last executing test programs: 9m49.774332577s ago: executing program 1 (id=2182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="aa", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000200)="63ea", 0x2}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000640)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmmsg$sock(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000b40)="f4", 0x1}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 9m49.773894348s ago: executing program 1 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000007300004000000000811f"]) 9m49.654280095s ago: executing program 1 (id=2187): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 9m48.754473846s ago: executing program 1 (id=2192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040040) 9m48.75434267s ago: executing program 1 (id=2193): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000000)='.\x00', 0x800080, 0x11) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m48.671454165s ago: executing program 1 (id=2195): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0x20, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0}) 9m33.665313815s ago: executing program 32 (id=2195): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0x20, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0}) 5m38.451914541s ago: executing program 3 (id=3928): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000180)}], 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1071) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xfff2}}]}}]}, 0x38}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) 5m38.142239669s ago: executing program 3 (id=3931): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000180), 0x2, 0x24000) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 5m37.102210057s ago: executing program 3 (id=3935): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044844}, 0x1080) 5m36.912076902s ago: executing program 3 (id=3937): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5m36.001630651s ago: executing program 3 (id=3942): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r0 = open(&(0x7f0000000000)='.\x00', 0x800080, 0x11) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m35.931987899s ago: executing program 3 (id=3943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m20.811157556s ago: executing program 33 (id=3943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m10.009963406s ago: executing program 0 (id=5584): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000080)) 3m9.939014294s ago: executing program 0 (id=5587): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 3m9.888242332s ago: executing program 0 (id=5589): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m9.887786771s ago: executing program 0 (id=5590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m9.799428519s ago: executing program 0 (id=5591): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x3) 3m9.68018007s ago: executing program 0 (id=5595): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, 0x0, &(0x7f0000000180)) 3m9.597467151s ago: executing program 34 (id=5595): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, 0x0, &(0x7f0000000180)) 1m27.369924124s ago: executing program 6 (id=9185): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setresuid(0x0, 0x0, 0xee00) 1m27.305846558s ago: executing program 6 (id=9186): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x81) 1m27.305374793s ago: executing program 6 (id=9188): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m27.22871894s ago: executing program 6 (id=9192): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x64000600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4000, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffff}) 1m27.169517535s ago: executing program 6 (id=9196): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 1m27.119486711s ago: executing program 6 (id=9200): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) 1m12.021705216s ago: executing program 35 (id=9200): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) 746.079203ms ago: executing program 4 (id=11999): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x0, r3) getsockname$packet(r4, 0x0, 0x0) 693.665119ms ago: executing program 4 (id=12003): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) 693.251231ms ago: executing program 4 (id=12007): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r2, 0x33, 0x0, 0x0) 607.730193ms ago: executing program 2 (id=12009): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000004c0)='./file1\x00', 0x5) 607.352335ms ago: executing program 2 (id=12012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) 529.854012ms ago: executing program 4 (id=12013): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 529.368119ms ago: executing program 2 (id=12016): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 529.238046ms ago: executing program 4 (id=12017): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) 528.891691ms ago: executing program 2 (id=12019): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r5, 0x0, 0x100) 507.515707ms ago: executing program 4 (id=12021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1}, 0x40000102) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x14}}, 0x4004000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 506.85503ms ago: executing program 2 (id=12022): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 437.375665ms ago: executing program 2 (id=12024): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 363.343955ms ago: executing program 5 (id=12028): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 362.967383ms ago: executing program 5 (id=12030): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="435d21e2fd5f7318ed9017520298cc307013e6427ccd10294414d120d141bf253933db99b5e8507fced2cb6e4f71831672b78be97cfbb623420aa5326308b9d3ad301a9b5bb23cc64b2d65eae5cb704813d027f3dfac3fb9d6a46afff97a3286e0b88e", 0x63}], 0x1}}], 0x1, 0x400008c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7c, 0xff, 0x0, '\x00', 0x0, 0x1}) 214.095599ms ago: executing program 7 (id=12034): syz_io_uring_complete(0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) unshare(0x62040200) 213.940229ms ago: executing program 5 (id=12035): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x3}]) 117.969977ms ago: executing program 7 (id=12036): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x408c0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 117.823972ms ago: executing program 7 (id=12037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) 59.482752ms ago: executing program 7 (id=12038): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003800)={0x3, 0x0, [{0xeeef0000, 0xa0, &(0x7f0000002640)=""/160}, {0x5000, 0xcf, &(0x7f0000003880)=""/207}, {0x6000, 0x1000, &(0x7f0000002800)=""/4096}]}) 59.273548ms ago: executing program 5 (id=12039): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 59.141239ms ago: executing program 7 (id=12040): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r3, r2, 0x0) setresgid(0xffffffffffffffff, 0x0, r3) 350.92µs ago: executing program 5 (id=12041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 163.52µs ago: executing program 7 (id=12042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 0s ago: executing program 5 (id=12043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r4, 0x0) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered disabled state [ 570.281117][T19368] bridge_slave_0: entered allmulticast mode [ 570.284169][T19368] bridge_slave_0: entered promiscuous mode [ 570.287714][T19368] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.290297][T19368] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.293108][T19368] bridge_slave_1: entered allmulticast mode [ 570.296550][T19368] bridge_slave_1: entered promiscuous mode [ 570.343410][T19368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.348915][T19368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.396274][T19368] team0: Port device team_slave_0 added [ 570.401316][T19368] team0: Port device team_slave_1 added [ 570.453495][T19368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.455625][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.462926][T19368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.467001][T19368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.468992][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.476985][T19368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.539243][T19368] hsr_slave_0: entered promiscuous mode [ 570.542585][T19368] hsr_slave_1: entered promiscuous mode [ 570.548272][T19368] debugfs: 'hsr0' already exists in 'hsr' [ 570.550360][T19368] Cannot create hsr debugfs directory [ 571.113408][T19410] fuse: Bad value for 'group_id' [ 571.115128][T19410] fuse: Bad value for 'group_id' [ 571.136410][T19368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 571.140730][T19368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 571.146278][T19368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 571.150484][T19368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 571.228983][T19368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.238147][T19368] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.244958][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.247203][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.253370][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.255601][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.521383][T19368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.676288][T19368] veth0_vlan: entered promiscuous mode [ 571.681460][T19368] veth1_vlan: entered promiscuous mode [ 571.698130][T19368] veth0_macvtap: entered promiscuous mode [ 571.702307][T19368] veth1_macvtap: entered promiscuous mode [ 571.714607][T19368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.722337][T19368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.730976][ T1194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.734296][ T1194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.737626][ T1194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.740949][ T1194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.944503][T19441] syz.5.4756 (19441): drop_caches: 2 [ 571.946470][T19441] syz.5.4756 (19441): drop_caches: 2 [ 571.983098][ T5947] Bluetooth: hci0: command tx timeout [ 572.220233][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.222790][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.248111][T19448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.251465][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.257078][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.759765][T19467] fuse: Bad value for 'user_id' [ 572.761329][T19467] fuse: Bad value for 'user_id' [ 573.524789][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4779'. [ 573.684304][T19511] syz.4.4780 (19511): drop_caches: 2 [ 573.690804][T19511] syz.4.4780 (19511): drop_caches: 2 [ 574.023018][T15250] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 574.063026][ T5947] Bluetooth: hci0: command tx timeout [ 574.224217][T15250] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 574.228917][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.231190][T15250] usb 10-1: can't read configurations, error -61 [ 574.235666][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.240078][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.245859][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.249880][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.286124][T19539] lo speed is unknown, defaulting to 1000 [ 574.363803][T15250] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 574.445007][ T1253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.529328][T15250] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 574.534070][T15250] usb 10-1: can't read configurations, error -61 [ 574.536431][T15250] usb usb10-port1: attempt power cycle [ 574.565231][ T1253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.665994][ T1253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.736574][T19539] chnl_net:caif_netlink_parms(): no params data found [ 574.757218][ T1253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.872906][T15250] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 574.884354][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.886640][T19539] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.888904][T19539] bridge_slave_0: entered allmulticast mode [ 574.891508][T19539] bridge_slave_0: entered promiscuous mode [ 574.902490][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.905162][T19539] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.907457][T19539] bridge_slave_1: entered allmulticast mode [ 574.908243][T15250] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 574.911220][T19539] bridge_slave_1: entered promiscuous mode [ 574.912134][T15250] usb 10-1: can't read configurations, error -61 [ 574.989603][T19539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.998210][T19539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.039572][ T1253] bridge_slave_1: left allmulticast mode [ 575.041412][ T1253] bridge_slave_1: left promiscuous mode [ 575.043643][T15250] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 575.043710][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.050386][ T1253] bridge_slave_0: left allmulticast mode [ 575.052230][ T1253] bridge_slave_0: left promiscuous mode [ 575.054275][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.068814][T15250] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 575.071544][T15250] usb 10-1: can't read configurations, error -61 [ 575.074029][T15250] usb usb10-port1: unable to enumerate USB device [ 575.311670][T19553] 9pnet_fd: p9_fd_create_unix (19553): problem connecting socket: ./file0: -111 [ 575.451749][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.456179][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.459989][ T1253] bond0 (unregistering): Released all slaves [ 575.467549][T19539] team0: Port device team_slave_0 added [ 575.480340][T19539] team0: Port device team_slave_1 added [ 575.540065][T19539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.542818][T19539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.551061][T19539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.555938][T19539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.558134][T19539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.568890][T19539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.639673][T19539] hsr_slave_0: entered promiscuous mode [ 575.642011][T19539] hsr_slave_1: entered promiscuous mode [ 575.644526][T19539] debugfs: 'hsr0' already exists in 'hsr' [ 575.646339][T19539] Cannot create hsr debugfs directory [ 575.907580][ T1253] hsr_slave_0: left promiscuous mode [ 575.913443][ T1253] hsr_slave_1: left promiscuous mode [ 575.915720][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.918345][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.921166][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.927359][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.958348][ T1253] veth1_macvtap: left promiscuous mode [ 575.960156][ T1253] veth0_macvtap: left promiscuous mode [ 575.961971][ T1253] veth1_vlan: left promiscuous mode [ 575.964643][ T1253] veth0_vlan: left promiscuous mode [ 576.153404][ T5947] Bluetooth: hci0: command tx timeout [ 576.183441][ T1140] smc: removing ib device syz2 [ 576.303037][ T5947] Bluetooth: hci1: command tx timeout [ 576.805396][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 576.913319][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 577.172949][ T6025] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 577.347388][ T6025] usb 10-1: Using ep0 maxpacket: 32 [ 577.355337][ T6025] usb 10-1: config 0 has no interfaces? [ 577.359990][ T6025] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 577.364221][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.370278][ T6025] usb 10-1: config 0 descriptor?? [ 577.597953][T19577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.602612][T19577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.608317][T19577] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4803'. [ 577.754213][ T6025] usb 10-1: USB disconnect, device number 19 [ 578.097591][T19594] fuse: Unknown parameter 'grou00000000000000000000' [ 578.223616][ T5947] Bluetooth: hci0: command tx timeout [ 578.384247][ T5947] Bluetooth: hci1: command tx timeout [ 578.459403][T19539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.475025][T19539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.479422][T19539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.486766][T19539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.514062][T19613] create_pit_timer: 1 callbacks suppressed [ 578.514073][T19613] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 578.531852][T19613] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 578.567891][T19613] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 578.575574][T19613] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 578.595694][T19613] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 578.605689][T19613] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 578.617025][T19613] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 578.627337][T19539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.645465][T19539] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.655268][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.657553][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.660924][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.663297][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.972247][T19539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.012351][T19539] veth0_vlan: entered promiscuous mode [ 579.019883][T19539] veth1_vlan: entered promiscuous mode [ 579.047942][T19539] veth0_macvtap: entered promiscuous mode [ 579.053626][T19539] veth1_macvtap: entered promiscuous mode [ 579.067554][T19539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.077714][T19539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.085523][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.090108][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.094502][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.097677][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.145829][ T1327] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 579.162705][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.172063][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.193083][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.195746][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.305469][ T1327] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.316217][ T1327] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 579.319991][ T1327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 579.323701][ T1327] usb 5-1: Product: syz [ 579.325475][ T1327] usb 5-1: Manufacturer: syz [ 579.327360][ T1327] usb 5-1: SerialNumber: syz [ 579.525360][ T6025] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 579.545938][ T1327] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 579.693430][ T6025] usb 10-1: Using ep0 maxpacket: 32 [ 579.699118][ T6025] usb 10-1: config 0 has no interfaces? [ 579.703491][ T6025] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 579.712954][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.724764][ T6025] usb 10-1: config 0 descriptor?? [ 579.933188][T19644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.937565][T19644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.944265][T19644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4820'. [ 579.948427][ T5987] usb 10-1: USB disconnect, device number 20 [ 580.321367][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4825'. [ 580.473226][ T5947] Bluetooth: hci1: command tx timeout [ 581.135298][T19695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 581.583036][ T1327] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 581.734659][ T1327] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 581.737074][ T1327] usb 7-1: can't read configurations, error -61 [ 581.863944][ T1327] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 581.883779][T19715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 581.887042][ T1454] usb 5-1: USB disconnect, device number 107 [ 581.891341][ T1454] usblp0: removed [ 582.016898][ T1327] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 582.019383][ T1327] usb 7-1: can't read configurations, error -61 [ 582.025877][ T1327] usb usb7-port1: attempt power cycle [ 582.286702][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 582.286719][ T40] audit: type=1326 audit(1763062908.562:40460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19731 comm="syz.5.4856" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 582.363927][ T1327] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 582.386100][ T1327] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 582.388745][ T1327] usb 7-1: can't read configurations, error -61 [ 582.512990][ T1327] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 582.535868][ T1327] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 582.538906][ T1327] usb 7-1: can't read configurations, error -61 [ 582.543200][ T1327] usb usb7-port1: unable to enumerate USB device [ 582.553108][ T5947] Bluetooth: hci1: command tx timeout [ 582.930669][T19759] syz.5.4868 (19759): drop_caches: 2 [ 582.933947][T19759] syz.5.4868 (19759): drop_caches: 2 [ 583.410851][T19781] fuse: Unknown parameter 'group_id00000000000000000000' [ 584.047730][T19807] binder: 19806:19807 ioctl c0306201 80000300 returned -11 [ 585.170107][T19840] fuse: Bad value for 'user_id' [ 585.171767][T19840] fuse: Bad value for 'user_id' [ 586.114457][T19873] syz.0.4916 (19873): drop_caches: 2 [ 586.117159][T19873] syz.0.4916 (19873): drop_caches: 2 [ 586.138161][T19876] fuse: Bad value for 'fd' [ 586.387163][T19901] binder: 19900:19901 ioctl c0306201 80000100 returned -14 [ 586.756126][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4935'. [ 587.015716][T19940] fuse: Unknown parameter 'user_i00000000000000000000' [ 587.380086][T19957] fuse: Bad value for 'fd' [ 587.401405][T19961] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4957'. [ 587.553474][T19975] binder: Unknown parameter 'seclabel' [ 587.688867][T19986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 587.932286][T20004] fuse: Bad value for 'fd' [ 587.972041][T20009] overlayfs: failed to resolve './file0': -2 [ 588.093727][ T1327] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 588.253005][ T1327] usb 7-1: Using ep0 maxpacket: 32 [ 588.260476][ T1327] usb 7-1: config 0 has no interfaces? [ 588.263212][ T1327] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 588.267280][ T1327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.283689][ T1327] usb 7-1: config 0 descriptor?? [ 588.332959][ T60] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 588.424936][T20032] Set syz1 is full, maxelem 65536 reached [ 588.486914][ T60] usb 10-1: config 0 has no interfaces? [ 588.496574][ T60] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 588.498518][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.499499][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.502644][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.511160][ T60] usb 10-1: Product: syz [ 588.512539][ T60] usb 10-1: Manufacturer: syz [ 588.514286][ T60] usb 10-1: SerialNumber: syz [ 588.517730][T15087] usb 7-1: USB disconnect, device number 103 [ 588.520643][ T60] usb 10-1: config 0 descriptor?? [ 588.727496][ T60] usb 10-1: USB disconnect, device number 21 [ 588.734212][T20045] fuse: Unknown parameter 'user_id00000000000000000000' [ 589.222383][T20072] syz.4.5009 (20072): drop_caches: 2 [ 589.224632][T20072] syz.4.5009 (20072): drop_caches: 2 [ 589.581202][ T1454] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 589.666387][T20096] kvm: user requested TSC rate below hardware speed [ 589.743023][ T1454] usb 10-1: Using ep0 maxpacket: 32 [ 589.764462][ T1454] usb 10-1: config 0 has no interfaces? [ 589.766298][ T1454] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 589.769830][ T1454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.799487][ T1454] usb 10-1: config 0 descriptor?? [ 590.022097][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.034489][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.046130][ T59] usb 10-1: USB disconnect, device number 22 [ 590.271573][T20107] Set syz1 is full, maxelem 65536 reached [ 590.273460][T20105] syz.4.5022 (20105): drop_caches: 2 [ 590.276475][T20105] syz.4.5022 (20105): drop_caches: 2 [ 590.421445][ T40] audit: type=1326 audit(1763062916.692:40461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.5029" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 590.539882][T20123] fuse: Bad value for 'rootmode' [ 590.714813][T20137] binder: 20136:20137 ioctl 400c620e 0 returned -14 [ 591.044171][T20164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5051'. [ 591.943050][ T841] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 592.092984][ T841] usb 10-1: device descriptor read/64, error -71 [ 592.353040][ T841] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 592.482980][ T841] usb 10-1: device descriptor read/64, error -71 [ 592.593201][ T841] usb usb10-port1: attempt power cycle [ 592.873160][T20209] binder: Bad value for 'stats' [ 592.962973][ T841] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 592.994465][ T841] usb 10-1: device descriptor read/8, error -71 [ 593.018499][T20217] fuse: Unknown parameter 'fd0x0000000000000003' [ 593.252958][ T841] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 593.274958][ T841] usb 10-1: device descriptor read/8, error -71 [ 593.322990][ T6025] usb 9-1: new low-speed USB device number 76 using dummy_hcd [ 593.384120][ T841] usb usb10-port1: unable to enumerate USB device [ 593.473673][T20234] fuse: Unknown parameter 'user_i00000000000000000000' [ 593.478192][ T6025] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 593.482978][ T6025] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 593.487499][ T6025] usb 9-1: config 0 interface 0 has no altsetting 0 [ 593.490102][ T6025] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 593.494241][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.500163][ T6025] usb 9-1: config 0 descriptor?? [ 593.504403][T20221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 593.570645][T20238] fuse: Unknown parameter 'fd0x0000000000000003' [ 593.834669][ T6025] usb 9-1: string descriptor 0 read error: -71 [ 594.055234][T20252] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5087'. [ 594.109894][T20254] Set syz1 is full, maxelem 65536 reached [ 594.164107][T20256] netlink: 'syz.0.5089': attribute type 4 has an invalid length. [ 594.306286][ T6025] usbhid 9-1:0.0: can't add hid device: -71 [ 594.316567][ T6025] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 594.334826][ T6025] usb 9-1: USB disconnect, device number 76 [ 594.695866][T20304] netlink: 'syz.5.5111': attribute type 4 has an invalid length. [ 594.811545][T20311] fuse: Unknown parameter 'user_id00000000000000000000' [ 595.077640][T20333] fuse: Bad value for 'fd' [ 595.263575][T20341] tmpfs: Invalid uid '0x00000000ffffffff' [ 595.518882][T20353] tc_dump_action: action bad kind [ 596.459842][ T1327] hid_parser_main: 8 callbacks suppressed [ 596.459855][ T1327] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 596.475822][ T1327] hid-generic 0000:0000:0000.001B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 596.646815][T15087] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 596.767347][T20420] netlink: 'syz.4.5165': attribute type 2 has an invalid length. [ 596.769928][T20420] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5165'. [ 596.794737][T15087] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.801065][T15087] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 596.804370][T15087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 596.807033][T15087] usb 5-1: Product: syz [ 596.808345][T15087] usb 5-1: Manufacturer: syz [ 596.809864][T15087] usb 5-1: SerialNumber: syz [ 597.021097][T15087] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 598.162294][T20452] tc_dump_action: action bad kind [ 599.014300][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5190'. [ 599.240694][T20483] netlink: 'syz.5.5191': attribute type 4 has an invalid length. [ 599.243351][T20483] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5191'. [ 599.271173][T20485] fuse: Unknown parameter '0x0000000000000003' [ 599.821304][ T6025] usb 5-1: USB disconnect, device number 108 [ 599.868235][ T6025] usblp0: removed [ 600.460300][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5209'. [ 600.473002][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5208'. [ 602.011652][T20590] overlayfs: failed to resolve './file0': -2 [ 602.816976][T20622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 602.947967][T20624] lo speed is unknown, defaulting to 1000 [ 604.543133][T20682] lo speed is unknown, defaulting to 1000 [ 604.966267][T20718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5291'. [ 604.969235][T20718] ip6_vti0: entered promiscuous mode [ 604.971010][T20718] ip6_vti0: entered allmulticast mode [ 605.069748][T20729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5299'. [ 606.917136][T20803] lo speed is unknown, defaulting to 1000 [ 608.482270][ T1253] bridge_slave_1: left allmulticast mode [ 608.484320][ T1253] bridge_slave_1: left promiscuous mode [ 608.486178][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.490384][ T1253] bridge_slave_0: left allmulticast mode [ 608.492229][ T1253] bridge_slave_0: left promiscuous mode [ 608.494262][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.582406][ T1253] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 609.221119][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.225867][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.229173][ T1253] bond0 (unregistering): Released all slaves [ 609.335173][ T1253] bond1 (unregistering): Released all slaves [ 609.590071][ T1253] hsr_slave_0: left promiscuous mode [ 609.592418][ T1253] hsr_slave_1: left promiscuous mode [ 609.596268][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.598985][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.659590][T20918] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 610.343608][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 610.440073][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 610.557034][T20934] syz.2.5383 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 610.767440][T20943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5384'. [ 610.938210][T20957] binder: 20956:20957 ioctl c0306201 0 returned -14 [ 611.283268][ T6026] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 611.436278][ T6026] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.444327][ T6026] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 611.447258][ T6026] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 611.449777][ T6026] usb 10-1: Product: syz [ 611.451124][ T6026] usb 10-1: Manufacturer: syz [ 611.452619][ T6026] usb 10-1: SerialNumber: syz [ 611.665716][ T6026] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 611.741438][ T1253] IPVS: stop unused estimator thread 0... [ 611.764967][T20990] overlayfs: missing 'lowerdir' [ 611.978190][ C1] usblp0: nonzero write bulk status received: -71 [ 611.982162][ T60] usb 10-1: USB disconnect, device number 27 [ 611.994837][ T60] usblp0: removed [ 612.103219][ T5987] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 612.253004][ T5987] usb 7-1: Using ep0 maxpacket: 8 [ 612.256395][ T5987] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.259982][ T5987] usb 7-1: config 0 interface 0 has no altsetting 0 [ 612.262093][ T5987] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 612.265869][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.270611][ T5987] usb 7-1: config 0 descriptor?? [ 612.477040][ T5987] usbhid 7-1:0.0: can't add hid device: -71 [ 612.481050][ T5987] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 612.485179][ T5987] usb 7-1: USB disconnect, device number 104 [ 613.063312][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5429'. [ 613.484353][T21079] overlayfs: missing 'workdir' [ 613.779012][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5446'. [ 613.964707][T21099] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5451'. [ 614.171929][T21120] binder: Unknown parameter 'defcontext' [ 614.242340][T21125] tmpfs: Bad value for 'huge' [ 614.461866][T21140] overlayfs: missing 'lowerdir' [ 615.353078][ T6025] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 615.573742][ T6025] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.579380][ T6025] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 615.582266][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 615.587644][ T6025] usb 9-1: Product: syz [ 615.589093][ T6025] usb 9-1: Manufacturer: syz [ 615.590609][ T6025] usb 9-1: SerialNumber: syz [ 615.663093][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 615.679364][T21177] binder: 21176:21177 ioctl 4018620d 0 returned -22 [ 615.693162][ T5987] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 615.808877][ T6025] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 615.843075][ T5987] usb 5-1: Using ep0 maxpacket: 8 [ 615.846967][ T5987] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 615.850381][ T5987] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.857847][ T5987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.861937][ T5987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.866554][ T5987] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.871802][ T5987] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.876653][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.394504][T15324] usb 9-1: USB disconnect, device number 77 [ 616.401036][T15324] usblp0: removed [ 616.593632][T21236] lo speed is unknown, defaulting to 1000 [ 616.637734][T21237] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5515'. [ 617.533033][ T6026] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 617.694995][ T6026] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.699293][ T6026] usb 7-1: config 0 has no interfaces? [ 617.704434][ T6026] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.708024][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.711408][ T6026] usb 7-1: Product: syz [ 617.713348][ T6026] usb 7-1: Manufacturer: syz [ 617.715305][ T6026] usb 7-1: SerialNumber: syz [ 617.720261][ T6026] usb 7-1: config 0 descriptor?? [ 617.888764][T21277] binder: Unknown parameter 'fscontext?' [ 617.926729][ T6026] usb 7-1: USB disconnect, device number 105 [ 617.982266][T21283] tipc: Enabling of bearer rejected, failed to enable media [ 618.307187][ T6026] usb 5-1: USB disconnect, device number 109 [ 618.395613][T21307] can0: slcan on ttyS3. [ 618.466303][T21307] can0 (unregistered): slcan off ttyS3. [ 618.469052][T21307] Falling back ldisc for ttyS3. [ 619.553138][ T1327] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 619.627661][ T94] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.703581][ T94] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.715748][ T1327] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.723311][ T1327] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 619.726260][ T1327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 619.729049][ T1327] usb 9-1: Product: syz [ 619.730523][ T1327] usb 9-1: Manufacturer: syz [ 619.732133][ T1327] usb 9-1: SerialNumber: syz [ 619.776544][ T94] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.818707][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 619.826387][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 619.830170][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 619.834235][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 619.838368][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 619.886604][ T94] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.891878][T21416] lo speed is unknown, defaulting to 1000 [ 619.943281][ T1327] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 620.103624][ T60] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 620.243753][T21416] chnl_net:caif_netlink_parms(): no params data found [ 620.267948][ T60] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.273651][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 620.283539][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 620.287832][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.292029][ T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.296950][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.307790][ T60] usb 7-1: config 0 descriptor?? [ 620.309943][T21421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.355554][T21454] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5609'. [ 620.370497][T21416] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.373216][T21416] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.375544][T21416] bridge_slave_0: entered allmulticast mode [ 620.378488][T21416] bridge_slave_0: entered promiscuous mode [ 620.391391][T21416] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.394394][T21416] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.396810][T21416] bridge_slave_1: entered allmulticast mode [ 620.399474][T21416] bridge_slave_1: entered promiscuous mode [ 620.452644][T21416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.458733][T21416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.511024][T21416] team0: Port device team_slave_0 added [ 620.518953][T21416] team0: Port device team_slave_1 added [ 620.545184][ T1454] usb 9-1: USB disconnect, device number 78 [ 620.549557][ T1454] usblp0: removed [ 620.588264][ T94] hsr_slave_0: left promiscuous mode [ 620.595014][ T94] hsr_slave_1: left promiscuous mode [ 620.597012][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.599336][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.602325][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.605942][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.633210][ T94] veth1_macvtap: left promiscuous mode [ 620.635026][ T94] veth0_macvtap: left promiscuous mode [ 620.636829][ T94] veth1_vlan: left promiscuous mode [ 620.726502][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.728912][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.731318][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.734122][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.742935][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.745769][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.748163][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.750455][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.752771][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.755435][ T60] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.771767][ T60] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 620.984295][ T6025] usb 7-1: USB disconnect, device number 106 [ 621.345667][ T94] team0 (unregistering): Port device team_slave_1 removed [ 621.421007][ T94] team0 (unregistering): Port device team_slave_0 removed [ 621.907096][ T64] Bluetooth: hci2: command tx timeout [ 622.002733][T21416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.005604][T21416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.016072][T21416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.027774][T21416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.030449][T21416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.039654][T21416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.135831][T21416] hsr_slave_0: entered promiscuous mode [ 622.139176][T21416] hsr_slave_1: entered promiscuous mode [ 622.142216][T21416] debugfs: 'hsr0' already exists in 'hsr' [ 622.145721][T21416] Cannot create hsr debugfs directory [ 622.417199][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5633'. [ 622.453253][T21416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 622.461008][T21416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.489885][T21416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.504834][T21416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 622.535601][ T94] IPVS: stop unused estimator thread 0... [ 622.569594][T21416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.602404][T21416] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.610777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.613189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.624747][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.627188][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.800883][T21416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.943874][T21416] veth0_vlan: entered promiscuous mode [ 622.948548][T21416] veth1_vlan: entered promiscuous mode [ 622.976159][T21416] veth0_macvtap: entered promiscuous mode [ 622.980303][T21416] veth1_macvtap: entered promiscuous mode [ 622.991719][T21416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.000957][T21416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.008351][ T1253] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.012027][ T1253] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.017632][ T1253] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.021301][ T1253] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.087065][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.096280][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.110294][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5650'. [ 623.117670][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.125332][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.172098][ T6025] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 623.251573][T21596] bpf: Bad value for 'uid' [ 623.324845][ T6025] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 623.328874][ T6025] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.333714][ T6025] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 623.337192][ T6025] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 623.342202][ T6025] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.345392][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.348120][ T6025] usb 9-1: SerialNumber: syz [ 623.352025][T21564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.357526][ T6025] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 623.560009][ T6025] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 623.564842][ T6025] usb 9-1: USB disconnect, device number 79 [ 623.983025][ T64] Bluetooth: hci2: command tx timeout [ 625.242611][T21646] usb usb8: usbfs: process 21646 (syz.6.5680) did not claim interface 0 before use [ 626.013653][T21716] netlink: 392 bytes leftover after parsing attributes in process `syz.6.5713'. [ 626.063026][ T64] Bluetooth: hci2: command tx timeout [ 626.446786][ T40] audit: type=1326 audit(1763062952.722:40462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21738 comm="syz.6.5724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7fc00000 [ 626.547169][T21748] overlay: Unknown parameter '/' [ 627.542404][T21795] kvm: pic: non byte read [ 627.546056][T21795] kvm: pic: non byte read [ 627.549597][T21795] kvm: pic: non byte read [ 627.552713][T21795] kvm: pic: non byte read [ 627.556073][T21795] kvm: pic: non byte read [ 627.559455][T21795] kvm: pic: non byte read [ 627.562098][T21795] kvm: pic: non byte read [ 627.565125][T21795] kvm: pic: non byte read [ 627.567479][T21795] kvm: pic: non byte read [ 627.569787][T21795] kvm: pic: non byte read [ 627.719380][T21801] lo speed is unknown, defaulting to 1000 [ 628.143041][ T64] Bluetooth: hci2: command tx timeout [ 628.800133][T21881] 9pnet_fd: Insufficient options for proto=fd [ 628.950065][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.952105][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.175299][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5795'. [ 629.794905][T21920] random: crng reseeded on system resumption [ 630.179121][T21944] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 632.033109][ T1454] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 632.056386][T22005] fuse: Bad value for 'user_id' [ 632.057963][T22005] fuse: Bad value for 'user_id' [ 632.184473][ T1454] usb 11-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 632.187780][ T1454] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.191087][ T1454] usb 11-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.197046][ T1454] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.200003][ T1454] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.213064][ T1454] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.216345][ T1454] usb 11-1: invalid MIDI out EP 0 [ 632.262021][T17336] udevd[17336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.265867][ T1454] snd-usb-audio 11-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 632.396816][T22022] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5847'. [ 632.513779][T22028] binder: 22027:22028 ioctl c0306201 80000100 returned -14 [ 632.840876][T22047] picdev_read: 6 callbacks suppressed [ 632.840911][T22047] kvm: pic: non byte read [ 632.846680][T22047] kvm: pic: single mode not supported [ 632.846850][T22047] kvm: pic: level sensitive irq not supported [ 632.849181][T22047] kvm: pic: non byte read [ 632.854591][T22047] kvm: pic: level sensitive irq not supported [ 632.854908][T22047] kvm: pic: non byte read [ 632.859558][T22047] kvm: pic: single mode not supported [ 632.860019][T22047] kvm: pic: non byte read [ 632.865794][T22047] kvm: pic: non byte read [ 632.869142][T22047] kvm: pic: non byte read [ 632.872193][T22047] kvm: pic: non byte read [ 632.875730][T22047] kvm: pic: single mode not supported [ 632.875746][T22047] kvm: pic: level sensitive irq not supported [ 632.878019][T22047] kvm: pic: non byte read [ 632.884071][T22047] kvm: pic: non byte read [ 633.878443][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5892'. [ 634.737878][ T841] usb 11-1: USB disconnect, device number 2 [ 635.242122][ T841] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 635.392997][ T841] usb 11-1: Using ep0 maxpacket: 32 [ 635.397158][ T841] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 635.399933][ T841] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 635.404110][ T841] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 635.407470][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.410778][ T841] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 635.414337][ T841] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.418470][ T841] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 635.421389][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.433976][ T841] usb 11-1: config 0 descriptor?? [ 635.648376][ T841] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 635.666015][ T841] usb 11-1: USB disconnect, device number 3 [ 635.670256][ T841] usblp0: removed [ 635.736836][T22234] overlay: Unknown parameter 'defcontext' [ 635.922917][ T6025] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 636.062965][ T6026] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 636.079457][ T6025] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.086107][ T6025] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 636.089032][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 636.091561][ T6025] usb 9-1: Product: syz [ 636.092968][ T6025] usb 9-1: Manufacturer: syz [ 636.094459][ T6025] usb 9-1: SerialNumber: syz [ 636.143091][ T841] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 636.234508][ T6026] usb 10-1: config 0 has no interfaces? [ 636.238838][ T6026] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.242499][ T6026] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.247465][ T6026] usb 10-1: Product: syz [ 636.249229][ T6026] usb 10-1: Manufacturer: syz [ 636.251222][ T6026] usb 10-1: SerialNumber: syz [ 636.261216][ T6026] usb 10-1: config 0 descriptor?? [ 636.293398][ T841] usb 11-1: Using ep0 maxpacket: 32 [ 636.296923][ T841] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 636.299438][ T841] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 636.301733][ T6025] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 636.302384][ T841] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 636.308848][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 636.313369][ T841] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 636.317345][ T841] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 636.322599][ T841] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 636.326183][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.330182][ T841] usb 11-1: config 0 descriptor?? [ 636.471718][ T5987] usb 10-1: USB disconnect, device number 28 [ 636.535439][ T841] usblp 11-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 637.018462][T22256] can0: slcan on ttyS3. [ 637.113603][T22256] can0 (unregistered): slcan off ttyS3. [ 637.497465][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5965'. [ 637.908279][ T6026] usb 11-1: USB disconnect, device number 4 [ 637.912007][ T6026] usblp1: removed [ 638.041734][T22340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5986'. [ 638.068624][ C1] usblp0: nonzero write bulk status received: -71 [ 638.068948][ T59] usb 9-1: USB disconnect, device number 80 [ 638.077601][ T59] usblp0: removed [ 638.098296][T22344] binder: Unknown parameter 'context' [ 639.582952][ T1327] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 639.602952][ T6025] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 639.753521][ T1327] usb 9-1: config 0 has no interfaces? [ 639.757270][ T1327] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.760099][ T1327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.762592][ T1327] usb 9-1: Product: syz [ 639.764696][ T1327] usb 9-1: Manufacturer: syz [ 639.766178][ T1327] usb 9-1: SerialNumber: syz [ 639.768815][ T1327] usb 9-1: config 0 descriptor?? [ 639.773278][ T6025] usb 11-1: Using ep0 maxpacket: 32 [ 639.776314][ T6025] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.779616][ T6025] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.782461][ T6025] usb 11-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 639.786523][ T6025] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.790879][ T6025] usb 11-1: config 0 descriptor?? [ 639.972548][ T1327] usb 9-1: USB disconnect, device number 81 [ 640.000276][ T6025] usb 11-1: USB disconnect, device number 5 [ 640.342457][ T6025] hid_parser_main: 5 callbacks suppressed [ 640.342470][ T6025] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 640.352130][ T6025] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 640.548530][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.553040][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.557761][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.561256][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.564205][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.625811][T22529] lo speed is unknown, defaulting to 1000 [ 640.739462][T22529] chnl_net:caif_netlink_parms(): no params data found [ 640.822137][T22529] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.827235][T22529] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.830356][T22529] bridge_slave_0: entered allmulticast mode [ 640.834814][T22529] bridge_slave_0: entered promiscuous mode [ 640.838813][T22529] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.841462][T22529] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.844630][T22529] bridge_slave_1: entered allmulticast mode [ 640.852638][T22529] bridge_slave_1: entered promiscuous mode [ 640.889008][T22529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.920701][ T94] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.931573][T22529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.970442][T22529] team0: Port device team_slave_0 added [ 640.976086][T22529] team0: Port device team_slave_1 added [ 641.019332][ T94] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.029813][T22529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.032249][T22529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.041036][T22529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.046262][T22529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.048429][T22529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.056676][T22529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.106321][ T94] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.122659][T22529] hsr_slave_0: entered promiscuous mode [ 641.125140][T22529] hsr_slave_1: entered promiscuous mode [ 641.127562][T22529] debugfs: 'hsr0' already exists in 'hsr' [ 641.129547][T22529] Cannot create hsr debugfs directory [ 641.198241][ T94] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.264360][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6102'. [ 641.332138][ T94] bridge_slave_1: left allmulticast mode [ 641.336413][ T94] bridge_slave_1: left promiscuous mode [ 641.338252][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.341817][ T94] bridge_slave_0: left allmulticast mode [ 641.344769][ T94] bridge_slave_0: left promiscuous mode [ 641.346616][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.616854][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.621431][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.628233][ T94] bond0 (unregistering): Released all slaves [ 642.087048][ T94] hsr_slave_0: left promiscuous mode [ 642.089738][ T94] hsr_slave_1: left promiscuous mode [ 642.124441][ T94] veth1_macvtap: left promiscuous mode [ 642.126959][ T94] veth0_macvtap: left promiscuous mode [ 642.129054][ T94] veth1_vlan: left promiscuous mode [ 642.130752][ T94] veth0_vlan: left promiscuous mode [ 642.336418][ T6026] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 642.502815][ T6026] usb 9-1: config 0 has no interfaces? [ 642.506544][ T6026] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.509393][ T6026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.511888][ T6026] usb 9-1: Product: syz [ 642.513443][ T6026] usb 9-1: Manufacturer: syz [ 642.515051][ T6026] usb 9-1: SerialNumber: syz [ 642.523126][ T6026] usb 9-1: config 0 descriptor?? [ 642.623053][ T5947] Bluetooth: hci4: command tx timeout [ 642.733303][ T6025] usb 9-1: USB disconnect, device number 82 [ 642.743221][T22674] netlink: 'syz.6.6133': attribute type 4 has an invalid length. [ 642.893459][ T94] team0 (unregistering): Port device team_slave_1 removed [ 642.989008][ T94] team0 (unregistering): Port device team_slave_0 removed [ 643.841640][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 643.866563][T22698] lo speed is unknown, defaulting to 1000 [ 643.878709][T22702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6145'. [ 643.881796][T22702] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6145'. [ 643.885711][T22702] tipc: Invalid UDP bearer configuration [ 643.885740][T22702] tipc: Enabling of bearer rejected, failed to enable media [ 643.979721][T22529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.988287][T22529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 643.995937][T22529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 644.000145][T22529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 644.104790][T22529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.121066][T22529] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.135737][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.137766][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.155319][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.157664][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.395483][T22529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.692530][T22529] veth0_vlan: entered promiscuous mode [ 644.702301][T22529] veth1_vlan: entered promiscuous mode [ 644.703096][ T5947] Bluetooth: hci4: command tx timeout [ 644.763367][T22529] veth0_macvtap: entered promiscuous mode [ 644.782525][T22529] veth1_macvtap: entered promiscuous mode [ 644.806227][T22529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.816348][T22529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.821775][ T1253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.825590][ T1253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.840124][ T1253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.844531][ T1253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.954987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.958205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.994781][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.999043][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.533338][T22800] cgroup: Unknown subsys name 'cpuset' [ 646.092931][ T5987] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 646.267209][ T5987] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 646.270973][ T5987] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.275202][ T5987] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 646.278025][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.285377][ T5987] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.287853][ T5987] usb 7-1: invalid MIDI out EP 0 [ 646.340584][T17336] udevd[17336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.359271][ T5987] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 646.645414][T22849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6197'. [ 646.648356][T22849] sit0: entered promiscuous mode [ 646.650020][T22849] sit0: entered allmulticast mode [ 646.782914][T22859] binder: Bad value for 'max' [ 646.782969][ T5947] Bluetooth: hci4: command tx timeout [ 647.637441][T22902] Unsupported ieee802154 address type: 0 [ 647.984820][T22928] netlink: 264 bytes leftover after parsing attributes in process `syz.5.6235'. [ 648.248666][T22948] binder: Bad value for 'max' [ 648.700246][ T1454] usb 7-1: USB disconnect, device number 107 [ 648.738001][ T40] audit: type=1326 audit(1763062975.012:40463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22962 comm="syz.2.6251" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0 [ 648.862957][ T5947] Bluetooth: hci4: command tx timeout [ 649.350861][T23002] netlink: 'syz.4.6270': attribute type 4 has an invalid length. [ 650.074794][T22998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 650.077722][T22998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 650.087841][T22998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 650.091230][T22998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.093221][T22998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 650.098160][T22998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 650.101073][T22998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.103162][T22998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 650.105965][T22998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 650.110633][T22998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.112589][T22998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 650.116031][T22998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 651.013582][T23058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 651.017808][T23058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 