last executing test programs: 13.728178429s ago: executing program 3 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xde4d, 0x800, 0x2}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) unshare(0x2040400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x0, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private=0xa010100, @multicast2, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 12.665229375s ago: executing program 3 (id=1438): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x2d, 0x3}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x8}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @restrict={0x2}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/145, 0x56, 0x91, 0x1, 0x8, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x20008000, &(0x7f0000000000)={0x11, 0x1c, r5, 0x1, 0x8, 0x6, @random="6d6eb1f60783"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendmsg$nl_route_sched(r3, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r10], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x9, 0x0, 0x2000000}}}, 0x90) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) sendto$inet6(r7, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 10.772615341s ago: executing program 3 (id=1444): socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40046607, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000008c0)={0x0, 0x0}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4ea3, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r9, r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 10.164173928s ago: executing program 2 (id=1446): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x10000) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x365dee, 0x0, &(0x7f0000000080)}) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', '', [], 0xa, '\b\x00\x00\x00\x00\x00\x00\x00\x00'}, 0xd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) ioctl$TIOCL_SETSEL(r5, 0x4b4b, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffefffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x800) 8.266906921s ago: executing program 0 (id=1447): socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0xd, 0xb, &(0x7f0000000000)="5ae02efc441a80536af0d1d905", &(0x7f0000000040)=""/11, 0xa0, 0x0, 0x96, 0xec, &(0x7f0000000100)="6dc333f6f8a14fff7b0458a9fa80e0214c61132e60e8f9441dbf8cb5e99a600165eb77f92912de57a08857fcabf8a5359594b77b6b00000000000000cdbb366e87f587c99d3760ae66a7190cd5a7373b0129b1bd36520bc262aeb469000f2172dc510d055037efcc86a0a83ff5297618000000003c91ba96a4d3d148bfbe872ce89e79f0dc60d5a426b2ba74f16d74460f317e02f697", &(0x7f00000004c0)="0345b01476e90c658bb910ba1e14c0d1c1e4bc1396ec7ff10ed187798ddb2d3d6cb10c26c609fd79599bc3a6e8bfc252fe25d96ec9dd7e6c5bcaa9b81c9fe9d5a498208b38e300f359f3327d61d81341bdf3bce41c89232e2eecdaf1ad8dc1e82fd5c0d896d3d191fc7e9ba3e0e2670111b84fbaccd294911880658e03b3462bfe0df884045116e7dc9d0cf43ab043116a09ef955f1527df5489d6655ccf1a5dfb489ea87ac5645dab8e45f1d93af444ef3a22d0bd882c48f8439f09273909911b597da503f0cbb78fa02445b472cbe020c871801e432fcb9596fabda61dc0181cbf716386a735a6a60e167a", 0x0, 0x0, 0x40000002}, 0x4c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x29b}, &(0x7f0000000340), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200), 0x0, &(0x7f0000000380)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) gettid() listen(0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r7, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r5, 0x381b, 0x0, 0x0, 0x0, 0x0) 7.990902338s ago: executing program 1 (id=1448): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffeff, "5660359c3245d1c42317afad7d48ed51000090d6ad54004200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ppoll(&(0x7f0000000200)=[{r6}], 0x1, 0x0, 0x0, 0x0) 7.988381434s ago: executing program 3 (id=1457): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x26, 0x800000000004, @thr={&(0x7f0000000080)="4ec10b0568c44c3f508e68863010661d65488f4a1bf584fd2aaec3c2d43d462c448bb6a2c907689fe6fb61c83dacd250f8cf2263b6058d7c56e50c", &(0x7f0000032680)="c15885397f7cfa68c1c2cb36c07784fb1855faafc91db9a12d4fa32ae018347656c940fca97d3560a22ab3c29cc1c32f729fb36354a65caccaa02cf06535ea006f147ed383e0083336fb069181062a901543b517d5dedf2913501a043c4aafba796915e586d4b1fded9218e7561ee48493e1566b924553c082242319237251d67a69840da7733ca47db6606e567ac64a756dcf061536db3c1772d34c69d855af01e33d34674f66148c3b03e2f570365009941bc2bb65d849f188b82a9b3cefccb5b266f3a4c0d75c4f04d7e6e0a2e9bbd037a6a7d3469ac321c8f205d8aec51568eeb77351777802284a037b4b57cca530ead988c94201c862135ef566cc1f9fba9db8afdb58dac9b81b0d3077d3ee0cb90629e757dbf04b04421301b7af147f848ab2d626da7be96917a3ac445e40894b311d57f36e03597d5d5365a5cc75177fafa931c5cae7911107c151957d46bf1a319a77edcb98460dc3a60e682cd0b99d90ec965153b92483ae528dfd90c9247101ec53cab7f93dedcb6e73b53bd9eea31d5cbaab3a67f718bdad306c017ec283b6df75ccb1158e2e481578b1edbf2edba1b6a0081500d25edc463fff34bdbe2d6fd5c2afef5d9a5379be3877e694b6d9455f75ae6b69208657bc8a524948930bbb003c7f0d000b2d1de62fd18cdd80427c1d0904b7e926cac9b785ab5bc2da6e6adb1cee6913854feb5fc679e6a729938149d0f77fa5806da1de5a9fe7138848d5a232f506331e820578f8f5800e9a4807c734edc0a03d8a55d17b88e7c07a9ce9d2412041d000e794c6666e189c86b58fbcd3fabc766bf86458b42de3784767787fcc557ccf740e68ecce37d99b08179f6a19f4e7345a09d9f96785ed27e80e973fb5b30bf4e67426d832a6310620edb1fd96d000189b67a08d0b35796b4c8d5781b16108e7329745ad13665601edd7028a6355d5e44c8934da967fdc7dd47191b88b7fe83f132378e1828aafef372842545c9660ed4a2d6c6015575b6a28982fb1f2ba022bec45a971e0fca41fc3fc90c9a8afbcb27ec18e8c3ca997d652ed11833340dff400989d15215d000bc4bdac9f436b557e9fc052ce5536af37b1beaf440535d0c9960826cb7a968fb3c83baec847f2cc6283225aeb599bdf3cdfd2eeae9b7b8884c1067c5aa92a4efc2968545d24b99944f84aea0f11be3bbdcc718f178616fb84d97e5759bf814d8233e41f275b242f45888f1c9864a226e6540f4187c2f4e433399c1cdbb116996cac73c16d658f2ff45efe17d31c91e6bb52520b09f005d35996f9ba0533d7aa90eafb3788467b4899f83a59964290ac161c1f717a772fee1cf20f2f4242c24f951b655d2709df380dc2c17506de1354d4603814951f148f9edb159bdf165131490e45f4ea5c2d22fa44a9f2dadee17b67a37adc059659c54ae0c7d7063d2a69c5b2f4a3b28c4941b252dcdfdc15561bbf3833936e4e32c8f0d2197e8b463bcb6611f61d24f2709ff04feec5b11ec3df22be843bea4854f3d890a10989bce5795f7e5beff8b35364af4e8abe020505ed286b9344704c8ecc1e93e4a9b088f86664514eba5f0f05bb7cf27a5db2f9a695d5ca0887521d61584dc88d08158de4b0c02e5bd77575839422be8e6e986498d613099646028ea7602fdbf2c47e42342d6d71e10ede03ad7c3f52fb516f331650f2f8627b03ddc34bbda8612627ce1c2bb52ebc898b6e5f634825cb0996c730ea38a3b3a413da14d41e82e999a7ad0f1974c11236ab66202d2b067ca3a6158fbc7dd766c6a54c641455928957054035e3683ea504405b6b3e11d415a16d8519a83e3743ac2f31758854d5cabd6266c54552e77a88f005af20131d3e7994e3a2a5f3fe41a70fdff59c8b35f860a6aec3e3a31e4f4ee39a0406729a1e2d463253bbcc4d90df233992476547eba0df600610b1e6183387dca10c6cdee6b3ffe7382f17220092bf95dfce52851946d74988595e1179d1ce45e9c4dc70227961b06d218f921d0a73f1fe0756283ae818c3b295ff7c5ef36abc27eb5879c602d53c7df2fade00f995f5fe3255beaa5510f1809984d6188ad6280d08d34dc4f98bc9f4027fc46f434c7f52929de442a6baad619d96ab64200aa30909321c9abcb53894cb6bc6cd1b27b13a7ac424c082d77ec020a7790eef0d2194fe0d8feb1f9995ed4bff88b01f7c6f498731200358e430d5aec3a3956ab50f6a834a164bd19c75ba99a68bfb10a805954efb29b91e90e614ecb439f32b043d02efe03527d33e88292a871dfb55e43d5f4ee73971256b709b196ec0f1426b6c7a45994227c8b6357bc549e47a8782b9a592de865d71f93ab29f410d4025853035d01e404bca659b28aa18e24c64192339c2547d79ab354629cca0eb8215bdc655ad56e1e63dee1db0da0193c0cf3ff889467e3d23768bcea2e244489960099ab07a24cf1c5d4eb68656648d5e6aa738815ad06155d9876f7ab531db9ce5b9d01475512b53db0a528475a62cf167afb10339e524e118feea66013c4dd5ac1ed42d79cdbf7630b5eeceb2190af412ccd06c52a66eb612eeb6c0a279bb113b8ddcd391adfc299a20141b0d527648a844c9e3890534b0f37eac8f2f5bb8c1a776c832c05477cd603320a292c31aff987868515781698c2d13736c92682c213bb04f7c7123fddadfab8519da51b16c2074e0f4cf1b64008a2f7b7aceacc46d6a8c32dab9b01c00f2559be0a69d82b550047accc10517a1f179287fccc8683130fe1d2aab5c73abbfde8902f61a30cba54e500ebbf54281c69df52e61c119c747abe104f52564f0225ec3fdb90444db58f6e96902ff3e16f4a6d610e467de5e2caf91fc5dcaf3dab78af4910a484ee60fd6b7d76a9e8b146b9fbce884f104205b23d79c5cb2ab26b7557cdd60df3c476aa11d06833878148721358853893195cb3bdad9409f6b6841dce3b84067e9ff5ebae06e7076f0a3e44881b1b1b9b797524b4ed215a59ff1662c1377faf528d3e858b043f6e515f9a4def3414a0bd2090dba0c675fe76d8926c200bf6b1a184c9eaaf9d7ad912655be108034dc7de61b2130de633fe566369cffe9152159a8d4156f2180d5e2693b90d8698794df91aeb98d0669adf62deadf7aa25206e9c4bd156e5e6c11e4ce9816307aa270b60b723612c895a8fd1c0a38fb19ba77463ba049015174e37c83d6ea5d10623ec7456960892bb987434a097b8fcf8028c7b4427850e95451db449e0ffeb4c131f6ca64a3d62c652e4c85c803884f97e917b1d46054ac1d1a99d621b185f75e21a9799d500551982b5254d5623ea78bece0e79b3c04bc34aaa1f545efb15698ea1c04ceb92ecf56bf9cc9cbae36ccf658deaa1f47034e87b83987b8f0509214b347cbd4f2bd862a10b65b46af93ada65a5400e5d6dd265e0dce9d8077dc83a338272c53d97a7d8b84aabbc175d32b8d8653c58f5feb136769749559b5498e1971d91b4f4bdda2e2d54dafc96fb07bfc4bafdf2a2622df5eeb16825afd53e635bb330bff6d65ebcf8f0fbfae439b4954f321222ce7170698b00cfda639b476e7663bb4a52d7cdb0a24007c752b853db700c17c956eda56ecbf9ee43c82a30f9b4990f8e441967a94b1c486047d9801aadb61c170b2f4e4e75a70ce4b66f8b6b15802dff97f4259a2427f8af97f7583b1636684d293396e54986969487b394e8cf2cb3f144bce001aff9d7baccfe44260e1380213a471063af44bb1346a6b1f50e75dff06431e9fab3a63603e0d6c2df3f4f08f35750fc3096389cae367e41b002f8be9cb20b0b766fe7936df5c5b95c40b21278b0ebae9ee02744e9f09f784dd473eeb17daaebe280d0965fb86c8c0890e99ad03a8fc2199c7ea4754a863f1c5071db8ece433893e45589fa81dfe125250d37fa9aa673c9961b6657ebec3cf26d1d93d445cc57b467d17439aa623c997410f0fc9154efcb1ed8e3b0c4e950dd297916f3623754403e2ec89c4b725f616840d4e0d53a0038c797f5d9d34f73b7260e7d4f8827b8a8ce4777b06477fb32ef893a329fad1b63c1ec555745690d8c178a9d0e55bbef2f698e272e4d84bb97753a70db864342351f5433c8bab83a57356ac9ca6ead1d635867a14b4bdba0208689931605bef3bba44118412c304cb4f9d6d8ddf3bc7a7ef5cb75e2d210f7008e1162726d0dde56107f3be2590b3f37fe00ff0e0b9dd10a98acc40fdd6d6eddcbcf15d321b2936766294c1554c18dd74d1d96e9fc02f27314f2331f6e855094b1907028fca0a92960de3d91785a0a24b7a7d27592328f3c1431d78da51e951567a97689d2f702de4ba1371f8e3353c3a715c5f5ba7b731d2ff9d58aabcc991598176bb955802d33019654786189e5ab149900dbc733e70939b382da0387e4b2e948313bb0f89133b99e21eb4babe671969ac39d0a5d6dcdb3c9a3b80fa9448d983f53f3ec0b1abb2957d1ff587e8e603084b8c4f4edec9d4167c48b924ac2e81d5181c4f9aceb830a554c67bad746c5b0a4792b1a2b4927e39cf0a048746b62fb5223f2119aa1c3f59c500da66709b63d3212a72f5d0f7e4fe839f8d09d214d5b8e3239551c01805f53b00aa68f527d53abbf8a050bbd470d9c2d3cec27a0cd265600fe4af84388abb1a0698db035638d603d3233f8171900f43c235721a64ae6da10836140d16f53692bc82d2d6c6989566af434bee983bee200ff7c1a4be4bd41e600757c851f8bd46f1010dae8f98773a63a0c9e1411989b90e64852af1ab85c939b723afd7d14a00b7ec6408a41d08d1c76f818bd09152dc7dc5d88456a82979764f1ea287c96a78a789150866df6af22b62b304b48e9f1e42d71a7efe6b105659dfef526a425473197cb05f1e8f68aa109fcb245b9da8215b0dfa60a264efad708d8259f0b1448f4461955f082ed885079be00ca0b522ccaad92520e7ef0ae1d98ea71822ec283b0f4b11af466b81558a0d6627f59e8009f0be656bfd8f6e6b1b53908c7519815ed496d38dc9aa40f33f4aac57749541194827a84c0b384efd29a40025e27983ce6952e9669a45bd5d82c21325b6a1c1768f9358bfb3828af298ca6d8164fbd0af755c109e188f2443be20367efaa01cee3dda5616f9a9a07ac92daa5b784efc62d1930528756c28ac225ddf17711beec2db09d5b65f1eb4716ef7dfaf708ba5c3d560fa14bfc70488d41d0750748666c2236353a661e756268883648734cef4e6a55a76742f47fb1d12cc1e5fe5067b821452fafc8eb3127b662029de5ff580c7d516cb617a0c11297d16635e352d4c7f103ff5dd388b2417c4c84c8bbe363242c132c10b23ef3a9630286d70ec386970f433f73f311c839ea425dc1e589bf346859d33d1c608d7001cbe07230bafe88c635cdd89bc7fcc801459f4c897cd5a42f3ae9844b0df5979701e74f709e1fc235b7325fd3b5228e1f3d4822c2babdcc221f8888094ed3e8293e98541f23ebea37d37d71d707def34276ea56f08b5bb228619ddad4fd0ac749d09af1bec8891bf9843ae69d6e30d30e2366af60ca8aeab44addf9c4ff48464b5bae578ea5eabb5bb9605b85f94e664902be6584831cd58c33012e33fd822b9c65165a6a0be87024b2b85671fb41034d5367bf6312f06326e785a9f199684daebe8abfa70b2d2fd8cad9a2209a38587789cb8eb279fa6f30925485bbda37e4f7977cc011a5d54741adbb0bf7634469376207bd8b241ab82eda59216ce99c6933d6f4a38bc01bc4f537ffdd536b6b6488e9e17f8d44f3f2dedf8bce6b89504d41b"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 7.337373639s ago: executing program 2 (id=1449): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000540), 0x1b, 0x4000) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) getsockname$unix(r2, &(0x7f00000004c0)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xffff, 0x9}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) syz_io_uring_setup(0x30ec, &(0x7f0000000440)={0x0, 0x8a90, 0x2, 0x2, 0x2d1}, &(0x7f0000000380)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) 7.093198706s ago: executing program 1 (id=1450): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100), 0x0, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x26, 0x800000000004, @thr={&(0x7f0000000080)="4ec10b0568c44c3f508e68863010661d65488f4a1bf584fd2aaec3c2d43d462c448bb6a2c907689fe6fb61c83dacd250f8cf2263b6058d7c56e50c", &(0x7f0000032680)="c15885397f7cfa68c1c2cb36c07784fb1855faafc91db9a12d4fa32ae018347656c940fca97d3560a22ab3c29cc1c32f729fb36354a65caccaa02cf06535ea006f147ed383e0083336fb069181062a901543b517d5dedf2913501a043c4aafba796915e586d4b1fded9218e7561ee48493e1566b924553c082242319237251d67a69840da7733ca47db6606e567ac64a756dcf061536db3c1772d34c69d855af01e33d34674f66148c3b03e2f570365009941bc2bb65d849f188b82a9b3cefccb5b266f3a4c0d75c4f04d7e6e0a2e9bbd037a6a7d3469ac321c8f205d8aec51568eeb77351777802284a037b4b57cca530ead988c94201c862135ef566cc1f9fba9db8afdb58dac9b81b0d3077d3ee0cb90629e757dbf04b04421301b7af147f848ab2d626da7be96917a3ac445e40894b311d57f36e03597d5d5365a5cc75177fafa931c5cae7911107c151957d46bf1a319a77edcb98460dc3a60e682cd0b99d90ec965153b92483ae528dfd90c9247101ec53cab7f93dedcb6e73b53bd9eea31d5cbaab3a67f718bdad306c017ec283b6df75ccb1158e2e481578b1edbf2edba1b6a0081500d25edc463fff34bdbe2d6fd5c2afef5d9a5379be3877e694b6d9455f75ae6b69208657bc8a524948930bbb003c7f0d000b2d1de62fd18cdd80427c1d0904b7e926cac9b785ab5bc2da6e6adb1cee6913854feb5fc679e6a729938149d0f77fa5806da1de5a9fe7138848d5a232f506331e820578f8f5800e9a4807c734edc0a03d8a55d17b88e7c07a9ce9d2412041d000e794c6666e189c86b58fbcd3fabc766bf86458b42de3784767787fcc557ccf740e68ecce37d99b08179f6a19f4e7345a09d9f96785ed27e80e973fb5b30bf4e67426d832a6310620edb1fd96d000189b67a08d0b35796b4c8d5781b16108e7329745ad13665601edd7028a6355d5e44c8934da967fdc7dd47191b88b7fe83f132378e1828aafef372842545c9660ed4a2d6c6015575b6a28982fb1f2ba022bec45a971e0fca41fc3fc90c9a8afbcb27ec18e8c3ca997d652ed11833340dff400989d15215d000bc4bdac9f436b557e9fc052ce5536af37b1beaf440535d0c9960826cb7a968fb3c83baec847f2cc6283225aeb599bdf3cdfd2eeae9b7b8884c1067c5aa92a4efc2968545d24b99944f84aea0f11be3bbdcc718f178616fb84d97e5759bf814d8233e41f275b242f45888f1c9864a226e6540f4187c2f4e433399c1cdbb116996cac73c16d658f2ff45efe17d31c91e6bb52520b09f005d35996f9ba0533d7aa90eafb3788467b4899f83a59964290ac161c1f717a772fee1cf20f2f4242c24f951b655d2709df380dc2c17506de1354d4603814951f148f9edb159bdf165131490e45f4ea5c2d22fa44a9f2dadee17b67a37adc059659c54ae0c7d7063d2a69c5b2f4a3b28c4941b252dcdfdc15561bbf3833936e4e32c8f0d2197e8b463bcb6611f61d24f2709ff04feec5b11ec3df22be843bea4854f3d890a10989bce5795f7e5beff8b35364af4e8abe020505ed286b9344704c8ecc1e93e4a9b088f86664514eba5f0f05bb7cf27a5db2f9a695d5ca0887521d61584dc88d08158de4b0c02e5bd77575839422be8e6e986498d613099646028ea7602fdbf2c47e42342d6d71e10ede03ad7c3f52fb516f331650f2f8627b03ddc34bbda8612627ce1c2bb52ebc898b6e5f634825cb0996c730ea38a3b3a413da14d41e82e999a7ad0f1974c11236ab66202d2b067ca3a6158fbc7dd766c6a54c641455928957054035e3683ea504405b6b3e11d415a16d8519a83e3743ac2f31758854d5cabd6266c54552e77a88f005af20131d3e7994e3a2a5f3fe41a70fdff59c8b35f860a6aec3e3a31e4f4ee39a0406729a1e2d463253bbcc4d90df233992476547eba0df600610b1e6183387dca10c6cdee6b3ffe7382f17220092bf95dfce52851946d74988595e1179d1ce45e9c4dc70227961b06d218f921d0a73f1fe0756283ae818c3b295ff7c5ef36abc27eb5879c602d53c7df2fade00f995f5fe3255beaa5510f1809984d6188ad6280d08d34dc4f98bc9f4027fc46f434c7f52929de442a6baad619d96ab64200aa30909321c9abcb53894cb6bc6cd1b27b13a7ac424c082d77ec020a7790eef0d2194fe0d8feb1f9995ed4bff88b01f7c6f498731200358e430d5aec3a3956ab50f6a834a164bd19c75ba99a68bfb10a805954efb29b91e90e614ecb439f32b043d02efe03527d33e88292a871dfb55e43d5f4ee73971256b709b196ec0f1426b6c7a45994227c8b6357bc549e47a8782b9a592de865d71f93ab29f410d4025853035d01e404bca659b28aa18e24c64192339c2547d79ab354629cca0eb8215bdc655ad56e1e63dee1db0da0193c0cf3ff889467e3d23768bcea2e244489960099ab07a24cf1c5d4eb68656648d5e6aa738815ad06155