last executing test programs: 6.380110668s ago: executing program 0 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) lseek(r0, 0x1ff, 0x6) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0xb) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x2c06, &(0x7f0000000240)={0x0, 0x290e, 0x40}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x403ff, 0x80, 0x92, 0x20, 0x17, 0x1}}]}}]}, 0x44}}, 0x0) 6.273533974s ago: executing program 0 (id=255): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f000000060000000400", @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB="00000000010000000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x0, 0x95, "e6a1a247dcc0be995211798810e55a7262214cb34afe5806d1d91d37fa1a097097cba2626146b5de316d39f8d23bd3321695813131cc93edff7b637390832af4244c981483c26d22fbbd2edc3068156a20b48628a02245ba3ab41175e686e211914c1bea13126857ec04000000000000001221297fc1fe06561d0d9c95a11bf8d1d00378e8460c9fbc810648d26c532bfbc56c9dc1"}) brk(0x55555ede5ffe) 6.129966268s ago: executing program 3 (id=256): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd68c37181002800ff20010000000000000000000000000000fc020000000000020000000000000000160300000000000007080017000001"], 0x0) 6.12919092s ago: executing program 3 (id=257): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) 4.287493609s ago: executing program 0 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880081f0140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 4.287196219s ago: executing program 3 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="50009fda4d215c09571f00000906030000000000000000000200ffff040007800900020073797a30000004002c000880100007800c000180080001407f0000010c0007800800094100000e080c0007800500030064000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40c0084) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x300) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="94fd137982e9a70a404ba4c1db863bf1e42a2eea4947b2026c599bcedacfedab04480c6510641794de23f2685b976ebf45511b22e20cce0efadf095874b2ff29a60fe06056eaf5cdeb72a2ff0b734ed121c3d7c1ec5a4969f511420292bc0a7c22052eccac63aa689495fd113b95d756afda5966b3eafcfbd619351da1e2736b1eb5e98ab0c2e9df543435a7be693bd1a003bd62e5e90160515c858845", @ANYBLOB="0500000000000000000044000000080003004d5d20da06003d0256a254b2396a7e5e68ba3409966338428c16684c3d97453845f12cdf39abef6c95aa527fc995", @ANYRES32, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x48041}, 0x40944) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42182}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="54c9580a", @ANYRES16=0x0, @ANYBLOB="01032bbd7000fddbdf251900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900bdee00003c0000000500a2000f0000000500a20080000000", @ANYRES64], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000061e899f06a4c3df5d0277a2f67e811f16572aae067718295e13a0a7bc532184d655bcae5907d9ccd702058e74a9fd8238b0d173d3c09179e24d5a36f99bc85e35a0ff5ccb134f65b41d7b20aa693f4d9400"/97], 0x10}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x1f, 0x4, 0xfffffffe) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) shutdown(r6, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x2, 0x7fffffff, 0x3f8}, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 3.952641636s ago: executing program 0 (id=265): r0 = semget(0x1, 0x4, 0x39c) semctl$IPC_RMID(r0, 0x0, 0x1100) 3.897598271s ago: executing program 0 (id=267): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f000000060000000400", @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB="00000000010000000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x0, 