last executing test programs: 38.420729027s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 38.184171999s ago: executing program 1 (id=6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x9, 0x2, 0x0, 0x4, 0x8d, "0000c83700"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 37.075696543s ago: executing program 1 (id=11): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 36.94963107s ago: executing program 32 (id=11): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 4.285631159s ago: executing program 4 (id=280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.399146728s ago: executing program 4 (id=283): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.081695749s ago: executing program 4 (id=284): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000f40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) close(r3) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 2.68243507s ago: executing program 0 (id=286): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b14, 0x0) 2.493765991s ago: executing program 4 (id=287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40154a000000b3aaf53978ea52dc82903190f43b146bbb183374ddf059668d28f6"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.415140924s ago: executing program 3 (id=288): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x20, 0x4, 0x1, 0x0, 0x2000}) 2.162165874s ago: executing program 3 (id=290): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.095516142s ago: executing program 0 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.965666376s ago: executing program 2 (id=293): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x100, 0x9, 0x7fffffff, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x6, 0x6, 0x6, 0x80000001, 0x1ff, 0xfd, 0xfffffffc, 0x803, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x3, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x8, 0x3, 0x3) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, &(0x7f0000000380)) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r7 = syz_io_uring_setup(0x11, &(0x7f0000000000)={0x0, 0x6, 0x100, 0x2, 0x399}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) shmctl$IPC_RMID(r6, 0x0) 1.672518207s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) lseek(r0, 0x6, 0x3) 1.585305356s ago: executing program 2 (id=295): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000f40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) close(r3) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 1.355295233s ago: executing program 2 (id=296): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) 1.224956132s ago: executing program 2 (id=297): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x20, 0x4, 0x1, 0x0, 0x2000}) 1.224419235s ago: executing program 3 (id=298): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a4000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d600012802c0001800a0001006c696d69740000001c0002800c00fd922e47e1a97704d46a024000000000000010000c000140000000000000008b300001800a0001006c696d6974000000200002800c000240000000000000d236080003400000000e080004400000ed"], 0xec}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1.224182798s ago: executing program 0 (id=299): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readahead(0xffffffffffffffff, 0x2, 0x5) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 1.223821398s ago: executing program 2 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) 1.155514841s ago: executing program 3 (id=301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r1, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.083564554s ago: executing program 3 (id=302): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x101, 0xfffd, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x7, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x6, 0xfffffffffffffffd, 0x200, 0x3, 0x0, 0x6, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) userfaultfd(0x80001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 875.226492ms ago: executing program 4 (id=303): syz_io_uring_setup(0x29d7, &(0x7f0000000480)={0x0, 0x8552, 0x10, 0x1, 0x1ab}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$inet6_sctp(0xa, 0x801, 0x84) socket$pppoe(0x18, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x24c401, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) poll(0x0, 0x0, 0x9) 684.634838ms ago: executing program 0 (id=304): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 604.906082ms ago: executing program 4 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000) write(r0, &(0x7f00000004c0)='\n', 0x1) 525.380064ms ago: executing program 0 (id=306): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)='c', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='0\x00'], 0x278}}], 0x2, 0x800) 365.293628ms ago: executing program 0 (id=307): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21236' (ED25519) to the list of known hosts. [ 49.728055][ T5661] cgroup: Unknown subsys name 'net' [ 49.901185][ T5661] cgroup: Unknown subsys name 'cpuset' [ 49.908039][ T5661] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.299303][ T5661] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.825179][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.828669][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.830411][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.834671][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.834712][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.844828][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.845782][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.846165][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.846770][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.847075][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.847731][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.848630][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.848801][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.853211][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.865456][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.865698][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.866343][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.868384][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.871157][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.873702][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.693068][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.698634][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.701902][ T5745] bridge_slave_0: entered allmulticast mode [ 57.706781][ T5745] bridge_slave_0: entered promiscuous mode [ 57.754038][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.757325][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.760331][ T5745] bridge_slave_1: entered allmulticast mode [ 57.764354][ T5745] bridge_slave_1: entered promiscuous mode [ 57.843430][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.885949][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.899946][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.902945][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.905910][ T5744] bridge_slave_0: entered allmulticast mode [ 57.909840][ T5744] bridge_slave_0: entered promiscuous mode [ 57.915739][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.918636][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.921505][ T5744] bridge_slave_1: entered allmulticast mode [ 57.925325][ T5744] bridge_slave_1: entered promiscuous mode [ 57.953733][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.957273][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.960612][ T5746] bridge_slave_0: entered allmulticast mode [ 57.965114][ T5746] bridge_slave_0: entered promiscuous mode [ 57.971089][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.974549][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.978361][ T5746] bridge_slave_1: entered allmulticast mode [ 57.982842][ T5746] bridge_slave_1: entered promiscuous mode [ 57.999346][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.002340][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.005211][ T5747] bridge_slave_0: entered allmulticast mode [ 58.009328][ T5747] bridge_slave_0: entered promiscuous mode [ 58.014316][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.017295][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.020113][ T5747] bridge_slave_1: entered allmulticast mode [ 58.023804][ T5747] bridge_slave_1: entered promiscuous mode [ 58.051292][ T5745] team0: Port device team_slave_0 added [ 58.103748][ T5745] team0: Port device team_slave_1 added [ 