last executing test programs: 7m44.184261257s ago: executing program 32 (id=943): r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m7.610138486s ago: executing program 33 (id=1769): r0 = getpid() r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='xdp_bulk_tx\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r4, 0x0, 0x0, 0x0}, 0x30) 6m6.233675415s ago: executing program 34 (id=1774): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000100)) 5m22.017681385s ago: executing program 35 (id=1869): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="e6b76eda", 0x4}], 0x1) 5m21.068196115s ago: executing program 36 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000081000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 5m20.062788358s ago: executing program 37 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030000000000000000006700000008000300", @ANYRES32=r4], 0x28}}, 0x0) 5m16.556038518s ago: executing program 38 (id=1901): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0xfa, 0x1, 0x6}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 4m29.656855386s ago: executing program 39 (id=1966): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 4m29.53652979s ago: executing program 40 (id=1970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setns(0xffffffffffffffff, 0x4000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1, 0x1a, "9e9726c3f8ff2e183507464f7d5c3bcfb1f09638a7c6e6caa178"}}) keyctl$session_to_parent(0x12) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x62040200) 4m22.106529657s ago: executing program 41 (id=1999): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400ec00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f0000000c000980080001000f0000002c00038008000300fcffffff08000100000000000800030000000000080001000000000008000200000000000c000380080001"], 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m1.411742692s ago: executing program 3 (id=2739): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m0.460767485s ago: executing program 3 (id=2741): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r7, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_open_dev$tty20(0xc, 0x4, 0x0) 1m58.347106126s ago: executing program 3 (id=2745): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001018b75000905839d"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) 1m58.288752281s ago: executing program 4 (id=2746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)="711f04800000000000000c55f538", 0xe}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) recvmmsg(r3, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x801) 1m57.390998322s ago: executing program 4 (id=2752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) 1m55.260949988s ago: executing program 3 (id=2753): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4000, r0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x1, r0}]) 1m55.145770856s ago: executing program 3 (id=2754): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 1m55.14521213s ago: executing program 3 (id=2755): socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) 1m51.211539068s ago: executing program 4 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 1m51.151944673s ago: executing program 4 (id=2757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r4, r3, 0x0) 1m50.261234524s ago: executing program 4 (id=2760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)="711f04800000000000000c55f538", 0xe}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) recvmmsg(r3, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x801) 1m49.729298899s ago: executing program 2 (id=2761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x8208204) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x6881, 0x0) 1m49.356437851s ago: executing program 4 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r8 = epoll_create(0xffffffff) r9 = dup3(r7, r8, 0x0) read$FUSE(r9, &(0x7f0000002080)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000004980)={0x2020}, 0x2020) 1m48.871602023s ago: executing program 2 (id=2763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @window={0x3, 0xffff, 0x7ecc}, @mss, @timestamp, @sack_perm, @mss={0x2, 0x1000}], 0x64) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) shutdown(r1, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m48.87122064s ago: executing program 2 (id=2764): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfbfffff7, 0x0, 0xd, 0xf7d, 0x18, "010100"}) io_setup(0x3, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x0) delete_module(&(0x7f0000000140)='S*\x00\x91OZ\xc0\xa9\xdar\x12\x8a[\xb4\xa0>+!\xa6%;\xd5\xf6\xd3\\\xd0\xa6!H\xde\xf4\x90\xa2\rqh\x04a*\x1fI\x9d\xc0\x0e\xd0xc\x02\x8dX\xb9vf\x01\x12eZI:[\xef/\xc8\x8c\x94\xb6\xa5\x02\xe6\x00a\xf7o\x00w\xb1\b\xb1\xc3a\x85\x8f\x1d\x89\xa1s\x8b\xee^\x9c\xa1\xbb>\x00\x9d\x15\x95\x8e\x15\xc5{L\xe8\xcfI\xd3bw~P\xe6\xdcld\'\xe8\xb2\xc66\x87\xc7\"\xf6\x8e\x9d\xdd\x05\x80\xc6\x8bp\x83\xae7\x96\t\xbf6\xc8\xcdFbf\x1a\xe6\xf9\xf8$p\xa2V\x12\xef\xd2\x96BP\xfe\xb58~\xda\xe4Wp\x86\x1ff\x0e\xc6\'\xd3\xfc\x98&N\xe9\x17\x02y\xc2J\xe0\xc0\x99\x01^Y\x8e\xafv\xf7\xe9\x1b\n\xd5\xaeX\x83\x18B\xfd}\xc3', 0x700) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = dup(0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000240), 0x8) listen(r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) write(r0, &(0x7f00000000c0)="11a909f922c70000000000000000ebd245db64c45525f88b7873db7b73df7df062c2450b01cfa0857a508be499d9493bfbca83ab4d65e38d2e61702e9cb1050ec3b9a1f2d6249c9e72", 0x49) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x53) 1m47.920067383s ago: executing program 2 (id=2765): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000800000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='fib_table_lookup\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r3, &(0x7f00000003c0)={'a', ' *:* ', 'rw\x00'}, 0x9) 1m47.851139295s ago: executing program 2 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 1m47.850640622s ago: executing program 2 (id=2767): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r9, 0x0) pread64(r8, &(0x7f0000000c80)=""/102400, 0x19000, 0x400040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) sendmsg(r6, &(0x7f0000000680)={&(0x7f0000000380)=@ll={0x11, 0x1c, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="f11aaf0e6e46b27eb0b89713daa4", 0xe}, {&(0x7f0000000440)="a5a47502cd5f591a619b579446427b3c9eaf8553034014b04f72f0af50e4b51dfac102782f6c174bb4fb1385ef59588374b88f4fd97bebbca476ad18b254d2c8b00c8be2d701db8f", 0x48}], 0x2}, 0x2000000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060063e0bd00443b0000"], 0x34}}, 0xc810) 1m42.302718796s ago: executing program 42 (id=2748): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty, 0x101}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x34, 0x26, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe}, {0x2, 0x10}, {0x1, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x17, 0x1, 0x0, @void, @value}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "666189b0d9862010", "e1b69ca23e209d61d661588e3dc0349e", "e192f0f0", "43f04ab2447b8589"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$char_usb(r7, &(0x7f0000000440)=""/156, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m39.827998862s ago: executing program 43 (id=2755): socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) 1m34.303514952s ago: executing program 44 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r8 = epoll_create(0xffffffff) r9 = dup3(r7, r8, 0x0) read$FUSE(r9, &(0x7f0000002080)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000004980)={0x2020}, 0x2020) 1m32.808738763s ago: executing program 45 (id=2767): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r9, 0x0) pread64(r8, &(0x7f0000000c80)=""/102400, 0x19000, 0x400040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) sendmsg(r6, &(0x7f0000000680)={&(0x7f0000000380)=@ll={0x11, 0x1c, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="f11aaf0e6e46b27eb0b89713daa4", 0xe}, {&(0x7f0000000440)="a5a47502cd5f591a619b579446427b3c9eaf8553034014b04f72f0af50e4b51dfac102782f6c174bb4fb1385ef59588374b88f4fd97bebbca476ad18b254d2c8b00c8be2d701db8f", 0x48}], 0x2}, 0x2000000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060063e0bd00443b0000"], 0x34}}, 0xc810) 54.234511066s ago: executing program 6 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 54.120638777s ago: executing program 6 (id=2920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a321700000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 54.120343108s ago: executing program 6 (id=2921): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 54.010274783s ago: executing program 6 (id=2922): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210) 54.010015823s ago: executing program 6 (id=2923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8000, 0x2) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 53.650526182s ago: executing program 6 (id=2928): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b19, &(0x7f0000000040)) 53.619928353s ago: executing program 46 (id=2928): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b19, &(0x7f0000000040)) 35.660939623s ago: executing program 5 (id=3077): socket$inet6(0xa, 0xa, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x280000, 0x0) acct(0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 34.760978945s ago: executing program 5 (id=3083): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0xde}) r1 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1810c0, 0x0) fchown(r1, 0xee01, 0x0) 34.760633671s ago: executing program 5 (id=3084): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}}, 0x0) close(r5) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r6, 0xc08c5114, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0xf}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 34.692400993s ago: executing program 5 (id=3085): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210) 34.611090858s ago: executing program 5 (id=3086): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) 34.380387957s ago: executing program 5 (id=3087): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r1, &(0x7f0000001080)={0x2020}, 0x2020) 34.38026818s ago: executing program 47 (id=3087): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r1, &(0x7f0000001080)={0x2020}, 0x2020) 33.157134829s ago: executing program 0 (id=3105): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 33.156947294s ago: executing program 0 (id=3106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 33.080998313s ago: executing program 0 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000000901010000000000000000000000000c00048008000240000000002400020014000180080001000a01010008000200e01ceb00000000000000010000000000080005400000000009000100"], 0x58}}, 0x0) 33.080787228s ago: executing program 0 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210) 33.039445077s ago: executing program 0 (id=3109): ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) 32.830820214s ago: executing program 0 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a321700000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 32.754749819s ago: executing program 48 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a321700000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 4.06967254s ago: executing program 7 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000012440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4040881}, 0x90) 4.010761847s ago: executing program 7 (id=3338): open(0x0, 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r1) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 2.060613152s ago: executing program 8 (id=3369): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000013c0)=""/97, 0x61) 2.000982094s ago: executing program 8 (id=3370): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000c40)={0xfeff0000, 'veth0_to_batadv\x00', {0x4}, 0x4}) 2.000762579s ago: executing program 8 (id=3371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @remote}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, &(0x7f0000000680)=ANY=[]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) r5 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 1.390542086s ago: executing program 1 (id=3376): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) connect$unix(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 1.259782392s ago: executing program 1 (id=3377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) 1.17684685s ago: executing program 1 (id=3378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.13000816s ago: executing program 1 (id=3379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000001000000420000004002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0x1000, r0}, 0x38) 1.129824357s ago: executing program 8 (id=3380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 1.080675354s ago: executing program 1 (id=3381): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0xffffff9b) syz_fuse_handle_req(r0, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x83, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x20008, 0x915d, 0x9, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) 980.827224ms ago: executing program 7 (id=3382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'S'], 0x32) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r4, r3, 0x0) 942.289911ms ago: executing program 8 (id=3383): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40c082}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl(0xffffffffffffffff, 0x7fffffff, 0x0) 289.122224ms ago: executing program 9 (id=3387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000003c0)="e7cd01", 0x3, 0x4400, 0x0, 0x0) 229.497449ms ago: executing program 9 (id=3388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) 229.029903ms ago: executing program 1 (id=3389): pipe2$9p(&(0x7f0000001900), 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x65c, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(0x0, 0x3) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000280)={0x0, 0x2, [{r6}, {0xffffffffffffffff, 0x0, 0x0, 0x1000}]}) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000080)=0xf0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xe) close_range(r0, 0xffffffffffffffff, 0x0) 228.8615ms ago: executing program 9 (id=3390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xd716a000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, r4, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @void, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x60}}, 0x4054) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 157.431307ms ago: executing program 9 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000200)}, 0x10) 157.06373ms ago: executing program 9 (id=3392): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) connect$unix(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 80.942437ms ago: executing program 7 (id=3393): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="85", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="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", 0x136}, {&(0x7f0000000800)="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", 0x1fe}, {&(0x7f00000005c0)="0ce32eab78ca3c4a7bc73e96c2990c9002babb5c34c1327440eabea6ae3692de3f41d3d9844da1b5aeab30df4dd239e13f15a6dda935ca94a167891f42edbfd16936c296e72222691c9fda05000000000000001ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f", 0x76}, {&(0x7f00000058c0)="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", 0x201}], 0x4}}], 0x2, 0xc880) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) 80.659692ms ago: executing program 8 (id=3394): mmap(&(0x7f00004bc000/0x4000)=nil, 0x4000, 0x200000b, 0x10010, 0xffffffffffffffff, 0xa0582000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r1, 0x2e, &(0x7f0000000400)}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xe8}}, 