651.020465][T23058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 651.024532][T23058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 651.062515][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6310'. [ 651.217172][T23106] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6318'. [ 651.249962][T23115] binder: 23113:23115 ioctl c0306201 0 returned -14 [ 651.259725][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 651.382335][T23135] lo speed is unknown, defaulting to 1000 [ 651.403723][T23140] 9p: Unknown access argument a: -22 [ 651.539003][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6340'. [ 652.158467][T23206] loop5: detected capacity change from 0 to 7 [ 652.285852][T17841] Dev loop5: unable to read RDB block 7 [ 652.287780][T17841] loop5: unable to read partition table [ 652.289970][T17841] loop5: partition table beyond EOD, truncated [ 652.312932][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 652.375032][T23219] lo speed is unknown, defaulting to 1000 [ 652.412552][T23206] Dev loop5: unable to read RDB block 7 [ 652.414798][T23206] loop5: unable to read partition table [ 652.417238][T23206] loop5: partition table beyond EOD, truncated [ 652.420589][T23206] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 652.627930][T23248] netlink: 37 bytes leftover after parsing attributes in process `syz.4.6384'. [ 653.023086][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 653.023482][T16306] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.102952][T16306] Bluetooth: hci4: command 0x0c1a tx timeout [ 653.143947][T23309] netlink: 264 bytes leftover after parsing attributes in process `syz.4.6413'. [ 653.342778][T23328] overlay: Unknown parameter '/&' [ 653.652567][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6439'. [ 653.655675][T23363] tc_dump_action: action bad kind [ 653.761347][T23376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6445'. [ 653.916162][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6454'. [ 654.013063][T23406] netlink: 392 bytes leftover after parsing attributes in process `syz.6.6459'. [ 654.383039][T16306] Bluetooth: hci0: command 0x0c1a tx timeout [ 654.538386][T23472] Device name cannot be null; rc = [-22] [ 655.103039][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 655.105318][T16306] Bluetooth: hci2: command 0x0405 tx timeout [ 655.183118][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 655.402984][ T6026] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 655.582996][ T6026] usb 11-1: Using ep0 maxpacket: 32 [ 655.586364][ T6026] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.589879][ T6026] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.593014][ T6026] usb 11-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 655.595746][ T6026] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.599781][ T6026] usb 11-1: config 0 descriptor?? [ 655.603089][ T6026] hub 11-1:0.0: USB hub found [ 655.804335][ T6026] hub 11-1:0.0: 1 port detected [ 655.811334][T23578] binder: Unknown parameter 'co' [ 656.004836][ T6026] hub 11-1:0.0: hub_hub_status failed (err = -71) [ 656.007092][ T6026] hub 11-1:0.0: config failed, can't get hub status (err -71) [ 656.011605][ T6026] usbhid 11-1:0.0: can't add hid device: -71 [ 656.014798][ T6026] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 656.033195][ T6026] usb 11-1: USB disconnect, device number 6 [ 656.060698][T23594] kvm: pic: non byte read [ 656.064742][T23594] kvm: pic: single mode not supported [ 656.064759][T23594] kvm: pic: level sensitive irq not supported [ 656.067069][T23594] kvm: pic: non byte read [ 656.072158][T23594] kvm: pic: level sensitive irq not supported [ 656.072474][T23594] kvm: pic: non byte read [ 656.077585][T23594] kvm: pic: single mode not supported [ 656.077886][T23594] kvm: pic: non byte read [ 656.082779][T23594] kvm: pic: non byte read [ 656.086714][T23594] kvm: pic: non byte read [ 656.089873][T23594] kvm: pic: non byte read [ 656.092813][T23594] kvm: pic: single mode not supported [ 656.092822][T23594] kvm: pic: level sensitive irq not supported [ 656.095373][T23594] kvm: pic: non byte read [ 656.100578][T23594] kvm: pic: non byte read [ 656.473031][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 656.482263][T23610] binder: Bad value for 'max' [ 657.182962][ T5947] Bluetooth: hci2: command 0x0405 tx timeout [ 657.183073][T16306] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.262957][T16306] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.433478][ T1454] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 657.586123][ T1454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.589965][ T1454] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 657.594007][ T1454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.599404][ T1454] usb 7-1: config 0 descriptor?? [ 658.012126][ T1454] lenovo 0003:17EF:6047.001E: item fetching failed at offset 2/5 [ 658.015341][ T1454] lenovo 0003:17EF:6047.001E: hid_parse failed [ 658.017346][ T1454] lenovo 0003:17EF:6047.001E: probe with driver lenovo failed with error -22 [ 658.177392][T23716] __nla_validate_parse: 2 callbacks suppressed [ 658.177408][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6606'. [ 658.211086][ T1454] usb 7-1: USB disconnect, device number 108 [ 658.591915][T23755] cgroup: Unknown subsys name 'cpuset' [ 658.648726][T23758] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6626'. [ 658.704604][T23764] lo speed is unknown, defaulting to 1000 [ 658.880560][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6640'. [ 658.944033][T23801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6646'. [ 658.975058][T23805] binder: Bad value for 'max' [ 659.175848][T23829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 659.352945][T16306] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.399557][T23854] overlayfs: missing 'lowerdir' [ 659.729037][T23886] netlink: 'syz.5.6687': attribute type 11 has an invalid length. [ 659.731508][T23886] netlink: 'syz.5.6687': attribute type 2 has an invalid length. [ 660.035265][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6711'. [ 661.030842][T23956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.033058][T23956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 661.035043][T23956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.037108][T23956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 661.166416][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6760'. [ 661.415812][T24066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6771'. [ 662.304909][T16306] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.483714][T24149] overlay: Unknown parameter '/C][IjâÀìJë Îã{eJòv ‚Øz/@«FÄòæê7ÁðÀG¬çµÀ¨!®Ié«$‚@VÀ\' [ 662.765304][T24167] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6818'. [ 662.878583][T24175] overlayfs: failed to clone upperpath [ 663.008315][T24190] binder: Unknown parameter 'defcontext' [ 663.066921][T24197] binder: Unknown parameter 'seclabel' [ 663.110838][T16306] Bluetooth: hci4: command 0x0c1a tx timeout [ 663.112536][ T5947] Bluetooth: hci2: command 0x0405 tx timeout [ 663.112558][T23299] Bluetooth: hci1: command 0x0c1a tx timeout [ 663.277768][T24231] binder: Unknown parameter 'context' [ 663.339667][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6853'. [ 663.412246][T24256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6860'. [ 663.527841][T24276] binder: Unknown parameter 'context' [ 663.617467][T24290] overlayfs: failed to resolve './file0': -2 [ 663.956876][T24348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6906'. [ 663.968863][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6907'. [ 663.971664][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6907'. [ 664.001174][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6910'. [ 664.075462][T24370] overlayfs: failed to clone upperpath [ 664.230598][ T40] audit: type=1326 audit(1763063246.504:40464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24397 comm="syz.4.6929" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 664.390000][T24419] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6939'. [ 664.441789][T24424] kvm: pic: non byte read [ 664.444672][T24424] kvm: pic: single mode not supported [ 664.444682][T24424] kvm: pic: level sensitive irq not supported [ 664.446699][T24424] kvm: pic: non byte read [ 664.451536][T24424] kvm: pic: level sensitive irq not supported [ 664.451859][T24424] kvm: pic: non byte read [ 664.456614][T24424] kvm: pic: single mode not supported [ 664.456917][T24424] kvm: pic: non byte read [ 664.461942][T24424] kvm: pic: non byte read [ 664.465692][T24424] kvm: pic: non byte read [ 664.470319][T24424] kvm: pic: non byte read [ 664.473511][T24424] kvm: pic: single mode not supported [ 664.473521][T24424] kvm: pic: level sensitive irq not supported [ 664.475591][T24424] kvm: pic: non byte read [ 664.480891][T24424] kvm: pic: non byte read [ 664.587113][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6950'. [ 664.744450][T24470] cgroup: Unknown subsys name 'cpuset' [ 664.994533][T24507] lo speed is unknown, defaulting to 1000 [ 665.254896][T24544] lo speed is unknown, defaulting to 1000 [ 665.394127][T24562] input: syz1 as /devices/virtual/input/input62 [ 665.509742][T16306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.517452][T16306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.520932][T16306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.532823][T16306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.536376][T16306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.585844][T24572] lo speed is unknown, defaulting to 1000 [ 665.664953][T24572] chnl_net:caif_netlink_parms(): no params data found [ 665.736622][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.738912][T24572] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.741163][T24572] bridge_slave_0: entered allmulticast mode [ 665.745892][T24572] bridge_slave_0: entered promiscuous mode [ 665.749303][T24617] overlayfs: failed to clone upperpath [ 665.749798][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.755113][T24572] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.757428][T24572] bridge_slave_1: entered allmulticast mode [ 665.759998][T24572] bridge_slave_1: entered promiscuous mode [ 665.795573][T24572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.800115][T24572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.840901][T24572] team0: Port device team_slave_0 added [ 665.844571][T24572] team0: Port device team_slave_1 added [ 665.884540][T24572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.886755][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.895090][T24572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.909417][T24638] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7037'. [ 665.919830][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.930851][T24572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.933267][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.940798][T24572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.005241][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.014446][T24572] hsr_slave_0: entered promiscuous mode [ 666.016771][T24572] hsr_slave_1: entered promiscuous mode [ 666.018910][T24572] debugfs: 'hsr0' already exists in 'hsr' [ 666.020742][T24572] Cannot create hsr debugfs directory [ 666.081272][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.176009][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.315006][ T13] bridge_slave_1: left allmulticast mode [ 666.316941][ T13] bridge_slave_1: left promiscuous mode [ 666.319123][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.332919][ T13] bridge_slave_0: left allmulticast mode [ 666.334734][ T13] bridge_slave_0: left promiscuous mode [ 666.336701][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.439563][T24710] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 666.444619][T24710] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 666.460578][T24710] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 666.471321][T24710] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 666.477250][T24710] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 666.481585][T24710] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 666.498558][T24710] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 666.677275][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.681742][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.695560][ T13] bond0 (unregistering): Released all slaves [ 666.744967][T24714] lo speed is unknown, defaulting to 1000 [ 667.064304][T24768] fuse: Unknown parameter '0xffffffffffffffff' [ 667.103773][ T13] hsr_slave_0: left promiscuous mode [ 667.106480][ T13] hsr_slave_1: left promiscuous mode [ 667.109461][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.112080][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.118712][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.121545][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.158182][ T13] veth1_macvtap: left promiscuous mode [ 667.159960][ T13] veth0_macvtap: left promiscuous mode [ 667.161962][ T13] veth1_vlan: left promiscuous mode [ 667.306990][T24808] overlayfs: failed to clone upperpath [ 667.584145][ T5947] Bluetooth: hci3: command tx timeout [ 667.969398][ T13] team0 (unregistering): Port device team_slave_1 removed [ 668.053758][ T13] team0 (unregistering): Port device team_slave_0 removed [ 668.062570][T24845] ptrace attach of "/syz-executor exec"[24846] was attempted by "/syz-executor exec"[24845] [ 668.704928][T24860] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.713413][T24572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 668.730619][T24572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.737094][T24572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.742395][T24572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.808812][T24572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.826726][T24572] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.836563][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.838852][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.852235][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.854810][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.976871][T24572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.065910][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7149'. [ 669.117506][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7153'. [ 669.151166][T24572] veth0_vlan: entered promiscuous mode [ 669.156792][T24572] veth1_vlan: entered promiscuous mode [ 669.181333][T24572] veth0_macvtap: entered promiscuous mode [ 669.186067][T24572] veth1_macvtap: entered promiscuous mode [ 