0x95, "e6a1a247dcc0be995211798810e55a7262214cb34afe5806d1d91d37fa1a097097cba2626146b5de316d39f8d23bd3321695813131cc93edff7b637390832af4244c981483c26d22fbbd2edc3068156a20b48628a02245ba3ab41175e686e211914c1bea13126857ec04000000000000001221297fc1fe06561d0d9c95a11bf8d1d00378e8460c9fbc810648d26c532bfbc56c9dc1"}) brk(0x55555ede5ffe) 3.215244194s ago: executing program 3 (id=268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1000000) 2.952329399s ago: executing program 2 (id=270): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x16, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x13f) 2.870073426s ago: executing program 2 (id=271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000b40)={0x0, 0x300, &(0x7f0000000b00)={&(0x7f0000000a80)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 2.868272307s ago: executing program 2 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c844}, 0x8014) (async) r4 = io_uring_setup(0x37f6, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) (async) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) (async) preadv(r5, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.765117058s ago: executing program 2 (id=273): r0 = openat2$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40, 0x103, 0x7}, 0x18) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x40, 0x103) openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="decceb1d3c0713fbf9bed216e28f7deaddd9d28afdbf2286a650893200db3afd8825f42b8e64e2", 0x27}], 0x1}, 0x400c021) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1a, 0x8, 0x5, 0x0, 0x0, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x7, 0xfffffffe, 'syz0\x00', 0x7b}, 0x0, [0x8, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000000, 0x7, 0x0, 0x6, 0x800, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x7fff, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x10, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x8, 0x1, 0x7, 0x80000000, 0x81, 0x10001, 0xfffffffe, 0x80000001, 0x69e, 0x809, 0x7000000, 0x0, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x8, 0x7ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0xf8a, 0x58a0, 0xb, 0x19, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0xc3c, 0x1, 0xe, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x88b4) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) io_setup(0x81, &(0x7f0000001100)=0x0) r7 = syz_io_uring_setup(0x2afc, &(0x7f00000000c0)={0x0, 0xa6b3, 0x2000, 0xffefffff, 0x1b0}, &(0x7f0000000000), &(0x7f0000000180)) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_uring_enter(r7, 0x4da3, 0xd93, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) 2.409351947s ago: executing program 0 (id=275): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) 2.290055324s ago: executing program 1 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0xf5ff}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) 2.28981678s ago: executing program 1 (id=278): socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(r0, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc0000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.629891417s ago: executing program 3 (id=279): syz_usb_connect(0x5, 0x863, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xac, 0x43, 0x76, 0x40, 0x1645, 0x8, 0xb1ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x851, 0x4, 0x0, 0x5, 0x40, 0x9, [{{0x9, 0x4, 0x9d, 0x80, 0x7, 0x37, 0x8a, 0xe9, 0x80, [], [{{0x9, 0x5, 0x89, 0x2, 0x400, 0x1, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x76, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0x3800}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x5, 0x5, 0x7d}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x81, 