 4 has an invalid length. [ 100.287684][ T5769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.311097][ T5774] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 101.337268][ T5774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.379944][ T5775] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 101.428695][ T5775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.448998][ T5778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.666878][ T5781] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 101.693132][ T5781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.101533][ T5784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 102.104123][ T5784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.129897][ T5784] vhci_hcd vhci_hcd.0: Device attached [ 102.441019][ T5246] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 102.550971][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.763067][ T10] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 102.767614][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.771867][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.786351][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.790293][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.840108][ T5796] netlink: 64 bytes leftover after parsing attributes in process `syz.1.129'. [ 102.909098][ T5797] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 102.929324][ T5797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.323304][ T5785] vhci_hcd: connection reset by peer [ 103.326494][ T1089] vhci_hcd: stop threads [ 103.328399][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 103.329035][ T1089] vhci_hcd: release socket [ 103.330696][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 103.330708][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 103.330717][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 103.330727][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 103.330761][ T10] cdc_ncm 5-1:1.0: bind() failure [ 103.337488][ T1089] vhci_hcd: disconnect device [ 103.353783][ T10] usb 5-1: USB disconnect, device number 5 [ 103.906769][ T5201] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 103.919800][ T5201] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 104.134738][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 105.673946][ T5824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.137'. [ 105.721045][ T4994] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 105.914727][ T4994] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.920129][ T4994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.941477][ T4994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.946011][ T4994] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.953842][ T4994] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.957867][ T4994] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.961898][ T4994] usb 7-1: Manufacturer: syz [ 105.966681][ T4994] usb 7-1: config 0 descriptor?? [ 106.449488][ T4994] usbhid 7-1:0.0: can't add hid device: -71 [ 106.481246][ T4994] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 106.492264][ T4994] usb 7-1: USB disconnect, device number 2 [ 106.919645][ T5834] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 106.922523][ T5834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.929160][ T5834] vhci_hcd vhci_hcd.0: Device attached [ 106.956132][ T5835] usbip_core: unknown command [ 106.958013][ T5835] vhci_hcd: unknown pdu 589373486 [ 106.959996][ T5835] usbip_core: unknown command [ 106.963542][ T5833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.975234][ T1090] vhci_hcd: stop threads [ 106.977200][ T1090] vhci_hcd: release socket [ 106.979194][ T1090] vhci_hcd: disconnect device [ 107.373376][ T5847] netlink: 'syz.1.143': attribute type 4 has an invalid length. [ 107.411370][ T5847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.425186][ T5846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.142'. [ 107.480211][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 107.533933][ T5246] vhci_hcd: vhci_device speed not set [ 107.673463][ T10] usb 8-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 107.679076][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.716024][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.732155][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.736046][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.243001][ T10] cdc_ncm 8-1:1.0: skipping garbage [ 108.245668][ T10] cdc_ncm 8-1:1.0: skipping garbage [ 108.247886][ T10] cdc_ncm 8-1:1.0: skipping garbage [ 108.250106][ T10] cdc_ncm 8-1:1.0: skipping garbage [ 108.284080][ T10] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 108.287045][ T10] cdc_ncm 8-1:1.0: bind() failure [ 108.351884][ T10] usb 8-1: USB disconnect, device number 3 [ 108.640290][ T5201] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 108.707751][ T5862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 109.578722][ T5201] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 109.867510][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 