669.201741][T24572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.213917][T24572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.227867][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.231092][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.238994][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.241797][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.291914][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.295181][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.313316][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.316111][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.331751][T24954] netlink: 'syz.2.7165': attribute type 15 has an invalid length. [ 669.457673][T24972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7173'. [ 669.460590][T24972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7173'. [ 669.662977][ T5947] Bluetooth: hci3: command tx timeout [ 669.779789][T25010] 9p: Unknown Cache mode or invalid value doo [ 670.045211][T25023] overlayfs: conflicting options: userxattr,redirect_dir=on [ 670.223167][ T40] audit: type=1326 audit(1763063252.494:40465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.232820][ T40] audit: type=1326 audit(1763063252.494:40466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.251615][ T40] audit: type=1326 audit(1763063252.494:40467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.260904][ T40] audit: type=1326 audit(1763063252.494:40468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.267779][ T40] audit: type=1326 audit(1763063252.494:40469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.274885][ T40] audit: type=1326 audit(1763063252.494:40470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.281490][ T40] audit: type=1326 audit(1763063252.494:40471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.288383][ T40] audit: type=1326 audit(1763063252.494:40472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.295898][ T40] audit: type=1326 audit(1763063252.494:40473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.304326][ T40] audit: type=1326 audit(1763063252.494:40474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.2.7201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x50000 [ 670.338350][T25039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7203'. [ 670.682931][T15324] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 670.833633][T15324] usb 11-1: Using ep0 maxpacket: 32 [ 670.844585][T15324] usb 11-1: config 0 has an invalid interface number: 67 but max is 0 [ 670.847613][T15324] usb 11-1: config 0 has no interface number 0 [ 670.851319][T15324] usb 11-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 670.856144][T15324] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.858670][T15324] usb 11-1: Product: syz [ 670.860258][T15324] usb 11-1: Manufacturer: syz [ 670.862212][T15324] usb 11-1: SerialNumber: syz [ 670.872132][T15324] usb 11-1: config 0 descriptor?? [ 670.876271][T15324] smsc95xx v2.0.0 [ 671.278331][T15324] smsc95xx 11-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 671.282567][T15324] smsc95xx 11-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 671.291915][T15324] smsc95xx 11-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 671.296500][T15324] smsc95xx 11-1:0.67: probe with driver smsc95xx failed with error -71 [ 671.304714][T15324] usb 11-1: USB disconnect, device number 7 [ 671.695189][T16306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 671.701011][T16306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 671.706187][T16306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 671.714861][T16306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 671.719901][T16306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 671.752943][ T5947] Bluetooth: hci3: command tx timeout [ 671.769234][T25126] lo speed is unknown, defaulting to 1000 [ 671.926378][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.964631][T25126] chnl_net:caif_netlink_parms(): no params data found [ 672.087523][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.173425][T25126] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.175707][T25126] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.178038][T25126] bridge_slave_0: entered allmulticast mode [ 672.180675][T25126] bridge_slave_0: entered promiscuous mode [ 672.200032][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.207173][T25126] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.209444][T25126] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.211823][T25126] bridge_slave_1: entered allmulticast mode [ 672.215031][T25126] bridge_slave_1: entered promiscuous mode [ 672.251301][T25126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.257316][T25126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.298962][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.307732][T25126] team0: Port device team_slave_0 added [ 672.311526][T25126] team0: Port device team_slave_1 added [ 672.352611][T25126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.355125][T25126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.363548][T25126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.368421][T25126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.370353][T25126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.379153][T25126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.420207][T25126] hsr_slave_0: entered promiscuous mode [ 672.422689][T25126] hsr_slave_1: entered promiscuous mode [ 672.425134][T25126] debugfs: 'hsr0' already exists in 'hsr' [ 672.426988][T25126] Cannot create hsr debugfs directory [ 672.543532][ T46] bridge_slave_1: left allmulticast mode [ 672.545337][ T46] bridge_slave_1: left promiscuous mode [ 672.547254][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.551339][ T46] bridge_slave_0: left allmulticast mode [ 672.553575][ T46] bridge_slave_0: left promiscuous mode [ 672.555772][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.817811][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.822562][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.826640][ T46] bond0 (unregistering): Released all slaves [ 673.006063][T25171] lo speed is unknown, defaulting to 1000 [ 673.221043][ T46] hsr_slave_0: left promiscuous mode [ 673.230975][ T46] hsr_slave_1: left promiscuous mode [ 673.237123][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.242300][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.247063][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.251903][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.295232][ T46] veth1_macvtap: left promiscuous mode [ 673.297029][ T46] veth0_macvtap: left promiscuous mode [ 673.298830][ T46] veth1_vlan: left promiscuous mode [ 673.300512][ T46] veth0_vlan: left promiscuous mode [ 673.743076][ T5947] Bluetooth: hci0: command tx timeout [ 673.823381][ T5947] Bluetooth: hci3: command tx timeout [ 674.083266][ T46] team0 (unregistering): Port device team_slave_1 removed [ 674.182285][ T46] team0 (unregistering): Port device team_slave_0 removed [ 674.257209][T25259] 9pnet_fd: Insufficient options for proto=fd [ 674.332962][ T841] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 674.499803][T25267] binder: 25266:25267 ioctl c0306201 80000100 returned -14 [ 674.508289][ T841] usb 11-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 674.511860][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.520135][ T841] usb 11-1: config 0 descriptor?? [ 674.524584][ T841] asix 11-1:0.0: probe with driver asix failed with error -22 [ 675.338130][T25126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 675.342496][T25126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 675.350748][T25126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 675.381724][T25126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 675.488579][T25126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.508360][T25126] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.515611][T22678] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.518495][T22678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.531327][T22678] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.534405][T22678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.716061][T25126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.743969][T25126] veth0_vlan: entered promiscuous mode [ 675.748632][T25126] veth1_vlan: entered promiscuous mode [ 675.775905][T25126] veth0_macvtap: entered promiscuous mode [ 675.782218][T25126] veth1_macvtap: entered promiscuous mode [ 675.820545][T25126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.829892][T25126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.834216][ T5947] Bluetooth: hci0: command tx timeout [ 675.837730][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.840386][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.843971][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.846642][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.893972][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.896431][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.909374][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.915752][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.958867][T15087] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 676.028051][T25309] binder: 25308:25309 ioctl c0306201 800001c0 returned -14 [ 676.137649][T15087] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.143946][T15087] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 676.146909][T15087] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 676.149418][T15087] usb 9-1: Product: syz [ 676.150739][T15087] usb 9-1: Manufacturer: syz [ 676.152214][T15087] usb 9-1: SerialNumber: syz [ 676.225324][T25323] lo speed is unknown, defaulting to 1000 [ 676.368788][T15087] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 676.384791][T25327] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7313'. [ 676.388530][T25327] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7313'. [ 676.394873][T25327] unsupported nlmsg_type 40 [ 676.828557][T25373] lo speed is unknown, defaulting to 1000 [ 677.074889][T25391] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7340'. [ 677.116609][ T6025] usb 11-1: USB disconnect, device number 8 [ 677.244870][T25411] binder: 25410:25411 ioctl 4018620d 0 returned -22 [ 677.520047][T25438] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7363'. [ 677.817558][T25479] lo speed is unknown, defaulting to 1000 [ 677.902987][ T5947] Bluetooth: hci0: command tx timeout [ 678.161733][T25528] ptrace attach of "/syz-executor exec"[25532] was attempted by "/syz-executor exec"[25528] [ 678.204569][T25539] binder: 25538:25539 ioctl c0306201 800004c0 returned -22 [ 678.281397][T25551] usb usb7: usbfs: process 25551 (syz.6.7415) did not claim interface 0 before use [ 678.501365][T25582] binder: 25580:25582 ioctl 4018620d 0 returned -22 [ 678.502618][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 678.502633][ T40] audit: type=1800 audit(1763063260.774:40531): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7431" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 678.713855][ T59] usb 9-1: USB disconnect, device number 83 [ 678.726198][ T59] usblp0: removed [ 678.746314][ T1454] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 678.893027][ T1454] usb 7-1: Using ep0 maxpacket: 16 [ 678.898762][ T1454] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.904776][ T1454] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.915089][ T1454] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.918828][ T1454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.922382][ T1454] usb 7-1: Product: syz [ 678.924541][ T1454] usb 7-1: Manufacturer: syz [ 678.926462][ T1454] usb 7-1: SerialNumber: syz [ 679.156535][ T1454] usb 7-1: 0:2 : does not exist [ 679.167645][ T1454] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 679.187709][ T1454] usb 7-1: USB disconnect, device number 109 [ 679.213075][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.982989][ T5947] Bluetooth: hci0: command tx timeout [ 680.126355][T25690] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 680.132049][T25690] overlayfs: missing 'lowerdir' [ 680.951113][T25768] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7517'. [ 681.093073][ T60] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 681.246146][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.262935][ T60] usb 11-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 681.266043][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.269810][ T60] usb 11-1: config 0 descriptor?? [ 681.477993][ T60] usbhid 11-1:0.0: can't add hid device: -71 [ 681.481240][ T60] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 681.494801][ T60] usb 11-1: USB disconnect, device number 9 [ 681.731316][T25819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7540'. [ 681.813646][T25827] binder: 25825:25827 ioctl c0306201 800004c0 returned -22 [ 682.314952][T25851] netlink: 'syz.5.7556': attribute type 12 has an invalid length. [ 682.745155][T25900] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7578'. [ 682.748033][T25900] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7578'. [ 682.790077][T25902] overlayfs: missing 'workdir' [ 683.016553][T25928] netlink: 'syz.4.7590': attribute type 64 has an invalid length. [ 683.183383][ T59] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 683.334625][ T59] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.340361][ T59] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 683.343914][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 683.346621][ T59] usb 7-1: Product: syz [ 683.347903][ T59] usb 7-1: Manufacturer: syz [ 683.349278][ T59] usb 7-1: SerialNumber: syz [ 683.557776][ T59] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 683.670231][T25973] kvm: apic: phys broadcast and lowest prio [ 683.951593][T25999] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7623'. [ 683.962973][ T59] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 684.113058][ T59] usb 10-1: Using ep0 maxpacket: 8 [ 684.122994][ T59] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 684.126417][ T59] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.130445][ T59] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.133843][ T59] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.137430][ T59] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.141509][ T59] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 684.145933][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.492798][T26064] binder: 26063:26064 ioctl 400c620e 80000080 returned -22 [ 685.573324][T26073] overlayfs: failed to resolve './file0': -2 [ 685.848674][T26090] overlayfs: failed to resolve './file1': -2 [ 685.938952][ T6026] usb 7-1: USB disconnect, device number 110 [ 685.989870][T26103] overlayfs: failed to resolve './file1': -2 [ 686.346635][ T1327] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 