0x9, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x3, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x9, 0x8, 0x6, [@generic={0x44, 0x31, "edacfb8381326ff599ed9c61a80b515f660fdde0cf9701c901db55f5ce1139d3c525395381073dccedb56a65edf271b00b338fd5a6a3b56a19fc69a304c4e787e495"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x7, 0x8, 0xf}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x11, 0xd}]}}]}}, {{0x9, 0x4, 0x73, 0x9, 0xa, 0x55, 0x53, 0x70, 0x3, [], [{{0x9, 0x5, 0x0, 0x4, 0x10, 0xb, 0xb, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x9, 0xf, [@generic={0xd, 0x13, "32829d006689cb9ce48aa6"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x0, 0x3, [@generic={0x1c, 0x7, "171f05c38ccd5cf49ef1308998166b7eefb16457a8a5b76d977f"}, @generic={0xc4, 0x22, "32ef95c3c56089fbcc2e1746b2e7387aea581966e6e995a78d23bff012194314540adcdca0c0c1f739cff9389d8a315eb9addb5c4b762f376eb2b10b697a8d575b82261e04ac118005dbb5a160df56456570b6e36a5be60d9087d93474c758bdf0a7aff779090e27da3fbf322e92b3ffbd6df09ad7b763ad2ec5875b02d0bb6e73254e838cf02dcd7a94e535b0630daa59ad09610b75ac8db265094dd95081b4731366178346e3b2be94f6a9cd20c3ed960cea50c13e4147bddb938e608a31a416e8"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x8b, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x2, 0x5, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x5, 0x3, 0xd1}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xe4, 0x96, 0x2, [@generic={0x3c, 0xd, "7e5ebf973763ed883f9b8e6844df98898b7ef76164d56f449eec8f1383fee7390094ba9c0f1d6c3e793bb64ed2cda4bb5e00ea1b6c407882fa27"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1c, 0xa9a9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x51, 0x9}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x5, 0x8, 0xfc, [@generic={0xfb, 0x9, "14205832520a608a99b13e0024972dbe959fc3e5438b58b5463ec7e74981bb1b74236aad6d12e5b3684baf75fcfeff304073e78c0ace13f8875c3df0e28d3ce0fab76a99d8c972ec8d3a1638d56b2a71647402dd36c90232cfd9c0908b304c00b182baca67f466245a23de9b59dfa2bc4fbc75294b3fee9a34cfa8e2281eeecc30da438476c4f10ac1cf78a8f4c90da955f4c3bf0a126b2048f51ae3d97d0d744092740d236a875e82cc7dff7918642b83e4ee6c16a5e7551fd14f488fd4da4bee6b3ae6a64991a3dd83565c0772468d4654247ad6ced97b48f2acf22bacf9c4ca9ff929fac9c49ccf7a1485716663cbadd1605b4aea1eed07"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x92, 0xc, 0x1, [@generic={0x2c, 0x2, "d1d6ed5208b706dc3b08dc797d251c24405eaa73ef0a9b373b634fd16955b0bc27e4c8fe68a4eb04b7cb"}]}}]}}, {{0x9, 0x4, 0x6f, 0x0, 0xd, 0x11, 0xb8, 0xfd, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x1}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0xa, 0xff, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x401}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0xf, 0x80, 0x3, [@generic={0xae, 0x22, "8de15d44c40c706c63770abcc4646f3bd7a357d832276bcfa14258af0f1cfd92125545143201b22564f13a19f4caecd3ba397cd4556d667da3c8c5b7e55a2cd42bac4298c2a0def81bc5ca2f0a21402fc7e67a2a077c3409d2219ecbf736f7b7de7796f94507da34b77fb7a800f00fbed8ca72676e0bd725eeef46acd0889a62d575beaba78377f677c9aa86c96e099f18811c82b8f66dad2d2906e43dab14b0aa89a7b6160894bf9bcf47af"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x7, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xbd9d}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x10, 0x3, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x10, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x3, 0xff, [@generic={0xe4, 0xb, "35d2efb28c1627e40d0cc838416c7c08dfc2e095b6b2c9d85b6298c7e98ac7dce41a33fd25e4a43eb271259d2dc0aaaab312c3375af6f78eb35e6b01d3c632f00beb2610875b81b085f0fb2a0545a13ac6611e4ec9ebc58cb97ff1ea607d9a6662f7e12b2b10077a58a48d76a0341d218c1bda55a66635c04277dbde8935a2673670c88dbd3b6f94c4a3a2fc29429f73836d60520a935647ef22ea55ba752cd3df82cfea05d3f7bfb3b43d1bc3019af7ec21713d25e08a6aafdb259a0ce808d1f8862eecfdaca9a72164b6263f76df779c48448a1673538f7ce7874bd49cd3ed1d6f"}, @generic={0x1c, 