110.462272][ T5883] netlink: 64 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.816846][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 111.965297][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 112.049838][ T5901] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 112.054105][ T5901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.068963][ T5901] vhci_hcd vhci_hcd.0: Device attached [ 112.093802][ T5902] usbip_core: unknown command [ 112.096767][ T5898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.155'. [ 112.100940][ T5902] vhci_hcd: unknown pdu 589373486 [ 112.104081][ T5902] usbip_core: unknown command [ 112.114845][ T1089] vhci_hcd: stop threads [ 112.116903][ T1089] vhci_hcd: release socket [ 112.120653][ T1089] vhci_hcd: disconnect device [ 112.501676][ T5246] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.712577][ T5246] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 112.719943][ T5246] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.734722][ T5246] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.758488][ T5246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.762655][ T5246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.826183][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 113.122048][ T5246] cdc_ncm 5-1:1.0: skipping garbage [ 113.124288][ T5246] cdc_ncm 5-1:1.0: skipping garbage [ 113.126370][ T5246] cdc_ncm 5-1:1.0: skipping garbage [ 113.132483][ T5913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.158'. [ 113.137730][ T5246] cdc_ncm 5-1:1.0: skipping garbage [ 113.140196][ T5246] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 113.144444][ T5246] cdc_ncm 5-1:1.0: bind() failure [ 113.160326][ T5246] usb 5-1: USB disconnect, device number 6 [ 113.803303][ T5923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.160'. [ 114.215519][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'. [ 115.094134][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 115.965397][ T5949] netlink: 64 bytes leftover after parsing attributes in process `syz.0.166'. [ 116.765328][ T5956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.168'. [ 116.963794][ T5957] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 116.970551][ T5957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.983374][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.169'. [ 117.002615][ T5962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'. [ 117.299625][ T5965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.171'. [ 119.257128][ T5980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.174'. [ 120.358271][ T5988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.176'. [ 120.450310][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 122.476792][ T6010] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 122.517214][ T6010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.544737][ T6023] netlink: 64 bytes leftover after parsing attributes in process `syz.0.183'. [ 123.635304][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 123.967053][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 124.571167][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 125.029498][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 126.026593][ T6059] netlink: 64 bytes leftover after parsing attributes in process `syz.3.192'. [ 126.240908][ T973] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 126.423098][ T973] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 126.430319][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.439372][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.448527][ T973] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 126.456024][ T973] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.459939][ T973] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.469760][ T973] usb 7-1: Manufacturer: syz [ 126.477452][ T973] usb 7-1: config 0 descriptor?? [ 126.698921][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 127.121366][ T973] usbhid 7-1:0.0: can't add hid device: -71 [ 127.124008][ T973] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 127.158978][ T973] usb 7-1: USB disconnect, device number 3 [ 127.468628][ T5201] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 127.691526][ T6081] netlink: 64 bytes leftover after parsing attributes in process `syz.3.200'. [ 128.850329][ T6098] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 128.855604][ T6098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.796149][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 129.840029][ T6112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.208'. [ 130.495920][ T6117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.210'. [ 130.642865][ T6120] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 130.645883][ T6120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.661068][ T6120] vhci_hcd vhci_hcd.0: Device attached [ 130.713039][ T6121] usbip_core: unknown command [ 130.715224][ T6121] vhci_hcd: unknown pdu 589373486 [ 130.717505][ T6121] usbip_core: unknown command [ 130.731001][ T45] vhci_hcd: stop