d9876f7ab531db9ce5b9d01475512b53db0a528475a62cf167afb10339e524e118feea66013c4dd5ac1ed42d79cdbf7630b5eeceb2190af412ccd06c52a66eb612eeb6c0a279bb113b8ddcd391adfc299a20141b0d527648a844c9e3890534b0f37eac8f2f5bb8c1a776c832c05477cd603320a292c31aff987868515781698c2d13736c92682c213bb04f7c7123fddadfab8519da51b16c2074e0f4cf1b64008a2f7b7aceacc46d6a8c32dab9b01c00f2559be0a69d82b550047accc10517a1f179287fccc8683130fe1d2aab5c73abbfde8902f61a30cba54e500ebbf54281c69df52e61c119c747abe104f52564f0225ec3fdb90444db58f6e96902ff3e16f4a6d610e467de5e2caf91fc5dcaf3dab78af4910a484ee60fd6b7d76a9e8b146b9fbce884f104205b23d79c5cb2ab26b7557cdd60df3c476aa11d06833878148721358853893195cb3bdad9409f6b6841dce3b84067e9ff5ebae06e7076f0a3e44881b1b1b9b797524b4ed215a59ff1662c1377faf528d3e858b043f6e515f9a4def3414a0bd2090dba0c675fe76d8926c200bf6b1a184c9eaaf9d7ad912655be108034dc7de61b2130de633fe566369cffe9152159a8d4156f2180d5e2693b90d8698794df91aeb98d0669adf62deadf7aa25206e9c4bd156e5e6c11e4ce9816307aa270b60b723612c895a8fd1c0a38fb19ba77463ba049015174e37c83d6ea5d10623ec7456960892bb987434a097b8fcf8028c7b4427850e95451db449e0ffeb4c131f6ca64a3d62c652e4c85c803884f97e917b1d46054ac1d1a99d621b185f75e21a9799d500551982b5254d5623ea78bece0e79b3c04bc34aaa1f545efb15698ea1c04ceb92ecf56bf9cc9cbae36ccf658deaa1f47034e87b83987b8f0509214b347cbd4f2bd862a10b65b46af93ada65a5400e5d6dd265e0dce9d8077dc83a338272c53d97a7d8b84aabbc175d32b8d8653c58f5feb136769749559b5498e1971d91b4f4bdda2e2d54dafc96fb07bfc4bafdf2a2622df5eeb16825afd53e635bb330bff6d65ebcf8f0fbfae439b4954f321222ce7170698b00cfda639b476e7663bb4a52d7cdb0a24007c752b853db700c17c956eda56ecbf9ee43c82a30f9b4990f8e441967a94b1c486047d9801aadb61c170b2f4e4e75a70ce4b66f8b6b15802dff97f4259a2427f8af97f7583b1636684d293396e54986969487b394e8cf2cb3f144bce001aff9d7baccfe44260e1380213a471063af44bb1346a6b1f50e75dff06431e9fab3a63603e0d6c2df3f4f08f35750fc3096389cae367e41b002f8be9cb20b0b766fe7936df5c5b95c40b21278b0ebae9ee02744e9f09f784dd473eeb17daaebe280d0965fb86c8c0890e99ad03a8fc2199c7ea4754a863f1c5071db8ece433893e45589fa81dfe125250d37fa9aa673c9961b6657ebec3cf26d1d93d445cc57b467d17439aa623c997410f0fc9154efcb1ed8e3b0c4e950dd297916f3623754403e2ec89c4b725f616840d4e0d53a0038c797f5d9d34f73b7260e7d4f8827b8a8ce4777b06477fb32ef893a329fad1b63c1ec555745690d8c178a9d0e55bbef2f698e272e4d84bb97753a70db864342351f5433c8bab83a57356ac9ca6ead1d635867a14b4bdba0208689931605bef3bba44118412c304cb4f9d6d8ddf3bc7a7ef5cb75e2d210f7008e1162726d0dde56107f3be2590b3f37fe00ff0e0b9dd10a98acc40fdd6d6eddcbcf15d321b2936766294c1554c18dd74d1d96e9fc02f27314f2331f6e855094b1907028fca0a92960de3d91785a0a24b7a7d27592328f3c1431d78da51e951567a97689d2f702de4ba1371f8e3353c3a715c5f5ba7b731d2ff9d58aabcc991598176bb955802d33019654786189e5ab149900dbc733e70939b382da0387e4b2e948313bb0f89133b99e21eb4babe671969ac39d0a5d6dcdb3c9a3b80fa9448d983f53f3ec0b1abb2957d1ff587e8e603084b8c4f4edec9d4167c48b924ac2e81d5181c4f9aceb830a554c67bad746c5b0a4792b1a2b4927e39cf0a048746b62fb5223f2119aa1c3f59c500da66709b63d3212a72f5d0f7e4fe839f8d09d214d5b8e3239551c01805f53b00aa68f527d53abbf8a050bbd470d9c2d3cec27a0cd265600fe4af84388abb1a0698db035638d603d3233f8171900f43c235721a64ae6da10836140d16f53692bc82d2d6c6989566af434bee983bee200ff7c1a4be4bd41e600757c851f8bd46f1010dae8f98773a63a0c9e1411989b90e64852af1ab85c939b723afd7d14a00b7ec6408a41d08d1c76f818bd09152dc7dc5d88456a82979764f1ea287c96a78a789150866df6af22b62b304b48e9f1e42d71a7efe6b105659dfef526a425473197cb05f1e8f68aa109fcb245b9da8215b0dfa60a264efad708d8259f0b1448f4461955f082ed885079be00ca0b522ccaad92520e7ef0ae1d98ea71822ec283b0f4b11af466b81558a0d6627f59e8009f0be656bfd8f6e6b1b53908c7519815ed496d38dc9aa40f33f4aac57749541194827a84c0b384efd29a40025e27983ce6952e9669a45bd5d82c21325b6a1c1768f9358bfb3828af298ca6d8164fbd0af755c109e188f2443be20367efaa01cee3dda5616f9a9a07ac92daa5b784efc62d1930528756c28ac225ddf17711beec2db09d5b65f1eb4716ef7dfaf708ba5c3d560fa14bfc70488d41d0750748666c2236353a661e756268883648734cef4e6a55a76742f47fb1d12cc1e5fe5067b821452fafc8eb3127b662029de5ff580c7d516cb617a0c11297d16635e352d4c7f103ff5dd388b2417c4c84c8bbe363242c132c10b23ef3a9630286d70ec386970f433f73f311c839ea425dc1e589bf346859d33d1c608d7001cbe07230bafe88c635cdd89bc7fcc801459f4c897cd5a42f3ae9844b0df5979701e74f709e1fc235b7325fd3b5228e1f3d4822c2babdcc221f8888094ed3e8293e98541f23ebea37d37d71d707def34276ea56f08b5bb228619ddad4fd0ac749d09af1bec8891bf9843ae69d6e30d30e2366af60ca8aeab44addf9c4ff48464b5bae578ea5eabb5bb9605b85f94e664902be6584831cd58c33012e33fd822b9c65165a6a0be87024b2b85671fb41034d5367bf6312f06326e785a9f199684daebe8abfa70b2d2fd8cad9a2209a38587789cb8eb279fa6f30925485bbda37e4f7977cc011a5d54741adbb0bf7634469376207bd8b241ab82eda59216ce99c6933d6f4a38bc01bc4f537ffdd536b6b6488e9e17f8d44f3f2dedf8bce6b89504d41b"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 6.383321952s ago: executing program 2 (id=1451): mremap(&(0x7f000096d000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000077c000/0x4000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000480)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000100ff0200000000000000000000000000010000000000000000000000000000000000000000000000000031e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00"/140], 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 6.111618178s ago: executing program 1 (id=1452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@stats}]}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100800001) mount$binder(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, '/proc/partitions\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x26}}, {@subj_role}, {@obj_type}, {@seclabel}, {@dont_measure}, {@dont_measure}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x23d) unshare(0x22020600) 5.321095418s ago: executing program 2 (id=1454): r0 = fsopen(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0xa) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe804c746d12b5421d8a00000000000000cfed00000000bbfe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 5.181614858s ago: executing program 1 (id=1455): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x1, 0x0, &(0x7f0000000200)=0x1, 0x2) syz_io_uring_setup(0x5e2, &(0x7f0000000340), &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.163637732s ago: executing program 0 (id=1456): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x410002, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000700207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.098345855s ago: executing program 3 (id=1458): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x300, 0x135) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)={'c', ' *:* ', 'rwm\x00'}, 0xa) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r5, 0x5605) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) syz_emit_ethernet(0x367, &(0x7f0000019c40)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "f42bf0", 0x331, 0x21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, {[@dstopts={0x1, 0x3a, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @generic={0x1, 0x18e, "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"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfffb, [0x6, 0x1, 0x7, 0x8, 0x1, 0x7]}}, @jumbo={0xc2, 0x4, 0x4}]}, @routing={0x66, 0x14, 0x2, 0x9, 0x0, [@private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, "e3e9bd", 0x7, "f9b252"}, "ed5786dc4ac69f39fda9d7ad07a2a218059b7ee9f6c95ead4075521ec926b5747b15ba2e718aa26c49ac8e02fa0e96a94bfc10abcc5614ef23bfa0d3397bcefc9bc8405e6747d2c0a6fc9331c345b64b8440070cca5b2ec3876a9af825c146f1ed75a82a996078f6c2eb11258a6512cf953542af89aa957c29c18b9f0692cda518ebec8e6bb3309ca1751e9d86ded529ade06b8de589d3c9a1"}}}}}}, 0x0) socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000019400)=ANY=[], 0x10) writev(r5, &(0x7f0000019580)=[{&(0x7f0000019380)="9733824102000000", 0x8}, {&(0x7f00000198c0)="fd65e69af21386501e98f8f9d59e2c7fde1d2c3e785626c8496e055499693730a6684f5157ec72c3b8c8d3abeb3851ea6f44cd4a43bcc461756a7c75315be80f6ef2b89ecdd7b1694153768995631f2f906aba1036d9a9c481653fd36793f0e1b888610affa300c26ebc4b8249627aa8801822045bf803405aaf0d568e4dfa7390f593", 0x83}, {&(0x7f0000019480)="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", 0xfc}, {&(0x7f0000019700)="b48ae69ac92f2483911f96a71e49c6c88d97b805519939e415495398ad10195ccb9b6e44585d1d679b4566aa2ba169fd0518d98f0560ff4b25416bfc63aae71ad6fc6d9de92e48d546ead366506779d98b6b3c40e2c5c5a91bb4291829c200cdb1074c00433782c45c1ca8a61098ff421eeae2159317931490c4fb393f08c95aa0ebea16b26b3c331149d36847967bfbc2e3080bfe7763e145122313ef870fd6fe2f9d0345dabe53be46f3068f1cd3842cc5b0577dfdee0b36a10cfec88796da88aa610000", 0xc5}, {&(0x7f00000193c0)="c343e4a91b1b99ef9dba7df828dd56e2281eb9cbb0a37529d0e31748fe97578f9031d9ed7497b4c45acb21004de0a616edd662b881a700000000b866ab1f7b0c", 0x40}], 0x5) 3.064582131s ago: executing program 1 (id=1459): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000000300)={0x2, 0xff, @start={0x0, 0x1, "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", "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"}, [0x800, 0x800, 0x3, 0x3, 0x37b7, 0x7, 0x7, 0xffffffffffff1461, 0x80, 0xa1f3, 0x9, 0x800000e4bd, 0x6, 0x1c13, 0x0, 0x6, 0x3, 0x7, 0x2, 0x7, 0x1, 0x0, 0x8, 0x2, 0xfffffffffffffbff, 0x4, 0x1, 0x9, 0x80000001, 0x5, 0x8, 0x1ff, 0x1, 0x74, 0xc1a, 0x16d, 0x3d7, 0x5, 0x3, 0x9, 0x8, 0x0, 0x10000, 0x6, 0x3ff, 0x86e, 0x0, 0x6, 0x9f0a, 0x2, 0x3, 0x7, 0x3, 0x7fffffff, 0xe, 0xfffffffffffffe01, 0x205ccf, 0xbec, 0xd72, 0x4, 0xfffffffffffffffd, 0xa005, 0x1, 0x4]}) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x2000008, 0x0, 0x18, "000080f100df400000a7dbde16c708db7200"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r2, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) r3 = socket(0x21, 0x800, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100), 0x0) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x4f9, &(0x7f0000000080)={0x0, 0x42d1, 0x200, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2.870121659s ago: executing program 0 (id=1460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r9}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0xc018aec0, &(0x7f0000000140)={0x0, 0x80ffff}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000300), 0x0, 0x0, 0x0) 2.711330883s ago: executing program 0 (id=1461): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019640)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_complete(0x0) write$P9_RRENAME(r3, &(0x7f0000000540)={0xfffffffffffffe94, 0x15, 0xfffe}, 0x7) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000640)=""/102382, 0x18fee}], 0x1, 0x200000, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f045}) pread64(r4, &(0x7f0000000400)=""/42, 0x2a, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000019780)="a4e78961820c32f02e69e4c1e8b624c66a2047c12bdc2f638e309d615ab511de2aad682795597e159efcd650d5a5f179c0e40bb3fd842143cead4d87b2b0049191f9beffc88f0c8b17f248f33e8249255209909dccbdb9c0feb1458a30928c5aa30f21a3dc2267f6b61a08e956d0916c58277ea584f34a7a9373db84f5d449b28667f983fe70ad06e7b3aab112897bab363cbbe604d767933a3c614a797fe99279afd1c47dca1dfe04a8a2bb7e5c37dbeaeb0afef01adfb5797bd2379c821622cbb8cdbb96f68663c4c1d24547928bacdf6e4b8d5a5ccaefb866d51c56c4d5525a86ba1661c4eb8f49154a076b5335e15a022280a7e4f184fc270793995c85f7fafdeeb82bc97af436c4575bfb505f9cbb27fabbae0bbd", 0x117, 0x80fe, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000004000380140000001000010000000000000000000000000ab6f13698625330900e9aae1ee483ae694f3353e6bdd50549739dc47b00ba966669ca05633baeda6f0ca351f99a2cc152d4b5c2e8fd18ce79"], 0x58}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r9, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc56eb4d42dbbf6c41786780df56e5be7070101080a4e7719b506a0977b", 0xffeb}], 0x1}, 0x0) 2.552193879s ago: executing program 2 (id=1462): mremap(&(0x7f000096d000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000077c000/0x4000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000480)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000100ff0200000000000000000000000000010000000000000000000000000000000000000000000000000031e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00"/140], 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 1.719617542s ago: executing program 0 (id=1463): mremap(&(0x7f000096d000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000077c000/0x4000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000480)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000100ff0200000000000000000000000000010000000000000000000000000000000000000000000000000031e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00"/140], 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 875.515032ms ago: executing program 3 (id=1464): socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40046607, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4ea3, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r9, r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 366.578916ms ago: executing program 1 (id=1465): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x26, 0x800000000004, @thr={&(0x7f0000000080)="4ec10b0568c44c3f508e68863010661d65488f4a1bf584fd2aaec3c2d43d462c448bb6a2c907689fe6fb61c83dacd250f8cf2263b6058d7c56e50c", &(0x7f0000032680)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 723.343µs ago: executing program 0 (id=1466): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x26, 0x800000000004, @thr={&(0x7f0000000080)="4ec10b0568c44c3f508e68863010661d65488f4a1bf584fd2aaec3c2d43d462c448bb6a2c907689fe6fb61c83dacd250f8cf2263b6058d7c56e50c", &(0x7f0000032680)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 0s ago: executing program 2 (id=1467): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r1, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r2 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 4][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.645562][ T8032] Cannot create hsr debugfs directory [ 203.692187][ T8034] hsr_slave_0: entered promiscuous mode [ 203.694121][ T8034] hsr_slave_1: entered promiscuous mode [ 203.696048][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.698013][ T8034] Cannot create hsr debugfs directory [ 203.704400][ T8026] hsr_slave_0: entered promiscuous mode [ 203.706376][ T8026] hsr_slave_1: entered promiscuous mode [ 203.709168][ T8026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.711173][ T8026] Cannot create hsr debugfs directory [ 203.775202][ T8029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.838294][ T5348] Bluetooth: hci4: command tx timeout [ 203.867925][ T8029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.928821][ T5348] Bluetooth: hci0: command tx timeout [ 203.935968][ T1098] hsr_slave_0: left promiscuous mode [ 203.937792][ T1098] hsr_slave_1: left promiscuous mode [ 203.952298][ T1098] veth1_macvtap: left promiscuous mode [ 203.953972][ T1098] veth0_macvtap: left promiscuous mode [ 203.955511][ T1098] veth0_vlan: left promiscuous mode [ 204.001285][ T5348] Bluetooth: hci1: command tx timeout [ 204.001321][ T5354] Bluetooth: hci2: command tx timeout [ 204.408260][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.488274][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.339253][ T8029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.428528][ T8029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.448264][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.528253][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.918294][ T5354] Bluetooth: hci4: command tx timeout [ 205.978432][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.982234][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.998384][ T5354] Bluetooth: hci0: command tx timeout [ 206.077405][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.078373][ T5354] Bluetooth: hci1: command tx timeout [ 206.085753][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.088466][ T5354] Bluetooth: hci2: command tx timeout [ 206.175075][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.179411][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.283771][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.286733][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.456681][ T1098] bridge_slave_1: left allmulticast mode [ 206.461420][ T1098] bridge_slave_1: left promiscuous mode [ 206.465200][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.471354][ T1098] bridge_slave_0: left allmulticast mode [ 206.473437][ T1098] bridge_slave_0: left promiscuous mode [ 206.475115][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.488312][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.568332][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.966443][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.975291][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.989293][ T1098] bond0 (unregistering): Released all slaves [ 207.190689][ T1098] tipc: Disabling bearer [ 207.192496][ T1098] tipc: Disabling bearer [ 207.194636][ T1098] tipc: Left network mode [ 207.452400][ T1098] hsr_slave_0: left promiscuous mode [ 207.454356][ T1098] hsr_slave_1: left promiscuous mode [ 207.456103][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.458073][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.466183][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.469276][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.507957][ T1098] vlan0: left allmulticast mode [ 207.510392][ T1098] veth0_vlan: left allmulticast mode [ 207.512294][ T1098] vlan0: left promiscuous mode [ 207.514248][ T1098] veth1_macvtap: left promiscuous mode [ 207.516200][ T1098] veth0_macvtap: left promiscuous mode [ 207.518364][ T1098] veth1_vlan: left promiscuous mode [ 207.520266][ T1098] veth0_vlan: left promiscuous mode [ 207.608717][ T1098] team0 (unregistering): Port device vlan2 removed [ 208.002462][ T5354] Bluetooth: hci4: command tx timeout [ 208.079412][ T5354] Bluetooth: hci0: command tx timeout [ 208.158811][ T5348] Bluetooth: hci1: command tx timeout [ 208.160331][ T5354] Bluetooth: hci2: command tx timeout [ 208.287570][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 208.376994][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 209.078447][ T8026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.099102][ T8032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.101968][ T8032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.113791][ T8026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.117269][ T8026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.121898][ T8026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.189730][ T8032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.193458][ T8032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.223652][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.233446][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.239466][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.242532][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.249325][ T214] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.251583][ T214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.319632][ T8032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.322581][ T8032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.374771][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.393108][ T8026] veth0_vlan: entered promiscuous mode [ 209.400291][ T8026] veth1_vlan: entered promiscuous mode [ 209.418556][ T8026] veth0_macvtap: entered promiscuous mode [ 209.423025][ T8026] veth1_macvtap: entered promiscuous mode [ 209.433871][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.437463][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.440931][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.444509][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.448930][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.461126][ T8032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.464003][ T8032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.472640][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.476332][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.480150][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.483668][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.487769][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.495593][ T8026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.499026][ T8026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.502035][ T8026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.504625][ T8026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.546786][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.552156][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.563985][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.566664][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.633091][ T8029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.640233][ T8029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.643780][ T8029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.656810][ T8029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.674998][ T1098] IPVS: stop unused estimator thread 0... [ 209.704321][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.707947][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.718763][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.746110][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.775260][ T8032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.778716][ T8032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.783768][ T8032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.787761][ T8032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.793795][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.814168][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.822857][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.825228][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.832091][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.834423][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.876555][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.903880][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.915963][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.925991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.927900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.940831][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.943597][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.945420][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.955672][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.958282][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.967499][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.969533][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.012301][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.035321][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.060795][ T8029] veth0_vlan: entered promiscuous mode [ 210.068044][ T8029] veth1_vlan: entered promiscuous mode [ 210.078986][ T5348] Bluetooth: hci4: command tx timeout [ 210.090987][ T8029] veth0_macvtap: entered promiscuous mode [ 210.095895][ T8029] veth1_macvtap: entered promiscuous mode [ 210.102876][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.105668][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.111076][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.114408][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.117206][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.120251][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.125276][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.132701][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.136020][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.140880][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.144270][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.147477][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.151401][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.156041][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.160487][ T5348] Bluetooth: hci0: command tx timeout [ 210.180604][ T8029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.183734][ T8029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.186773][ T8029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.190041][ T8029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.197263][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.211764][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.232251][ T8034] veth0_vlan: entered promiscuous mode [ 210.237601][ T8034] veth1_vlan: entered promiscuous mode [ 210.248775][ T5348] Bluetooth: hci1: command tx timeout [ 210.250747][ T5348] Bluetooth: hci2: command tx timeout [ 210.251313][ T8034] veth0_macvtap: entered promiscuous mode [ 210.256616][ T8034] veth1_macvtap: entered promiscuous mode [ 210.285922][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.290349][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.293684][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.297213][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.303019][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.306587][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.310571][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.314584][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.319006][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.323424][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.326908][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.330932][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.334371][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.337551][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.341192][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.344444][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.347895][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.352503][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.358337][ T8034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.361050][ T8034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.364095][ T8034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.367030][ T8034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.391347][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.396595][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.424703][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.427791][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.437043][ T8032] veth0_vlan: entered promiscuous mode [ 210.455352][ T8032] veth1_vlan: entered promiscuous mode [ 210.498287][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.500941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.518048][ T8032] veth0_macvtap: entered promiscuous mode [ 210.632616][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.635374][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.656886][ T8032] veth1_macvtap: entered promiscuous mode [ 210.684471][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.687188][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.689816][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.692436][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.694963][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.698250][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.700849][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.703551][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.706095][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.711723][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.717239][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.720898][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.723905][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.726430][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.731377][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.734178][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.737666][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.742236][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.744965][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.747504][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.751314][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.760568][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.766693][ T8032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.779497][ T8032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.782414][ T8032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.788265][ T8032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.819803][ T8177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.856'. [ 210.827991][ T8179] syz.1.858 (8179): drop_caches: 2 [ 210.856491][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.865209][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.881775][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.886269][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.955008][ T8185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.148539][ T5524] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 211.299106][ T5524] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 211.302913][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.305796][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.309093][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.312401][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.315504][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.319381][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.322815][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.325862][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.329654][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.332826][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.335623][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.340015][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.343093][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.345984][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.349610][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.352784][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.355585][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.359448][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.362549][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.365662][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.369436][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.376659][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.388289][ T5524] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.391965][ T5524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.399220][ T5524] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.401473][ T5524] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.404129][ T5524] usb 8-1: Product: syz [ 211.405440][ T5524] usb 8-1: Manufacturer: syz [ 211.406718][ T5524] usb 8-1: SerialNumber: syz [ 211.419553][ T5524] usb 8-1: config 0 descriptor?? [ 211.430941][ T5524] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 211.489628][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 212.108704][ T5524] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.278686][ T5524] usb 6-1: Using ep0 maxpacket: 32 [ 212.283838][ T5524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.286783][ T5524] usb 6-1: config 0 has no interfaces? [ 212.290833][ T5524] usb 6-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 212.293281][ T5524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.296460][ T5524] usb 6-1: config 0 descriptor?? [ 212.651509][ T1283] usb 6-1: USB disconnect, device number 11 [ 213.288830][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 213.678437][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 213.685117][ T9] usb 8-1: USB disconnect, device number 19 [ 213.689336][ T9] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 214.928385][ T5469] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.078332][ T5469] usb 5-1: Using ep0 maxpacket: 8 [ 215.087435][ T5469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.092590][ T5469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.096904][ T5469] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 215.101218][ T5469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.113824][ T5469] usb 5-1: config 0 descriptor?? [ 215.136257][ T5469] usbhid 5-1:0.0: can't add hid device: -22 [ 215.144872][ T5469] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 215.430778][ T6037] usb 5-1: USB disconnect, device number 15 [ 215.768875][ T5354] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 215.771240][ T5354] Bluetooth: hci0: Injecting HCI hardware error event [ 215.773508][ T5354] Bluetooth: hci0: hardware error 0x00 [ 216.033468][ T8261] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 216.036081][ T8261] overlayfs: failed to set xattr on upper [ 216.038002][ T8261] overlayfs: ...falling back to redirect_dir=nofollow. [ 216.058914][ T8261] overlayfs: ...falling back to index=off. [ 216.060960][ T8261] overlayfs: ...falling back to uuid=null. [ 