58.109275][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.116129][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.123310][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.140772][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.146720][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.153108][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.195501][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.198713][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.209197][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.227817][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.230756][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.241097][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.271890][ T5747] team0: Port device team_slave_0 added [ 58.283037][ T5744] team0: Port device team_slave_0 added [ 58.287239][ T5746] team0: Port device team_slave_0 added [ 58.291868][ T5747] team0: Port device team_slave_1 added [ 58.307612][ T5744] team0: Port device team_slave_1 added [ 58.312120][ T5746] team0: Port device team_slave_1 added [ 58.367725][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.370036][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.378647][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.392798][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.395205][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.403418][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.425899][ T5745] hsr_slave_0: entered promiscuous mode [ 58.429608][ T5745] hsr_slave_1: entered promiscuous mode [ 58.433630][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.436562][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.446814][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.466407][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.469088][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.479028][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.484664][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.487783][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.498268][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.503296][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.506011][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.515138][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.598164][ T5746] hsr_slave_0: entered promiscuous mode [ 58.600505][ T5746] hsr_slave_1: entered promiscuous mode [ 58.602673][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 58.604540][ T5746] Cannot create hsr debugfs directory [ 58.635442][ T5747] hsr_slave_0: entered promiscuous mode [ 58.638866][ T5747] hsr_slave_1: entered promiscuous mode [ 58.641818][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 58.643652][ T5747] Cannot create hsr debugfs directory [ 58.693508][ T5744] hsr_slave_0: entered promiscuous mode [ 58.696841][ T5744] hsr_slave_1: entered promiscuous mode [ 58.700481][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 58.702650][ T5744] Cannot create hsr debugfs directory [ 58.888037][ T5749] Bluetooth: hci1: command tx timeout [ 58.967004][ T5749] Bluetooth: hci2: command tx timeout [ 58.967610][ T5102] Bluetooth: hci3: command tx timeout [ 58.971179][ T5755] Bluetooth: hci0: command tx timeout [ 59.131242][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.145923][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.150061][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.158184][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.172942][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.180929][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.184872][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.193032][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.263319][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.270427][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.274333][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.281428][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.289440][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.294601][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.299149][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.304199][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.374325][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.387582][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.398090][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.405013][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.409469][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.418305][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.422128][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.430330][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.523981][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.534289][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.555464][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.565022][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.582145][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.592755][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.597332][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.605043][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.652186][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.702104][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.715511][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.728377][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.732105][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.751673][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.754720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.782760][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.793055][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.829480][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.832541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.853166][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.856112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.868744][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.894910][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.897933][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.905618][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.908744][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.999192][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.041127][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.055353][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.058323][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.071979][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.074860][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.283349][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.342140][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.347675][ T5745] veth0_vlan: entered promiscuous mode [ 60.367213][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.373175][ T5745] veth1_vlan: entered promiscuous mode [ 60.440280][ T5746] veth0_vlan: entered promiscuous mode [ 60.449726][ T5745] veth0_macvtap: entered promiscuous mode [ 60.457967][ T5745] veth1_macvtap: entered promiscuous mode [ 60.474286][ T5747] veth0_vlan: entered promiscuous mode [ 60.480075][ T5746] veth1_vlan: entered promiscuous mode [ 60.498008][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.505878][ T5747] veth1_vlan: entered promiscuous mode [ 60.511881][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.518976][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.602262][ T5747] veth0_macvtap: entered promiscuous mode [ 60.621410][ T5746] veth0_macvtap: entered promiscuous mode [ 60.630398][ T5747] veth1_macvtap: entered promiscuous mode [ 60.668792][ T5744] veth0_vlan: entered promiscuous mode [ 60.669179][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.672970][ T5746] veth1_macvtap: entered promiscuous mode [ 60.675933][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.688441][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.700954][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.720409][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.723206][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.723406][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.732399][ T5744] veth1_vlan: entered promiscuous mode [ 60.742974][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.767268][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.780599][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.821049][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.852699][ T5744] veth0_macvtap: entered promiscuous mode [ 60.853165][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 60.873529][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 60.879961][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 60.908787][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 60.910800][ T5744] veth1_macvtap: entered promiscuous mode [ 60.959817][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.967274][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.967926][ T5755] Bluetooth: hci1: command tx timeout [ 