0x1, "735b7a64900010041dab13d4984be0a4546f3937ddff8fe7a33d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x3, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7, 0x40, 0x5}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x81, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x6, 0x7}, @generic={0x49, 0xf, "2df7257db29da0f1b83339b052e1daaf14d1a1d6885ec2d777fd46142b0aed74f38a332b421dc93c6dd353d1c44fd26f040661cb6466a7ac39f8cdef647b2487259efaf5751725"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x4, 0xb0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xee, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0x86, 0x8, 0x20, 0x9, 0xab, 0x0, [@generic={0x7f, 0x3, "3cf028dc93a72652b5a8db11d2e27b9e6bb531c499ea9834f55823478c45ccb4a76e8c50a05bf4d662efc4a45f4518fda543934275487bf2619573d71c76a217a1213365d95082ccafc3c777e59ce70bb9b1a46e9cfe1d8c1e9530927d0cebb68f2a4563fefef7f5998a61ee81b054aab3cdab0720a6ffdfd50ac49952"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x0, 0x1, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xa1, 0x7, 0x5, 0xb2, 0x91, 0x91, 0x7f, [@generic={0x59, 0x21, "d288be47bd80e335b07f4d673fdf0c88436ff4e42fd5e6634a52f08fee2575e36c31d91fa67c44028966b6a0039bc6dd90df77b916d9f438f629e1e764aa32aeb6a362bd97a34fa773d87ad78bdc9f30db105f185562e7"}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x0, 0x7, 0x9, [@generic={0x80, 0x22, "1faffe4be5e000f340ba2f41dae582a67d0a1691943225507a8d75a8d1ba2d73982bb634a77bb24c1087c6e4df8a4020bce01789678615b3e0e8fdaa2203794eab8b04e7b206120f4cfdb3af03ea3fba7fbc8acd5e59086d5263dc2381e186a809e342e2c538f3684056b1d5822a4d562c133e1066e4e973bd23b967cb2d"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x4, 0xb, 0x9}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x9, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x8, 0x4, 0x10, [@generic={0x78, 0x23, "2c723c4e3653d87d3cb7c8bf09765c900f404602b3f3c0f1d3d6bb599af60ca91c91163e0ceab77ab29646411c165e0bcece8c0118246b20119128846b2772ccb56837d2791edb5e322983009fcb5569539f2e58b3aa7a7ef7ab34086d60a859dcb89d49a8638feb867a3e196b4ec64585a700d8dc6c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x2e, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xe045}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x10, 0x1, 0x81, 0x8, 0x6}, 0x8, &(0x7f00000008c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x8c, &(0x7f0000000900)=@string={0x8c, 0x3, "5fddbe312ffc4b2f0e022bc73350375290bcf8ffa03e7874eb79b0699623af6b7a0a000dcf8681a76db56fe7fa179307f92d92b916d417069c495d597ec13f513227885ef62eed94f484cff1ae2aa20cf708335348ee89029d793e93ab6ebfb2db75e252e34ed6e6cf2fdedb89e06513efe7eb257c3adeb05d3480571e7336fcdf79dfefe34dee4e15b4"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x5e, &(0x7f0000000a00)=@string={0x5e, 0x3, "1f4771d77ea491209b116324c8c197a121d04d260e7074c3a7afb2eeb390f6516a8e8f95f88ec8760efe1f75817ceb89d32f71259112285fab470d575716f021dd01f84e05180a434372983c4450f0c43b597d04a60bd2cd1efbcc67"}}, {0x23, &(0x7f0000000a80)=@string={0x23, 0x3, "ff30498fa9063a805ba41f6790719ffd21e6d4da2d9f4d20f8225edb9a0e8cfbd6"}}, {0x1e, &(0x7f0000000ac0)=@string={0x1e, 0x3, "26168aed553e7b2a9d93b131274ac4b0be382702c83997828c6d7bd5"}}]}) r0 = openat$tun(0xffffff9c, &(0x7f0000000b40), 0x80, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b80)={'netdevsim0\x00'}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f0000000d00)={0x1, 0x6, @status={[0x9, 0x6, 0x80, 0xffffffffffff8464, 0x4, 0x400]}, [0x3, 0x1ff, 0x100000000, 0x0, 0x9, 