216.563359][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.672586][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.719116][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.723366][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.727552][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.732723][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.735263][ T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.737726][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.756854][ T8273] batman_adv: batadv0: Adding interface: dummy0 [ 216.760080][ T8273] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.780785][ T8273] batman_adv: batadv0: Interface activated: dummy0 [ 216.802980][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.842763][ T8273] batadv0: mtu less than device minimum [ 216.846329][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.851609][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.856401][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.861262][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.865943][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.870880][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.875740][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.880721][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.885622][ T8273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.944419][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.122822][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 217.306457][ T1098] bridge_slave_1: left allmulticast mode [ 217.333340][ T1098] bridge_slave_1: left promiscuous mode [ 217.335668][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.358296][ T1098] bridge_slave_0: left allmulticast mode [ 217.360238][ T1098] bridge_slave_0: left promiscuous mode [ 217.362197][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.841345][ T5354] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 217.874063][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.880248][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.885574][ T1098] bond0 (unregistering): Released all slaves [ 217.980052][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.982056][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.984340][ T8270] bridge_slave_0: entered allmulticast mode [ 217.990331][ T8270] bridge_slave_0: entered promiscuous mode [ 218.006199][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.034555][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.048422][ T8270] bridge_slave_1: entered allmulticast mode [ 218.050854][ T8270] bridge_slave_1: entered promiscuous mode [ 218.333972][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.383495][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.623244][ T8270] team0: Port device team_slave_0 added [ 218.626047][ T8270] team0: Port device team_slave_1 added [ 218.682323][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.684207][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.692995][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.713088][ T1098] hsr_slave_0: left promiscuous mode [ 218.730165][ T1098] hsr_slave_1: left promiscuous mode [ 218.734897][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.736907][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.741773][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.744878][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.798701][ T5354] Bluetooth: hci3: command tx timeout [ 218.836204][ T1098] veth1_macvtap: left promiscuous mode [ 218.837845][ T1098] veth0_macvtap: left promiscuous mode [ 218.839561][ T1098] veth1_vlan: left promiscuous mode [ 218.841063][ T1098] veth0_vlan: left promiscuous mode [ 218.943386][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.887'. [ 218.946554][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 218.967842][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.887'. [ 218.971358][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.887'. [ 219.188341][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 219.338293][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 219.341843][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.345423][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.350100][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.352748][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.356161][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.358720][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.569117][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 219.570703][ T9] usbtmc 8-1:16.0: can't read capabilities [ 219.707586][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 219.801928][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 219.895528][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 219.900132][ T8303] usbtmc 8-1:16.0: Unable to send data, error -71 [ 220.475543][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.477341][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.484463][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.487689][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 220.490806][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.887'. [ 220.602563][ T8306] Bluetooth: MGMT ver 1.23 [ 220.613394][ T9] usb 8-1: USB disconnect, device number 20 [ 220.651663][ T8270] hsr_slave_0: entered promiscuous mode [ 220.654544][ T8270] hsr_slave_1: entered promiscuous mode [ 220.664619][ T8270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.667091][ T8270] Cannot create hsr debugfs directory [ 220.878674][ T5354] Bluetooth: hci3: command tx timeout [ 220.962707][ T8323] syzkaller0: entered promiscuous mode [ 220.964787][ T8323] syzkaller0: entered allmulticast mode [ 220.987694][ T8323] syzkaller0: create flow: hash 1849156366 index 1 [ 221.017316][ T8323] syzkaller0: delete flow: hash 1849156366 index 1 [ 222.779642][ T8270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.789379][ T8270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.799704][ T8270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.804032][ T8270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.805696][ T39] audit: type=1326 audit(1728887771.836:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.1.895" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 222.880850][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.893023][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.897631][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.899902][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.917576][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.920394][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.943656][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.958667][ T5354] Bluetooth: hci3: command tx timeout [ 223.002794][ T39] audit: type=1326 audit(1728887772.036:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.018149][ T39] audit: type=1326 audit(1728887772.036:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.028065][ T39] audit: type=1326 audit(1728887772.036:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.034348][ T39] audit: type=1326 audit(1728887772.036:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.040863][ T39] audit: type=1326 audit(1728887772.036:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.046667][ T39] audit: type=1326 audit(1728887772.036:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.053521][ T39] audit: type=1326 audit(1728887772.036:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.059231][ T39] audit: type=1326 audit(1728887772.036:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.065115][ T39] audit: type=1326 audit(1728887772.036:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 223.072546][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.124269][ T8270] veth0_vlan: entered promiscuous mode [ 223.142215][ T8270] veth1_vlan: entered promiscuous mode [ 223.183529][ T8270] veth0_macvtap: entered promiscuous mode [ 223.193302][ T8270] veth1_macvtap: entered promiscuous mode [ 223.214763][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.227962][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.230807][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.233656][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.237662][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.240776][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.243367][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.246493][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.249400][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.252649][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.257102][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.277606][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.282045][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.288715][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.298225][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.300852][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.306331][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.310143][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.313151][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.316125][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.320607][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.323944][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.329090][ T8270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.331403][ T8270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.333663][ T8270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.335882][ T8270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.361864][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.366910][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.379777][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.382485][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.859375][ T8399] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 223.867749][ T8399] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 223.916760][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 224.493288][ T8410] usb usb8: usbfs: process 8410 (syz.0.911) did not claim interface 0 before use [ 225.038619][ T5354] Bluetooth: hci3: command tx timeout [ 225.915187][ T8418] ./file0: Can't lookup blockdev [ 226.353949][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 226.356702][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.449786][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.665767][ C1] net_ratelimit: 10 callbacks suppressed [ 227.665783][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.757592][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 228.500544][ T8446] lo speed is unknown, defaulting to 1000 [ 228.504717][ T8446] lo speed is unknown, defaulting to 1000 [ 228.506433][ T8446] lo speed is unknown, defaulting to 1000 [ 228.579792][ T8447] netlink: 'syz.3.914': attribute type 10 has an invalid length. [ 228.582451][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 228.597632][ T8447] lo: entered promiscuous mode [ 228.599460][ T8447] lo: entered allmulticast mode [ 228.655864][ T979] lo speed is unknown, defaulting to 1000 [ 228.657565][ T8446] infiniband syz0: set down [ 228.661714][ T8446] infiniband syz0: added lo [ 228.713875][ T8446] RDS/IB: syz0: added [ 228.720362][ T8446] smc: adding ib device syz0 with port count 1 [ 228.728103][ T8446] smc: ib device syz0 port 1 has pnetid [ 228.731473][ T73] lo speed is unknown, defaulting to 1000 [ 228.734596][ T8446] lo speed is unknown, defaulting to 1000 [ 228.878513][ T8446] lo speed is unknown, defaulting to 1000 [ 228.997236][ T8446] lo speed is unknown, defaulting to 1000 [ 229.136747][ T8446] lo speed is unknown, defaulting to 1000 [ 229.242923][ T8446] lo speed is unknown, defaulting to 1000 [ 229.323029][ T8450] batman_adv: batadv0: Adding interface: dummy0 [ 229.338471][ T8450] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.348898][ T8450] batman_adv: batadv0: Interface activated: dummy0 [ 229.355905][ T8446] lo speed is unknown, defaulting to 1000 [ 229.387412][ T8450] batadv0: mtu less than device minimum [ 229.390372][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.395020][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.399259][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.403448][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.407577][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.411476][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.414844][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.418900][ T8450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.728327][ T1283] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.899410][ T1283] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.902098][ T1283] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.905381][ T1283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.908055][ T1283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 229.918256][ T1283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 229.924160][ T1283] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.927350][ T1283] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.934591][ T1283] usb 5-1: Product: syz [ 229.936070][ T1283] usb 5-1: Manufacturer: syz [ 229.941346][ T1283] cdc_wdm 5-1:1.0: skipping garbage [ 229.943237][ T1283] cdc_wdm 5-1:1.0: skipping garbage [ 229.945812][ T1283] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 229.947903][ T1283] cdc_wdm 5-1:1.0: Unknown control protocol [ 230.267475][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.269705][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.272096][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.274363][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.276662][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.278793][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.281745][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.284008][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.286760][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.289076][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.291160][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.293166][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.295221][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.297386][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.299514][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.301994][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.304386][ T1283] usb 5-1: USB disconnect, device number 16 [ 230.304452][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 230.308806][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 230.310930][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 230.932560][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 230.935029][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.992044][ T8473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.216613][ T8502] batman_adv: batadv0: Adding interface: dummy0 [ 232.223030][ T8502] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.234787][ T8502] batman_adv: batadv0: Interface activated: dummy0 [ 232.938314][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'. [ 234.706476][ T8537] netlink: 96 bytes leftover after parsing attributes in process `syz.1.932'. [ 236.261244][ C1] net_ratelimit: 31 callbacks suppressed [ 236.261256][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.427733][ T8562] ptrace attach of "/syz-executor exec"[8029] was attempted by "/syz-executor exec"[8562] [ 236.451320][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 237.354218][ T8572] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.103725][ T8584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.566876][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.441307][ T8608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.950'. [ 240.444867][ T8608] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 241.135344][ T8619] netlink: 96 bytes leftover after parsing attributes in process `syz.1.952'. [ 242.365421][ T8632] Cannot find add_set index 0 as target [ 242.419392][ T8638] netlink: 'syz.1.958': attribute type 3 has an invalid length. [ 242.421436][ T8638] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.958'. [ 242.483139][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.960'. [ 242.485710][ T8641] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 242.498430][ T2783] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 242.658317][ T2783] usb 8-1: Using ep0 