threads [ 130.732975][ T45] vhci_hcd: release socket [ 130.735192][ T45] vhci_hcd: disconnect device [ 131.170906][ T58] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 131.352525][ T58] usb 8-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 131.356450][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.368981][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.389522][ T58] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.397874][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.800571][ T58] cdc_ncm 8-1:1.0: skipping garbage [ 131.808030][ T58] cdc_ncm 8-1:1.0: skipping garbage [ 131.810763][ T58] cdc_ncm 8-1:1.0: skipping garbage [ 131.813292][ T58] cdc_ncm 8-1:1.0: skipping garbage [ 131.816106][ T58] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 131.820925][ T58] cdc_ncm 8-1:1.0: bind() failure [ 131.825906][ T58] usb 8-1: USB disconnect, device number 4 [ 131.952109][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 132.182273][ T6138] netlink: 'syz.0.214': attribute type 4 has an invalid length. [ 132.203143][ T6138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.825823][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828573][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.568368][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 133.953596][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 134.238145][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'. [ 134.556443][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 135.020722][ T6178] netlink: 64 bytes leftover after parsing attributes in process `syz.2.224'. [ 135.733721][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 136.476281][ T5201] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 137.476482][ T6202] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 137.652484][ T6206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.231'. [ 138.030747][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'. [ 138.881196][ T5244] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 138.911514][ T6220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.235'. [ 139.074122][ T5244] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.079412][ T5244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.084688][ T5244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.089724][ T5244] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.098917][ T5244] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.103491][ T5244] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.113241][ T5244] usb 8-1: Manufacturer: syz [ 139.138811][ T5244] usb 8-1: config 0 descriptor?? [ 139.799466][ T5244] usbhid 8-1:0.0: can't add hid device: -71 [ 139.801642][ T5244] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 139.816574][ T5244] usb 8-1: USB disconnect, device number 5 [ 140.519693][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 140.541985][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 141.477906][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 142.436056][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 142.507237][ T6276] netlink: 'syz.2.249': attribute type 4 has an invalid length. [ 142.541048][ T6276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.208154][ T5201] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 143.211192][ T6279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.250'. [ 143.609556][ T6291] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 143.612389][ T6291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.618702][ T6291] vhci_hcd vhci_hcd.0: Device attached [ 143.650546][ T6292] usbip_core: unknown command [ 143.652881][ T6292] vhci_hcd: unknown pdu 589373486 [ 143.660567][ T6292] usbip_core: unknown command [ 143.669901][ T83] vhci_hcd: stop threads [ 143.672341][ T83] vhci_hcd: release socket [ 143.672406][ T83] vhci_hcd: disconnect device [ 143.761202][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 144.100921][ T4994] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 144.181553][ T6297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.255'. [ 144.296150][ T4994] usb 7-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 144.309672][ T4994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.316554][ T4994] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.329429][ T4994] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.334481][ T4994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.676299][ T4994] cdc_ncm 7-1:1.0: skipping garbage [ 144.678444][ T4994] cdc_ncm 7-1:1.0: skipping garbage [ 144.680758][ T4994] cdc_ncm 7-1:1.0: skipping garbage [ 144.684310][ T4994] cdc_ncm 7-1:1.0: skipping garbage [ 144.686588][ T4994] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 144.689411][ T4994] cdc_ncm 7-1:1.0: bind() failure [ 144.706874][ T4994] usb 7-1: USB disconnect, device number 4 [ 144.719132][ T5204] udevd[5204]: setting mode of /dev/bus/usb/007/004 to 020664 failed: No such file or directory [ 144.724206][ T5204] udevd[5204]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory [ 146.682618][ T5201] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 147.695347][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 147.751971][ T6354] syz.0.271 uses obsolete (PF_INET,SOCK_PACKET) [ 148.490927][ T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 148.675426][ T58] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.679938][ T58] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.684088][ T58] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.692460][ T58] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.696211][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.699803][ T58] usb 7-1: Product: syz [ 148.701485][ T58] usb 7-1: Manufacturer: syz [ 148.703159][ T58] usb 7-1: SerialNumber: syz [ 148.711609][ T58] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 148.713948][ T58] cdc_ncm 7-1:1.0: bind() failure [ 149.070539][ T5244] usb 7-1: USB disconnect, device number 5 [ 150.271071][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.461695][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.472785][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.485465][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.502674][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.509342][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.513365][ T58] usb 5-1: Product: syz [ 150.515181][ T58] usb 5-1: Manufacturer: syz [ 150.520870][ T58] usb 5-1: SerialNumber: syz [ 150.528340][ T58] usb 5-1: selecting invalid altsetting 1 [ 151.053730][ T58] cdc_ncm 5-1:1.0: bind() failure [ 151.059532][ T58] cdc_ncm 5-1:1.1: skipping garbage [ 151.064297][ T58] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 151.066853][ T58] cdc_ncm 5-1:1.1: bind() failure [ 151.073375][ T58] usb 5-1: USB disconnect, device number 7 [ 151.429958][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 151.438470][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 151.546343][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 152.809598][ T39] audit: type=1400 audit(1720504077.912:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=6488 comm="syz.2.321" [ 152.834597][ T5246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.043118][ T5246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.047546][ T5246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.055670][ T5246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.066079][ T5246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.070185][ T5246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.078478][ T5246] usb 5-1: Product: syz [ 153.080374][ T5246] usb 5-1: Manufacturer: syz [ 153.082789][ T5246] usb 5-1: SerialNumber: syz [ 153.099948][ T5246] usb 5-1: selecting invalid altsetting 1 [ 153.102147][ T39] audit: type=1400 audit(1720504078.202:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=6506 comm="syz.1.330" [ 153.370024][ T6535] Illegal XDP return value 4294967294 on prog (id 179) dev N/A, expect packet loss! [ 153.642420][ T5246] cdc_ncm 5-1:1.0: bind() failure [ 153.654552][ T5246] cdc_ncm 5-1:1.1: skipping garbage [ 153.656679][ T5246] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 153.659592][ T5246] cdc_ncm 5-1:1.1: bind() failure [ 153.663975][ T5246] usb 5-1: USB disconnect, device number 8 [ 153.670588][ T6555] Zero length message leads to an empty skb [ 153.724301][ T6560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.852062][ T5201] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 153.856096][ T5201] Bluetooth: hci0: Injecting HCI hardware error event [ 153.860009][ T5214] Bluetooth: hci0: hardware error 0x00 [ 154.090904][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 154.194294][ T5201] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 154.274597][ T6590] netlink: 176 bytes leftover after parsing attributes in process `syz.1.367'. [ 154.278601][ T6590] netlink: 176 bytes leftover after parsing attributes in process `syz.1.367'. [ 154.282621][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.286752][ T25] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.290982][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.300108][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.303764][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.307047][ T25] usb 7-1: Product: syz [ 154.308788][ T25] usb 7-1: Manufacturer: syz [ 154.310760][ T25] usb 7-1: SerialNumber: syz [ 154.564183][ T25] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.757898][ T25] usb 7-1: USB disconnect, device number 6 [ 154.780730][ T25] usblp0: removed [ 155.249285][ T6627] syz.3.382[6627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.249422][ T6627] syz.3.382[6627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.931237][ T5214] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 156.726886][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 157.182002][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 157.829310][ T39] audit: type=1326 audit(1720504082.932:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.842509][ T39] audit: type=1326 audit(1720504082.932:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.865010][ T39] audit: type=1326 audit(1720504082.972:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.881696][ T39] audit: type=1326 audit(1720504082.972:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.896020][ T39] audit: type=1326 audit(1720504082.972:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.913120][ T39] audit: type=1326 audit(1720504082.982:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.925386][ T39] audit: type=1326 audit(1720504082.982:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.935252][ T39] audit: type=1326 audit(1720504082.982:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.944603][ T39] audit: type=1326 audit(1720504082.992:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 157.952377][ T39] audit: type=1326 audit(1720504082.992:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 158.441605][ T5246] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.569210][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 158.634538][ T5246] usb 6-1: Using ep0 maxpacket: 16 [ 158.639717][ T5246] usb 6-1: config 0 has no interfaces? [ 158.643494][ T5246] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.650956][ T5246] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.654089][ T5246] usb 6-1: Product: syz [ 158.655795][ T5246] usb 6-1: Manufacturer: syz [ 158.672386][ T5246] r8152-cfgselector 6-1: Unknown version 0x0000 [ 158.674549][ T5246] r8152-cfgselector 6-1: config 0 descriptor?? [ 158.970974][ T5214] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 158.974671][ T5214] Bluetooth: hci4: Injecting HCI hardware error event [ 158.978754][ T5214] Bluetooth: hci4: hardware error 0x00 [ 159.406199][ T6786] warning: `syz.0.440' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.629116][ T5201] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 160.797245][ T6837] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.951059][ T5246] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 161.050934][ T5214] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 161.131007][ T5246] usb 7-1: Using ep0 maxpacket: 8 [ 161.145252][ T5246] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 161.149277][ T5246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.161105][ T5246] usb 7-1: SerialNumber: syz [ 161.174519][ T5246] usb 7-1: config 0 descriptor?? [ 161.192844][ T58] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 161.386705][ T35] usb 7-1: USB disconnect, device number 7 [ 161.500956][ T5246] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 161.706609][ T5246] usb 8-1: config 0 has no interfaces? [ 161.709545][ T5246] usb 8-1: string descriptor 0 read error: -22 [ 161.712560][ T5246] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.716127][ T5246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.725078][ T5246] usb 8-1: config 0 descriptor?? [ 161.793865][ T6873] 9pnet_virtio: no channels available for device [ 161.941125][ T5239] usb 8-1: USB disconnect, device number 6 [ 162.010952][ T5214] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 162.015596][ T5214] Bluetooth: hci2: Injecting HCI hardware error event [ 162.019137][ T5214] Bluetooth: hci2: hardware error 0x00 [ 162.574288][ T6904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.513306][ T6926] Bluetooth: MGMT ver 1.22 [ 163.849574][ T6960] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.514'. [ 163.856265][ T6957] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.514'. [ 164.091402][ T5214] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 164.423771][ T7011] syz_tun: entered promiscuous mode [ 164.426667][ T7011] macvtap1: entered promiscuous mode [ 164.429173][ T7011] macvtap1: entered allmulticast mode [ 164.434754][ T7011] syz_tun: entered allmulticast mode [ 164.437893][ T7011] syz_tun: left allmulticast mode [ 164.439730][ T7011] syz_tun: left promiscuous mode [ 164.920885][ T35] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 165.110862][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 165.125571][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.130055][ T35] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 165.137489][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.146897][ T35] usb 7-1: config 0 descriptor?? [ 165.152182][ T35] rndis_host 7-1:0.0: skipping garbage [ 165.154674][ T35] usb 7-1: bad CDC descriptors [ 165.365180][ T35] usb 7-1: USB disconnect, device number 8 [ 165.988555][ T7058] syz_tun: entered promiscuous mode [ 165.991064][ T7058] macvtap1: entered promiscuous mode [ 165.994600][ T7058] macvtap1: entered allmulticast mode [ 165.998106][ T7058] syz_tun: entered allmulticast mode [ 166.006432][ T7058] syz_tun: left allmulticast mode [ 166.011642][ T7058] syz_tun: left promiscuous mode [ 166.316093][ T7063] hsr0: entered promiscuous mode [ 166.534802][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.563'. [ 167.030848][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 167.082505][ T7099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.574'. [ 167.220981][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 167.227863][ T35] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 167.231658][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.234793][ T35] usb 7-1: Product: syz [ 167.240834][ T35] usb 7-1: Manufacturer: syz [ 167.246370][ T35] r8152-cfgselector 7-1: Unknown version 0x0000 [ 167.250858][ T35] r8152-cfgselector 7-1: config 0 descriptor?? [ 167.322903][ T5201] Bluetooth: Unexpected continuation frame (len 18) [ 167.367625][ T7098] input: syz0 as /devices/virtual/input/input5 [ 167.472234][ T35] r8152-cfgselector 7-1: Needed 1 retries to read version [ 167.475312][ T35] r8152-cfgselector 7-1: Unknown version 0x0000 [ 167.477598][ T35] r8152-cfgselector 7-1: bad CDC descriptors [ 167.675957][ T25] r8152-cfgselector 7-1: USB disconnect, device number 9 [ 167.712659][ T7126] team0: Device ipvlan2 is already an upper device of the team interface [ 168.073154][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 168.073165][ T39] audit: type=1326 audit(1720504093.182:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.590" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 168.444374][ T7162] syz_tun: entered promiscuous mode [ 168.446405][ T7162] macvtap1: entered promiscuous mode [ 168.448291][ T7162] macvtap1: entered allmulticast mode [ 168.450190][ T7162] syz_tun: entered allmulticast mode [ 168.455673][ T7162] syz_tun: left allmulticast mode [ 168.457614][ T7162] syz_tun: left promiscuous mode [ 169.212303][ T5201] Bluetooth: hci3: command 0x0405 tx timeout [ 169.717513][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 170.300911][ T5239] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 170.494577][ T5239] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.499443][ T5239] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.504978][ T5239] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.508291][ T5239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.511252][ T5239] usb 8-1: SerialNumber: syz [ 170.730746][ T5239] usb 8-1: 0:2 : does not exist [ 170.759698][ T5239] usb 8-1: USB disconnect, device number 7 [ 170.992103][ T5204] udevd[5204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.051098][ T5201] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 171.054176][ T5201] Bluetooth: hci3: Injecting HCI hardware error event [ 171.057434][ T5214] Bluetooth: hci3: hardware error 0x00 [ 171.953684][ T7319] overlayfs: failed to resolve './file0': -2 [ 172.063773][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.659'. [ 172.424006][ T7344] usb usb8: usbfs: process 7344 (syz.0.661) did not claim interface 0 before use [ 173.011352][ T5246] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 173.132107][ T5214] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 173.197299][ T5246] usb 8-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.203804][ T5246] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 173.208236][ T5246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.224170][ T5246] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 173.418376][ T7356] pim6reg1: entered promiscuous mode [ 173.420718][ T7356] pim6reg1: entered allmulticast mode [ 173.432459][ T5246] usb 8-1: USB disconnect, device number 8 [ 173.736960][ T7362] usb usb8: usbfs: process 7362 (syz.1.671) did not claim interface 0 before use [ 174.454337][ T7381] overlayfs: failed to resolve './file0': -2 [ 174.822779][ T7395] pim6reg1: entered promiscuous mode [ 174.824945][ T7395] pim6reg1: entered allmulticast mode [ 175.192583][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.300022][ T7423] netlink: 'syz.2.694': attribute type 9 has an invalid length. [ 175.393174][ T25] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.399994][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 175.403407][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.412240][ T25] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 175.625747][ T25] usb 6-1: USB disconnect, device number 4 [ 175.950060][ T7433] ------------[ cut here ]------------ [ 175.952492][ T7433] WARNING: CPU: 3 PID: 7433 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x1fce/0x2460 [ 175.956128][ T7433] Modules linked in: [ 175.957960][ T7433] CPU: 3 PID: 7433 Comm: syz.3.697 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 175.964046][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.968536][ T7433] RIP: 0010:__alloc_pages_noprof+0x1fce/0x2460 [ 175.971226][ T7433] Code: ef e8 26 69 0b 00 e9 ef f2 ff ff e8 1c 69 0b 00 e9 1b f3 ff ff 4c 89 f7 e8 0f 69 0b 00 e9 f6 f2 ff ff c6 05 6b c0 eb 0d 01 90 <0f> 0b 90 e9 81 e4 ff ff 49 8d bc 24 48 09 00 00 48 b8 00 00 00 00 [ 175.979777][ T7433] RSP: 0018:ffffc9000650f7a8 EFLAGS: 00010246 [ 175.982462][ T7433] RAX: 0000000000000000 RBX: 00000000007a1200 RCX: 0000000000000000 [ 175.985864][ T7433] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 175.989299][ T7433] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 175.992998][ T7433] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000040dc0 [ 175.996404][ T7433] R13: 1ffff92000ca1f09 R14: 00000000007a1200 R15: ffffffff851325fd [ 175.999852][ T7433] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5d65b40 [ 176.003868][ T7433] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 176.006859][ T7433] CR2: 00000000203d0000 CR3: 0000000012268000 CR4: 0000000000350ef0 [ 176.010437][ T7433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.013764][ T7433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.016494][ T7433] Call Trace: [ 176.017689][ T7433] [ 176.018729][ T7433] ? show_regs+0x8c/0xa0 [ 176.020235][ T7433] ? __warn+0xe5/0x3c0 [ 176.021702][ T7433] ? __alloc_pages_noprof+0x1fce/0x2460 [ 176.023948][ T7433] ? report_bug+0x3c0/0x580 [ 176.025998][ T7433] ? handle_bug+0x3d/0x70 [ 176.028023][ T7433] ? exc_invalid_op+0x17/0x50 [ 176.030251][ T7433] ? asm_exc_invalid_op+0x1a/0x20 [ 176.032619][ T7433] ? drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.035362][ T7433] ? __alloc_pages_noprof+0x1fce/0x2460 [ 176.037852][ T7433] ? count_memcg_event_mm.part.0+0x12c/0x340 [ 176.040507][ T7433] ? __pfx_lock_release+0x10/0x10 [ 176.042781][ T7433] ? find_held_lock+0x2d/0x110 [ 176.044933][ T7433] ? __up_read+0x1fb/0x760 [ 176.046923][ T7433] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 176.049454][ T7433] ? irqentry_exit+0x3b/0x90 [ 176.051570][ T7433] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.053886][ T7433] ? drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.056552][ T7433] __kmalloc_large_node+0x7f/0x1a0 [ 176.058843][ T7433] __kmalloc_noprof.cold+0xc/0x61 [ 176.061112][ T7433] ? _copy_from_user+0x5d/0xf0 [ 176.063222][ T7433] drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.065782][ T7433] ? lockdep_hardirqs_on_prepare+0x380/0x420 [ 176.068378][ T7433] ? __pfx___lock_acquire+0x10/0x10 [ 176.070715][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.073582][ T7433] ? lock_acquire+0x1b1/0x560 [ 176.075662][ T7433] ? find_held_lock+0x2d/0x110 [ 176.077780][ T7433] ? drm_is_current_master+0x2c/0x40 [ 176.080091][ T7433] ? do_raw_spin_unlock+0x172/0x230 [ 176.082481][ T7433] drm_ioctl_kernel+0x1ec/0x3e0 [ 176.084616][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.087436][ T7433] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 176.089811][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.092749][ T7433] drm_ioctl+0x584/0xbb0 [ 176.094641][ T7433] ? __pfx_drm_ioctl+0x10/0x10 [ 176.096786][ T7433] drm_compat_ioctl+0x32d/0x470 [ 176.098976][ T7433] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 176.101542][ T7433] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 176.103897][ T7433] __do_compat_sys_ioctl+0x2c3/0x330 [ 176.106236][ T7433] __do_fast_syscall_32+0x73/0x120 [ 176.108480][ T7433] do_fast_syscall_32+0x32/0x80 [ 176.110654][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.113511][ T7433] RIP: 0023:0xf744d579 [ 176.115316][ T7433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.123639][ T7433] RSP: 002b:00000000f5d6557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 176.127630][ T7433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 176.131380][ T7433] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.135158][ T7433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.138894][ T7433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.142761][ T7433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.146117][ T7433] [ 176.147451][ T7433] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.150539][ T7433] CPU: 3 PID: 7433 Comm: syz.3.697 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 176.154776][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.159402][ T7433] Call Trace: [ 176.160912][ T7433] [ 176.162225][ T7433] dump_stack_lvl+0x3d/0x1f0 [ 176.164282][ T7433] panic+0x6f5/0x7a0 [ 176.166013][ T7433] ? __pfx_panic+0x10/0x10 [ 176.167973][ T7433] ? show_trace_log_lvl+0x363/0x500 [ 176.170270][ T7433] ? __alloc_pages_noprof+0x1fce/0x2460 [ 176.172680][ T7433] check_panic_on_warn+0xab/0xb0 [ 176.174816][ T7433] __warn+0xf1/0x3c0 [ 176.176512][ T7433] ? __alloc_pages_noprof+0x1fce/0x2460 [ 176.178857][ T7433] report_bug+0x3c0/0x580 [ 176.180793][ T7433] handle_bug+0x3d/0x70 [ 176.182662][ T7433] exc_invalid_op+0x17/0x50 [ 176.184672][ T7433] asm_exc_invalid_op+0x1a/0x20 [ 176.186813][ T7433] RIP: 0010:__alloc_pages_noprof+0x1fce/0x2460 [ 176.189341][ T7433] Code: ef e8 26 69 0b 00 e9 ef f2 ff ff e8 1c 69 0b 00 e9 1b f3 ff ff 4c 89 f7 e8 0f 69 0b 00 e9 f6 f2 ff ff c6 05 6b c0 eb 0d 01 90 <0f> 0b 90 e9 81 e4 ff ff 49 8d bc 24 48 09 00 00 48 b8 00 00 00 00 [ 176.197234][ T7433] RSP: 0018:ffffc9000650f7a8 EFLAGS: 00010246 [ 176.199961][ T7433] RAX: 0000000000000000 RBX: 00000000007a1200 RCX: 0000000000000000 [ 176.203515][ T7433] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 [ 176.206975][ T7433] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 176.210389][ T7433] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000040dc0 [ 176.213581][ T7433] R13: 1ffff92000ca1f09 R14: 00000000007a1200 R15: ffffffff851325fd [ 176.216784][ T7433] ? drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.219370][ T7433] ? count_memcg_event_mm.part.0+0x12c/0x340 [ 176.221801][ T7433] ? __pfx_lock_release+0x10/0x10 [ 176.223849][ T7433] ? find_held_lock+0x2d/0x110 [ 176.225942][ T7433] ? __up_read+0x1fb/0x760 [ 176.227874][ T7433] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 176.230338][ T7433] ? irqentry_exit+0x3b/0x90 [ 176.232228][ T7433] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.234280][ T7433] ? drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.236822][ T7433] __kmalloc_large_node+0x7f/0x1a0 [ 176.238989][ T7433] __kmalloc_noprof.cold+0xc/0x61 [ 176.241079][ T7433] ? _copy_from_user+0x5d/0xf0 [ 176.242931][ T7433] drm_mode_create_lease_ioctl+0x4bd/0x1f70 [ 176.245490][ T7433] ? lockdep_hardirqs_on_prepare+0x380/0x420 [ 176.248049][ T7433] ? __pfx___lock_acquire+0x10/0x10 [ 176.250101][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.252806][ T7433] ? lock_acquire+0x1b1/0x560 [ 176.254800][ T7433] ? find_held_lock+0x2d/0x110 [ 176.256866][ T7433] ? drm_is_current_master+0x2c/0x40 [ 176.259122][ T7433] ? do_raw_spin_unlock+0x172/0x230 [ 176.261348][ T7433] drm_ioctl_kernel+0x1ec/0x3e0 [ 176.263444][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.266243][ T7433] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 176.268568][ T7433] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 176.271381][ T7433] drm_ioctl+0x584/0xbb0 [ 176.273299][ T7433] ? __pfx_drm_ioctl+0x10/0x10 [ 176.275426][ T7433] drm_compat_ioctl+0x32d/0x470 [ 176.277599][ T7433] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 176.280068][ T7433] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 176.282451][ T7433] __do_compat_sys_ioctl+0x2c3/0x330 [ 176.284763][ T7433] __do_fast_syscall_32+0x73/0x120 [ 176.286812][ T7433] do_fast_syscall_32+0x32/0x80 [ 176.288685][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.291448][ T7433] RIP: 0023:0xf744d579 [ 176.293238][ T7433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.301287][ T7433] RSP: 002b:00000000f5d6557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 176.304824][ T7433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 176.308136][ T7433] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.311325][ T7433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.314684][ T7433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.318012][ T7433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.321359][ T7433] [ 176.323282][ T7433] Kernel Offset: disabled [ 176.325163][ T7433] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:48:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000000d0 RCX=ffffffff81f523bb RDX=00000000000000d0 RSI=00000000ffffffff RDI=00000000ffffffff RBP=ffff88801ee5c688 RSP=ffffc90000f4f728 R8 =0000000000000004 R9 =00000000000000d3 R10=00000000000000d1 R11=0000000000000001 R12=dffffc0000000000 R13=00000000000000d3 R14=0000000000000000 R15=ffff8880273a5c00 RIP=ffffffff818e899c RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c323df7 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000040000 RBX=ffffea0001230d40 RCX=ffffc90002f69000 RDX=0000000000040000 RSI=ffffffff81dc0634 RDI=ffffea0001230d40 RBP=0000000000000000 RSP=ffffc9000c7df860 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000002 R12=ffffea0001230d40 R13=ffff8880293fbe88 R14=0000000000000027 R15=0000000000000000 RIP=ffffffff818e8e90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2da15b CR3=000000002070e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90003447838 RCX=ffffffff8acf60aa RDX=0000000000000003 RSI=0000000000000003 RDI=0000000000000002 RBP=0000000000000003 RSP=ffffc90003447780 R8 =0000000000000001 R9 =fffff52000688ef0 R10=0000000000000003 R11=0000000000000005 R12=0000000000000003 R13=0000000000001cca R14=dffffc0000000000 R15=ffffed10023dbb24 RIP=ffffffff818e89cb RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f76d26bbd00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563638cef000 CR3=000000001fed2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a e3c4044ae3c4044a ZMM22=3218669332186693 3218669332186693 3218669332186693 3218669332186693 3218669332186693 3218669332186693 3218669332186693 3218669332186693 ZMM23=52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 52b87f8252b87f82 ZMM24=82c9560482c95604 82c9560482c95604 82c9560482c95604 82c9560482c95604 82c9560482c95604 82c9560482c95604 82c9560482c95604 82c9560482c95604 ZMM25=e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f e1eede9fe1eede9f ZMM26=61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a 61c9400a61c9400a ZMM27=1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b 1c79756b1c79756b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=410b0000410b0000 410b0000410b0000 410b0000410b0000 410b0000410b0000 410b0000410b0000 410b0000410b0000 410b0000410b0000 410b0000410b0000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f94295 RDI=ffffffff94d59e00 RBP=ffffffff94d59dc0 RSP=ffffc9000650f190 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000037 R14=ffffffff84f94230 R15=0000000000000000 RIP=ffffffff84f942bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203d0000 CR3=0000000012268000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000