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1040806, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@verity_on}, {@xino_auto}, {@nfs_export_off}, {@xino_on}], [{@dont_appraise}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r8, r7, 0x0, 0x80000000) 720.678µs ago: executing program 7 (id=3395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffbfad, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) 361.054µs ago: executing program 7 (id=3396): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) 0s ago: executing program 9 (id=3397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002880)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = io_uring_setup(0xfc2, 0x0) fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mode [ 388.830766][T12528] team_slave_1: entered promiscuous mode [ 388.832568][T12528] macvlan2: entered allmulticast mode [ 388.834064][T12528] team0: entered allmulticast mode [ 388.835416][T12528] team_slave_0: entered allmulticast mode [ 388.837046][T12528] team_slave_1: entered allmulticast mode [ 388.839469][T12528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.927151][T12624] team_slave_0: entered promiscuous mode [ 389.928771][T12624] team_slave_1: entered promiscuous mode [ 389.931539][T12624] macvlan2: entered allmulticast mode [ 389.935179][T12624] team0: entered allmulticast mode [ 389.937076][T12624] team_slave_0: entered allmulticast mode [ 389.938626][T12624] team_slave_1: entered allmulticast mode [ 389.940743][T12624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.375985][T12726] team_slave_0: entered promiscuous mode [ 392.377742][T12726] team_slave_1: entered promiscuous mode [ 392.379407][T12726] macvlan0: entered allmulticast mode [ 392.380825][T12726] team0: entered allmulticast mode [ 392.382550][T12726] team_slave_0: entered allmulticast mode [ 392.384079][T12726] team_slave_1: entered allmulticast mode [ 392.386176][T12726] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 393.902631][ T5976] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 393.906377][ T5976] Bluetooth: hci5: Injecting HCI hardware error event [ 393.906390][T12781] binder: 12773:12781 ioctl c0306201 0 returned -14 [ 393.911906][ T5976] Bluetooth: hci5: hardware error 0x00 [ 395.982572][ T5976] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 402.092484][T12825] Unsupported ieee802154 address type: 0 [ 403.862546][T11444] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 404.043146][T11444] usb 7-1: Using ep0 maxpacket: 16 [ 404.047464][T11444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.054934][T11444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.058033][T11444] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 404.060323][T11444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.069390][T11444] usb 7-1: config 0 descriptor?? [ 404.178427][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 404.319483][T12916] overlayfs: missing 'lowerdir' [ 404.522800][T11444] bigben 0003:146B:0902.0006: unexpected rdesc, please submit for review [ 404.537890][T11444] bigben 0003:146B:0902.0006: hidraw1: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 404.540974][T11444] bigben 0003:146B:0902.0006: missing HID_OUTPUT_REPORT 0 [ 404.542939][T11444] bigben 0003:146B:0902.0006: no output report found [ 404.728146][T11444] usb 7-1: USB disconnect, device number 21 [ 405.363125][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2300'. [ 406.173832][T12963] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 406.176421][T12963] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.238880][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2310'. [ 406.992637][T12996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 406.995620][T12996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 407.342559][ T6004] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 407.472576][ T6004] usb 7-1: device descriptor read/64, error -71 [ 407.712580][ T6004] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 407.842549][ T6004] usb 7-1: device descriptor read/64, error -71 [ 407.931534][T13021] overlayfs: missing 'lowerdir' [ 407.957252][ T6004] usb usb7-port1: attempt power cycle [ 408.052643][ T30] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 408.182532][ T30] usb 6-1: device descriptor read/64, error -71 [ 408.302771][ T6004] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 408.323031][ T6004] usb 7-1: device descriptor read/8, error -71 [ 408.422672][ T30] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 408.552677][ T30] usb 6-1: device descriptor read/64, error -71 [ 408.572621][ T6004] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 408.593039][ T6004] usb 7-1: device descriptor read/8, error -71 [ 408.662872][ T30] usb usb6-port1: attempt power cycle [ 408.705116][ T6004] usb usb7-port1: unable to enumerate USB device [ 409.012691][ T30] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 409.033349][ T30] usb 6-1: device descriptor read/8, error -71 [ 409.087938][T13044] overlayfs: missing 'lowerdir' [ 409.273171][ T30] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 409.293800][ T30] usb 6-1: device descriptor read/8, error -71 [ 409.409402][ T30] usb usb6-port1: unable to enumerate USB device [ 410.561971][T13073] overlayfs: missing 'lowerdir' [ 410.682540][T13083] bridge1: entered promiscuous mode [ 410.683979][T13083] bridge1: entered allmulticast mode [ 410.831424][T13094] overlayfs: missing 'workdir' [ 411.292535][ T9851] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 411.432716][ T9851] usb 9-1: device descriptor read/64, error -71 [ 411.682517][ T9851] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 411.812630][ T9851] usb 9-1: device descriptor read/64, error -71 [ 411.932774][ T9851] usb usb9-port1: attempt power cycle [ 411.947423][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'. [ 412.282562][ T9851] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 412.304025][ T9851] usb 9-1: device descriptor read/8, error -71 [ 412.552617][ T9851] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 412.576064][ T9851] usb 9-1: device descriptor read/8, error -71 [ 412.683687][ T9851] usb usb9-port1: unable to enumerate USB device [ 413.222556][ T9851] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 413.361819][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 413.387735][ T9851] usb 6-1: config 0 has an invalid interface descriptor of length 2, skipping [ 413.390425][ T9851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.393382][ T9851] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 413.397779][ T9851] usb 6-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=f3.9f [ 413.400327][ T9851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.402615][ T9851] usb 6-1: Product: syz [ 413.403796][ T9851] usb 6-1: Manufacturer: syz [ 413.405050][ T9851] usb 6-1: SerialNumber: syz [ 413.408308][ T9851] usb 6-1: config 0 descriptor?? [ 413.618906][ T5833] usb 6-1: USB disconnect, device number 27 [ 414.070956][T13173] evm: overlay not supported [ 414.280589][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 414.327107][T13194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2401'. [ 414.386147][T13201] syzkaller1: entered promiscuous mode [ 414.388317][T13201] syzkaller1: entered allmulticast mode [ 414.533567][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'. [ 414.929579][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 415.680750][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2422'. [ 416.636316][T13271] macvlan3: entered allmulticast mode [ 416.638513][T13271] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 417.637441][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2439'. [ 417.962580][ T5833] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 418.122561][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 418.125335][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.128240][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.131580][ T5833] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.134513][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.137793][ T5833] usb 7-1: config 0 descriptor?? [ 418.140886][ T5833] hub 7-1:0.0: USB hub found [ 418.347456][ T5833] hub 7-1:0.0: 1 port detected [ 418.512087][T13307] team_slave_0: entered promiscuous mode [ 418.514260][T13307] team_slave_1: entered promiscuous mode [ 418.516091][T13307] macvlan2: entered allmulticast mode [ 418.517504][T13307] team0: entered allmulticast mode [ 418.518740][T13307] team_slave_0: entered allmulticast mode [ 418.520263][T13307] team_slave_1: entered allmulticast mode [ 418.523584][T13307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 418.951241][ T5833] hub 7-1:0.0: activate --> -90 [ 419.292546][ T1444] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 419.353192][T10807] usb 7-1: USB disconnect, device number 26 [ 419.355066][ T5833] usb 7-1-port1: config error [ 419.452584][ T1444] usb 9-1: Using ep0 maxpacket: 8 [ 419.463660][ T1444] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 419.465794][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.468751][ T1444] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.471808][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.475381][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.480871][ T1444] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 419.483345][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.486654][ T1444] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.490163][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.493419][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.497162][ T1444] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 419.499095][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.501952][ T1444] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.504968][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.507893][ T1444] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.518084][ T1444] usb 9-1: string descriptor 0 read error: -22 [ 419.519774][ T1444] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.522089][ T1444] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.530479][ T1444] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 421.903296][ T1444] usb 9-1: USB disconnect, device number 15 [ 424.347426][T13471] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 424.363992][ T1130] Bluetooth: hci1: Frame reassembly failed (-84) [ 425.155454][T13478] macvlan1: entered allmulticast mode [ 425.157634][T13478] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 426.382630][ T5976] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 426.384678][ T5973] Bluetooth: hci1: command 0x1003 tx timeout [ 427.505619][ T1130] Bluetooth: hci1: Frame reassembly failed (-84) [ 427.510856][T13550] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 427.882553][T10950] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 428.042486][T10950] usb 9-1: Using ep0 maxpacket: 8 [ 428.047680][T10950] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 428.049870][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 428.053451][T10950] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.057153][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.060597][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.066431][T10950] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 428.068627][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 428.071897][T10950] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.076794][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.079947][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.084637][T10950] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 428.086977][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 428.089983][T10950] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.094945][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.098769][T10950] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.104799][T10950] usb 9-1: string descriptor 0 read error: -22 [ 428.106547][T10950] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 428.109081][T10950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.121842][T10950] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 428.351250][T13564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2533'. [ 429.502560][ T5976] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 429.810418][T13598] netlink: 'syz.1.2548': attribute type 4 has an invalid length. [ 429.872555][ T1444] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 430.026739][ T1444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 430.029342][ T1444] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 430.031823][ T1444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 430.034760][ T1444] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 430.039053][ T1444] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 430.041493][ T1444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.043866][ T1444] usb 7-1: Product: syz [ 430.045093][ T1444] usb 7-1: Manufacturer: syz [ 430.046544][ T1444] usb 7-1: SerialNumber: syz [ 430.049261][ T1444] usb 7-1: config 0 descriptor?? [ 430.052020][ T1444] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 430.268625][ T1444] scsi host6: usb-storage 7-1:0.0 [ 430.274975][ T1444] usb 7-1: USB disconnect, device number 27 [ 430.464833][T10807] usb 9-1: USB disconnect, device number 16 [ 431.142529][T10807] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 431.313117][T10807] usb 9-1: Using ep0 maxpacket: 8 [ 431.317589][T10807] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 431.320859][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 431.324496][T10807] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.327884][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.331386][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.335583][T10807] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 431.337741][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 431.341740][T10807] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.345187][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.348088][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.352240][T10807] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 431.354983][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 431.358332][T10807] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.361674][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.365192][T10807] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.370666][T10807] usb 9-1: string descriptor 0 read error: -22 [ 431.372758][T10807] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 431.377168][T10807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.381664][T10807] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 431.388933][T13654] batadv_slave_1: entered promiscuous mode [ 431.398194][T13654] batadv_slave_1: left promiscuous mode [ 432.062662][ T8] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 432.214262][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.217273][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.220092][ T8] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 432.223718][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.229381][ T8] usb 7-1: config 0 descriptor?? [ 432.509391][T13705] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2585'. [ 432.512290][T13704] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2585'. [ 432.642636][ T8] hid (null): global environment stack underflow [ 432.645642][ T8] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 432.648313][ T8] itetech 0003:06CB:73F5.0007: global environment stack underflow [ 432.650371][ T8] itetech 0003:06CB:73F5.0007: item 0 1 1 11 parsing failed [ 432.652583][ T8] itetech 0003:06CB:73F5.0007: probe with driver itetech failed with error -22 [ 432.848902][ T9851] usb 7-1: USB disconnect, device number 28 [ 433.743507][ T8] usb 9-1: USB disconnect, device number 17 [ 435.183898][T10950] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 