maxpacket: 16 [ 242.661497][ T2783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.664930][ T2783] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 242.667984][ T2783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.681531][ T2783] usb 8-1: config 0 descriptor?? [ 242.686654][ T2783] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input16 [ 242.890300][ T8625] input: syz0 as /devices/virtual/input/input17 [ 242.957060][ T4823] bcm5974 8-1:0.0: could not read from device [ 242.967163][ T4823] bcm5974 8-1:0.0: could not read from device [ 242.970496][ T2783] usb 8-1: USB disconnect, device number 21 [ 242.970593][ T4823] bcm5974 8-1:0.0: could not read from device [ 242.975177][ T4823] bcm5974 8-1:0.0: could not read from device [ 242.978779][ T5489] bcm5974 8-1:0.0: could not read from device [ 243.306391][ T8646] TCP: TCP_TX_DELAY enabled [ 243.512777][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.515644][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.522975][ T8655] bridge0: entered allmulticast mode [ 244.130776][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.133239][ T8655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.135809][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.138278][ T8655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.151621][ T8655] bridge0: entered promiscuous mode [ 245.119375][ T8675] syz.0.969 (8675): drop_caches: 2 [ 245.196692][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 245.208431][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 245.214032][ T8679] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 245.216633][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.218982][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.223684][ T8679] bridge0: left promiscuous mode [ 245.225468][ T8679] bridge0: left allmulticast mode [ 245.232220][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.234185][ T8679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.238735][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.240752][ T8679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.248914][ T8679] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 246.092531][ T8693] lo speed is unknown, defaulting to 1000 [ 246.283440][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.515235][ T8708] netlink: 96 bytes leftover after parsing attributes in process `syz.2.976'. [ 247.088455][ T8711] syz.3.978 (8711): drop_caches: 2 [ 248.555146][ T8725] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 248.652202][ T8726] infiniband syz2: set down [ 248.653371][ T8726] infiniband syz2: added ipvlan0 [ 248.664682][ T8726] RDS/IB: syz2: added [ 248.665818][ T8726] smc: adding ib device syz2 with port count 1 [ 248.667425][ T8726] smc: ib device syz2 port 1 has pnetid [ 249.286464][ T8742] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 249.291498][ T8742] bond0: (slave netdevsim0): no link monitoring support [ 249.295191][ T8742] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 249.303692][ T8742] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 249.358299][ T5348] Bluetooth: hci2: command 0x0406 tx timeout [ 249.435656][ T8744] syz.0.987 (8744): drop_caches: 2 [ 250.526324][ T8756] block nbd1: shutting down sockets [ 251.438292][ T5354] Bluetooth: hci3: command 0x0405 tx timeout [ 251.450870][ T5348] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 251.827861][ T8780] netlink: 96 bytes leftover after parsing attributes in process `syz.3.995'. [ 252.648630][ T5348] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 252.652336][ T5348] Bluetooth: hci3: Injecting HCI hardware error event [ 252.655850][ T5348] Bluetooth: hci3: hardware error 0x00 [ 253.473198][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.561870][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.879249][ T5348] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 255.049334][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.051061][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.466270][ T8821] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1007'. [ 255.892778][ T8824] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1008'. [ 256.325189][ T8827] binder: Unknown parameter 'smackfsroot' [ 256.958469][ T5354] Bluetooth: hci1: command 0x0405 tx timeout [ 258.674453][ T8857] syz.2.1016[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.674514][ T8857] syz.2.1016[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.677477][ T8857] syz.2.1016[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.908286][ T8862] nbd2: detected capacity change from 0 to 22 [ 258.921473][ T8857] block nbd2: shutting down sockets [ 258.958774][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.962181][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.964747][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.968609][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.973526][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.976182][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.979857][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.999403][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.999567][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.999590][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.999698][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.999720][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.999804][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.999826][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.999900][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.999922][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 258.999965][ T5489] ldm_validate_partition_table(): Disk read failed. [ 259.000020][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.000041][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 259.000124][ T5489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.000145][ T5489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 259.001484][ T5489] Dev nbd2: unable to read RDB block 0 [ 259.001641][ T5489] nbd2: unable to read partition table [ 259.001713][ T5489] nbd2: partition table beyond EOD, truncated [ 259.088506][ T5489] ldm_validate_partition_table(): Disk read failed. [ 259.091028][ T5489] Dev nbd2: unable to read RDB block 0 [ 259.112360][ T5489] nbd2: unable to read partition table [ 259.113913][ T5489] nbd2: partition table beyond EOD, truncated [ 259.209234][ T5354] Bluetooth: hci1: command 0x0405 tx timeout [ 259.376981][ T8877] process 'syz.1.1021' launched './file2' with NULL argv: empty string added [ 263.423113][ T8914] ptrace attach of "/syz-executor exec"[8032] was attempted by "/syz-executor exec"[8914] [ 264.914480][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 267.168857][ T8928] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1040'. [ 275.726935][ T9004] syz.0.1043 (9004): drop_caches: 1 [ 275.878459][ T9015] lo speed is unknown, defaulting to 1000 [ 276.498246][ T2783] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 276.670337][ T2783] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.674171][ T2783] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.677590][ T2783] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.680890][ T2783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.705570][ T9023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.736579][ T2783] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.621299][ T73] usb 8-1: USB disconnect, device number 22 [ 279.351498][ T9053] lo speed is unknown, defaulting to 1000 [ 280.456307][ T5348] Bluetooth: hci1: link tx timeout [ 280.458618][ T5348] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.883968][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.248277][ T6037] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.418748][ T6037] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 281.421707][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.424109][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.427105][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.429894][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.432377][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.435292][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.437863][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.440554][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.443679][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.446357][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.449109][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.453117][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.457906][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.460536][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.463525][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.466421][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.469406][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.473470][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.478264][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.480911][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.486189][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.491144][ T6037] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.493549][ T6037] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.499709][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.505344][ T6037] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.510540][ T6037] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.514954][ T6037] usb 6-1: Product: syz [ 281.517211][ T6037] usb 6-1: Manufacturer: syz [ 281.520819][ T6037] usb 6-1: SerialNumber: syz [ 281.524086][ T6037] usb 6-1: config 0 descriptor?? [ 281.534851][ T6037] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.725478][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.909750][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 281.910291][ T57] usb 6-1: USB disconnect, device number 12 [ 281.913781][ T9107] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 281.919190][ T57] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 282.488242][ T5354] Bluetooth: hci1: command 0x0405 tx timeout [ 282.768369][ T979] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 282.931322][ T979] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.933971][ T979] usb 7-1: config 0 has no interface number 0 [ 282.942824][ T979] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a26, bcdDevice=bb.83 [ 282.946084][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.949048][ T979] usb 7-1: Product: syz [ 282.950564][ T979] usb 7-1: Manufacturer: syz [ 282.952187][ T979] usb 7-1: SerialNumber: syz [ 282.955521][ T979] usb 7-1: config 0 descriptor?? [ 283.369942][ T979] hub 7-1:0.1: bad descriptor, ignoring hub [ 283.372145][ T979] hub 7-1:0.1: probe with driver hub failed with error -5 [ 283.398788][ T979] usb 7-1: USB disconnect, device number 16 [ 284.022267][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 285.101535][ T9150] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1075'. [ 285.728607][ T39] kauditd_printk_skb: 4666 callbacks suppressed [ 285.728618][ T39] audit: type=1326 audit(1728887834.766:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.0.1078" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x0 [ 286.093407][ T9154] syz.1.1077 (9154): drop_caches: 1 [ 286.198332][ T5524] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 287.508307][ T57] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.671347][ T57] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 287.673523][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.777568][ T57] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 287.782361][ T57] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 287.784577][ T57] usb 5-1: Manufacturer: syz [ 287.791389][ T57] usb 5-1: config 0 descriptor?? [ 287.918276][ T57] rc_core: IR keymap rc-hauppauge not found [ 287.926504][ T57] Registered IR keymap rc-empty [ 287.932750][ T57] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 287.941548][ T57] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 289.093789][ T9187] netlink: 'syz.2.1086': attribute type 9 has an invalid length. [ 289.096062][ T9187] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1086'. [ 289.126307][ T9187] netlink: 'syz.2.1086': attribute type 9 has an invalid length. [ 289.128675][ T9187] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1086'. [ 289.781572][ T6037] usb 5-1: USB disconnect, device number 17 [ 289.905740][ T9197] syz.3.1089 (9197): drop_caches: 1 [ 290.403872][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1091'. [ 290.608471][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.965122][ T5354] Bluetooth: hci4: sending frame failed (-49) [ 290.969319][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 291.068258][ T6037] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 291.218298][ T6037] usb 8-1: Using ep0 maxpacket: 8 [ 291.226841][ T6037] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 291.229615][ T6037] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 291.231546][ T6037] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 291.234053][ T6037] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 291.254661][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 291.279111][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 291.281978][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.352271][ T6037] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 291.354792][ T6037] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 291.356787][ T6037] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 291.378892][ T6037] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 291.381954][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 291.385126][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 291.387937][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.423101][ T6037] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 291.425597][ T6037] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 291.427340][ T6037] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 291.429718][ T6037] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 291.432647][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 291.435519][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 291.439974][ T6037] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.448440][ T6037] usb 8-1: string descriptor 0 read error: -22 [ 291.450353][ T6037] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 291.458312][ T6037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.469211][ T6037] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 291.490610][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.493377][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.496059][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.499582][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.502850][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.505038][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.507384][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.511519][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.514248][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.516809][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.520054][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.522826][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.525605][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.528577][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.531162][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.533756][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.536325][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.539564][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.542474][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.545206][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.547757][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.551015][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.553700][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.556251][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.559598][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.563518][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.566214][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.569399][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.572144][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.574709][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.577319][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.583100][ T2783] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 291.598491][ T2783] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz0 [ 291.758425][ T6037] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 291.932268][ T6037] usb 5-1: config 0 has no interfaces? [ 291.934158][ T6037] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 291.937131][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.941098][ T6037] usb 5-1: config 0 descriptor?? [ 292.753982][ T6037] usb 5-1: USB disconnect, device number 18 [ 292.843313][ T9239] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1099'. [ 294.319092][ T6037] usb 8-1: USB disconnect, device number 24 [ 295.019489][ T9269] No control pipe specified [ 295.120654][ T9257] kexec: Could not allocate control_code_buffer [ 295.138625][ T9272] binder: Unknown parameter 'smackfsroot' [ 295.888343][ T5524] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 296.035359][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.041015][ T5524] usb 5-1: Using ep0 maxpacket: 8 [ 296.045033][ T5524] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 296.047197][ T5524] usb 5-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 296.061341][ T5524] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 7 [ 296.071176][ T5524] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 296.073539][ T5524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.075603][ T5524] usb 5-1: Product: syz [ 296.076709][ T5524] usb 5-1: Manufacturer: syz [ 296.077933][ T5524] usb 5-1: SerialNumber: syz [ 297.777721][ T9295] lo speed is unknown, defaulting to 1000 [ 298.247960][ T5524] usb 5-1: USB disconnect, device number 19 [ 299.218359][ T2783] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 299.389684][ T2783] usb 7-1: config 1 interface 0 has no altsetting 0 [ 299.393020][ T2783] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.395328][ T2783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.397800][ T2783] usb 7-1: Product: syz [ 299.399107][ T2783] usb 7-1: Manufacturer: syz [ 299.400316][ T2783] usb 7-1: SerialNumber: syz [ 300.016376][ T2783] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 300.321591][ C1] usblp0: nonzero write bulk status received: -71 [ 300.322474][ T9] usb 7-1: USB disconnect, device number 17 [ 300.534515][ T9288] usblp0: removed [ 301.223370][ T9313] binder: Unknown parameter 'smackfsroot' [ 301.482688][ T9312] syz.2.1115 (9312): drop_caches: 1 [ 302.238280][ T2783] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 304.595867][ T9345] syz.0.1124 (9345): drop_caches: 1 [ 304.933015][ T9352] binder: Unknown parameter 'smackfsroot' [ 305.420740][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1129'. [ 306.024246][ T9374] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1130'. [ 306.610572][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 306.665821][ T9384] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 307.853332][ T9] libceph: connect (1)[c::]:6789 error -101 [ 307.855138][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 307.993760][ T9397] ceph: No mds server is up or the cluster is laggy [ 308.047594][ T9397] overlayfs: failed to resolve './file1': -2 [ 308.138292][ T5469] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 308.290460][ T5469] usb 6-1: config 0 has no interfaces? [ 308.292401][ T5469] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 308.295615][ T5469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.305382][ T5469] usb 6-1: config 0 descriptor?? [ 308.522421][ T5469] usb 6-1: USB disconnect, device number 13 [ 309.096412][ T9419] netlink: 'syz.3.1140': attribute type 9 has an invalid length. [ 309.098573][ T9419] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1140'. [ 309.134118][ T9421] input: syz1 as /devices/virtual/input/input20 [ 309.135073][ T9419] netlink: 'syz.3.1140': attribute type 9 has an invalid length. [ 309.138616][ T9419] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1140'. [ 309.591367][ T9433] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1142'. [ 310.207659][ T9440] xt_TCPMSS: Only works on TCP SYN packets [ 310.532567][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 310.610235][ T9464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.988271][ T2783] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 311.158284][ T2783] usb 6-1: Using ep0 maxpacket: 8 [ 311.166506][ T2783] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 311.172187][ T2783] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 311.175645][ T2783] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 311.178512][ T2783] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 311.181996][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 311.194952][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 311.210299][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.225507][ T2783] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 311.232453][ T2783] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 311.234608][ T2783] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 311.237214][ T2783] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 311.243944][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 311.249232][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 311.252120][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.263344][ T2783] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 311.267734][ T2783] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 311.269784][ T2783] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 311.272475][ T2783] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 311.276093][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 311.279277][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 311.282540][ T2783] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.303788][ T2783] usb 6-1: string descriptor 0 read error: -22 [ 311.305943][ T2783] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.308661][ T2783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.387383][ T2783] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 313.019723][ T9549] netlink: 'syz.0.1153': attribute type 9 has an invalid length. [ 313.022127][ T9549] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1153'. [ 313.052092][ T9549] netlink: 'syz.0.1153': attribute type 9 has an invalid length. [ 313.054157][ T9549] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1153'. [ 314.460611][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 314.809111][ T6037] usb 6-1: USB disconnect, device number 14 [ 315.585099][ T9587] xt_connbytes: Forcing CT accounting to be enabled [ 315.671006][ T9588] binder: Unknown parameter 'smackfsroot' [ 316.481309][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.483414][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.225366][ T9623] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 318.228095][ T9623] netlink: 'syz.0.1173': attribute type 4 has an invalid length. [ 318.232037][ T9623] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1173'. [ 318.288482][ T9627] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 318.290505][ T9627] netlink: 'syz.0.1173': attribute type 4 has an invalid length. [ 318.292488][ T9627] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1173'. [ 318.313051][ T9626] libceph: resolve '. [ 318.313051][ T9626] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 318.313051][ T9626] ' (ret=-3): failed [ 318.345209][ T9626] No control pipe specified [ 319.160342][ T9634] binder: Unknown parameter 'smackfsroot' [ 319.288367][ T5354] Bluetooth: hci1: command 0x0405 tx timeout [ 319.927289][ T9640] cgroup: Invalid name [ 320.312929][ T9656] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 321.982021][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.819142][ T8] libceph: connect (1)[c::]:6789 error -101 [ 322.822104][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 322.957690][ T9686] ceph: No mds server is up or the cluster is laggy [ 322.998133][ T9686] overlayfs: failed to resolve './file1': -2 [ 324.708286][ T979] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 325.160094][ T979] usb 8-1: config 1 interface 0 has no altsetting 0 [ 325.164172][ T979] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 325.167339][ T979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.170590][ T979] usb 8-1: Product: syz [ 325.172315][ T979] usb 8-1: Manufacturer: syz [ 325.174000][ T979] usb 8-1: SerialNumber: syz [ 325.417400][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.539910][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.794106][ T979] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 325.819485][ T9738] loop7: detected capacity change from 0 to 16384 [ 325.888819][ T9738] blk_print_req_error: 25 callbacks suppressed [ 325.888838][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.895181][ T9738] buffer_io_error: 25 callbacks suppressed [ 325.895192][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.899613][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.902088][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.905649][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.908490][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.911753][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.914256][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.917565][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.920710][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.923694][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.926101][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.928610][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.931061][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.933723][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.936116][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.938674][ T9738] ldm_validate_partition_table(): Disk read failed. [ 325.940531][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.958930][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.967000][ T9738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.971060][ T9738] Buffer I/O error on dev loop7, logical block 0, async page read [ 325.974409][ T9738] Dev loop7: unable to read RDB block 0 [ 325.979469][ T9738] loop7: unable to read partition table [ 325.982224][ T9738] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 326.196522][ C0] usblp0: nonzero write bulk status received: -71 [ 326.196837][ T5524] usb 8-1: USB disconnect, device number 25 [ 326.485467][ T9717] usblp0: removed [ 326.551697][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 327.035230][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 327.040637][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 327.249413][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 328.261730][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.428297][ T5524] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 328.608380][ T5524] usb 7-1: config 0 has no interfaces? [ 328.610407][ T5524] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 328.613375][ T5524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.623610][ T5524] usb 7-1: config 0 descriptor?? [ 328.801434][ T5348] Bluetooth: hci2: command 0x0406 tx timeout [ 328.840242][ T5524] usb 7-1: USB disconnect, device number 18 [ 329.698057][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 330.085379][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.277292][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 331.622964][ T9806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.868373][ T2783] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 332.058509][ T2783] usb 5-1: Using ep0 maxpacket: 8 [ 332.071556][ T2783] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 332.074839][ T2783] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 332.077502][ T2783] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 332.081255][ T2783] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 332.086197][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 332.092564][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 332.097113][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 332.104669][ T2783] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 332.110340][ T2783] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 332.114148][ T2783] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 332.118014][ T2783] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 332.122755][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 332.127169][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 332.132159][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 332.137582][ T2783] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 332.140680][ T2783] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 332.143874][ T2783] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 332.147908][ T2783] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 332.152064][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 332.156328][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 332.161549][ T2783] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 332.183865][ T2783] usb 5-1: string descriptor 0 read error: -22 [ 332.186246][ T2783] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.191392][ T2783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.204924][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 332.210702][ T9814] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 332.226421][ T2783] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 332.417474][ T8] usb 5-1: USB disconnect, device number 21 [ 332.792535][ T9816] usb usb8: usbfs: process 9816 (syz.1.1212) did not claim interface 0 before use [ 333.284534][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.058411][ T9842] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 334.067577][ T9842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1218'. [ 338.463889][ T9888] binder: Unknown parameter 'smackfsroot' [ 339.120310][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.024578][ T9928] sctp: [Deprecated]: syz.3.1235 (pid 9928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.024578][ T9928] Use struct sctp_sack_info instead [ 341.722244][ T9943] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1237'. [ 343.044239][ T9956] binder: Unknown parameter 'smackfsroot' [ 343.764435][ T9959] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 343.959354][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 346.796941][T10013] binder: Unknown parameter 'smackfsroot' [ 350.241308][T10058] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1260'. [ 351.214840][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 351.779325][T10082] capability: warning: `syz.2.1266' uses 32-bit capabilities (legacy support in use) [ 353.401880][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.551591][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.634252][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.777792][ T1097] bond0: (slave netdevsim0): Releasing backup interface [ 353.786848][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.860909][ T5348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.867214][ T5348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.872846][ T5348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.876841][ T5348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.882143][ T5348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.885326][ T5348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.945899][T10114] lo speed is unknown, defaulting to 1000 [ 353.966922][ T1097] bridge_slave_1: left allmulticast mode [ 353.968693][ T1097] bridge_slave_1: left promiscuous mode [ 353.970640][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.991569][ T1097] bridge_slave_0: left allmulticast mode [ 353.994273][ T1097] bridge_slave_0: left promiscuous mode [ 353.999228][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.477162][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.485106][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.491918][ T1097] bond0 (unregistering): Released all slaves [ 354.785918][T10114] chnl_net:caif_netlink_parms(): no params data found [ 354.982219][T10114] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.987903][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.019015][T10114] bridge_slave_0: entered allmulticast mode [ 355.022482][T10114] bridge_slave_0: entered promiscuous mode [ 355.045952][ T1097] hsr_slave_0: left promiscuous mode [ 355.053533][ T1097] hsr_slave_1: left promiscuous mode [ 355.056769][ T1097] batman_adv: batadv0: Interface deactivated: dummy0 [ 355.059673][ T1097] batman_adv: batadv0: Removing interface: dummy0 [ 355.069651][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.073238][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.090746][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.092849][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.136287][ T1097] veth1_macvtap: left promiscuous mode [ 355.137755][ T1097] veth0_macvtap: left promiscuous mode [ 355.148636][ T1097] veth1_vlan: left promiscuous mode [ 355.150040][ T1097] veth0_vlan: left promiscuous mode [ 355.978011][ T5348] Bluetooth: hci0: command tx timeout [ 356.169136][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 357.208577][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 357.552765][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 357.998553][ T5348] Bluetooth: hci0: command tx timeout [ 358.519268][T10114] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.521607][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.523800][T10114] bridge_slave_1: entered allmulticast mode [ 358.536669][T10114] bridge_slave_1: entered promiscuous mode [ 358.580294][T10114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.583735][T10114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.650776][T10114] team0: Port device team_slave_0 added [ 358.661565][T10114] team0: Port device team_slave_1 added [ 358.708660][T10114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.710482][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.751656][T10114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.755473][T10114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.757343][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.765558][T10114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.812805][T10114] hsr_slave_0: entered promiscuous mode [ 358.828002][T10114] hsr_slave_1: entered promiscuous mode [ 358.830667][T10114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.833061][T10114] Cannot create hsr debugfs directory [ 359.562428][T10114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.565576][T10114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.581653][T10114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.590469][T10114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.666843][T10114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.677172][T10114] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.683948][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.685767][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.691080][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.692931][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.715710][T10114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.726302][T10114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.858906][T10114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.888870][T10114] veth0_vlan: entered promiscuous mode [ 359.892714][T10114] veth1_vlan: entered promiscuous mode [ 359.915370][T10114] veth0_macvtap: entered promiscuous mode [ 359.923155][T10114] veth1_macvtap: entered promiscuous mode [ 359.944316][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.949098][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.952607][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.956296][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.975018][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 359.978797][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.982568][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.987021][T10114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.001655][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.005196][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.018316][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.021955][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.025793][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.038300][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.041516][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.044899][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.058298][T10114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.061824][T10114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.066060][T10114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.078642][ T5348] Bluetooth: hci0: command tx timeout [ 360.082694][T10114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.085614][T10114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.087801][T10114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.091059][T10114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.154286][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.156332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.179379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.182120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.503723][T10228] pim6reg: entered allmulticast mode [ 360.778360][ T1283] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 360.948309][ T1283] usb 6-1: Using ep0 maxpacket: 8 [ 360.952863][ T1283] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.956562][ T1283] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.960014][ T1283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 360.964437][ T1283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 360.969665][ T1283] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.973075][ T1283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.979587][ T1283] hub 6-1:1.0: bad descriptor, ignoring hub [ 360.981938][ T1283] hub 6-1:1.0: probe with driver hub failed with error -5 [ 360.984983][ T1283] cdc_wdm 6-1:1.0: skipping garbage [ 360.986943][ T1283] cdc_wdm 6-1:1.0: skipping garbage [ 360.990150][ T1283] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 360.992344][ T1283] cdc_wdm 6-1:1.0: Unknown control protocol [ 362.168472][ T5348] Bluetooth: hci0: command tx timeout [ 362.611124][T10245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 363.197039][T10261] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 363.410579][ T6037] usb 6-1: USB disconnect, device number 15 [ 363.627793][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 364.407968][T10283] capability: warning: `syz.2.1293' uses deprecated v2 capabilities in a way that may be insecure [ 365.281886][T10289] binder: Unknown parameter 'smackfsroot' [ 365.283939][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 365.455657][T10292] snd_dummy snd_dummy.0: control 0:0:0:syz1:4 is already present [ 366.484360][T10302] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1299'. [ 367.266136][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.390005][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.038277][T10334] binder: Unknown parameter 'smackfsroot' [ 372.320195][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.598645][ T6037] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 372.768399][ T6037] usb 5-1: Using ep0 maxpacket: 8 [ 372.775593][ T6037] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 372.781473][ T6037] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 372.783366][ T6037] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 372.785700][ T6037] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 372.801725][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 372.804617][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 372.807470][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.814498][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 372.829711][ T6037] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 372.832013][ T6037] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 372.833872][ T6037] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 372.836169][ T6037] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 372.842160][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 372.845236][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 372.848118][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.853460][ T6037] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 372.855677][ T6037] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 372.857544][ T6037] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 372.860933][ T6037] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 372.864747][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 372.867706][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 372.871388][ T6037] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.881411][ T6037] usb 5-1: string descriptor 0 read error: -22 [ 372.883097][ T6037] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 372.885478][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.896949][ T6037] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 373.656694][ T8] usb 5-1: USB disconnect, device number 22 [ 374.783677][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 375.397154][T10390] binder: Unknown parameter 'smackfsroot' [ 375.970722][T10400] hub 9-0:1.0: USB hub found [ 375.973010][T10400] hub 9-0:1.0: 1 port detected [ 376.927026][T10411] ax25_connect(): syz.3.1324 uses autobind, please contact jreuter@yaina.de [ 377.057657][T10410] syzkaller0: entered promiscuous mode [ 377.059464][T10410] syzkaller0: entered allmulticast mode [ 377.213767][T10414] program syz.2.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.919282][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.581138][T10437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.979284][T10442] overlayfs: missing 'lowerdir' [ 383.049548][T10458] random: crng reseeded on system resumption [ 383.398376][T10469] input: syz0 as /devices/virtual/input/input22 [ 383.592269][ T2783] IPVS: starting estimator thread 0... [ 383.688598][T10475] IPVS: using max 34 ests per chain, 81600 per kthread [ 384.389803][T10485] binder: Unknown parameter 'smackfsroot' [ 386.341633][T10511] pim6reg: entered allmulticast mode [ 386.598265][T10226] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 386.788231][T10226] usb 5-1: Using ep0 maxpacket: 8 [ 386.804651][T10226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.807408][T10226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.810149][T10226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 386.813043][T10226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 386.816172][T10226] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.819247][T10226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.827689][T10226] hub 5-1:1.0: bad descriptor, ignoring hub [ 386.833085][T10226] hub 5-1:1.0: probe with driver hub failed with error -5 [ 386.835202][T10226] cdc_wdm 5-1:1.0: skipping garbage [ 386.836613][T10226] cdc_wdm 5-1:1.0: skipping garbage [ 386.879473][T10226] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 386.881120][T10226] cdc_wdm 5-1:1.0: Unknown control protocol [ 386.971600][ T214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.985508][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.996779][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.000930][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.003668][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.006125][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 387.010188][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.031938][T10518] lo speed is unknown, defaulting to 1000 [ 387.087580][ T214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.218991][ T214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.339071][ T214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.379848][T10518] chnl_net:caif_netlink_parms(): no params data found [ 387.485327][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.487984][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.491335][T10518] bridge_slave_0: entered allmulticast mode [ 387.494564][T10518] bridge_slave_0: entered promiscuous mode [ 387.499849][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.502248][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.504507][T10518] bridge_slave_1: entered allmulticast mode [ 387.507667][T10518] bridge_slave_1: entered promiscuous mode [ 387.583121][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.603586][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.627064][ T214] bridge_slave_1: left allmulticast mode [ 387.628766][ T214] bridge_slave_1: left promiscuous mode [ 387.630808][ T214] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.635478][ T214] bridge_slave_0: left allmulticast mode [ 387.637423][ T214] bridge_slave_0: left promiscuous mode [ 387.646712][ T214] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.117583][ T214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.132843][ T214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.141826][ T214] bond0 (unregistering): Released all slaves [ 388.267641][T10518] team0: Port device team_slave_0 added [ 388.281498][T10518] team0: Port device team_slave_1 added [ 388.393746][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.396199][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.436364][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.447735][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.457513][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.464589][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.576217][T10518] hsr_slave_0: entered promiscuous mode [ 388.583965][T10518] hsr_slave_1: entered promiscuous mode [ 388.587227][T10518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.590723][T10518] Cannot create hsr debugfs directory [ 388.836152][ T214] hsr_slave_0: left promiscuous mode [ 388.851620][ T214] hsr_slave_1: left promiscuous mode [ 388.853954][ T214] batman_adv: batadv0: Interface deactivated: dummy0 [ 388.855717][ T214] batman_adv: batadv0: Removing interface: dummy0 [ 388.857855][ T214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.860227][ T214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.884830][ T214] veth1_macvtap: left promiscuous mode [ 388.886334][ T214] veth0_macvtap: left promiscuous mode [ 389.048404][ T5348] Bluetooth: hci1: command tx timeout [ 389.068548][T10557] binder: 10551:10557 ioctl 541b 0 returned -22 [ 389.756481][ T214] team0 (unregistering): Port device team_slave_1 removed [ 389.854403][ T214] team0 (unregistering): Port device team_slave_0 removed [ 390.578763][ T86] smc: removing ib device syz0 [ 390.680168][ T5382] usb 5-1: USB disconnect, device number 23 [ 391.119316][ T5348] Bluetooth: hci1: command tx timeout [ 391.333305][T10518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.353949][T10518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.380804][T10518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.385855][T10518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.499371][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.523034][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.535715][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.537661][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.561532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.563534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.783115][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.852623][T10518] veth0_vlan: entered promiscuous mode [ 391.870546][T10518] veth1_vlan: entered promiscuous mode [ 391.903283][T10518] veth0_macvtap: entered promiscuous mode [ 391.915181][T10518] veth1_macvtap: entered promiscuous mode [ 