0x1ff, 0x2, 0x5, 0x1, 0x0, 0x36a, 0x1, 0xb, 0x32f, 0x0, 0x1, 0x6, 0x5, 0x49, 0x4, 0x7, 0x1, 0x8000, 0xffffffffffffffc0, 0x4c5, 0xfff, 0x9, 0xffffffffffffffff, 0x2, 0x6, 0x9, 0x8, 0x7, 0x6, 0x9, 0x4, 0x5, 0x4, 0x6, 0xfffffffffffffffe, 0x0, 0x10000, 0x4, 0x8, 0xffff, 0x7, 0x7f, 0x5, 0x9, 0x3, 0x7ff, 0x6, 0x5b0, 0x40, 0xe, 0xbcb, 0x6, 0x5, 0x7f, 0x1694, 0xffffffffffffffcf, 0x3, 0x7b17, 0x9]}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001780), r1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4c0d0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000019c0)) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a00)={'veth1_to_bond\x00'}) r5 = openat$autofs(0xffffff9c, &(0x7f0000001a40), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r4, {0x5, 0x10000}}, './file0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000001ac0)=0x11, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x5c, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3ff, 0xa2b}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x8, 0x5668, 0xb49d, 0x5, 0x1, 0xf933, 0x1000]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x20c}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x24f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1c904}, 0x8010) sendmsg$kcm(r6, &(0x7f0000002680)={&(0x7f0000001cc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001d40)="00b391ee3bab91b3df59fb33a9ebb1319634b8b045eda0da182ce2af132c3964d1eb9f3f3940a2146e21e19e7710f189ed712b0ba2b117afb72a0905dfce30fce8fe22c777ff8d2c3d47ffa3d388c679824caffff702dd305defe7d0926be62541268d36b0243ece9756d5680d93ef420a032f98d1ebb1e1d5b97a4d362a7d3f7655ac85ee4e05425673f6ad963bc8df1298e7556b27d10ff47fe1f923d9f2acda38833534bc5d5a54ff7be3dcba5f82e1662bee889834cd943acfeedcc4d18371319acd26df7989e8649df2133c76510c183a0d76cfb8da31c483ebb2e67a3c423a008f56a215d69bc0fdfe2f", 0xed}, {&(0x7f0000001e40)="9fca3046bad1b5492b960c914631fe4d11b4c0d41b96c3f3139639af53248be3a9e4df0a7a5ae8eba14647de99e33902871a713237302a0bcf7b4ddbe491b59f5262b76d180e5cadf514f5b6726f80ff2baf51adffe33ad14751a9c0c2b5f72d102fbe23168fda2479c99e0a2327ce209819f0b80cca00fbfaeb807f784699e427cdde40e46085fa36f982afa79e63d25e6cb58e4db740cf2aa07265c6fc7616245e76a69f2d874ef64bf5eee4fc473cda576c1724c502280659d047a548", 0xbe}, {&(0x7f0000001f00)="2f518e6d55f7aa8b683bc5fb869d25d06c9f6416e5b7e246aa1a88b9fd66247e2f8663998417173fe0cb5351a0a0bbb2c1d5307810e047f1ecc373f897f503fe41aa73a99eb666d6321591e548162179ca9f4840ba4af026ab6404c74f636d399aec2a98b70ae90190231ee10e84de3392a9aff212abcb873fbea705165c096576af1584786ad557f36af24a694c83c9411cb8e619dd13a1207133b24465d93b88ab82d38603a1e9e8a6f71222a3f8e1a21dfacfa743b97e75fc48f6d459645551c936a5ada51928dd9b94abb2ab6ad0c70c18808675f41c1897f9bf982750448978583f", 0xe4}, {&(0x7f0000002000)="f933a55133f7f95e154626eea52d59c595f6eec877ab76ca898a57631901f66017ee2a62b38c6ef156726501b2ac248f0160d14859eac9a7290005714fc7c78c9cc0f850b3363ddd7a2ab474b19fc76e8a358d628f197fb2539a174058491fd4c6d3e5e74dea43d03b8177df3006f80b665115f14b44caf787a5b828e07587de2bf69a41c898d2d49fd46813091140f34d9f83365b585f91f66da0207fabeddc8f0b2b708d80539e44660506b7994e069655f29aa68728ec4df988d68a9b6308aaadb1b764b191778efb5cc618967a17372398fa1c9e054cdcc1ad9854b893e400c653962b2fd6e07fc7830166d0b8749476b880256151fd", 0xf8}, {&(0x7f0000002100)="2426dd336b0811cf0968409853ff9537783b7936ad4aa3f468062b250a8ed3693c7d8051d38e330012f045cc0ee37a42642e1afd", 0x34}, {&(0x7f0000002140)="6da3a94d7096be34b2496138a65a88830f78e6bcbd2714de8e52299096f12d0e25bf4d294d613bf1d054a239edbeba7f24725ed6555a0ac0b13c065a71252d971b8b30fd1a27ff8c10e53427b18373a1171178e96a9b642709cf0d9858cd89457e533f2fbd51032538029821297fd319f2d4d6fb131153cc9e18305ff2dec9537e2407838351e0eed9afa46e002538abe6d7e2bca9a1b6ec", 