435.190466][T10950] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 435.412566][ T6004] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 435.549062][T10950] IPVS: starting estimator thread 0... [ 435.558841][T13790] mkiss: ax0: crc mode is auto. [ 435.565971][ T6004] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 435.568973][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.577974][ T6004] usb 9-1: config 0 descriptor?? [ 435.584843][T13790] net_ratelimit: 10 callbacks suppressed [ 435.584858][T13790] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 435.591498][ T6004] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 435.652655][T13791] IPVS: using max 35 ests per chain, 84000 per kthread [ 435.748632][T13801] netlink: 'syz.3.2623': attribute type 1 has an invalid length. [ 435.996205][ T6004] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 436.192557][T10807] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 436.342493][T10807] usb 6-1: Using ep0 maxpacket: 8 [ 436.345550][T10807] usb 6-1: config index 0 descriptor too short (expected 9093, got 27) [ 436.347691][T10807] usb 6-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 436.350173][T10807] usb 6-1: config 24 has an invalid descriptor of length 47, skipping remainder of the config [ 436.352924][T10807] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 158 [ 436.355362][T10807] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.358027][T10807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.400310][ T6004] gspca_cpia1: usb_control_msg 02, error -71 [ 436.404836][ T6004] gspca_cpia1: usb_control_msg 05, error -71 [ 436.407293][ T6004] cpia1 9-1:0.0: unexpected systemstate: 00 [ 436.410676][ T6004] usb 9-1: USB disconnect, device number 18 [ 436.568104][T10807] usb 6-1: string descriptor 0 read error: -71 [ 436.571068][T10807] usb 6-1: USB disconnect, device number 28 [ 437.084509][T13858] netlink: 'syz.2.2637': attribute type 62 has an invalid length. [ 437.421317][T13873] kernel read not supported for file /!selinuxselinux (pid: 13873 comm: syz.1.2650) [ 437.428844][ T40] audit: type=1800 audit(1730213802.641:36): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2650" name="!selinuxselinux" dev="mqueue" ino=48145 res=0 errno=0 [ 439.424421][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.426370][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.568286][T13913] binder: 13912:13913 unknown command 536871488 [ 439.570069][T13913] binder: 13912:13913 ioctl c0306201 200003c0 returned -22 [ 440.725732][T13930] input: syz0 as /devices/virtual/input/input23 [ 448.932634][ T9851] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 448.995842][T13960] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 449.102474][ T9851] usb 9-1: Using ep0 maxpacket: 8 [ 449.105347][ T9851] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.107305][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.110105][ T9851] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.114370][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.117479][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.121885][ T9851] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.124237][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.127725][ T9851] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.131839][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.135843][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.139894][ T9851] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.141891][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.145349][ T9851] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.148930][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.153640][ T9851] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.160302][ T9851] usb 9-1: string descriptor 0 read error: -22 [ 449.162068][ T9851] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 449.165180][ T9851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.173234][ T9851] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 453.310768][T14026] hfs: can't find a HFS filesystem on dev nullb0 [ 453.749566][ T8] usb 9-1: USB disconnect, device number 19 [ 461.256231][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'. [ 461.375571][T14100] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2730'. [ 461.585408][ T30] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 461.662527][T10950] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 461.733157][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 461.736583][ T30] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.739420][ T30] usb 9-1: config 0 has no interface number 0 [ 461.742071][ T30] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.747412][ T30] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.750544][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.755609][ T30] usb 9-1: config 0 descriptor?? [ 461.759243][ T30] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 461.814746][T10950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 461.820351][T10950] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 461.823172][T10950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.825672][T10950] usb 7-1: Product: syz [ 461.826937][T10950] usb 7-1: Manufacturer: syz [ 461.828229][T10950] usb 7-1: SerialNumber: syz [ 461.831293][T10950] usb 7-1: config 0 descriptor?? [ 461.834765][T10950] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input24 [ 462.106701][ T6004] usb 7-1: USB disconnect, device number 29 [ 464.372346][ T5833] usb 9-1: USB disconnect, device number 20 [ 465.218475][T14130] syz.3.2741[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.218622][T14130] syz.3.2741[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.223359][T14130] syz.3.2741[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.644826][ T8] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 467.792684][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 467.796353][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 467.801432][ T8] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 467.804920][ T8] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 467.807195][ T8] usb 6-1: Product: syz [ 467.808393][ T8] usb 6-1: Manufacturer: syz [ 467.809689][ T8] usb 6-1: SerialNumber: syz [ 467.812831][ T8] usb 6-1: config 0 descriptor?? [ 467.815181][T14157] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 470.253045][T14171] netlink: 'syz.3.2755': attribute type 9 has an invalid length. [ 470.255420][T14171] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2755'. [ 470.501517][ T8] usb 6-1: USB disconnect, device number 29 [ 474.492548][ T5833] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 474.646224][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 474.650976][ T5833] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.655281][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.658261][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.660802][ T5833] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.667335][ T5833] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.670238][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.888344][ T5833] usb 7-1: GET_CAPABILITIES returned 0 [ 474.889927][ T5833] usbtmc 7-1:16.0: can't read capabilities [ 475.104567][ T6098] usb 7-1: USB disconnect, device number 30 [ 475.721997][ T40] audit: type=1804 audit(1730213840.931:37): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2761" name="/newroot/201/file0/bus" dev="ramfs" ino=47010 res=1 errno=0 [ 475.775035][ T40] audit: type=1800 audit(1730213840.991:38): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2761" name="bus" dev="ramfs" ino=47010 res=0 errno=0 [ 483.316905][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.321607][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 483.328738][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 483.337665][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 483.343757][ T5973] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 483.347076][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.422664][ T5973] Bluetooth: hci0: command tx timeout [ 485.660765][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.664069][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.666697][ T5976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.669386][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.674531][ T5976] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 485.676902][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.502672][ T5976] Bluetooth: hci0: command tx timeout [ 487.742744][ T5976] Bluetooth: hci1: command tx timeout [ 489.582572][ T5976] Bluetooth: hci0: command tx timeout [ 489.822960][ T5976] Bluetooth: hci1: command tx timeout [ 491.259674][ T5973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.266562][ T5973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.269424][ T5973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.271839][ T5973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.275217][ T5973] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 491.277272][ T5973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.662570][ T5973] Bluetooth: hci0: command tx timeout [ 491.904546][ T5973] Bluetooth: hci1: command tx timeout [ 492.694905][ T5976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 492.703017][ T5976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.707688][ T5976] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 492.710884][ T5976] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 492.713217][ T5976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 492.715335][ T5976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 493.342732][ T5973] Bluetooth: hci4: command tx timeout [ 493.982625][ T5973] Bluetooth: hci1: command tx timeout [ 494.782717][ T5973] Bluetooth: hci6: command tx timeout [ 495.423713][ T5973] Bluetooth: hci4: command tx timeout [ 496.872716][ T5973] Bluetooth: hci6: command tx timeout [ 497.418443][T14172] netlink: 'syz.3.2755': attribute type 9 has an invalid length. [ 497.420562][T14172] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2755'. [ 497.502602][ T5973] Bluetooth: hci4: command tx timeout [ 498.942624][ T5973] Bluetooth: hci6: command tx timeout [ 499.584541][ T5973] Bluetooth: hci4: command tx timeout [ 500.864453][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.866191][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.028852][ T5973] Bluetooth: hci6: command tx timeout [ 502.160021][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.228849][T14227] chnl_net:caif_netlink_parms(): no params data found [ 502.261830][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.280508][T14222] chnl_net:caif_netlink_parms(): no params data found [ 502.284445][T14230] chnl_net:caif_netlink_parms(): no params data found [ 502.329068][T14219] chnl_net:caif_netlink_parms(): no params data found [ 502.395220][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.441175][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.444623][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.446935][T14227] bridge_slave_0: entered allmulticast mode [ 502.449523][T14227] bridge_slave_0: entered promiscuous mode [ 502.452771][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.455036][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.457289][T14227] bridge_slave_1: entered allmulticast mode [ 502.459860][T14227] bridge_slave_1: entered promiscuous mode [ 502.462663][T14230] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.464610][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.466490][T14230] bridge_slave_0: entered allmulticast mode [ 502.468543][T14230] bridge_slave_0: entered promiscuous mode [ 502.521232][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.546992][T14230] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.549015][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.551151][T14230] bridge_slave_1: entered allmulticast mode [ 502.553903][T14230] bridge_slave_1: entered promiscuous mode [ 502.556006][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.557834][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.559732][T14222] bridge_slave_0: entered allmulticast mode [ 502.562621][T14222] bridge_slave_0: entered promiscuous mode [ 502.577222][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.591491][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.595408][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.597245][T14222] bridge_slave_1: entered allmulticast mode [ 502.599407][T14222] bridge_slave_1: entered promiscuous mode [ 502.612679][T14219] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.614743][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.616784][T14219] bridge_slave_0: entered allmulticast mode [ 502.619111][T14219] bridge_slave_0: entered promiscuous mode [ 502.623698][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.645205][T14230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.660090][T14219] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.662824][T14219] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.665493][T14219] bridge_slave_1: entered allmulticast mode [ 502.668567][T14219] bridge_slave_1: entered promiscuous mode [ 502.683866][T14230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.698424][T14222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.744746][T14222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.768319][T14227] team0: Port device team_slave_0 added [ 502.773436][T14230] team0: Port device team_slave_0 added [ 502.785499][T14219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.790444][T14227] team0: Port device team_slave_1 added [ 502.804021][T14230] team0: Port device team_slave_1 added [ 502.817538][T14222] team0: Port device team_slave_0 added [ 502.821207][T14219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.861523][T14222] team0: Port device team_slave_1 added [ 502.905071][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.907148][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.914314][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.918336][T14230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.920743][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.930145][T14230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.949964][T14219] team0: Port device team_slave_0 added [ 502.959939][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.961853][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.969127][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.974680][T14230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.977102][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.987234][T14230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.993479][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.995342][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.002077][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.007050][T14219] team0: Port device team_slave_1 added [ 503.052294][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.064756][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.066796][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.073853][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.086158][T14219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.087953][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.094757][T14219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.098487][T14219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.100417][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.107071][T14219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.200115][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.206250][T14227] hsr_slave_0: entered promiscuous mode [ 503.208258][T14227] hsr_slave_1: entered promiscuous mode [ 503.231074][T14222] hsr_slave_0: entered promiscuous mode [ 