686.459099][T26150] netlink: 'syz.6.7689': attribute type 3 has an invalid length. [ 686.494819][ T1327] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.501472][ T1327] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 686.503508][T26152] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 686.505256][ T1327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 686.510908][ T1327] usb 9-1: Product: syz [ 686.512605][ T1327] usb 9-1: Manufacturer: syz [ 686.514690][ T1327] usb 9-1: SerialNumber: syz [ 686.625590][T25976] usblp0: removed [ 686.627909][T15324] usb 10-1: USB disconnect, device number 29 [ 686.688457][T26160] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7694'. [ 686.726853][ T1327] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 686.770512][T26168] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7698'. [ 686.774912][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7698'. [ 687.183197][ T1327] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 687.351023][ T1327] usb 11-1: Using ep0 maxpacket: 8 [ 687.358187][ T1327] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 687.363741][ T1327] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.366895][ T1327] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 687.370831][ T1327] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 687.376089][ T1327] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.381415][ T1327] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.385484][ T1327] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.483815][T26219] overlayfs: missing 'lowerdir' [ 687.919235][T26242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7732'. [ 687.923191][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7732'. [ 687.926873][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7732'. [ 688.005625][T26246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7734'. [ 688.464907][T26274] 9pnet_fd: Insufficient options for proto=fd [ 689.102706][T15087] usb 9-1: USB disconnect, device number 84 [ 689.663012][ T5947] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 689.664174][T16306] Bluetooth: hci1: command 0x1003 tx timeout [ 689.935750][T26302] random: crng reseeded on system resumption [ 690.016620][T26254] usblp0: removed [ 690.022919][ T59] usb 11-1: USB disconnect, device number 10 [ 690.283067][ T6025] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 690.385534][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.388361][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.412993][T26316] lo speed is unknown, defaulting to 1000 [ 690.436258][ T6025] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.439374][ T6025] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.450161][ T6025] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 690.459225][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.464091][ T6025] usb 10-1: config 0 descriptor?? [ 690.680182][T26304] netlink: 'syz.5.7759': attribute type 1 has an invalid length. [ 690.683276][T26304] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7759'. [ 690.689919][T15087] usb 10-1: USB disconnect, device number 30 [ 691.191008][T26359] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7784'. [ 691.194303][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7784'. [ 691.197481][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7784'. [ 692.044960][T26441] lo speed is unknown, defaulting to 1000 [ 692.687069][T26484] binder: 26482:26484 ioctl c018620c 80000180 returned -1 [ 692.893546][T26508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7853'. [ 693.138771][T26548] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7873'. [ 693.313133][T15087] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 693.467188][T15087] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.471551][T26595] binder: 26593:26595 ioctl c0306201 800004c0 returned -22 [ 693.474895][T15087] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 693.477684][T15087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 693.480148][T15087] usb 7-1: Product: syz [ 693.481435][T15087] usb 7-1: Manufacturer: syz [ 693.485036][T15087] usb 7-1: SerialNumber: syz [ 693.676054][T26607] binder: 26606:26607 ioctl 4018620d 0 returned -22 [ 693.693891][T15087] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 693.735452][T26613] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7903'. [ 693.889916][T26635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7913'. [ 694.116910][T26656] overlayfs: failed to get inode (-116) [ 694.119096][T26656] overlayfs: failed to get inode (-116) [ 694.710409][T26711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7948'. [ 694.793433][ T841] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 694.955988][ T841] usb 11-1: config 0 has an invalid interface number: 41 but max is 0 [ 694.959243][ T841] usb 11-1: config 0 has no interface number 0 [ 694.961750][ T841] usb 11-1: config 0 interface 41 has no altsetting 0 [ 694.967304][ T841] usb 11-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 694.972322][ T841] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.976037][ T841] usb 11-1: Product: syz [ 694.978741][ T841] usb 11-1: Manufacturer: syz [ 694.980809][ T841] usb 11-1: SerialNumber: syz [ 694.985100][ T841] usb 11-1: config 0 descriptor?? [ 695.047296][T26728] ªªªªªª: renamed from vlan0 (while UP) [ 695.081621][T26730] overlayfs: missing 'lowerdir' [ 695.164498][T26734] tipc: Started in network mode [ 695.166061][T26734] tipc: Node identity 4, cluster identity 4711 [ 695.168021][T26734] tipc: Node number set to 4 [ 695.328181][T26742] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7963'. [ 695.399590][ T841] CoreChips 11-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 695.403223][ T841] CoreChips 11-1:0.41: probe with driver CoreChips failed with error -71 [ 695.409664][ T841] usb 11-1: USB disconnect, device number 11 [ 696.009038][T26775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7979'. [ 696.078685][T15087] usb 7-1: USB disconnect, device number 111 [ 696.092463][T15087] usblp0: removed [ 696.263310][T26800] overlayfs: missing 'workdir' [ 696.299674][T26803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7992'. [ 696.354581][T16306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 696.367157][T16306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 696.378476][T16306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 696.384145][T16306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 696.388949][T16306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 696.414390][T26807] lo speed is unknown, defaulting to 1000 [ 696.548493][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.553635][T15087] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 696.569894][T26807] chnl_net:caif_netlink_parms(): no params data found [ 696.657113][T26807] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.660180][T26807] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.664773][T26807] bridge_slave_0: entered allmulticast mode [ 696.667543][T26807] bridge_slave_0: entered promiscuous mode [ 696.685048][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.692313][T26807] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.695319][T26807] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.697654][T26807] bridge_slave_1: entered allmulticast mode [ 696.700524][T26807] bridge_slave_1: entered promiscuous mode [ 696.706844][T15087] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.733244][T15087] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 696.736283][T15087] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 696.739337][T15087] usb 10-1: Product: syz [ 696.744704][T15087] usb 10-1: Manufacturer: syz [ 696.746250][T15087] usb 10-1: SerialNumber: syz [ 696.750161][T26807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.761083][T26807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.779061][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.821578][T26807] team0: Port device team_slave_0 added [ 696.824945][T26807] team0: Port device team_slave_1 added [ 696.857044][T26807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.859264][T26807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.867626][T26807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.871874][T26807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.875237][T26807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.883311][T26807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.903281][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.949966][T26807] hsr_slave_0: entered promiscuous mode [ 696.952518][T26807] hsr_slave_1: entered promiscuous mode [ 696.955719][T26807] debugfs: 'hsr0' already exists in 'hsr' [ 696.957658][T26807] Cannot create hsr debugfs directory [ 696.969481][T15087] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 697.128222][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8019'. [ 697.176184][ T46] bridge_slave_1: left allmulticast mode [ 697.177975][ T46] bridge_slave_1: left promiscuous mode [ 697.179825][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.185600][ T46] bridge_slave_0: left allmulticast mode [ 697.187825][ T46] bridge_slave_0: left promiscuous mode [ 697.190216][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.480811][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.485322][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.489043][ T46] bond0 (unregistering): Released all slaves [ 697.820079][ T46] hsr_slave_0: left promiscuous mode [ 697.828848][ T46] hsr_slave_1: left promiscuous mode [ 697.831014][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.833656][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.836571][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.839164][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.877909][ T46] veth1_macvtap: left promiscuous mode [ 697.879699][ T46] veth0_macvtap: left promiscuous mode [ 697.881487][ T46] veth1_vlan: left promiscuous mode [ 697.883468][ T46] veth0_vlan: left promiscuous mode [ 698.475865][ T5947] Bluetooth: hci1: command tx timeout [ 698.682476][ T46] team0 (unregistering): Port device team_slave_1 removed [ 698.789713][ T46] team0 (unregistering): Port device team_slave_0 removed [ 699.292355][ T6026] usb 10-1: USB disconnect, device number 31 [ 699.296186][ T6026] usblp0: removed [ 699.568703][T26807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.573677][T26807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.580838][T26807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.591695][T26807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.625982][T26981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8057'. [ 699.682454][T26807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.695620][T26807] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.709558][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.712063][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.723382][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.725659][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.851461][T26807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.911262][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8077'. [ 699.993024][T26807] veth0_vlan: entered promiscuous mode [ 699.998814][T26807] veth1_vlan: entered promiscuous mode [ 700.014695][T26807] veth0_macvtap: entered promiscuous mode [ 700.018981][T26807] veth1_macvtap: entered promiscuous mode [ 700.032323][T26807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.038432][T26807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.046559][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.049143][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.054079][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.063996][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.093264][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.096758][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.110126][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.112683][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.156587][T27067] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 700.159483][T27067] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 700.219451][T27075] binder: Unknown parameter 'context' [ 700.255409][T27081] netlink: 'syz.5.8100': attribute type 12 has an invalid length. [ 700.352793][T27091] lo speed is unknown, defaulting to 1000 [ 700.544782][ T5947] Bluetooth: hci1: command tx timeout [ 700.555394][T27119] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 700.600112][T27125] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8119'. [ 700.650837][T27133] binder: 27132:27133 ioctl c0306201 80000100 returned -14 [ 700.680686][T27139] overlayfs: missing 'lowerdir' [ 700.865011][T27162] overlayfs: missing 'workdir' [ 701.012939][ T59] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 701.169690][T27182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8147'. [ 701.173800][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 701.177499][ T59] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 701.178718][T27184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8148'. [ 701.180417][ T59] usb 7-1: config 0 has no interface number 0 [ 701.186590][ T59] usb 7-1: config 0 interface 148 has no altsetting 0 [ 701.191177][ T59] usb 7-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 701.195000][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.197895][ T59] usb 7-1: Product: syz [ 701.199574][ T59] usb 7-1: Manufacturer: syz [ 701.201868][ T59] usb 7-1: SerialNumber: syz [ 701.208233][ T59] usb 7-1: config 0 descriptor?? [ 701.214068][ T59] pl2303 7-1:0.148: required interrupt-in endpoint missing [ 701.414166][T15087] usb 7-1: USB disconnect, device number 112 [ 701.949718][T27225] binder: 27224:27225 ioctl c0306201 800001c0 returned -14 [ 702.622960][ T5947] Bluetooth: hci1: command tx timeout [ 702.870111][T27261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8184'. [ 702.996382][T27286] can0: slcan on ttyS3. [ 703.054358][T27286] can0 (unregistered): slcan off ttyS3. [ 703.097896][T27306] binder: Unknown parameter 'context' [ 703.277662][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 703.451028][T27365] binder: 27364:27365 ioctl 5000940a 0 returned -22 [ 704.314237][T27488] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8288'. [ 704.651457][T27559] binder: 27556:27559 ioctl c00c620f 0 returned -14 [ 704.704976][T27570] 9p: Unknown uid 00000000004294967295 [ 704.712948][ T5947] Bluetooth: hci1: command tx timeout [ 704.760550][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8333'. [ 705.197489][T27639] lo speed is unknown, defaulting to 1000 [ 705.397494][T27658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8371'. [ 705.469550][T27667] binder: 27666:27667 ioctl c0306201 80000640 