0x98}, {&(0x7f0000002200)="d58c89b40eb17806c71ecb117a26f47e237f7ba75b427908a07c39df86709faa00831a24be6d59ac87393c562fdc0879d1a51068ff6903e971e41b3fe8401b3e04f0d48b7944814ece1ad4dbaa180bfe3f1b2096f09b078ba92307acabce38e4c139d0488b7cf7e649aa215fadb0e811d33426cee72c185554b8405dca4d32cfd72cc273207dcf110e0c01b18d37ceb78f", 0x91}], 0x7, &(0x7f0000002300)=[{0xec, 0x29, 0x5, "7681fcff82b4a9489b1ed4a1dfe46124cb3efdbb891357face179eee709a648dc39159b6b3e444ea70fc4190939b69995997d425f48d8196328a7c0c387cb89aeaa15f8fb3b5617b81ed55ad67ab6b0cf6614f34b9b2ae3bcb0f4b53bfd358cd09b59c7967764e9c321cacb431476f15223e18b3b77f4e507a11d99cbea0798d3006bf16cd1a2a919dd1683273a77fa6f04b97dd13264f2efbdaff267da35b3594a2c8d73b665a990f8b115d3115c7bfcab7a10d9b823c30a933df45a8cf377130a1795753432febb7a591f600c8594423f177a53a969c21a726bd2929e8e3ae"}, {0x88, 0x10b, 0x0, "a75185c892ef740f034335d4422ae610a9620c97e9057347ee3dd2331a3c6684dc511636119e5ef6d3d08db6b5bb39e0eae3845926c552e63bee072181faa31c8834ada54caeeffb38b33f36f4bdd02cb969a5712abcc2e92dc65202b340e35cd7dd48294d0d3c238f1e4a33d9d4da5843afb7275da71351d375"}, {0x58, 0xff, 0x5, "e43d02316720ed088e5f151c86471959503e22bb96e53dfdfea28fa9ce2aa0e3d87b25512f3feae70dff6898e57a853f4597d6503e76a667a473367f5d51076b7c0ad902a2ee0fe64d327b"}, {0x50, 0x10b, 0x9, "2bc2a933b5377052ab5722f62cf05421f5ffae85a8f45822cad58639f9ee237492c9f804f6ce2f5ffa7f58c5eb28e85edbb0c7068951c35ec2916e08ad2d7800d7ceae"}, {0x40, 0x1e, 0x1, "aca1828b0c43320a0ed7261a62bcee4e9a50f7d4c89278f27f7ec728fb275fb4c4cedf38ba1a32a9f8745272beec25620df7"}, {0x30, 0x88, 0x3, "11d2f37c75f2aff92394194c29e5110c5d89b94b9c510ab7990cb8d9a7ce5be81a04"}, {0xf0, 0x20, 0x8, "f44b638fedbe464d26f04c3cf92684f82855a2708381d31d245f3986c0767c0a645e83804e288165fa833379cf6953fbab11f9aec6100d104bd1b02632af6bef102a40237a5c8a9671552d2944860087b81927ffd0cd56dd9ddb8d598df1c099420b611515632190d7582dd264cf859b5a0bdfc2f758fad34d7528e0957d0ab65103ae86c75907a9ab5706273bfac46a39b53adad35facb4f426e021c7a16ee3ff43569f14f74959902467668f810a5dd069899ad47841445103371c40629045f20661c892d37cfb70964968b96109b0c888aeb556dc927e7cbade9e0f21ff137f0a"}], 0x37c}, 0x4008001) r9 = signalfd(r1, &(0x7f00000026c0)={[0x0, 0x4b6]}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = signalfd(r0, &(0x7f0000002700)={[0x7f, 0x7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000002740)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000027c0), r11) sendmsg$TIPC_CMD_SET_NODE_ADDR(r13, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x24, r14, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$VIDIOC_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f00000028c0)={0x0, @reserved}) sendmmsg$unix(r9, &(0x7f0000004340)=[{{&(0x7f0000002980)=@abs={0x1, 0x0, 0xd}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002a00)="cc87e90522c8fb354f37e1e9d6b087c9b5c52983bc02cda404e68ca2d1dd31d8e491cc02368706bcbea363cfdb843405b40705c2a858f134f8a3713f6ea93ab7f4f309be761e924312ede1540217c1ac7c719a2b24a09592e117f14601de42b06b97a0439a9c06f11af049ee531db1f5984c15f2c3508ddbe1940d9ce20671e66a5c5a45e2a13aad166702adfc0022f3e62afe7b25fc91cd10e0524b44bc82a1a7ddd93a442e04108c0462af11b9e2a8b9e8c5a3a6593f3c882740594e23a66ad5c7a0a68233a5fa26fe697f95325d0e967b4b3744a88a3d7dd65f10f6079a13", 0xe0}, {&(0x7f0000002b00)="bfbf2b0c1be20a83029133f56b3664652bb3e4ebab245a4ad244f523e18db9d95ac367b647ef82e0e462d2c59c1bc74c533ed802d608aee396ddfd91a89157330c83ff586cb8fc30e533f6459867669c2ad29f11a09137e5a821dfbc504517974ab4afb9bac7cb1f6daf05f2a27056fdb986fecd479aef8060d1bdf660bb9d71aeaa2f54844aba5657865a450c5473a6c895938cc91b2fb09c79615d66889c094780eb510668e67d0ccdd66c2ccd16ff855bb1c1779547d5002280978382b4c6e5c51b8b9e07bdd478b4", 