60.987202][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.991779][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.998655][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.002133][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.011175][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.016834][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.033167][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.044829][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.047537][ T5755] Bluetooth: hci2: command tx timeout [ 61.047566][ T5749] Bluetooth: hci0: command tx timeout [ 61.048914][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.048994][ T5755] Bluetooth: hci3: command tx timeout [ 61.053898][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.060810][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.088582][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.105052][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.119731][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.156559][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.161060][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.240183][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.251007][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.266483][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.313915][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.321347][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.332808][ T5899] Zero length message leads to an empty skb [ 61.356670][ T5615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.359631][ T5615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.360909][ T5902] ======================================================= [ 61.360909][ T5902] WARNING: The mand mount option has been deprecated and [ 61.360909][ T5902] and is ignored by this kernel. Remove the mand [ 61.360909][ T5902] option from the mount to silence this warning. [ 61.360909][ T5902] ======================================================= [ 61.378732][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.385536][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.407288][ T5615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.411276][ T5615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.608383][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 61.637125][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.814768][ T5896] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 61.819501][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.824191][ T5896] usb 7-1: Product: syz [ 61.826199][ T5896] usb 7-1: Manufacturer: syz [ 61.829458][ T5896] usb 7-1: SerialNumber: syz [ 61.835889][ T5896] usb 7-1: config 0 descriptor?? [ 61.849569][ T5896] ch341 7-1:0.0: ch341-uart converter detected [ 62.257244][ T5896] usb 7-1: failed to send control message: -71 [ 62.263481][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 62.296127][ T5896] usb 7-1: USB disconnect, device number 2 [ 62.304086][ T5896] ch341 7-1:0.0: device disconnected [ 62.483148][ T5615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.521258][ T40] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.690026][ T40] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.694729][ T40] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.701166][ T40] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 62.707953][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.741419][ T40] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 62.769426][ T40] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 62.780067][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.786355][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.791065][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.797650][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.802057][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.056463][ T5755] Bluetooth: hci1: command tx timeout [ 63.090459][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 63.126760][ T5755] Bluetooth: hci2: command tx timeout [ 63.129879][ T5749] Bluetooth: hci0: command tx timeout [ 63.249106][ T5615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.277685][ T5916] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 63.289835][ T5916] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 63.297511][ T5916] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 63.541043][ T5916] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 63.578090][ T5615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.590475][ T29] usb 8-1: USB disconnect, device number 2 [ 63.628744][ T29] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 63.637981][ T29] spcp8x5 8-1:1.0: device disconnected [ 64.029296][ T5615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.110952][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.113860][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.117195][ T5919] bridge_slave_0: entered allmulticast mode [ 64.122855][ T5919] bridge_slave_0: entered promiscuous mode [ 64.130744][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.135324][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.138596][ T5919] bridge_slave_1: entered allmulticast mode [ 64.142538][ T5919] bridge_slave_1: entered promiscuous mode [ 64.197265][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.265096][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.384279][ T5919] team0: Port device team_slave_0 added [ 64.415122][ T5919] team0: Port device team_slave_1 added [ 64.489339][ T5615] bridge_slave_1: left allmulticast mode [ 64.492777][ T5615] bridge_slave_1: left promiscuous mode [ 64.498988][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.564720][ T5615] bridge_slave_0: left allmulticast mode [ 64.570905][ T5615] bridge_slave_0: left promiscuous mode [ 64.576691][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.852203][ T5961] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 64.897362][ T5755] Bluetooth: hci3: command tx timeout [ 65.012076][ T5615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.029965][ T5615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.075392][ T5615] bond0 (unregistering): Released all slaves [ 65.104376][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.114700][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.129393][ T5755] Bluetooth: hci1: command tx timeout [ 65.132138][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.207700][ T5755] Bluetooth: hci2: command tx timeout [ 65.210453][ T5755] Bluetooth: hci0: command tx timeout [ 65.357928][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.358485][ T42] audit: type=1800 audit(1785867565.013:2): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21" name="host_addr" dev="configfs" ino=8689 res=0 errno=0 [ 65.362949][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.609246][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.627579][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.111066][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.126412][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.141443][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.506535][ T5823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.516952][ T5823] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.547509][ T5919] hsr_slave_0: entered promiscuous mode [ 66.556776][ T5919] hsr_slave_1: entered promiscuous mode [ 66.560767][ T5919] debugfs: 'hsr0' already exists in 'hsr' [ 66.563000][ T5919] Cannot create hsr debugfs directory [ 66.978211][ T5755] Bluetooth: hci3: command tx timeout [ 67.260156][ T5977] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.266134][ T5977] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.275192][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.486517][ T5615] hsr_slave_0: left promiscuous mode [ 67.496558][ T5615] hsr_slave_1: left promiscuous mode [ 67.506627][ T5615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.510110][ T5615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.522399][ T5615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.528411][ T5615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.571694][ T5615] veth1_macvtap: left promiscuous mode [ 67.576809][ T5615] veth0_macvtap: left promiscuous mode [ 67.582257][ T5615] veth1_vlan: left promiscuous mode [ 67.584777][ T5615] veth0_vlan: left promiscuous mode [ 67.974660][ T6021] 9pnet_virtio: no channels available for device ./bus [ 68.018950][ T5615] team0 (unregistering): Port device team_slave_1 removed [ 68.040568][ T5615] team0 (unregistering): Port device team_slave_0 removed [ 68.825989][ T6024] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.65552.0), cmd(18) [ 69.047355][ T5755] Bluetooth: hci3: command tx timeout [ 69.178000][ T5919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.200509][ T5919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.212034][ T5919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.241534][ T5919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.249672][ T5919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.266986][ T5919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.275540][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.281639][ T5919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.299749][ T5919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.529454][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.587982][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.607678][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.610931][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.625898][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.628986][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.660508][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.090998][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.275782][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.639059][ T5919] veth0_vlan: entered promiscuous mode [ 70.671474][ T5919] veth1_vlan: entered promiscuous mode [ 70.703952][ T5919] veth0_macvtap: entered promiscuous mode [ 70.711951][ T5919] veth1_macvtap: entered promiscuous mode [ 70.744439][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.756014][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.843861][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.847274][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.847323][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.847353][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.856855][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.863296][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.894994][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.899817][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.920880][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 70.946909][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 70.996588][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.101198][ T6130] vlan0: entered promiscuous mode [ 71.137124][ T5755] Bluetooth: hci3: command tx timeout [ 71.164894][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.170588][ T5896] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.174927][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.194367][ T5896] usb 5-1: config 0 descriptor?? [ 71.222328][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.229003][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.331272][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 71.420489][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 71.424588][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 71.487019][ T5896] usb 5-1: USB disconnect, device number 2 [ 71.996431][ T5896] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.172994][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.195172][ T5896] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.199014][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.206962][ T5896] usb 5-1: config 0 descriptor?? [ 72.377666][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 72.504552][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 72.628538][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 72.631200][ T6168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.635257][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 72.644213][ T5896] usb 5-1: USB disconnect, device number 3 [ 73.645293][ T6204] syzkaller1: entered promiscuous mode [ 73.647860][ T6204] syzkaller1: entered allmulticast mode [ 74.206365][ T5834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.358885][ T5834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.363287][ T5834] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.372261][ T5834] usb 9-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 74.376073][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.379778][ T5834] usb 9-1: Product: syz [ 74.381751][ T5834] usb 9-1: Manufacturer: syz [ 74.383877][ T5834] usb 9-1: SerialNumber: syz [ 74.526654][ T5615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.543918][ T5615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.548170][ T5615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.552007][ T5615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627696][ T5834] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.652185][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 74.740421][ T5834] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 74.754179][ T5834] usb 9-1: USB disconnect, device number 2 [ 74.783724][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.853090][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 74.912849][ T6272] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.028634][ T6272] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.128148][ T6272] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.166117][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 75.225064][ T6272] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.378219][ T5615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381604][ T5615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.384922][ T5615] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388593][ T5615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.546502][ T5852] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.550680][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 75.688745][ T5852] usb 8-1: device descriptor read/64, error -71 [ 75.856578][ T5615] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.860238][ T5615] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.864246][ T5615] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.868280][ T5615] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.926566][ T5852] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.066530][ T5852] usb 8-1: device descriptor read/64, error -71 [ 76.189247][ T5852] usb usb8-port1: attempt power cycle [ 76.524746][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 76.546452][ T5852] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.567780][ T5852] usb 8-1: device descriptor read/8, error -71 [ 76.828260][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.847328][ T5852] usb 8-1: device descriptor read/8, error -71 [ 76.870350][ T6350] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 76.881851][ T6350] bond1 (unregistering): Released all slaves [ 76.966936][ T5852] usb usb8-port1: unable to enumerate USB device [ 77.317690][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 77.796384][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.948456][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.952984][ T5834] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.956419][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.961052][ T5834] usb 5-1: config 0 descriptor?? [ 78.177293][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 78.179736][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.185678][ T5834] usb 5-1: USB disconnect, device number 4 [ 78.446027][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 78.616594][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.746478][ T5896] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 78.746478][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.778202][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.782624][ T40] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.786129][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.791387][ T40] usb 5-1: config 0 descriptor?? [ 78.906518][ T73] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.909596][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 78.915197][ T56] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.916335][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 78.919731][ T56] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.924544][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.925225][ T56] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.925250][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 78.929624][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.933986][ T56] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 78.934009][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.937027][ T56] usb 8-1: config 0 descriptor?? [ 78.940379][ T5896] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.952493][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.958136][ T5896] usb 9-1: config 0 descriptor?? [ 78.964633][ T5896] hub 9-1:0.0: USB hub found [ 79.068418][ T73] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.072207][ T73] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 79.075361][ T73] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 79.079133][ T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.089598][ T73] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 79.096631][ T73] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 79.165717][ T5896] hub 9-1:0.0: 1 port detected [ 79.202839][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 