returned -22 [ 705.607667][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8382'. [ 705.728993][T27701] tipc: Enabling of bearer rejected, failed to enable media [ 705.922792][T27737] overlayfs: failed to clone upperpath [ 706.034239][ T40] audit: type=1326 audit(1763063288.314:40532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.5.8416" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 706.180146][T27778] veth0_to_team: entered promiscuous mode [ 706.182006][T27778] veth0_to_team: entered allmulticast mode [ 706.270082][T27794] overlayfs: failed to clone upperpath [ 706.284554][T27795] lo speed is unknown, defaulting to 1000 [ 706.509488][T27833] netlink: 'syz.4.8453': attribute type 6 has an invalid length. [ 706.512723][T27833] IPv6: NLM_F_CREATE should be specified when creating new route [ 706.615631][T27846] lo speed is unknown, defaulting to 1000 [ 706.644513][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8462'. [ 706.648575][T27850] binder: 27848:27850 ioctl 400c620e 80000100 returned -22 [ 706.757471][T27865] fuse: Bad value for 'fd' [ 707.286288][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8490'. [ 707.443095][T27925] overlayfs: failed to clone upperpath [ 707.575271][T27941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8498'. [ 707.637792][T27947] overlayfs: failed to clone upperpath [ 709.175635][T28054] overlayfs: overlapping lowerdir path [ 709.253584][T28059] lo speed is unknown, defaulting to 1000 [ 709.678773][T28110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8578'. [ 709.681800][T28110] ip6_vti0: entered promiscuous mode [ 709.684977][T28110] ip6_vti0: entered allmulticast mode [ 709.731520][T28120] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8584'. [ 709.767914][T28126] tipc: Can't bind to reserved service type 0 [ 709.906564][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8596'. [ 710.120791][T28178] netlink: 'syz.5.8612': attribute type 4 has an invalid length. [ 710.134693][T28178] netlink: 'syz.5.8612': attribute type 4 has an invalid length. [ 710.336199][T28195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8618'. [ 710.528105][T16306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.536486][T16306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.540670][T16306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.547787][T16306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.550913][T16306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.579315][T28203] lo speed is unknown, defaulting to 1000 [ 710.702192][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8630'. [ 710.713687][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.728506][T28203] chnl_net:caif_netlink_parms(): no params data found [ 710.804830][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.852150][T28203] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.854681][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.857012][T28203] bridge_slave_0: entered allmulticast mode [ 710.859679][T28203] bridge_slave_0: entered promiscuous mode [ 710.865273][T28203] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.867623][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.869928][T28203] bridge_slave_1: entered allmulticast mode [ 710.872585][T28203] bridge_slave_1: entered promiscuous mode [ 710.919754][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.930625][T28203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.935865][T28203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.967244][T28203] team0: Port device team_slave_0 added [ 710.970481][T28203] team0: Port device team_slave_1 added [ 711.020949][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.029287][T28203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.031608][T28203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.041461][T28203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.046693][T28203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.048900][T28203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.057601][T28203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.108927][T28203] hsr_slave_0: entered promiscuous mode [ 711.113653][T28203] hsr_slave_1: entered promiscuous mode [ 711.118007][T28203] debugfs: 'hsr0' already exists in 'hsr' [ 711.122293][T28203] Cannot create hsr debugfs directory [ 711.342311][ T46] bridge_slave_1: left allmulticast mode [ 711.344290][ T46] bridge_slave_1: left promiscuous mode [ 711.346165][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.357677][ T46] bridge_slave_0: left allmulticast mode [ 711.360990][ T46] bridge_slave_0: left promiscuous mode [ 711.365691][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.701793][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.706885][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.710353][T28295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8661'. [ 711.711448][ T46] bond0 (unregistering): Released all slaves [ 711.755317][T28297] overlayfs: failed to clone upperpath [ 712.106567][ T46] hsr_slave_0: left promiscuous mode [ 712.109552][ T46] hsr_slave_1: left promiscuous mode [ 712.111594][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.114383][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.117855][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.120276][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.145184][ T46] veth1_macvtap: left promiscuous mode [ 712.146961][ T46] veth0_macvtap: left promiscuous mode [ 712.148731][ T46] veth1_vlan: left promiscuous mode [ 712.150426][ T46] veth0_vlan: left promiscuous mode [ 712.625428][T16306] Bluetooth: hci2: command tx timeout [ 713.158583][ T46] team0 (unregistering): Port device team_slave_1 removed [ 713.262471][ T46] team0 (unregistering): Port device team_slave_0 removed [ 713.937101][T28416] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8711'. [ 713.967964][T28203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 713.975864][T28203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 713.980983][T28203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 713.990447][T28203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 714.060156][T28203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.084534][T28203] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.089467][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.091774][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.102379][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.104554][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.235408][T28203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.395041][T28203] veth0_vlan: entered promiscuous mode [ 714.400120][T28203] veth1_vlan: entered promiscuous mode [ 714.420902][T28203] veth0_macvtap: entered promiscuous mode [ 714.426990][T28203] veth1_macvtap: entered promiscuous mode [ 714.436740][T28203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.442770][T28203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.454427][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.457187][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.460669][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.464502][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.518312][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.521537][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.541630][T22678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.545816][T22678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.637700][T28515] overlayfs: failed to clone lowerpath [ 714.703326][T16306] Bluetooth: hci2: command tx timeout [ 714.889550][T28566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8773'. [ 715.284939][T28632] syz_tun: mtu less than device minimum [ 715.510406][T28656] netlink: 'syz.6.8816': attribute type 1 has an invalid length. [ 715.511488][T28655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8817'. [ 715.513558][T28656] netlink: 'syz.6.8816': attribute type 2 has an invalid length. [ 715.602727][T28666] Invalid ELF header magic: != ELF [ 715.874279][T28702] veth0_virt_wifi: entered allmulticast mode [ 715.877120][T28701] veth0_virt_wifi: left allmulticast mode [ 716.080313][T28729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8853'. [ 716.237149][T28753] binder: BINDER_SET_CONTEXT_MGR already set [ 716.239732][T28753] binder: 28752:28753 ioctl 40046207 0 returned -16 [ 716.596536][T28802] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8887'. [ 809.309882][ T3624] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 809.312348][ T3624] CPU: 3 UID: 0 PID: 3624 Comm: syz.5.12043 Not tainted syzkaller #0 PREEMPT(full) [ 809.317616][ T3624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 809.321956][ T3624] Call Trace: [ 809.323346][ T3624] [ 809.324578][ T3624] dump_stack_lvl+0x3d/0x1f0 [ 809.326499][ T3624] vpanic+0x640/0x6f0 [ 809.328217][ T3624] ? path_noexec+0x1ca/0x230 [ 809.330121][ T3624] panic+0xca/0xd0 [ 809.331707][ T3624] ? __pfx_panic+0x10/0x10 [ 809.333675][ T3624] check_panic_on_warn+0xab/0xb0 [ 809.335744][ T3624] __warn+0xf6/0x3c0 [ 809.337357][ T3624] ? path_noexec+0x1ca/0x230 [ 809.339259][ T3624] report_bug+0x3c3/0x580 [ 809.341065][ T3624] ? path_noexec+0x1ca/0x230 [ 809.342987][ T3624] handle_bug+0x184/0x210 [ 809.344749][ T3624] exc_invalid_op+0x17/0x50 [ 809.346507][ T3624] asm_exc_invalid_op+0x1a/0x20 [ 809.348495][ T3624] RIP: 0010:path_noexec+0x1ca/0x230 [ 809.350717][ T3624] Code: ff 83 e3 02 48 89 de e8 44 27 84 ff 48 85 db 41 0f 95 c4 e8 c8 2b 84 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 b7 2b 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 29 d5 eb ff e9 a8 fe ff ff e8 1f d5 eb [ 809.358662][ T3624] RSP: 0018:ffffc900047a7c88 EFLAGS: 00010287 [ 809.361215][ T3624] RAX: 00000000000000b2 RBX: ffff88801fe201e0 RCX: ffffc900279d2000 [ 809.364485][ T3624] RDX: 0000000000080000 RSI: ffffffff82382cc9 RDI: 0000000000000007 [ 809.367924][ T3624] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 809.371175][ T3624] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000080000000 [ 809.374317][ T3624] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 809.376936][ T3624] ? path_noexec+0x1c9/0x230 [ 809.378628][ T3624] ? path_noexec+0x1c9/0x230 [ 809.380174][ T3624] do_mmap+0xd23/0x1210 [ 809.381804][ T3624] ? __pfx_do_mmap+0x10/0x10 [ 809.383288][ T3624] ? __pfx_down_write_killable+0x10/0x10 [ 809.385467][ T3624] vm_mmap_pgoff+0x29e/0x470 [ 809.387432][ T3624] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 809.389623][ T3624] ? __fget_files+0x20e/0x3c0 [ 809.391644][ T3624] ksys_mmap_pgoff+0x32c/0x5c0 [ 809.393660][ T3624] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 809.395904][ T3624] __do_fast_syscall_32+0x7c/0x300 [ 809.398037][ T3624] do_fast_syscall_32+0x32/0x80 [ 809.400107][ T3624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 809.402609][ T3624] RIP: 0023:0xf701d579 [ 809.403986][ T3624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 809.410215][ T3624] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 809.412928][ T3624] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 809.415807][ T3624] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000007 [ 809.418358][ T3624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 809.420980][ T3624] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 809.423533][ T3624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 809.426113][ T3624] [ 809.427800][ T3624] Kernel Offset: disabled [ 809.429316][ T3624] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:15:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b23b6c0 RCX=ffffffff81b06b83 RDX=ffff88801dacc900 RSI=ffffffff81b06b5d RDI=0000000000000005 RBP=ffffc9000044fcf8 RSP=ffffc9000044fba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e86 R12=1ffff92000089f7c R13=0000000000000003 R14=0000000000000001 R15=ffffed10056476d9 RIP=ffffffff81b06b5f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031a23ffc CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff9114c254 RDX=0000000000000008 RSI=ffffc900036772d8 RDI=ffffc90003677240 RBP=ffffc90003677288 RSP=ffffc90003677178 R8 =ffffffff9114c258 R9 =0000000000000000 R10=0000000000000000 R11=0000000000006280 R12=ffffc90003677290 R13=ffffc90003677240 R14=ffffc900036772e0 R15=ffffc90003677274 RIP=ffffffff816bb100 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809790d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000573f199c CR3=000000005c46f000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000002 DR2=0000000000000081 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88802b4332a8 RCX=ffffc90003848001 RDX=0000000000000000 RSI=ffffffff8bf07540 RDI=ffffffff8dcceef0 RBP=0000000000000002 RSP=ffffc900038469c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000038243 R12=ffffffff816bb704 R13=ffffc90003846a98 R14=ffffc90003847630 R15=ffffc90003846acc RIP=ffffffff81a1424d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f249a7df300 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005643e7fadf40 CR3=0000000023444000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=f6957b848f73f480 199fe664960933ff f6957b848f73f480 199fe664960933ff f6957b848f73f480 199fe664960933ff f6957b848f73f480 199fe664960933ff ZMM18=d380c5fccdf8c75d 4792b37cf2f0bde1 d380c5fccdf8c75d 4792b37cf2f0bde1 d380c5fccdf8c75d 4792b37cf2f0bde1 d380c5fccdf8c75d 4792b37cf2f0bde1 ZMM19=463a000000000000 0000000000000004 463a000000000000 0000000000000003 463a000000000000 0000000000000002 463a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800060070ec0c80 021008000fffffff ff020680021a0800 0a01578e00080006 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003040800069803 0fffffffff020690 031bc080808c0800 068803df632020c1 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c59903e122c41ec0 0ff06f46f2fa0a4e ae0fdee20f4066c8 6e19ef41c4d100ca ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23a408000801749c 0000000000000000 0000000001ffffff ffffffffffe70803 ZMM25=4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c 4792b37c4792b37c ZMM26=cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d cdf8c75dcdf8c75d ZMM27=d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc d380c5fcd380c5fc ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=443a0000443a0000 443a0000443a0000 443a0000443a0000 443a0000443a0000 443a0000443a0000 443a0000443a0000 443a0000443a0000 443a0000443a0000 info registers vcpu 3 CPU#3 RAX=0000000000000045 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85268f15 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc900047a74c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000045 R14=ffffffff9adc5da0 R15=ffffffff85268eb0 RIP=ffffffff85268f3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540be80 CR3=000000006be46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000021000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000