391.935213][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.939206][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.942070][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.944971][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.947863][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952464][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.965472][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.969449][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.981355][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.999370][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.011895][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.026578][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.045763][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.049186][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.054563][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.057886][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.062481][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.066047][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.070460][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.087791][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.280445][T10518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.283768][T10518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.295952][T10518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.299185][T10518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.338094][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.345359][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.375411][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.378237][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.667526][T10629] UBIFS error (pid: 10629): cannot open "./file0", error -22 [ 393.198305][ T5348] Bluetooth: hci1: command tx timeout [ 393.979049][T10640] binder: Unknown parameter 'smackfsroot' [ 394.482643][T10643] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1365'. [ 395.278447][ T5348] Bluetooth: hci1: command tx timeout [ 395.300020][T10655] xfs: Unknown parameter 'grpquota®Å¬ñé—²†¯èFû' [ 395.532386][T10657] overlayfs: overlapping lowerdir path [ 396.064119][T10674] fuse: Bad value for 'user_id' [ 396.065627][T10674] fuse: Bad value for 'user_id' [ 396.849989][T10672] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 397.805542][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1375'. [ 397.962013][T10691] Êü: entered promiscuous mode [ 400.158743][T10720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.549305][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 400.622178][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 400.835373][T10716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.565877][T10734] netlink: 352 bytes leftover after parsing attributes in process `syz.3.1385'. [ 403.519861][T10745] block nbd3: shutting down sockets [ 403.553895][T10743] ptrace attach of "/syz-executor exec"[10518] was attempted by "/syz-executor exec"[10743] [ 403.743337][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 405.276477][T10761] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1391'. [ 408.948407][ T57] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 409.109870][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 409.113721][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 409.116553][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 409.261823][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.266619][T10807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.281792][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.563268][ T1283] usb 5-1: USB disconnect, device number 24 [ 409.567356][T10823] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 409.727716][T10823] overlay: filesystem on ./bus not supported [ 409.903706][T10822] Cannot find add_set index 0 as target [ 409.907436][T10830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1405'. [ 409.938781][T10824] binder: Unknown parameter 'smackfsroot' [ 410.891264][T10839] binder: Unknown parameter 'smackfsroot' [ 411.078236][ T1283] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 411.229413][ T1283] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 411.232104][ T1283] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 411.234725][ T1283] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 411.237382][ T1283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.469932][ T1283] usb 5-1: language id specifier not provided by device, defaulting to English [ 411.939017][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 411.942892][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 412.167804][ T1283] usb 5-1: USB disconnect, device number 25 [ 412.990597][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 414.946450][T10878] fuse: Bad value for 'user_id' [ 414.948532][T10878] fuse: Bad value for 'user_id' [ 415.019796][T10878] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 416.109888][T10881] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 416.200439][T10885] binder: Unknown parameter 'smackfsroot' [ 416.257605][T10881] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 416.280068][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.782178][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 417.189460][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 421.252446][ T39] audit: type=1326 audit(1728887970.286:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.258304][ T6064] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 421.264511][ T39] audit: type=1326 audit(1728887970.286:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.270795][ T39] audit: type=1326 audit(1728887970.286:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.278888][ T39] audit: type=1326 audit(1728887970.286:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.286578][ T39] audit: type=1326 audit(1728887970.286:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.295302][ T39] audit: type=1326 audit(1728887970.286:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.308873][ T39] audit: type=1326 audit(1728887970.296:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.315930][ T39] audit: type=1326 audit(1728887970.296:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.324169][ T39] audit: type=1326 audit(1728887970.296:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.331121][ T39] audit: type=1326 audit(1728887970.306:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 421.418286][ T6064] usb 7-1: Using ep0 maxpacket: 16 [ 421.424147][ T6064] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 421.426956][ T6064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.431022][ T6064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.434797][ T6064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 421.438923][ T6064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 421.442889][ T6064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.446507][ T6064] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 421.450249][ T6064] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 421.456930][ T6064] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.459943][ T6064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.462247][ T6064] usb 7-1: SerialNumber: syz [ 421.480487][ T6064] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 421.519555][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.042542][T10937] binder: Unknown parameter 'smackfsroot' [ 422.965089][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 423.353906][T10951] binder: 10947:10951 ioctl 541b 0 returned -22 [ 423.610775][ T57] usb 7-1: USB disconnect, device number 19 [ 424.002654][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 424.410334][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 427.351048][T10986] binder: Unknown parameter 'smackfsroot' [ 427.628530][T10988] netlink: 352 bytes leftover after parsing attributes in process `syz.2.1441'. [ 428.606659][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 429.041192][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 433.070126][T11041] binder: Unknown parameter 'smackfsroot' [ 434.257165][ T214] bridge_slave_1: left allmulticast mode [ 434.261438][ T214] bridge_slave_1: left promiscuous mode [ 434.264164][ T214] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.269405][ T214] bridge_slave_0: left allmulticast mode [ 434.271228][ T214] bridge_slave_0: left promiscuous mode [ 434.272813][ T214] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.951041][ T214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.973147][ T214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.015723][ T214] bond0 (unregistering): Released all slaves [ 435.036293][T11052] overlayfs: missing 'lowerdir' [ 435.456025][ T214] bond1 (unregistering): Released all slaves [ 436.117425][ T214] hsr_slave_0: left promiscuous mode [ 436.129024][ T214] hsr_slave_1: left promiscuous mode [ 436.137482][ T214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.142616][ T214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.151443][ T214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.156861][ T214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.298664][ T214] veth1_macvtap: left promiscuous mode [ 436.298747][ T214] veth0_macvtap: left promiscuous mode [ 436.298847][ T214] veth1_vlan: left promiscuous mode [ 436.298914][ T214] veth0_vlan: left promiscuous mode [ 436.357164][T11065] ax25_connect(): syz.1.1459 uses autobind, please contact jreuter@yaina.de [ 437.797536][ T214] team0 (unregistering): Port device team_slave_1 removed [ 437.946450][ T214] team0 (unregistering): Port device team_slave_0 removed [ 438.358972][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 439.361441][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.395538][T11104] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28cae [ 439.398590][T11104] flags: 0xfff00000010001(locked|reclaim|node=0|zone=1|lastcpupid=0x7ff) [ 439.401573][T11104] raw: 00fff00000010001 ffffc900263d6ca8 ffffc900263d6ca8 ffffffff8b5d54a2 [ 439.404610][T11104] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000 [ 439.407737][T11104] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 439.424781][T11104] page_owner tracks the page as allocated [ 439.429054][T11104] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 11104, tgid 11096 (syz.0.1466), ts 439342082564, free_ts 436534053566 [ 439.435709][T11104] post_alloc_hook+0x2d1/0x350 [ 439.437575][T11104] get_page_from_freelist+0x101e/0x3070 [ 439.444993][T11104] __alloc_pages_noprof+0x223/0x25a0 [ 439.447239][T11104] alloc_pages_mpol_noprof+0x2c9/0x610 [ 439.449838][T11104] z3fold_zpool_malloc+0x853/0x14f0 [ 439.452095][T11104] zswap_store+0xda1/0x1fe0 [ 439.453866][T11104] swap_writepage+0x3b6/0x990 [ 439.454955][ T11] list_add corruption. next->prev should be prev (ffffe8ffac42fe20), but was ffff888028cdd000. (next=ffff8880463e5800). [ 439.460781][ T11] ------------[ cut here ]------------ [ 439.462641][ T11] kernel BUG at lib/list_debug.c:29! [ 439.464465][ T11] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 439.467856][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 439.472185][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.475831][ T11] Workqueue: zswap1 compact_page_work [ 439.477678][ T11] RIP: 0010:__list_add_valid_or_report+0xa9/0x100 [ 439.479924][ T11] Code: 25 b1 8b e8 99 e2 de fc 90 0f 0b 48 c7 c7 c0 25 b1 8b e8 8a e2 de fc 90 0f 0b 48 89 d9 48 c7 c7 20 26 b1 8b e8 78 e2 de fc 90 <0f> 0b 48 89 f1 48 c7 c7 a0 26 b1 8b 48 89 de e8 63 e2 de fc 90 0f [ 439.486290][ T11] RSP: 0000:ffffc900003d7c00 EFLAGS: 00010282 [ 439.488311][ T11] RAX: 0000000000000075 RBX: ffff8880463e5800 RCX: ffffffff816ccd49 [ 439.490921][ T11] RDX: 0000000000000000 RSI: ffffffff816d7416 RDI: 0000000000000005 [ 439.493589][ T11] RBP: ffff888028cae000 R08: 0000000000000005 R09: 0000000000000000 [ 439.496258][ T11] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000002 [ 439.498846][ T11] R13: ffff888028cae008 R14: ffff888028cae000 R15: ffffea0000a32b80 [ 439.501535][ T11] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 439.504530][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.506734][ T11] CR2: 00000000f744bdf8 CR3: 0000000022126000 CR4: 0000000000352ef0 [ 439.509412][ T11] DR0: fffffffffffffffc DR1: 0000000000000000 DR2: 0000000000000002 [ 439.512085][ T11] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.514732][ T11] Call Trace: [ 439.515853][ T11] [ 439.516833][ T11] ? die+0x31/0x80 [ 439.518071][ T11] ? do_trap+0x232/0x430 [ 439.519431][ T11] ? __list_add_valid_or_report+0xa9/0x100 [ 439.521355][ T11] ? __list_add_valid_or_report+0xa9/0x100 [ 439.523276][ T11] ? do_error_trap+0xf4/0x230 [ 439.524788][ T11] ? __list_add_valid_or_report+0xa9/0x100 [ 439.526745][ T11] ? handle_invalid_op+0x34/0x40 [ 439.528440][ T11] ? __list_add_valid_or_report+0xa9/0x100 [ 439.530401][ T11] ? exc_invalid_op+0x2e/0x50 [ 439.532090][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 439.533839][ T11] ? __wake_up_klogd.part.0+0x99/0xf0 [ 439.535708][ T11] ? vprintk+0x86/0xa0 [ 439.537121][ T11] ? __list_add_valid_or_report+0xa9/0x100 [ 439.539081][ T11] do_compact_page+0x10b9/0x25d0 [ 439.540762][ T11] ? lock_acquire+0x2f/0xb0 [ 439.542284][ T11] ? process_one_work+0x8bb/0x1b30 [ 439.544003][ T11] process_one_work+0x958/0x1b30 [ 439.545662][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 439.547548][ T11] ? __pfx_process_one_work+0x10/0x10 [ 439.549374][ T11] ? assign_work+0x1a0/0x250 [ 439.550964][ T11] worker_thread+0x6c8/0xf00 [ 439.552569][ T11] ? __pfx_worker_thread+0x10/0x10 [ 439.554326][ T11] kthread+0x2c1/0x3a0 [ 439.555735][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.557521][ T11] ? __pfx_kthread+0x10/0x10 [ 439.559106][ T11] ret_from_fork+0x45/0x80 [ 439.560656][ T11] ? __pfx_kthread+0x10/0x10 [ 439.562179][ T11] ret_from_fork_asm+0x1a/0x30 [ 439.563846][ T11] [ 439.564919][ T11] Modules linked in: [ 439.566801][ T11] ---[ end trace 0000000000000000 ]--- [ 439.569446][ T11] RIP: 0010:__list_add_valid_or_report+0xa9/0x100 [ 439.571628][ T11] Code: 25 b1 8b e8 99 e2 de fc 90 0f 0b 48 c7 c7 c0 25 b1 8b e8 8a e2 de fc 90 0f 0b 48 89 d9 48 c7 c7 20 26 b1 8b e8 78 e2 de fc 90 <0f> 0b 48 89 f1 48 c7 c7 a0 26 b1 8b 48 89 de e8 63 e2 de fc 90 0f [ 439.578244][ T11] RSP: 0000:ffffc900003d7c00 EFLAGS: 00010282 [ 439.580321][ T11] RAX: 0000000000000075 RBX: ffff8880463e5800 RCX: ffffffff816ccd49 [ 439.582972][ T11] RDX: 0000000000000000 RSI: ffffffff816d7416 RDI: 0000000000000005 [ 439.585690][ T11] RBP: ffff888028cae000 R08: 0000000000000005 R09: 0000000000000000 [ 439.588620][ T11] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000002 [ 439.591289][ T11] R13: ffff888028cae008 R14: ffff888028cae000 R15: ffffea0000a32b80 [ 439.593938][ T11] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 439.597010][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.599615][ T11] CR2: 00000000f744bdf8 CR3: 0000000022126000 CR4: 0000000000352ef0 [ 439.602235][ T11] DR0: fffffffffffffffc DR1: 0000000000000000 DR2: 0000000000000002 [ 439.604965][ T11] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.607642][ T11] Kernel panic - not syncing: Fatal exception [ 439.610271][ T11] Kernel Offset: disabled [ 439.611745][ T11] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:39:48 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff8880218880c0 RCX=1ffff11005519e06 RDX=ffff88802b53fa60 RSI=ffff88802b53fa60 RDI=ffff8880218880c8 RBP=ffff8880225ac940 RSP=ffffc90000007d40 R8 =ffff88802b53ee80 R9 =ffff8880225ac940 R10=ffffffff901cda4f R11=ffffc90000007ff8 R12=ffff8880225ac9a8 R13=0000000000000000 R14=ffff88802a8cf058 R15=ffff88802b53fa60 RIP=ffffffff848dd40d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031decff8 CR3=0000000058d94000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff813a4fa5 RDX=ffff88801b74c880 RSI=ffffffff8b4c84e0 RDI=0000000000000000 RBP=ffffed10036e9910 RSP=ffffc90000477e10 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffffffffffe6 R11=0000000000000001 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cda48 R15=0000000000000000 RIP=ffffffff88160104 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001b7c8 CR3=0000000022126000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85038d40 RDI=ffffffff9a63d220 RBP=ffffffff9a63d1e0 RSP=ffffc900003d74c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b203a43 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34c7a96 R15=dffffc0000000000 RIP=ffffffff85038d67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f744bdf8 CR3=0000000022126000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b6467c0 RCX=ffffffff8180abcc RDX=ffff88801f508000 RSI=ffffffff8180aba6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000e5f9a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056c8cf9 R13=0000000000000001 R14=ffff88802b6467c8 R15=ffff88802b740100 RIP=ffffffff8180aba8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5734538 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001400000 Opmask01=00000000fffffffe Opmask02=0000000000000100 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75991010 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000