79.205223][ T40] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.213757][ T40] usb 5-1: USB disconnect, device number 5 [ 79.356502][ T56] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 79.358928][ T56] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 79.363402][ T56] mcp2200 0003:04D8:00DF.0002: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 79.447279][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 79.450309][ T6399] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 79.455870][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 79.554007][ T56] usb 8-1: USB disconnect, device number 7 [ 79.576542][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 79.583881][ T73] usb 7-1: USB disconnect, device number 3 [ 79.593037][ T73] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 79.598665][ T73] spcp8x5 7-1:1.0: device disconnected [ 79.774016][ T5896] hub 9-1:0.0: activate --> -90 [ 79.976408][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.978257][ T5896] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 79.983683][ T2322] usb 9-1: USB disconnect, device number 3 [ 80.136426][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 80.142937][ T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.147961][ T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 80.152166][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 80.156151][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.161404][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.163605][ T6406] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 80.165490][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.175390][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 80.176769][ T5615] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.181111][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.191530][ T29] usb 5-1: config 0 descriptor?? [ 80.198551][ T5615] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.220074][ T5615] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.223836][ T5615] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.231819][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 80.372142][ T6416] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 80.410567][ T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.417889][ T29] usb 5-1: USB disconnect, device number 6 [ 80.429041][ T29] usblp0: removed [ 80.573843][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.578469][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.665520][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.675540][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.786506][ T5615] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.791621][ T5615] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.798966][ T5615] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.805374][ T5615] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.809710][ T5615] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.813518][ T5615] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.817844][ T5615] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.821885][ T5615] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.916502][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.076546][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 81.081552][ T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.084991][ T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.090101][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.095062][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.099622][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.103759][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.109567][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.113353][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.121422][ T29] usb 5-1: config 0 descriptor?? [ 81.261310][ T6456] kernel kvm profiling enabled (shift: 0) [ 81.306448][ T5830] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 81.335940][ T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 81.468762][ T5830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 81.473207][ T5830] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 81.477701][ T5830] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 81.481693][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.492763][ T5830] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 81.502214][ T5830] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 81.592953][ C1] usblp0: nonzero read bulk status received: -71 [ 81.593397][ T5830] usb 5-1: USB disconnect, device number 7 [ 81.598651][ T6402] usblp0: error -71 reading from printer [ 81.906708][ T6443] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 81.910082][ T6443] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 81.913629][ T6443] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 82.026963][ T6443] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 82.049854][ T5834] usb 9-1: USB disconnect, device number 4 [ 82.056530][ T5830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.072863][ T5834] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 82.078966][ T5834] spcp8x5 9-1:1.0: device disconnected [ 82.216494][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 82.221418][ T5830] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.222424][ T6470] Mass Storage Function, version: 2009/09/11 [ 82.224974][ T5830] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.228911][ T6470] LUN: removable file: (no medium) [ 82.231076][ T5830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.231130][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.231150][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.242911][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.247669][ T5830] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.250586][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.261621][ T5830] usb 5-1: config 0 descriptor?? [ 82.474285][ T6401] usblp0: removed [ 82.493378][ T5830] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.505297][ T5830] usb 5-1: USB disconnect, device number 8 [ 82.526254][ T5830] usblp0: removed [ 82.670844][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 82.876477][ T5853] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 83.031663][ T5853] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.038993][ T5853] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 83.056700][ T5853] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.060756][ T5853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 83.065844][ T5853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 83.083969][ T5853] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.099338][ T5853] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.106613][ T5853] usb 9-1: Product: syz [ 83.108727][ T5853] usb 9-1: Manufacturer: syz [ 83.142116][ T5853] cdc_wdm 9-1:1.0: skipping garbage [ 83.147246][ T5853] cdc_wdm 9-1:1.0: skipping garbage [ 83.156612][ T5853] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 83.337410][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.347592][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.359673][ T5853] usb 9-1: USB disconnect, device number 5 [ 83.366710][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.373029][ T5830] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.516579][ T5830] usb 8-1: device descriptor read/64, error -71 [ 83.528213][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.539210][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.545038][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.555285][ T29] usb 7-1: Product: syz [ 83.559103][ T29] usb 7-1: Manufacturer: syz [ 83.561058][ T29] usb 7-1: SerialNumber: syz [ 83.766485][ T5830] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 83.789406][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.796873][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.812965][ T29] cdc_ether 7-1:1.0: skipping garbage [ 83.824363][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 83.835070][ T29] usb 7-1: USB disconnect, device number 4 [ 83.916509][ T5830] usb 8-1: device descriptor read/64, error -71 [ 84.038498][ T5830] usb usb8-port1: attempt power cycle [ 84.298881][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.396427][ T5830] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 84.427567][ T5830] usb 8-1: device descriptor read/8, error -71 [ 84.477750][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 84.488524][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 84.496761][ T29] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 84.507312][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.514843][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.519236][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 84.524169][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.532707][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.537212][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.676525][ T5830] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 84.697165][ T5830] usb 8-1: device descriptor read/8, error -71 [ 84.726465][ T2322] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 84.749589][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 84.752632][ T29] usbtmc 7-1:16.0: can't read capabilities [ 84.809922][ T5830] usb usb8-port1: unable to enumerate USB device [ 84.926522][ T2322] usb 9-1: Using ep0 maxpacket: 32 [ 84.930035][ T2322] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.936403][ T2322] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.940070][ T2322] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.943450][ T2322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.955203][ T29] usb 7-1: USB disconnect, device number 5 [ 84.956501][ T2322] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.962381][ T2322] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.977143][ T2322] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.984353][ T2322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.999229][ T2322] usb 9-1: config 0 descriptor?? [ 85.084236][ T6528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.208'. [ 85.094207][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 85.220309][ T2322] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.238930][ T2322] usb 9-1: USB disconnect, device number 6 [ 85.268404][ T2322] usblp0: removed [ 85.766523][ T5896] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.770082][ T2322] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 85.939216][ T2322] usb 9-1: Using ep0 maxpacket: 32 [ 85.945734][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.950244][ T5896] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 85.955754][ T2322] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.959489][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.963732][ T2322] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.967891][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 85.972501][ T2322] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.976733][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 85.981741][ T2322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.985777][ T2322] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.990295][ T2322] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.996406][ T2322] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 86.000358][ T2322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.004850][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.009957][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.014593][ T5896] usb 7-1: Product: syz [ 86.016520][ T5896] usb 7-1: Manufacturer: syz [ 86.018738][ T2322] usb 9-1: config 0 descriptor?? [ 86.035575][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 86.038003][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 86.041330][ T5896] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 86.232011][ T2322] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.246103][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.263518][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.331494][ T2322] usb 7-1: USB disconnect, device number 6 [ 86.414810][ T6546] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 86.423971][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.214'. [ 86.439790][ C0] usblp0: nonzero read bulk status received: -71 [ 86.440962][ T56] usb 9-1: USB disconnect, device number 7 [ 86.443318][ T6535] usblp0: error -71 reading from printer [ 86.449265][ T6546] bridge0: port 3(dummy0) entered blocking state [ 86.452151][ T6546] bridge0: port 3(dummy0) entered disabled state [ 86.455628][ T6546] dummy0: entered allmulticast mode [ 86.479591][ T6546] dummy0: entered promiscuous mode [ 86.489126][ T6546] bridge0: port 3(dummy0) entered blocking state [ 86.491672][ T6546] bridge0: port 3(dummy0) entered forwarding state [ 86.538847][ T6534] usblp0: removed [ 86.596922][ T10] cfg80211: failed to load regulatory.db [ 86.986416][ T56] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 87.136784][ T56] usb 9-1: Using ep0 maxpacket: 32 [ 87.142157][ T56] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.153360][ T56] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.161109][ T56] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.170093][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.184479][ T6555] serio: Serial port ptm0 [ 87.185750][ T56] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.205050][ T56] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.216655][ T56] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.223533][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.232041][ T56] usb 9-1: config 0 descriptor?? [ 87.445101][ T56] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 87.460165][ T56] usb 9-1: USB disconnect, device number 8 [ 87.466998][ T56] usblp0: removed [ 87.477057][ T5839] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.545039][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 87.639863][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.653071][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.661842][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.666736][ T5839] usb 5-1: Product: syz [ 87.669373][ T5839] usb 5-1: Manufacturer: syz [ 87.672473][ T5839] usb 5-1: SerialNumber: syz [ 87.891041][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.895713][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.903101][ T5839] cdc_ether 5-1:1.0: skipping garbage [ 87.905687][ T5839] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 87.914426][ T5839] usb 5-1: USB disconnect, device number 9 [ 87.999852][ T6572] Bluetooth: MGMT ver 1.23 [ 88.066566][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.207317][ T29] usb 7-1: device descriptor read/64, error -71 [ 88.346631][ T1349] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 88.446464][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.496392][ T1349] usb 5-1: Using ep0 maxpacket: 8 [ 88.501164][ T1349] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 88.504895][ T1349] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.510250][ T1349] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.515984][ T1349] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.522481][ T1349] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.527393][ T1349] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.533315][ T1349] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.537681][ T1349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.586759][ T29] usb 7-1: device descriptor read/64, error -71 [ 88.699353][ T29] usb usb7-port1: attempt power cycle [ 88.752432][ T1349] usb 5-1: GET_CAPABILITIES returned 0 [ 88.755228][ T1349] usbtmc 5-1:16.0: can't read capabilities [ 88.862205][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 88.960081][ T1349] usb 5-1: USB disconnect, device number 10 [ 89.046680][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 89.050621][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 89.065621][ T6595] vivid-002: ================= START STATUS ================= [ 89.067455][ T29] usb 7-1: device descriptor read/8, error -71 [ 89.070080][ T6595] vivid-002: Interlaced VBI Format: false [ 89.078028][ T6595] vivid-002: ================== END STATUS ================== [ 89.326432][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 89.357143][ T29] usb 7-1: device descriptor read/8, error -71 [ 89.478264][ T29] usb usb7-port1: unable to enumerate USB device [ 89.586147][ T6617] serio: Serial port ptm0 [ 90.607753][ T6628] v: renamed from veth0_vlan [ 90.846402][ T6642] sound umpC3D3: No UMP Group is found in FB [ 91.153893][ T6662] CUSE: zero length info key specified [ 91.396528][ T40] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.547446][ T40] usb 5-1: config 1 interface 1 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 91.555371][ T40] usb 5-1: config 1 interface 3 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 91.569569][ T40] usb 5-1: Dual-Role OTG device on HNP port [ 91.574901][ T40] usb 5-1: New USB device found, idVendor=0001, idProduct=0004, bcdDevice= 7.02 [ 91.583423][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.588999][ T40] usb 5-1: Product: ACMESynth [ 91.592441][ T40] usb 5-1: Manufacturer: ACM [ 91.742841][ T40] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.428858][ T6740] bridge0: port 3(dummy0) entered disabled state [ 94.431757][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.434970][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.841923][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.860873][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.943160][ T6743] serio: Serial port ptm0 [ 95.106537][ T5615] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.116439][ T5615] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.130734][ T5615] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.142983][ T5615] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.591794][ T6761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.953294][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.960808][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.376420][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 97.540181][ T29] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 97.544688][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.551257][ T29] usb 9-1: config 0 descriptor?? [ 97.558724][ T29] cp210x 9-1:0.0: cp210x converter detected [ 97.882807][ T6805] netlink: 'syz.2.293': attribute type 12 has an invalid length. [ 97.886359][ T6805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.293'. [ 97.961808][ T29] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 97.985943][ T29] usb 9-1: cp210x converter now attached to ttyUSB0 [ 98.173277][ T29] usb 9-1: USB disconnect, device number 9 [ 98.181266][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.193387][ T29] cp210x 9-1:0.0: device disconnected [ 98.399994][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 99.267393][ T6853] process 'syz.4.305' launched './file2' with NULL argv: empty string added [ 99.297214][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 99.361706][ T29] usb 5-1: USB disconnect, device number 11 [ 99.759149][ T29] ================================================================== [ 99.762695][ T29] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 99.766190][ T29] Write of size 8 at addr ffff88806eb02350 by task kworker/1:0/29 [ 99.771214][ T29] [ 99.772874][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 99.772893][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.772904][ T29] Workqueue: usb_hub_wq hub_event [ 99.772928][ T29] Call Trace: [ 99.772933][ T29] [ 99.772939][ T29] dump_stack_lvl+0x100/0x190 [ 99.772958][ T29] print_report+0x13d/0x4b0 [ 99.772978][ T29] ? __virt_addr_valid+0x239/0x430 [ 99.772995][ T29] ? snd_usb_midi_v2_free+0x52d/0x670 [ 99.773016][ T29] kasan_report+0xdf/0x1c0 [ 99.773035][ T29] ? snd_usb_midi_v2_free+0x52d/0x670 [ 99.773052][ T29] snd_usb_midi_v2_free+0x52d/0x670 [ 99.773067][ T29] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 99.773089][ T29] snd_usb_midi_v2_free_all+0x85/0xe0 [ 99.773106][ T29] snd_usb_audio_free+0x4e/0x120 [ 99.773127][ T29] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 99.773146][ T29] release_card_device+0xb2/0x1a0 [ 99.773160][ T29] ? __pfx_release_card_device+0x10/0x10 [ 99.773174][ T29] device_release+0xd2/0x270 [ 99.773188][ T29] kobject_put+0x1f7/0x640 [ 99.773208][ T29] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 99.773223][ T29] put_device+0x1f/0x30 [ 99.773236][ T29] snd_card_free_when_closed+0x2b/0x40 [ 99.773251][ T29] usb_audio_disconnect+0x210/0x680 [ 99.773271][ T29] usb_unbind_interface+0x1dd/0x9e0 [ 99.773293][ T29] ? __pfx_usb_unbind_interface+0x10/0x10 [ 99.773313][ T29] device_remove+0x12a/0x180 [ 99.773331][ T29] device_release_driver_internal+0x44e/0x620 [ 99.773352][ T29] bus_remove_device+0x2bc/0x560 [ 99.773368][ T29] ? __pfx_bus_remove_device+0x10/0x10 [ 99.773384][ T29] ? __pfx_device_remove_attrs+0x10/0x10 [ 99.773401][ T29] device_del+0x376/0x9b0 [ 99.773418][ T29] ? __pfx_device_del+0x10/0x10 [ 99.773434][ T29] ? kobject_put+0xb9/0x640 [ 99.773453][ T29] usb_disable_device+0x367/0x810 [ 99.773473][ T29] usb_disconnect+0x2e2/0x9a0 [ 99.773491][ T29] hub_event+0x1c4f/0x4a60 [ 99.773514][ T29] ? __lock_acquire+0x49f/0x1a40 [ 99.773536][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 99.773549][ T29] ? __pfx_hub_event+0x10/0x10 [ 99.773567][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 99.773589][ T29] ? rcu_is_watching+0x12/0xc0 [ 99.773605][ T29] process_one_work+0xa23/0x1940 [ 99.773627][ T29] ? __pfx_process_one_work+0x10/0x10 [ 99.773646][ T29] ? __pfx_hub_event+0x10/0x10 [ 99.773663][ T29] worker_thread+0x5ef/0xe50 [ 99.773685][ T29] ? kthread+0x13a/0x450 [ 99.773701][ T29] ? __pfx_worker_thread+0x10/0x10 [ 99.773719][ T29] kthread+0x370/0x450 [ 99.773734][ T29] ? __pfx_kthread+0x10/0x10 [ 99.773751][ T29] ret_from_fork+0x72b/0xd50 [ 99.773766][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 99.773781][ T29] ? __switch_to+0x800/0x10f0 [ 99.773800][ T29] ? __pfx_kthread+0x10/0x10 [ 99.773816][ T29] ret_from_fork_asm+0x1a/0x30 [ 99.773837][ T29] [ 99.773841][ T29] [ 99.881239][ T29] Allocated by task 40: [ 99.882579][ T29] kasan_save_stack+0x30/0x50 [ 99.884089][ T29] kasan_save_track+0x14/0x30 [ 99.885587][ T29] __kasan_kmalloc+0xaa/0xb0 [ 99.887082][ T29] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 99.888769][ T29] snd_ump_endpoint_new+0x93/0x470 [ 99.890417][ T29] create_midi2_ump+0x2dd/0x920 [ 99.892051][ T29] snd_usb_midi_v2_create+0x11fa/0x4070 [ 99.893866][ T29] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 99.895762][ T29] usb_audio_probe+0xf05/0x3b10 [ 99.897508][ T29] usb_probe_interface+0x303/0x8f0 [ 99.899421][ T29] really_probe+0x241/0xa60 [ 99.900962][ T29] __driver_probe_device+0x20e/0x450 [ 99.902821][ T29] driver_probe_device+0x4a/0x140 [ 99.904790][ T29] __device_attach_driver+0x1df/0x320 [ 99.907022][ T29] bus_for_each_drv+0x159/0x1e0 [ 99.908972][ T29] __device_attach+0x1e4/0x4d0 [ 99.910602][ T29] device_initial_probe+0xaf/0xd0 [ 99.912494][ T29] bus_probe_device+0x64/0x160 [ 99.914049][ T29] device_add+0x121d/0x1970 [ 99.915693][ T29] usb_set_configuration+0xd97/0x1c60 [ 99.917834][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 99.919803][ T29] usb_probe_device+0xef/0x400 [ 99.921603][ T29] really_probe+0x241/0xa60 [ 99.923205][ T29] __driver_probe_device+0x20e/0x450 [ 99.925143][ T29] driver_probe_device+0x4a/0x140 [ 99.927059][ T29] __device_attach_driver+0x1df/0x320 [ 99.928852][ T29] bus_for_each_drv+0x159/0x1e0 [ 99.930562][ T29] __device_attach+0x1e4/0x4d0 [ 99.932233][ T29] device_initial_probe+0xaf/0xd0 [ 99.933848][ T29] bus_probe_device+0x64/0x160 [ 99.935465][ T29] device_add+0x121d/0x1970 [ 99.936970][ T29] usb_new_device.cold+0x685/0x115c [ 99.939140][ T29] hub_event+0x30a3/0x4a60 [ 99.941030][ T29] process_one_work+0xa23/0x1940 [ 99.942883][ T29] worker_thread+0x5ef/0xe50 [ 99.944499][ T29] kthread+0x370/0x450 [ 99.946036][ T29] ret_from_fork+0x72b/0xd50 [ 99.947869][ T29] ret_from_fork_asm+0x1a/0x30 [ 99.949680][ T29] [ 99.950693][ T29] Freed by task 29: [ 99.952311][ T29] kasan_save_stack+0x30/0x50 [ 99.954138][ T29] kasan_save_track+0x14/0x30 [ 99.956018][ T29] kasan_save_free_info+0x3b/0x70 [ 99.957995][ T29] __kasan_slab_free+0x5f/0x80 [ 99.959825][ T29] kfree+0x22b/0x6c0 [ 99.961202][ T29] snd_rawmidi_dev_free+0x3e/0x60 [ 99.963161][ T29] __snd_device_free+0x1a3/0x300 [ 99.965226][ T29] snd_device_free_all+0xf3/0x220 [ 99.967372][ T29] release_card_device+0x77/0x1a0 [ 99.969440][ T29] device_release+0xd2/0x270 [ 99.971364][ T29] kobject_put+0x1f7/0x640 [ 99.973158][ T29] put_device+0x1f/0x30 [ 99.974825][ T29] snd_card_free_when_closed+0x2b/0x40 [ 99.976896][ T29] usb_audio_disconnect+0x210/0x680 [ 99.978948][ T29] usb_unbind_interface+0x1dd/0x9e0 [ 99.981042][ T29] device_remove+0x12a/0x180 [ 99.982755][ T29] device_release_driver_internal+0x44e/0x620 [ 99.984905][ T29] bus_remove_device+0x2bc/0x560 [ 99.986954][ T29] device_del+0x376/0x9b0 [ 99.988725][ T29] usb_disable_device+0x367/0x810 [ 99.990888][ T29] usb_disconnect+0x2e2/0x9a0 [ 99.992934][ T29] hub_event+0x1c4f/0x4a60 [ 99.994624][ T29] process_one_work+0xa23/0x1940 [ 99.996298][ T29] worker_thread+0x5ef/0xe50 [ 99.998007][ T29] kthread+0x370/0x450 [ 99.999385][ T29] ret_from_fork+0x72b/0xd50 [ 100.000994][ T29] ret_from_fork_asm+0x1a/0x30 [ 100.002667][ T29] [ 100.003487][ T29] The buggy address belongs to the object at ffff88806eb02000 [ 100.003487][ T29] which belongs to the cache kmalloc-4k of size 4096 [ 100.008414][ T29] The buggy address is located 848 bytes inside of [ 100.008414][ T29] freed 4096-byte region [ffff88806eb02000, ffff88806eb03000) [ 100.013034][ T29] [ 100.013879][ T29] The buggy address belongs to the physical page: [ 100.016014][ T29] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6eb00 [ 100.019592][ T29] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.023211][ T29] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 100.025756][ T29] page_type: f5(slab) [ 100.027070][ T29] raw: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 100.030427][ T29] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 100.033527][ T29] head: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 100.036849][ T29] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 100.039968][ T29] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 100.042970][ T29] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.045692][ T29] page dumped because: kasan: bad access detected [ 100.047892][ T29] page_owner tracks the page as allocated [ 100.050052][ T29] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 48, tgid 48 (kworker/u33:2), ts 76267676162, free_ts 75457173480 [ 100.057345][ T29] post_alloc_hook+0xfd/0x120 [ 100.059177][ T29] get_page_from_freelist+0xf48/0x3530 [ 100.061210][ T29] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 100.063588][ T29] new_slab+0xa2/0x640 [ 100.065195][ T29] refill_objects+0xe3/0x410 [ 100.067039][ T29] __pcs_replace_empty_main+0x376/0x680 [ 100.069130][ T29] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 100.071354][ T29] kmalloc_reserve+0xe8/0x350 [ 100.073250][ T29] __alloc_skb+0x185/0x710 [ 100.074949][ T29] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.077085][ T29] process_one_work+0xa23/0x1940 [ 100.079167][ T29] worker_thread+0x5ef/0xe50 [ 100.081049][ T29] kthread+0x370/0x450 [ 100.082671][ T29] ret_from_fork+0x72b/0xd50 [ 100.084344][ T29] ret_from_fork_asm+0x1a/0x30 [ 100.085931][ T29] page last free pid 5746 tgid 5746 stack trace: [ 100.088214][ T29] __free_frozen_pages+0x79f/0x1090 [ 100.090078][ T29] qlist_free_all+0x47/0xf0 [ 100.091617][ T29] kasan_quarantine_reduce+0x1a0/0x1f0 [ 100.093253][ T29] __kasan_slab_alloc+0x69/0x90 [ 100.094826][ T29] __kmalloc_cache_node_noprof+0x27f/0x6c0 [ 100.096640][ T29] __get_vm_area_node+0x101/0x330 [ 100.098588][ T29] __vmalloc_node_range_noprof+0x228/0x1630 [ 100.101046][ T29] __vmalloc_node_noprof+0xad/0xf0 [ 100.103198][ T29] xt_compat_init_offsets+0xe2/0x1f0 [ 100.104961][ T29] compat_table_info+0xc5/0x640 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 100.106517][ T29] get_info+0x25c/0x5d0 [ 100.113782][ T29] do_ip6t_get_ctl+0x209/0xb00 [ 100.115584][ T29] nf_getsockopt+0x7c/0xe0 [ 100.117214][ T29] ipv6_getsockopt+0x207/0x2a0 [ 100.119080][ T29] tcp_getsockopt+0xa1/0x110 [ 100.120939][ T29] do_sock_getsockopt+0x50a/0x6e0 [ 100.122774][ T29] [ 100.123678][ T29] Memory state around the buggy address: [ 100.125853][ T29] ffff88806eb02200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.128947][ T29] ffff88806eb02280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.132683][ T29] >ffff88806eb02300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.135734][ T29] ^ [ 100.138336][ T29] ffff88806eb02380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.141439][ T29] ffff88806eb02400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.144559][ T29] ================================================================== [ 100.158942][ T29] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.161743][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 100.165001][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.169305][ T29] Workqueue: usb_hub_wq hub_event [ 100.171405][ T29] Call Trace: [ 100.172744][ T29] [ 100.173689][ T29] dump_stack_lvl+0x100/0x190 [ 100.175191][ T29] vpanic+0x552/0x970 [ 100.176546][ T29] ? __pfx_vpanic+0x10/0x10 [ 100.178097][ T29] ? snd_usb_midi_v2_free+0x52d/0x670 [ 100.179813][ T29] panic+0xd1/0xe0 [ 100.181259][ T29] ? __pfx_panic+0x10/0x10 [ 100.182773][ T29] ? snd_usb_midi_v2_free+0x52d/0x670 [ 100.184611][ T29] ? preempt_schedule_common+0x42/0xc0 [ 100.186476][ T29] check_panic_on_warn.cold+0x19/0x34 [ 100.188501][ T29] end_report.part.0+0x3a/0x90 [ 100.190429][ T29] kasan_report.cold+0xe/0x18 [ 100.192226][ T29] ? snd_usb_midi_v2_free+0x52d/0x670 [ 100.193935][ T29] snd_usb_midi_v2_free+0x52d/0x670 [ 100.195903][ T29] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 100.198778][ T29] snd_usb_midi_v2_free_all+0x85/0xe0 [ 100.201019][ T29] snd_usb_audio_free+0x4e/0x120 [ 100.202818][ T29] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 100.204820][ T29] release_card_device+0xb2/0x1a0 [ 100.206452][ T29] ? __pfx_release_card_device+0x10/0x10 [ 100.208546][ T29] device_release+0xd2/0x270 [ 100.210423][ T29] kobject_put+0x1f7/0x640 [ 100.212148][ T29] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 100.214031][ T29] put_device+0x1f/0x30 [ 100.215329][ T29] snd_card_free_when_closed+0x2b/0x40 [ 100.217346][ T29] usb_audio_disconnect+0x210/0x680 [ 100.219576][ T29] usb_unbind_interface+0x1dd/0x9e0 [ 100.221866][ T29] ? __pfx_usb_unbind_interface+0x10/0x10 [ 100.224369][ T29] device_remove+0x12a/0x180 [ 100.226194][ T29] device_release_driver_internal+0x44e/0x620 [ 100.228579][ T29] bus_remove_device+0x2bc/0x560 [ 100.230588][ T29] ? __pfx_bus_remove_device+0x10/0x10 [ 100.232501][ T29] ? __pfx_device_remove_attrs+0x10/0x10 [ 100.234534][ T29] device_del+0x376/0x9b0 [ 100.236306][ T29] ? __pfx_device_del+0x10/0x10 [ 100.238085][ T29] ? kobject_put+0xb9/0x640 [ 100.239986][ T29] usb_disable_device+0x367/0x810 [ 100.242408][ T29] usb_disconnect+0x2e2/0x9a0 [ 100.244624][ T29] hub_event+0x1c4f/0x4a60 [ 100.246299][ T29] ? __lock_acquire+0x49f/0x1a40 [ 100.248118][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.250032][ T29] ? __pfx_hub_event+0x10/0x10 [ 100.251778][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.253829][ T29] ? rcu_is_watching+0x12/0xc0 [ 100.255788][ T29] process_one_work+0xa23/0x1940 [ 100.257884][ T29] ? __pfx_process_one_work+0x10/0x10 [ 100.260004][ T29] ? __pfx_hub_event+0x10/0x10 [ 100.261805][ T29] worker_thread+0x5ef/0xe50 [ 100.263512][ T29] ? kthread+0x13a/0x450 [ 100.265105][ T29] ? __pfx_worker_thread+0x10/0x10 [ 100.266973][ T29] kthread+0x370/0x450 [ 100.268468][ T29] ? __pfx_kthread+0x10/0x10 [ 100.270167][ T29] ret_from_fork+0x72b/0xd50 [ 100.271870][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 100.273743][ T29] ? __switch_to+0x800/0x10f0 [ 100.275542][ T29] ? __pfx_kthread+0x10/0x10 [ 100.277366][ T29] ret_from_fork_asm+0x1a/0x30 [ 100.279322][ T29] [ 100.281203][ T29] Kernel Offset: disabled [ 100.282602][ T29] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:19:59 Registers: info registers vcpu 0 CPU#0 RAX=00000008000008fb RBX=ffff88801c2d848c RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fb RDI=0000000000000003 RBP=ffff888000114ab8 RSP=ffffc90000007d00 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000000fa5 R13=0000000000000003 R14=1ffff11000022901 R15=0000000000000000 RIP=ffffffff81b69c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff80b84010 CR3=0000000025366000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0e000 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000004104 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563adf7bc940 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ce1f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ce1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31306e6930307069 3330637369313063 6930307064303063 7364303063643230 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f2ed3e5b684c075 0000000563adf7a2 0000000000000021 000000000000312e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563adf7b8bc0 0000563adf7b8a98 0000000000000041 0000563adf7b0031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90000576f28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6f721e R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563adf7c9650 CR3=00000000500a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90004207250 RCX=ffffc900042070e4 RDX=ffffc90004207258 RSI=ffffffff8279406b RDI=ffffc90004207258 RBP=0000000000000002 RSP=ffffc90004207170 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000017912 R12=ffffffff81f3d980 R13=ffffc90004207250 R14=0000000000000000 R15=ffff888024610000 RIP=ffffffff81f3d9c6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc977ec300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005624062a8000 CR3=000000004b350000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000013c 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03091e4000000002 0001126e0800030a 0000011500000001 0000000200000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800307fe08000880 02040143ec007665 642f2e01ffffffff fffffffff3080880 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0340800200027208 00040800080179c4 00080040a0030fff ffffff0240980300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08004090030fffff ffff024088030008 0040800340038305 0700004002020507 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000400281050700 0000ff0300000409 32c0000101002702 0901000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000010fffffff ff0202d0a2080001 000000080606013f c600040004080010 ZMM25=d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 d34b3d78d34b3d78 ZMM26=27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e 27a4c44e27a4c44e ZMM27=bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be bc7795bebc7795be ZMM28=00000100000000ff 000000fe000000fd 000000fc000000fb 000000fa000000f9 000000f8000000f7 000000f6000000f5 000000f4000000f3 000000f2000000f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 info registers vcpu 3 CPU#3 RAX=0000000000134615 RBX=ffff88801cbfa540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed100397f4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72de9ea CR3=000000004ac8d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000