503.233433][T14222] hsr_slave_1: entered promiscuous mode [ 503.235341][T14222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.237359][T14222] Cannot create hsr debugfs directory [ 503.240701][T14230] hsr_slave_0: entered promiscuous mode [ 503.243551][T14230] hsr_slave_1: entered promiscuous mode [ 503.245614][T14230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.248256][T14230] Cannot create hsr debugfs directory [ 503.292948][T14219] hsr_slave_0: entered promiscuous mode [ 503.296209][T14219] hsr_slave_1: entered promiscuous mode [ 503.298815][T14219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.301570][T14219] Cannot create hsr debugfs directory [ 503.331780][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.419266][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.615379][ T39] bridge_slave_1: left allmulticast mode [ 503.616929][ T39] bridge_slave_1: left promiscuous mode [ 503.618449][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.621141][ T39] bridge_slave_0: left allmulticast mode [ 503.623305][ T39] bridge_slave_0: left promiscuous mode [ 503.625441][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.629719][ T39] bridge_slave_1: left allmulticast mode [ 503.631198][ T39] bridge_slave_1: left promiscuous mode [ 503.633440][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.636526][ T39] bridge_slave_0: left allmulticast mode [ 503.639129][ T39] bridge_slave_0: left promiscuous mode [ 503.641305][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.438520][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.442271][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.446109][ T39] bond0 (unregistering): Released all slaves [ 504.540693][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.548481][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.552860][ T39] bond0 (unregistering): Released all slaves [ 504.643328][ T39] bond0 (unregistering): Released all slaves [ 505.549055][ T39] hsr_slave_0: left promiscuous mode [ 505.551464][ T39] hsr_slave_1: left promiscuous mode [ 505.554930][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.557396][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.559969][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.561984][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.566801][ T39] hsr_slave_0: left promiscuous mode [ 505.568819][ T39] hsr_slave_1: left promiscuous mode [ 505.570829][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.573333][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.576561][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.579298][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.587503][ T39] hsr_slave_0: left promiscuous mode [ 505.590180][ T39] hsr_slave_1: left promiscuous mode [ 505.593205][ T39] batman_adv: batadv0: Interface deactivated: dummy0 [ 505.595371][ T39] batman_adv: batadv0: Removing interface: dummy0 [ 505.654925][ T39] team0: left allmulticast mode [ 505.656324][ T39] team_slave_0: left allmulticast mode [ 505.657939][ T39] team_slave_1: left allmulticast mode [ 505.659397][ T39] team_slave_0: left promiscuous mode [ 505.660930][ T39] team_slave_1: left promiscuous mode [ 505.662461][ T39] veth1_macvtap: left promiscuous mode [ 505.664077][ T39] veth0_macvtap: left promiscuous mode [ 505.665611][ T39] veth1_vlan: left promiscuous mode [ 505.667028][ T39] veth0_vlan: left promiscuous mode [ 505.669179][ T39] team0: left allmulticast mode [ 505.670481][ T39] team_slave_0: left allmulticast mode [ 505.671927][ T39] team_slave_1: left allmulticast mode [ 505.673505][ T39] team_slave_0: left promiscuous mode [ 505.674935][ T39] team_slave_1: left promiscuous mode [ 505.676398][ T39] veth1_macvtap: left promiscuous mode [ 505.677853][ T39] veth0_macvtap: left promiscuous mode [ 505.679330][ T39] veth1_vlan: left promiscuous mode [ 505.680738][ T39] veth0_vlan: left promiscuous mode [ 505.684332][ T39] veth1_macvtap: left promiscuous mode [ 505.685820][ T39] veth0_macvtap: left promiscuous mode [ 505.687995][ T39] veth1_vlan: left promiscuous mode [ 505.689409][ T39] veth0_vlan: left promiscuous mode [ 506.747753][ T39] team0 (unregistering): Port device team_slave_1 removed [ 506.876303][ T39] team0 (unregistering): Port device team_slave_0 removed [ 508.466976][ T39] team0 (unregistering): Port device team_slave_1 removed [ 508.573913][ T39] team0 (unregistering): Port device team_slave_0 removed [ 512.130076][T14222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 512.194342][T14222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 512.200525][T14222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 512.207465][T14222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.319591][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.328709][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.333989][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.335840][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.341414][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.343462][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.454307][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.595869][T14222] veth0_vlan: entered promiscuous mode [ 512.600712][T14222] veth1_vlan: entered promiscuous mode [ 512.616105][T14222] veth0_macvtap: entered promiscuous mode [ 512.620038][T14222] veth1_macvtap: entered promiscuous mode [ 512.627113][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.629881][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.632860][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.635823][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.639251][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.648540][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.651656][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.655234][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.658035][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.664850][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.669024][T14222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.671472][T14222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.673895][T14222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.676357][T14222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.736436][ T39] IPVS: stop unused estimator thread 0... [ 512.789572][T14219] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.795082][T14219] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.800338][T14219] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.806457][T14219] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.814691][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.817771][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.840888][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.844568][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.977905][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.035417][T14219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.045956][T14219] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.061660][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.071636][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.073874][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.078109][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.080390][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.100676][T14219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.105884][T14219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.152468][T11459] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 513.179791][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.231189][T14219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.273603][T14227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.276943][T14227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.282371][T14227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.302509][T11459] usb 10-1: Using ep0 maxpacket: 32 [ 513.314700][T11459] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 513.316355][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.317125][T11459] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.325549][T11459] usb 10-1: config 0 descriptor?? [ 513.326162][T14227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.331468][T11459] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 513.366826][T14230] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 513.371744][T14230] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 513.381410][T14230] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 513.385792][T14230] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 513.473680][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.485520][T14219] veth0_vlan: entered promiscuous mode [ 513.491370][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.501671][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.505037][T14219] veth1_vlan: entered promiscuous mode [ 513.520162][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.522054][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.524963][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.526845][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.540005][T14219] veth0_macvtap: entered promiscuous mode [ 513.558269][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.569244][T14219] veth1_macvtap: entered promiscuous mode [ 513.585205][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.587955][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.590465][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.594404][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.597118][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.599823][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.603316][T14219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.607564][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.610479][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.615166][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.618212][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.620684][T14219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.623941][T14219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.627359][T14219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.635223][T14219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.637609][T14219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.639909][T14219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.642310][T14219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.657768][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.675582][T14227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.679106][T14227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.708659][T14230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.732153][T14230] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.761307][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.787838][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.790053][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.794073][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.795932][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.803777][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.805827][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.837272][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.839763][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.847876][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.939474][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2772'. [ 513.950888][T14227] veth0_vlan: entered promiscuous mode [ 513.961380][T14227] veth1_vlan: entered promiscuous mode [ 513.964733][ T39] bridge_slave_1: left allmulticast mode [ 513.966836][ T39] bridge_slave_1: left promiscuous mode [ 513.968710][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.972264][ T39] bridge_slave_0: left allmulticast mode [ 513.974573][ T39] bridge_slave_0: left promiscuous mode [ 513.976428][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.980590][ T39] bridge_slave_1: left allmulticast mode [ 513.982107][ T39] bridge_slave_1: left promiscuous mode [ 513.984718][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.987711][ T39] bridge_slave_0: left allmulticast mode [ 513.989206][ T39] bridge_slave_0: left promiscuous mode [ 513.991131][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.145448][T11459] gspca_vc032x: reg_w err -71 [ 514.146786][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.148293][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.149797][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.151261][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.153411][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.154991][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.156782][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.158233][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.159668][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.161084][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.163312][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.164607][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.166008][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.167441][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.168906][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.170370][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.171792][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.175026][T11459] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.176761][T11459] gspca_vc032x: Unknown sensor... [ 514.178137][T11459] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 514.181720][T11459] usb 10-1: USB disconnect, device number 2 [ 514.639808][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.643818][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.647794][ T39] bond0 (unregistering): Released all slaves [ 514.767939][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.771827][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.776359][ T39] bond0 (unregistering): Released all slaves [ 514.809970][T14230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.856118][T14227] veth0_macvtap: entered promiscuous mode [ 514.860177][T14227] veth1_macvtap: entered promiscuous mode [ 514.871541][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.876617][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.879446][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.882259][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.888800][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.892069][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.895713][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.899088][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.915720][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.920684][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.924465][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.927021][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.932792][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.937971][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.940908][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.944308][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.947003][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.951049][T14446] loop4: detected capacity change from 0 to 7 [ 514.951552][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.957956][T14446] Dev loop4: unable to read RDB block 7 [ 514.959580][T14446] loop4: unable to read partition table [ 514.959887][T14227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.961149][T14446] loop4: partition table beyond EOD, truncated [ 514.965205][T14446] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.973349][T14227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.975981][T14227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.978411][T14227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.020859][ T39] IPVS: stopping master sync thread 13960 ... [ 515.130534][T14230] veth0_vlan: entered promiscuous mode [ 515.143970][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.150319][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.169617][T14230] veth1_vlan: entered promiscuous mode [ 515.184427][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.186551][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.236555][T14230] veth0_macvtap: entered promiscuous mode [ 515.241932][T14230] veth1_macvtap: entered promiscuous mode [ 515.260798][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.264780][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.268343][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.271888][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.277217][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.280692][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.286148][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.289599][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.293801][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.297583][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.302162][T14230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.320051][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.326406][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.331777][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.336006][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.338738][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.341857][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.345323][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.350926][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.355276][T14230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.358521][T14230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.361895][T14230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.382009][T14230] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.387784][T14230] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.390285][T14230] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.393296][T14230] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.484362][T14497] netlink: 9412 bytes leftover after parsing attributes in process `syz.6.2780'. [ 515.485053][T14495] sp0: Synchronizing with TNC [ 515.500196][T14495] sp0: Found TNC [ 515.594338][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.596440][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.608044][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.610179][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.642794][T14501] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2782' sets config #0 [ 515.651366][ T39] hsr_slave_0: left promiscuous mode [ 515.664663][ T39] hsr_slave_1: left promiscuous mode [ 515.669426][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.671608][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.675134][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.678746][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.686073][ T39] hsr_slave_0: left promiscuous mode [ 515.702797][ T39] hsr_slave_1: left promiscuous mode [ 515.705732][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.714462][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.721438][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.727236][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.791579][ T39] team0: left allmulticast mode [ 515.793240][ T39] team_slave_0: left allmulticast mode [ 515.795054][ T39] team_slave_1: left allmulticast mode [ 515.796939][ T39] team_slave_0: left promiscuous mode [ 515.798687][ T39] team_slave_1: left promiscuous mode [ 515.800660][ T39] veth1_macvtap: left promiscuous mode [ 515.805441][ T39] veth0_macvtap: left promiscuous mode [ 515.807015][ T39] veth1_vlan: left promiscuous mode [ 515.808620][ T39] veth0_vlan: left promiscuous mode [ 515.817602][ T39] team0: left allmulticast mode [ 515.819191][ T39] team_slave_0: left allmulticast mode [ 515.820954][ T39] team_slave_1: left allmulticast mode [ 515.823205][ T39] team_slave_0: left promiscuous mode [ 515.824604][ T39] team_slave_1: left promiscuous mode [ 515.826393][ T39] veth1_macvtap: left promiscuous mode [ 515.828294][ T39] veth0_macvtap: left promiscuous mode [ 516.323778][T14509] [U] è` [ 516.955265][ T39] team0 (unregistering): Port device team_slave_1 removed [ 517.067944][ T39] team0 (unregistering): Port device team_slave_0 removed [ 518.720509][ T39] team0 (unregistering): Port device team_slave_1 removed [ 518.824276][ T39] team0 (unregistering): Port device team_slave_0 removed [ 519.693141][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 519.854983][T14545] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2788'. [ 520.060558][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2786'. [ 520.519313][ T39] IPVS: stop unused estimator thread 0... [ 520.718052][T14592] input: syz0 as /devices/virtual/input/input25 [ 520.877862][T14606] sp0: Synchronizing with TNC [ 520.894693][T14606] sp0: Found TNC [ 520.993722][T14616] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2796' sets config #0 [ 521.032145][T14620] loop4: detected capacity change from 0 to 16384 [ 521.441591][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2800'. [ 521.724293][T14616] [U] `èè` [ 521.900339][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2812'. [ 521.904444][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2812'. [ 521.926164][T14675] input: syz0 as /devices/virtual/input/input26 [ 523.272537][ T30] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 523.422727][ T30] usb 14-1: Using ep0 maxpacket: 8 [ 523.425705][ T30] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.428048][ T30] usb 14-1: config 0 has no interface number 0 [ 523.429776][ T30] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.433238][ T30] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 523.438602][ T30] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.444747][ T30] usb 14-1: config 0 descriptor?? [ 523.450218][ T30] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 523.983548][ T5973] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 523.987194][ T5973] Bluetooth: hci4: Injecting HCI hardware error event [ 523.992148][ T5976] Bluetooth: hci4: hardware error 0x00 [ 524.124141][T14846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.249186][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2831'. [ 524.362611][ T8609] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 524.457284][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2836'. [ 524.512687][ T8609] usb 11-1: Using ep0 maxpacket: 8 [ 524.523371][ T8609] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.526325][ T8609] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.529648][ T8609] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.532274][ T8609] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.538439][ T8609] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.541117][ T8609] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.748909][ T8609] usb 11-1: GET_CAPABILITIES returned 0 [ 524.750415][ T8609] usbtmc 11-1:16.0: can't read capabilities [ 524.950359][T11459] usb 11-1: USB disconnect, device number 2 [ 525.590590][T14945] binder: 14926:14945 ioctl 4018620d 0 returned -22 [ 526.040195][ T25] usb 14-1: USB disconnect, device number 2 [ 526.045122][ T25] iowarrior 14-1:0.1: I/O-Warror #0 now disconnected [ 526.062538][ T5976] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 526.642586][ T6001] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 526.792578][ T35] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 526.802943][ T6001] usb 5-1: Using ep0 maxpacket: 8 [ 526.813454][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 526.815622][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 526.818826][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.823835][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.827060][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 526.831018][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 526.833716][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 526.837085][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.841599][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.845812][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 526.849705][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 526.851877][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 526.855325][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.858475][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.861991][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 526.870216][ T6001] usb 5-1: string descriptor 0 read error: -22 [ 526.871929][ T6001] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 526.874647][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.881395][ T6001] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 526.952737][ T35] usb 10-1: Using ep0 maxpacket: 8 [ 526.956230][ T35] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 526.959461][ T35] usb 10-1: config 0 has no interface number 0 [ 526.961840][ T35] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.966744][ T35] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 526.969787][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.973872][ T35] usb 10-1: config 0 descriptor?? [ 526.978836][ T35] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 528.968078][T15188] netlink: 'syz.9.2887': attribute type 4 has an invalid length. [ 529.071720][T15195] block device autoloading is deprecated and will be removed. [ 529.560555][T10807] usb 10-1: USB disconnect, device number 3 [ 529.564259][T10807] iowarrior 10-1:0.1: I/O-Warror #1 now disconnected [ 529.652291][T15233] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2892'. [ 531.367962][T15369] vivid-001: disconnect [ 531.428014][ T6005] usb 5-1: USB disconnect, device number 19 [ 531.672567][ T5976] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 531.675314][ T5976] Bluetooth: hci6: Injecting HCI hardware error event [ 531.678106][ T5976] Bluetooth: hci6: hardware error 0x00 [ 531.723747][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.797729][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.881937][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.889361][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.892575][ T5974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.898006][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.906312][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.909580][ T5974] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 531.915862][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.968365][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.986900][T15347] vivid-001: reconnect [ 532.010446][T15416] chnl_net:caif_netlink_parms(): no params data found [ 532.100736][T15416] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.102941][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.105026][T15416] bridge_slave_0: entered allmulticast mode [ 532.108405][T15416] bridge_slave_0: entered promiscuous mode [ 532.120855][T15435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2930'. [ 532.123316][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.125209][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.127546][T15416] bridge_slave_1: entered allmulticast mode [ 532.134230][T15416] bridge_slave_1: entered promiscuous mode [ 532.179476][T15416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.188846][T15416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.191558][ T12] bridge_slave_1: left allmulticast mode [ 532.195388][ T12] bridge_slave_1: left promiscuous mode [ 532.197034][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.200833][ T12] bridge_slave_0: left allmulticast mode [ 532.204209][ T12] bridge_slave_0: left promiscuous mode [ 532.207087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.450093][T15453] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2934'. [ 532.551681][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.556268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.560281][ T12] bond0 (unregistering): Released all slaves [ 532.594886][T15416] team0: Port device team_slave_0 added [ 532.600463][T15416] team0: Port device team_slave_1 added [ 532.623455][T15416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.625257][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.634409][T15416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.638386][T15416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.640298][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.648676][T15416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.703839][T15416] hsr_slave_0: entered promiscuous mode [ 532.706328][T15416] hsr_slave_1: entered promiscuous mode [ 532.708679][T15416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.711959][T15416] Cannot create hsr debugfs directory [ 532.727964][T15460] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2937'. [ 532.891945][ T12] hsr_slave_0: left promiscuous mode [ 532.894241][ T12] hsr_slave_1: left promiscuous mode [ 532.896146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.898154][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.900811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.905771][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.931953][ T12] veth1_macvtap: left promiscuous mode [ 532.934250][ T12] veth0_macvtap: left promiscuous mode [ 532.936698][ T12] veth1_vlan: left promiscuous mode [ 532.938437][ T12] veth0_vlan: left promiscuous mode [ 533.742595][ T5976] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 533.946541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 533.995572][ T5976] Bluetooth: hci0: command tx timeout [ 534.087096][ T12] team0 (unregistering): Port device team_slave_0 removed [ 535.001780][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2939'. [ 535.322545][ T6001] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 535.382549][ T5332] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 535.474026][ T6001] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.475809][T15416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.476950][ T6001] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.477749][ T6001] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.484362][ T6001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.486617][ T6001] usb 10-1: SerialNumber: syz [ 535.487413][T15416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.501671][T15416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 535.511844][T15416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 535.533408][ T5332] usb 14-1: Using ep0 maxpacket: 8 [ 535.536719][ T5332] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 535.539146][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 535.543398][ T5332] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.547277][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.551016][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.560704][ T5332] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 535.561615][T15416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.567435][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 535.570006][T15416] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.571388][ T5332] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.580077][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.582714][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.586122][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.589763][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.590139][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.595459][ T5332] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 535.595823][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.598401][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 535.605355][ T5332] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.610058][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.614725][ T5332] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.621417][ T5332] usb 14-1: string descriptor 0 read error: -22 [ 535.623932][ T5332] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 535.626951][ T5332] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.634747][ T5332] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 535.695165][ T6001] usb 10-1: 0:2 : does not exist [ 535.704241][T15416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.710306][ T6001] usb 10-1: USB disconnect, device number 4 [ 535.724430][T14310] udevd[14310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.824924][T15416] veth0_vlan: entered promiscuous mode [ 535.831664][T15416] veth1_vlan: entered promiscuous mode [ 535.863700][T15416] veth0_macvtap: entered promiscuous mode [ 535.869022][T15416] veth1_macvtap: entered promiscuous mode [ 535.878668][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.881576][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.885697][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.890103][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.893212][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.896059][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.899536][T15416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.905705][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.909433][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.912348][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.916498][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.919163][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.922684][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.927540][T15416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.932006][T15416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.935541][T15416] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.938638][T15416] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.941129][T15416] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.980754][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.983082][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.995373][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.997559][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.062625][ T5976] Bluetooth: hci0: command tx timeout [ 536.170069][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2951'. [ 536.284159][T15572] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2952'. [ 536.346576][T15579] input: syz0 as /devices/virtual/input/input29 [ 536.419843][T15579] could not allocate digest TFM handle sha384-arm64 [ 536.431938][T15579] PKCS8: Unsupported PKCS#8 version [ 536.437493][T15579] fuse: Unknown parameter '' [ 536.665187][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2961'. [ 536.683220][ T5332] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 536.842591][ T5332] usb 10-1: Using ep0 maxpacket: 16 [ 536.846204][ T5332] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 536.849706][ T5332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 536.856644][ T5332] usb 10-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 536.859416][ T5332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.861698][ T5332] usb 10-1: Product: syz [ 536.864642][ T5332] usb 10-1: Manufacturer: syz [ 536.866743][ T5332] usb 10-1: SerialNumber: syz [ 536.876234][ T5332] usb 10-1: config 0 descriptor?? [ 536.950432][T15621] vivid-001: disconnect [ 537.115133][ T5332] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 537.122222][ T5332] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input30 [ 537.132310][ C2] powermate: config urb returned -71 [ 537.134447][ C2] powermate: config urb returned -71 [ 537.136043][ C2] powermate: config urb returned -71 [ 537.137572][ C2] powermate: config urb returned -71 [ 537.143106][ T5332] usb 10-1: USB disconnect, device number 5 [ 537.144855][ C2] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 537.570124][T15611] vivid-001: reconnect [ 537.739478][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 538.863941][T15752] ptrace attach of "/syz-executor exec"[14222] was attempted by "/syz-executor exec"[15752] [ 540.750222][T15858] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.2981'. [ 540.953786][ T74] usb 14-1: USB disconnect, device number 3 [ 541.907137][T15933] vivid-004: disconnect [ 541.911707][T15932] vivid-004: reconnect [ 541.913498][ T5976] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 541.913618][ T5976] Bluetooth: hci0: Injecting HCI hardware error event [ 541.916490][ T5976] Bluetooth: hci0: hardware error 0x00 [ 543.982649][ T5976] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 544.064072][ T5976] Bluetooth: hci1: ACL packet for unknown connection handle 6 [ 545.191718][T16135] syz.9.3027 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 546.452864][ T1444] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 546.632667][ T1444] usb 13-1: Using ep0 maxpacket: 16 [ 546.636192][ T1444] usb 13-1: config index 0 descriptor too short (expected 16456, got 72) [ 546.639163][ T1444] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 546.643095][ T1444] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 546.646308][ T1444] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 546.649731][ T1444] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.653510][ T1444] usb 13-1: config 0 has no interface number 0 [ 546.656006][ T1444] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 546.660090][ T1444] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 546.663821][ T1444] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.667414][ T1444] usb 13-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.672179][ T1444] usb 13-1: config 0 interface 125 has no altsetting 0 [ 546.674871][ T1444] usb 13-1: config 0 interface 125 has no altsetting 2 [ 546.684958][ T1444] usb 13-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 546.689028][ T1444] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.692100][ T1444] usb 13-1: Product: syz [ 546.694044][ T1444] usb 13-1: Manufacturer: syz [ 546.696245][ T1444] usb 13-1: SerialNumber: syz [ 546.699455][ T1444] usb 13-1: config 0 descriptor?? [ 546.707151][ T1444] usb 13-1: selecting invalid altsetting 2 [ 546.829728][T16198] vlan2: entered promiscuous mode [ 546.831935][T16198] vlan2: entered allmulticast mode [ 547.043315][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3044'. [ 547.372894][ T1014] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 547.542636][ T1014] usb 14-1: Using ep0 maxpacket: 16 [ 547.546083][ T1014] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 547.550695][ T1014] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 547.554069][ T1014] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.557111][ T1014] usb 14-1: Product: syz [ 547.558631][ T1014] usb 14-1: Manufacturer: syz [ 547.560421][ T1014] usb 14-1: SerialNumber: syz [ 547.564193][ T1014] usb 14-1: config 0 descriptor?? [ 547.570199][ T1014] hub 14-1:0.0: bad descriptor, ignoring hub [ 547.573504][ T1014] hub 14-1:0.0: probe with driver hub failed with error -5 [ 547.578820][ T1014] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input31 [ 547.714861][ T6024] usb 13-1: USB disconnect, device number 3 [ 547.903933][ T6024] usb 14-1: USB disconnect, device number 4 [ 550.185229][T16347] usb usb1: usbfs: process 16347 (syz.0.3078) did not claim interface 0 before use [ 550.502281][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3081'. [ 550.997211][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.087456][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.121248][ T5974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.125362][ T5974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.128703][ T5974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.134934][ T5974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.137594][ T5974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 551.140014][ T5974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.171669][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.281442][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.293896][T16374] chnl_net:caif_netlink_parms(): no params data found [ 551.406750][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.408758][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.411108][T16374] bridge_slave_0: entered allmulticast mode [ 551.415307][T16374] bridge_slave_0: entered promiscuous mode [ 551.417816][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.419703][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.421727][T16374] bridge_slave_1: entered allmulticast mode [ 551.424118][T16374] bridge_slave_1: entered promiscuous mode [ 551.429238][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3094'. [ 551.459048][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.491851][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.564916][T16374] team0: Port device team_slave_0 added [ 551.583349][T16374] team0: Port device team_slave_1 added [ 551.621699][ T78] bridge_slave_1: left allmulticast mode [ 551.623713][ T78] bridge_slave_1: left promiscuous mode [ 551.626007][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.629977][ T78] bridge_slave_0: left allmulticast mode [ 551.631524][ T78] bridge_slave_0: left promiscuous mode [ 551.636625][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.014012][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.021850][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.028051][ T78] bond0 (unregistering): Released all slaves [ 552.034560][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.037093][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.048283][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.150807][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.153588][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.161399][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.264309][T16374] hsr_slave_0: entered promiscuous mode [ 552.273619][T16374] hsr_slave_1: entered promiscuous mode [ 552.276774][T16374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.279479][T16374] Cannot create hsr debugfs directory [ 552.284191][T16438] netlink: 'syz.0.3107': attribute type 1 has an invalid length. [ 552.288234][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 552.460908][ T78] hsr_slave_0: left promiscuous mode [ 552.464256][ T78] hsr_slave_1: left promiscuous mode [ 552.466828][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.469053][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.471903][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.474552][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.503120][ T78] veth1_macvtap: left promiscuous mode [ 552.504691][ T78] veth0_macvtap: left promiscuous mode [ 552.506291][ T78] veth1_vlan: left promiscuous mode [ 552.508440][ T78] veth0_vlan: left promiscuous mode [ 552.755724][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.770080][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.799278][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.813203][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.836202][ T5974] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 552.849294][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.188676][ T5974] Bluetooth: hci1: command tx timeout [ 553.656028][ T78] team0 (unregistering): Port device team_slave_1 removed [ 553.830485][ T78] team0 (unregistering): Port device team_slave_0 removed [ 553.995067][T16476] vivid-004: disconnect [ 554.548869][T16473] vivid-004: reconnect [ 554.942619][ T5974] Bluetooth: hci2: command tx timeout [ 555.262572][ T5974] Bluetooth: hci1: command tx timeout [ 555.274441][T16456] chnl_net:caif_netlink_parms(): no params data found [ 555.372739][ T8609] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 555.419901][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.422180][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.426280][T16456] bridge_slave_0: entered allmulticast mode [ 555.430280][T16456] bridge_slave_0: entered promiscuous mode [ 555.435410][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.437981][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.440205][T16456] bridge_slave_1: entered allmulticast mode [ 555.442960][T16456] bridge_slave_1: entered promiscuous mode [ 555.519750][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.526999][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.533871][ T8609] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.538748][ T8609] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 555.542203][ T8609] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 555.546232][ T8609] usb 14-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 555.550746][ T8609] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.556061][ T8609] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.558283][ T8609] usb 14-1: SerialNumber: syz [ 555.563978][T16493] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 555.566001][T16493] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 555.591653][T16456] team0: Port device team_slave_0 added [ 555.603661][T16456] team0: Port device team_slave_1 added [ 555.648365][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.650954][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.661348][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.669090][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.671400][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.681807][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.716891][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.766111][T16456] hsr_slave_0: entered promiscuous mode [ 555.768695][T16456] hsr_slave_1: entered promiscuous mode [ 555.772937][T16456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.774742][T16493] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 555.776806][T16456] Cannot create hsr debugfs directory [ 555.783446][T16493] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 555.808268][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.850226][T16374] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 555.860461][T16374] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 555.870541][T16374] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 555.874538][T16374] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 555.927635][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.002356][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.148931][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.162104][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.189171][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.191478][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.292006][ T8609] cdc_ether 14-1:1.0 eth21: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 556.301868][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.304656][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.328842][ T78] bridge_slave_1: left allmulticast mode [ 556.330880][ T78] bridge_slave_1: left promiscuous mode [ 556.335265][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.340091][ T78] bridge_slave_0: left allmulticast mode [ 556.342010][ T78] bridge_slave_0: left promiscuous mode [ 556.344756][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.395123][ T58] usb 14-1: USB disconnect, device number 5 [ 556.398177][ T58] cdc_ether 14-1:1.0 eth21: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 556.830326][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.835723][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.840092][ T78] bond0 (unregistering): Released all slaves [ 557.003762][ T78] bond1 (unregistering): Released all slaves [ 557.023835][ T5974] Bluetooth: hci2: command tx timeout [ 557.145684][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.283377][T16374] veth0_vlan: entered promiscuous mode [ 557.288507][T16374] veth1_vlan: entered promiscuous mode [ 557.298509][T16374] veth0_macvtap: entered promiscuous mode [ 557.313462][T16374] veth1_macvtap: entered promiscuous mode [ 557.318404][ T78] hsr_slave_0: left promiscuous mode [ 557.320493][ T78] hsr_slave_1: left promiscuous mode [ 557.328506][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.330531][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.337444][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.339428][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.352975][ T5974] Bluetooth: hci1: command tx timeout [ 557.363347][ T78] veth1_macvtap: left promiscuous mode [ 557.365050][ T78] veth0_macvtap: left promiscuous mode [ 557.366647][ T78] veth1_vlan: left promiscuous mode [ 557.368512][ T78] veth0_vlan: left promiscuous mode [ 558.518423][ T78] team0 (unregistering): Port device team_slave_1 removed [ 558.666419][ T78] team0 (unregistering): Port device team_slave_0 removed [ 559.102806][ T5974] Bluetooth: hci2: command tx timeout [ 559.422630][ T5974] Bluetooth: hci1: command tx timeout [ 559.646339][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.650089][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.653967][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.658017][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.662944][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.668715][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.671802][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.674599][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.677349][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.681075][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.689345][T16374] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.692365][T16374] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.695107][T16374] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.697364][T16374] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.744480][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.746880][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.760110][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.767782][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.370771][T16456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 560.374730][T16456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 560.386047][T16456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 560.397726][T16456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.499173][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.514227][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.519557][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.521447][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.527521][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.529731][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.641148][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.675955][T16456] veth0_vlan: entered promiscuous mode [ 560.685013][T16456] veth1_vlan: entered promiscuous mode [ 560.699554][T16456] veth0_macvtap: entered promiscuous mode [ 560.704344][T16456] veth1_macvtap: entered promiscuous mode [ 560.711010][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.715880][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.719387][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.723513][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.726970][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.730822][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.735780][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.741841][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.745365][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.747989][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.750803][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.754474][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.757854][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.761220][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.768258][T16456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.770671][T16456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.773189][T16456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.775582][T16456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.811213][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.815905][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.825765][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.828064][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.009679][T16717] binder: Bad value for 'max' [ 561.182756][ T5974] Bluetooth: hci2: command tx timeout [ 561.196141][T16743] overlayfs: failed to resolve './file0': -2 [ 561.380031][T16761] Bluetooth: MGMT ver 1.23 [ 562.061648][T16790] "syz.7.3184" (16790) uses obsolete ecb(arc4) skcipher [ 562.314603][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.316733][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.459333][ T5974] Bluetooth: hci1: unknown advertising packet type: 0x6e [ 562.459389][ T5974] Bluetooth: hci1: Malformed LE Event: 0x02 [ 563.132498][ T35] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 563.295336][T16942] netlink: 'syz.7.3215': attribute type 3 has an invalid length. [ 563.297913][T16942] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3215'. [ 563.302569][ T35] usb 14-1: Using ep0 maxpacket: 16 [ 563.305773][ T35] usb 14-1: config 3 has no interfaces? [ 563.311367][ T35] usb 14-1: New USB device found, idVendor=0f11, idProduct=1042, bcdDevice=82.26 [ 563.316779][ T35] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.322519][ T35] usb 14-1: Product: syz [ 563.323786][ T35] usb 14-1: Manufacturer: syz [ 563.327357][ T35] usb 14-1: SerialNumber: syz [ 563.540449][ T35] usb 14-1: USB disconnect, device number 6 [ 564.664597][T17028] vivid-000: disconnect [ 564.791974][T17022] 9pnet_fd: Insufficient options for proto=fd [ 565.000344][T17038] vlan2: entered promiscuous mode [ 565.002036][T17038] vlan2: entered allmulticast mode [ 565.146561][T17007] vivid-000: reconnect [ 565.293119][ T8609] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 565.465754][ T8609] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.469159][ T8609] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.472676][ T8609] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.476394][ T8609] usb 13-1: config 0 descriptor?? [ 565.696251][ T8609] usbhid 13-1:0.0: can't add hid device: -71 [ 565.698826][ T8609] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 565.702149][ T8609] usb 13-1: USB disconnect, device number 4 [ 565.703137][ T25] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 565.857159][ T25] usb 12-1: config 0 has an invalid interface number: 240 but max is 0 [ 565.859279][ T25] usb 12-1: config 0 has no interface number 0 [ 565.862501][ T25] usb 12-1: New USB device found, idVendor=10b8, idProduct=2383, bcdDevice=e6.95 [ 565.864908][ T25] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.867500][ T25] usb 12-1: Product: syz [ 565.868979][ T25] usb 12-1: Manufacturer: syz [ 565.870631][ T25] usb 12-1: SerialNumber: syz [ 565.876316][ T25] usb 12-1: config 0 descriptor?? [ 566.085873][ T25] dvb-usb: found a 'DiBcom STK9090M reference design' in warm state. [ 566.091402][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.095148][ T25] dvbdev: DVB: registering new adapter (DiBcom STK9090M reference design) [ 566.098350][ T25] usb 12-1: media controller created [ 566.108581][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.133085][T11459] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 566.283589][T11459] usb 13-1: Using ep0 maxpacket: 16 [ 566.286352][T11459] usb 13-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.291143][T11459] usb 13-1: config 0 interface 0 has no altsetting 0 [ 566.294737][T11459] usb 13-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 566.297419][T11459] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.301424][T11459] usb 13-1: config 0 descriptor?? [ 566.383842][ T25] dib9000_i2c_enumeration: driver disabled by Kconfig [ 566.401751][ T25] usb 12-1: Direct firmware load for dib9090.fw failed with error -2 [ 566.405537][ T25] usb 12-1: Falling back to sysfs fallback for: dib9090.fw [ 566.715249][T11459] logitech-djreceiver 0003:046D:C517.0009: hidraw1: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.8-1/input0 [ 566.752522][T11504] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 566.902640][T11504] usb 6-1: Using ep0 maxpacket: 16 [ 566.905336][T11504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.908293][T11504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.911124][T11504] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 566.915561][T11504] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 566.918559][T11504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.926452][T11504] usb 6-1: config 0 descriptor?? [ 567.115140][ T6001] usb 13-1: USB disconnect, device number 5 [ 567.124364][T17131] vlan2: entered promiscuous mode [ 567.126093][T17131] vlan2: entered allmulticast mode [ 567.338477][T11504] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 567.340548][T11504] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 567.343100][T11504] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 567.346196][T11504] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 567.349292][T11504] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 567.354729][T11504] HID 045e:07da: Invalid code 65791 type 1 [ 567.356463][T11504] HID 045e:07da: Invalid code 768 type 1 [ 567.358045][T11504] HID 045e:07da: Invalid code 769 type 1 [ 567.359642][T11504] HID 045e:07da: Invalid code 770 type 1 [ 567.361143][T11504] HID 045e:07da: Invalid code 771 type 1 [ 567.362903][T11504] HID 045e:07da: Invalid code 772 type 1 [ 567.364395][T11504] HID 045e:07da: Invalid code 773 type 1 [ 567.365844][T11504] HID 045e:07da: Invalid code 774 type 1 [ 567.367479][T11504] HID 045e:07da: Invalid code 775 type 1 [ 567.368948][T11504] HID 045e:07da: Invalid code 776 type 1 [ 567.381046][T11504] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input32 [ 567.391577][T17150] vivid-004: disconnect [ 567.455635][T11504] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 567.533306][T11504] usb 6-1: USB disconnect, device number 30 [ 567.997493][T17134] vivid-004: reconnect [ 568.450542][T17239] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3250'. [ 568.708307][T17276] netlink: 'syz.1.3261': attribute type 9 has an invalid length. [ 568.710458][T17276] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.3261'. [ 569.903221][T11503] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 569.903514][T17359] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.3275'. [ 569.943442][ T8609] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 570.054219][T11503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 570.057351][T11503] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 570.059980][T11503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 570.063544][T11503] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 570.066388][T11503] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 570.068984][T11503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.071895][T11503] usb 6-1: config 0 descriptor?? [ 570.102608][ T8609] usb 13-1: Using ep0 maxpacket: 32 [ 570.106219][ T8609] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.111846][ T8609] usb 13-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 570.115017][ T8609] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.117811][ T8609] usb 13-1: Product: syz [ 570.119194][ T8609] usb 13-1: Manufacturer: syz [ 570.120446][ T8609] usb 13-1: SerialNumber: syz [ 570.122837][ T8609] usb 13-1: config 0 descriptor?? [ 570.125549][ T8609] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 570.278654][T11503] hdpvr 6-1:0.0: firmware version 0x0 dated [ 570.280474][T11503] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 570.328163][ T8609] gspca_sunplus: reg_r err -32 [ 570.681475][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.684828][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.704131][T11503] hdpvr 6-1:0.0: Could not setup controls [ 570.706357][T11503] hdpvr 6-1:0.0: registering videodev failed [ 570.711943][T11503] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 570.715142][T11503] usb 6-1: USB disconnect, device number 31 [ 570.762647][T15640] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 570.914503][T15640] usb 14-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 570.917174][T15640] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.920245][T15640] usb 14-1: config 0 descriptor?? [ 571.223258][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 571.330010][T15640] playstation 0003:054C:0DF2.000B: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 571.362648][ T8609] sunplus 13-1:0.0: probe with driver sunplus failed with error -32 [ 571.502700][T11444] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 571.672604][T11444] usb 6-1: Using ep0 maxpacket: 16 [ 571.676906][T11444] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0055, bcdDevice=ac.bc [ 571.679399][T11444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.681584][T11444] usb 6-1: Product: syz [ 571.683127][T11444] usb 6-1: Manufacturer: syz [ 571.684438][T11444] usb 6-1: SerialNumber: syz [ 571.686749][T11444] usb 6-1: config 0 descriptor?? [ 571.689552][T11444] af9005: boot packet bulk message failed: -22 (252/0) [ 571.691390][T11444] dvb-usb: found a 'TerraTec Cinergy T USB XE' in cold state, will try to load a firmware [ 571.694854][T11444] usb 6-1: Direct firmware load for af9005.fw failed with error -2 [ 571.697306][T11444] usb 6-1: Falling back to sysfs fallback for: af9005.fw [ 571.730449][T15640] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 571.733696][T15640] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 571.736342][T15640] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 571.738778][T15640] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 571.741630][T15640] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 571.743682][ T5976] Bluetooth: hci2: command 0x0405 tx timeout [ 571.746225][T15640] usb 14-1: USB disconnect, device number 7 [ 572.492507][T11457] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 572.662472][T11457] usb 14-1: Using ep0 maxpacket: 8 [ 572.665285][T11457] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.669322][T11457] usb 14-1: New USB device found, idVendor=2955, idProduct=1003, bcdDevice=4d.15 [ 572.671825][T11457] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.674836][T11457] usb 14-1: Product: syz [ 572.676140][T11457] usb 14-1: Manufacturer: syz [ 572.678334][T11457] usb 14-1: SerialNumber: syz [ 572.680951][T11457] usb 14-1: config 0 descriptor?? [ 572.697472][T11459] usb 13-1: USB disconnect, device number 6 [ 572.888959][ T6001] usb 14-1: USB disconnect, device number 8 [ 572.988038][T17396] overlayfs: workdir and upperdir must reside under the same mount [ 573.014639][T17398] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.3285'. [ 573.032955][T11459] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 573.193040][T11459] usb 13-1: Using ep0 maxpacket: 8 [ 573.197718][T11459] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 573.200365][T11459] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.202578][T11459] usb 13-1: Product: syz [ 573.203820][T11459] usb 13-1: Manufacturer: syz [ 573.205195][T11459] usb 13-1: SerialNumber: syz [ 573.207643][T11459] usb 13-1: config 0 descriptor?? [ 573.332619][ T1014] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 573.415227][T11459] usb 13-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.492477][ T1014] usb 14-1: Using ep0 maxpacket: 8 [ 573.495299][ T1014] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.499599][ T1014] usb 14-1: New USB device found, idVendor=2955, idProduct=1003, bcdDevice=4d.15 [ 573.501992][ T1014] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.504387][ T1014] usb 14-1: Product: syz [ 573.505540][ T1014] usb 14-1: Manufacturer: syz [ 573.506799][ T1014] usb 14-1: SerialNumber: syz [ 573.509274][ T1014] usb 14-1: config 0 descriptor?? [ 573.715004][ T74] usb 14-1: USB disconnect, device number 9 [ 574.482594][ T6001] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 574.634619][ T6001] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 574.637195][ T6001] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 574.639730][ T6001] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 574.642274][ T6001] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 574.647571][ T6001] usb 14-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 574.651114][ T6001] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.654071][ T6001] usb 14-1: Product: syz [ 574.655620][ T6001] usb 14-1: Manufacturer: syz [ 574.657410][ T6001] usb 14-1: SerialNumber: syz [ 574.659789][ T6001] usb 14-1: config 0 descriptor?? [ 574.664602][ T6001] ti_usb_3410_5052 14-1:0.0: TI USB 3410 1 port adapter converter detected [ 574.668526][ T6001] usb 14-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 574.865298][ T1014] usb 14-1: USB disconnect, device number 10 [ 574.870032][ T1014] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 574.873256][ T1014] ti_usb_3410_5052 14-1:0.0: device disconnected [ 575.486152][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 575.642143][T17427] overlayfs: workdir and upperdir must reside under the same mount [ 575.652596][ T1444] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 575.804399][ T1444] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.807907][ T1444] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 575.811022][ T1444] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 575.814387][ T1444] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.818225][ T1444] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.820641][ T1444] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.824018][ T1444] usb 14-1: config 0 descriptor?? [ 575.826250][T17418] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 576.209187][T17445] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.3300'. [ 576.239346][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.241595][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.243957][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.246070][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.248213][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.250172][ T1444] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 576.252377][ T1444] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 576.259568][ T1444] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 576.435528][T11459] dvb_usb_rtl28xxu 13-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 576.443662][T11459] usb 13-1: USB disconnect, device number 7 [ 576.685171][T17457] overlayfs: workdir and upperdir must reside under the same mount [ 576.758673][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.762573][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.768099][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.771639][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.796376][T17461] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 576.796376][T17461] program syz.1.3304 not setting count and/or reply_len properly [ 576.988282][T11459] usb 14-1: USB disconnect, device number 11 [ 577.203386][T17466] ALSA: mixer_oss: invalid OSS volume '' [ 578.752574][ T1014] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 578.904187][ T1014] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 578.908408][ T1014] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.912284][ T1014] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 578.919405][ T1014] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 578.921868][ T1014] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.931502][ T1014] usb 14-1: Product: syz [ 578.932993][ T1014] usb 14-1: Manufacturer: syz [ 578.934669][ T1014] usb 14-1: SerialNumber: syz [ 578.937361][ T1014] usb 14-1: config 0 descriptor?? [ 579.123284][T17524] ALSA: mixer_oss: invalid OSS volume '' [ 579.154690][ T1014] adutux 14-1:0.0: ADU208 п now attached to /dev/usb/adutux0 [ 580.165466][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3322'. [ 581.424345][ T58] usb 14-1: USB disconnect, device number 12 [ 581.831448][T17650] netlink: 'syz.1.3348': attribute type 9 has an invalid length. [ 581.834345][T17650] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.3348'. [ 582.054484][T17662] ALSA: mixer_oss: invalid OSS volume '' [ 583.170194][T17713] ALSA: mixer_oss: invalid OSS volume '' [ 583.851532][T17727] openvswitch: netlink: Actions may not be safe on all matching packets [ 583.986058][T17736] vivid-003: disconnect [ 583.988534][T17735] vivid-003: reconnect [ 585.257538][T17777] vivid-004: disconnect [ 585.260626][T17776] vivid-004: reconnect [ 585.422735][T17790] ------------[ cut here ]------------ [ 585.424445][T17790] WARNING: CPU: 0 PID: 17790 at mm/util.c:670 __kvmalloc_node_noprof+0x180/0x1a0 [ 585.426857][T17790] Modules linked in: [ 585.428287][T17790] CPU: 0 UID: 0 PID: 17790 Comm: syz.7.3396 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 585.433525][T17790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 585.436825][T17790] RIP: 0010:__kvmalloc_node_noprof+0x180/0x1a0 [ 585.438519][T17790] Code: e9 1c ff ff ff e8 00 a7 bf ff 41 81 e4 00 20 00 00 31 ff 44 89 e6 e8 2f a9 bf ff 45 85 e4 0f 85 3b ff ff ff e8 e1 a6 bf ff 90 <0f> 0b 90 31 ed e9 ed fe ff ff 48 c7 c7 e8 e9 1c 90 e8 da fa 20 00 [ 585.443815][T17790] RSP: 0018:ffffc90003cc7a18 EFLAGS: 00010283 [ 585.445448][T17790] RAX: 0000000000001897 RBX: 00000000852e7e00 RCX: ffffc9002681c000 [ 585.447691][T17790] RDX: 0000000000040000 RSI: ffffffff81ccff0f RDI: 0000000000000005 [ 585.449809][T17790] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 585.451923][T17790] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.454415][T17790] R13: 00000000ffffffff R14: 0000000000000002 R15: dffffc0000000000 [ 585.456639][T17790] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5756b40 [ 585.459038][T17790] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 585.460784][T17790] CR2: 0000000020050018 CR3: 0000000025f98000 CR4: 0000000000352ef0 [ 585.463203][T17790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.465319][T17790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.467549][T17790] Call Trace: [ 585.468457][T17790] [ 585.469294][T17790] ? __warn+0xea/0x3d0 [ 585.470581][T17790] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 585.472077][T17790] ? report_bug+0x3c0/0x580 [ 585.473485][T17790] ? handle_bug+0x54/0xa0 [ 585.474660][T17790] ? exc_invalid_op+0x17/0x50 [ 585.476008][T17790] ? asm_exc_invalid_op+0x1a/0x20 [ 585.477592][T17790] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 585.479288][T17790] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 585.480858][T17790] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 585.482349][T17790] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 585.484297][T17790] vivid_update_format_cap+0x127b/0x2530 [ 585.485970][T17790] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 585.488345][T17790] ? v4l2_match_dv_timings+0x1df/0x1010 [ 585.490195][T17790] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 585.492204][T17790] vidioc_s_dv_timings+0xa5/0xc0 [ 585.494096][T17790] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 585.495647][T17790] __video_do_ioctl+0xaf0/0xf00 [ 585.497027][T17790] ? __pfx___video_do_ioctl+0x10/0x10 [ 585.498533][T17790] video_usercopy+0x426/0x1500 [ 585.499817][T17790] ? __pfx___video_do_ioctl+0x10/0x10 [ 585.501231][T17790] ? __pfx_video_usercopy+0x10/0x10 [ 585.502919][T17790] v4l2_ioctl+0x1ba/0x250 [ 585.504133][T17790] v4l2_compat_ioctl32+0x214/0x2c0 [ 585.505554][T17790] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 585.507047][T17790] __do_compat_sys_ioctl+0x259/0x2b0 [ 585.508578][T17790] __do_fast_syscall_32+0x73/0x120 [ 585.510126][T17790] do_fast_syscall_32+0x32/0x80 [ 585.511599][T17790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.513912][T17790] RIP: 0023:0xf746e579 [ 585.515138][T17790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.520442][T17790] RSP: 002b:00000000f575655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 585.522865][T17790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 585.524810][T17790] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.526927][T17790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.529166][T17790] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 585.531261][T17790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.533405][T17790] [ 585.534227][T17790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 585.536495][T17790] CPU: 0 UID: 0 PID: 17790 Comm: syz.7.3396 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 585.539272][T17790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 585.542114][T17790] Call Trace: [ 585.543091][T17790] [ 585.543835][T17790] dump_stack_lvl+0x3d/0x1f0 [ 585.545008][T17790] panic+0x71d/0x800 [ 585.546076][T17790] ? __pfx_panic+0x10/0x10 [ 585.547705][T17790] ? show_trace_log_lvl+0x29d/0x3d0 [ 585.549123][T17790] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 585.550656][T17790] check_panic_on_warn+0xab/0xb0 [ 585.552397][T17790] __warn+0xf6/0x3d0 [ 585.553437][T17790] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 585.555682][T17790] report_bug+0x3c0/0x580 [ 585.556979][T17790] handle_bug+0x54/0xa0 [ 585.558137][T17790] exc_invalid_op+0x17/0x50 [ 585.559416][T17790] asm_exc_invalid_op+0x1a/0x20 [ 585.560792][T17790] RIP: 0010:__kvmalloc_node_noprof+0x180/0x1a0 [ 585.562524][T17790] Code: e9 1c ff ff ff e8 00 a7 bf ff 41 81 e4 00 20 00 00 31 ff 44 89 e6 e8 2f a9 bf ff 45 85 e4 0f 85 3b ff ff ff e8 e1 a6 bf ff 90 <0f> 0b 90 31 ed e9 ed fe ff ff 48 c7 c7 e8 e9 1c 90 e8 da fa 20 00 [ 585.567487][T17790] RSP: 0018:ffffc90003cc7a18 EFLAGS: 00010283 [ 585.569087][T17790] RAX: 0000000000001897 RBX: 00000000852e7e00 RCX: ffffc9002681c000 [ 585.571191][T17790] RDX: 0000000000040000 RSI: ffffffff81ccff0f RDI: 0000000000000005 [ 585.573260][T17790] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 585.575430][T17790] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.577858][T17790] R13: 00000000ffffffff R14: 0000000000000002 R15: dffffc0000000000 [ 585.580156][T17790] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 585.581625][T17790] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 585.583101][T17790] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 585.584685][T17790] vivid_update_format_cap+0x127b/0x2530 [ 585.586161][T17790] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 585.588240][T17790] ? v4l2_match_dv_timings+0x1df/0x1010 [ 585.589709][T17790] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 585.591332][T17790] vidioc_s_dv_timings+0xa5/0xc0 [ 585.593214][T17790] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 585.594719][T17790] __video_do_ioctl+0xaf0/0xf00 [ 585.596127][T17790] ? __pfx___video_do_ioctl+0x10/0x10 [ 585.597557][T17790] video_usercopy+0x426/0x1500 [ 585.598842][T17790] ? __pfx___video_do_ioctl+0x10/0x10 [ 585.600265][T17790] ? __pfx_video_usercopy+0x10/0x10 [ 585.601641][T17790] v4l2_ioctl+0x1ba/0x250 [ 585.602901][T17790] v4l2_compat_ioctl32+0x214/0x2c0 [ 585.604318][T17790] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 585.605829][T17790] __do_compat_sys_ioctl+0x259/0x2b0 [ 585.607340][T17790] __do_fast_syscall_32+0x73/0x120 [ 585.608749][T17790] do_fast_syscall_32+0x32/0x80 [ 585.610047][T17790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.611895][T17790] RIP: 0023:0xf746e579 [ 585.612997][T17790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.618369][T17790] RSP: 002b:00000000f575655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 585.620590][T17790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 585.622666][T17790] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.624977][T17790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.627792][T17790] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 585.630513][T17790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.633064][T17790] [ 585.634921][T17790] Kernel Offset: disabled [ 585.636166][T17790] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:59:10 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85042b35 RDI=ffffffff9a6412a0 RBP=ffffffff9a641260 RSP=ffffc90003cc7378 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff85042ad0 R15=0000000000000000 RIP=ffffffff85042b5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020050018 CR3=0000000025f98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000007e0d9f RBX=0000000000000001 RCX=ffffffff8b142f59 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12fe0 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cea88 R15=0000000000000000 RIP=ffffffff8b14433f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a95c1 CR3=00000000658b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90003b87538 RCX=0000000000000000 RDX=0000000000000004 RSI=ffff88801a889640 RDI=ffffc90003b87560 RBP=0000000000000004 RSP=ffffc90003b87328 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=0000000000000000 R12=0000000000000004 R13=0000000000000004 R14=000000000000063c R15=0000000000000640 RIP=ffffffff848fba71 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f03d67bad00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b745ecd000 CR3=000000004d170000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 bdd07655bdd07655 ZMM22=c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 c0525a70c0525a70 ZMM23=52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d 52ad391d52ad391d ZMM24=1078830210788302 1078830210788302 1078830210788302 1078830210788302 1078830210788302 1078830210788302 1078830210788302 1078830210788302 ZMM25=1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 1b252db91b252db9 ZMM26=2002967020029670 2002967020029670 2002967020029670 2002967020029670 2002967020029670 2002967020029670 2002967020029670 2002967020029670 ZMM27=d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe d8b8bafed8b8bafe ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9212000092120000 9212000092120000 9212000092120000 9212000092120000 9212000092120000 9212000092120000 9212000092120000 9212000092120000 info registers vcpu 3 CPU#3 RAX=ffffffff96991cf8 RBX=ffffed100430915b RCX=ffffffff8169e5ab RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96991cf0 RBP=00000000000005b0 RSP=ffffc900041473d8 R8 =0000000000000000 R9 =fffffbfff2d32388 R10=ffffffff96991c47 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000004 R15=ffff888021848000 RIP=ffffffff81edf2db RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200bd01c CR3=0000000077848000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc9aa12f1632548e 87d4f3db686b5475 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5598deb23e210722 ae3702247346661b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 82370df210011de5 388bec363b65785c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 728aa6211191ce60 5b2300ba63446b86 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000308980 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4572e400501e6200 0001639d0001639d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d85d58006f0d5600 0001639f80010000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1adabc000001639d 0001639c0001639a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001639fd80e4e00 b35c00000001639a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab4507588caf5bc3 8cde61394e8a7626 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49e4d123a290bcea 65d62be67a824d90 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000