0xca}, {&(0x7f0000002c00)="59d073434d37ec9dac6174fd6e5c7c39dd2038569c510dc8941d62ed4d72707de237b5f57da05c4eb686d579554c1f62881978f226a135e9bcacf5bd5910ee0170d1d99a404f68e8fd2b21b9b2c01d74ddde5fad7042a502df6e5e9dc888973c15452be2bf9b145926d9a6bd154623bae7cb53dbb67c850bdf3b080fa3980f9bb3b6d453b789ccffcf2ab60aadccc7da77f7c07536bccd14f0902e65a322d7f81fe989fc5275d7e39302829a2c24e5bf2a5a5c1f8282331d7f7bd8561158", 0xbe}], 0x3, &(0x7f0000002e00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r11, r10, r4, r6, r10, r11]}}, @rights={{0x18, 0x1, 0x1, [r11, r9, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r12]}}], 0x68, 0xc804}}, {{&(0x7f0000002e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000002f00)="a237fe3edc2374592268f26e3b62735ac70465b1f8434c6409bdc66673e6e56cf1c0018676ad9bf885583ccc6211b653a201180358f2a42d09e48b559bbc", 0x3e}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="cc8147db7c0649bb37984835cd9f84841c14aa591bb5fb8c075ba24c8f3084d8b2c99bed0ec3f35093cdf45f86c3c46a1165a6c66248111522eb9b4ef88efcc28153850cd1c983b3b87b1b77c2a5c7ca9abbaa54077c3091168a54044ea0854412c3978960837cb42a312d57a65b6d25269293380ef932caea1f8e1c400fc711621d270eefe794fe29320691969185f5d6a60781818d27013109137db70f3f9ceb8bb62331d78aac8648d4c9b694510097145c3cd50e", 0xb6}, {&(0x7f0000004000)="a809f2aeec550b303162dcaaba6655d1d1f8588541f3a2130bcde11f51ee9eac9714986571b62dc421db83acc3326c2f961b280dbd4f41c37e2ca4c6cce108faaa", 0x41}, {&(0x7f0000004080)="a9774031a27d12d71db789a0a0f4c0e45b98b1e64c2e26b798e278320d47964a3a7c869424e3522740651c7897659518f4885610fa832195a7bee518135d38b791206f77767ed0273b178f479ccc4b632172558204cc03d2d62e806a965bb2d1bfd0f3915d6544eab67b177fd01a813bda439fdb09dd34e12de5cd32", 0x7c}, {&(0x7f0000004100)="df73441c914337c3c4c4b59c2ab1f58d1ef5254191cdbd38b9295030ea9cb77feed70af7112026f7a90c82f0e276662480932855bb9e1160a86e85861d198c331c18b21afc86834579adb2bf628e4280a714633488cad9d30408bd5d354c524f1401d199d2511d6981aa3feb8ff620b74d3ae7fa7163e066d4ef26fcf6dc85870389c2e39a581624495d0bb7520f0b8966cf6c04caf98373fe00fb1e0e462eb3df63c8b1068cbe6963971fe1d4f665137776c79964a39536c7cf84d6de66369131724e8cd719010c31f95aad2be2da85ebb0dbe15e84fd", 0xd7}, {&(0x7f0000004200)}], 0x7, &(0x7f0000004280)=[@rights={{0x18, 0x1, 0x1, [r10, r13, r6]}}], 0x18, 0x81}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004300)=[@rights={{0x10, 0x1, 0x1, [r13]}}], 0x10, 0x20008050}}], 0x3, 0x24000081) 1.300092842s ago: executing program 1 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x68, 0x0, &(0x7f00000025c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000009b80)={0x1c, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0xe3}]}, 0x1c}], 0x1}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000040603000000000000000000020000090900020073797a30000000000900020073797a30000000000900020073797a32000000000900020073797a3100000000050001000700000005000100070000000900020073797a3100000000653b5e2cef4b99017f1c4d7355dc99dd83e2a302fdb580227b2da40cc982bb3b9ab21f3a6fa343c99b62696cb2402c75a347aff5d064a9a87f8aa05eea19bea01e3552f8c950b2fa4bb76bb8d0d437082f27a160fa8b920eb49d6c29d15c63ff142d6e11d6aeb16f97eec43f632628b13279684224a43dfa9044341ee26fe66e81da3b6514102eb6b1f822c48c629bb8239ebcbce1897960f3fd16eaf70f177955fa764858f530157cc18a48f47130d6f8499ec5fbcc4865d3f5f9b68b91a36194a1b9516b8794c08e67fbad689d1d79911adb393a9cd27226c93802fedf1b042fc16cdfa2"], 0x60}}, 0x40) 1.160176859s ago: executing program 1 (id=281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1, 0x0, 0x0, 0x3f000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 1.159959595s ago: executing program 1 (id=282): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000018100), 0x100, 0x0) read$FUSE(r0, &(0x7f0000018a00)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x234000, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x185600, 0x0) 1.040254041s ago: executing program 1 (id=283): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f000000060000000400", @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB="00000000010000000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x0, 0x95, "e6a1a247dcc0be995211798810e55a7262214cb34afe5806d1d91d37fa1a097097cba2626146b5de316d39f8d23bd3321695813131cc93edff7b637390832af4244c981483c26d22fbbd2edc3068156a20b48628a02245ba3ab41175e686e211914c1bea13126857ec04000000000000001221297fc1fe06561d0d9c95a11bf8d1d00378e8460c9fbc810648d26c532bfbc56c9dc1"}) brk(0x55555ede5ffe) 970.081766ms ago: executing program 2 (id=284): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r6, &(0x7f00000040c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x0, r7, 0x5, 0x2}}}, 0x90) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000040)={0x3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) socket(0x2, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000100)=0x2) 264.467565ms ago: executing program 3 (id=285): r0 = socket(0x1, 0x803, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xd00, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x10038, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)="a0002883781e", 0x6}], 0x1}}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 0s ago: executing program 2 (id=286): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x206000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:54183' (ED25519) to the list of known hosts. [ 47.899753][ T5845] cgroup: Unknown subsys name 'net' [ 48.074926][ T5845] cgroup: Unknown subsys name 'cpuset' [ 48.078842][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.996088][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.027428][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.028586][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.033891][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.038008][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.040807][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.042669][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.043366][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.043714][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.044650][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.044997][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.045804][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.047348][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.047638][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.049332][ T5291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.049382][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.049862][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.050341][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.050660][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.052491][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.054987][ T5291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.352890][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 52.370898][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 52.387473][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 52.394991][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 52.540022][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.542548][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.545522][ T5927] bridge_slave_0: entered allmulticast mode [ 52.549510][ T5927] bridge_slave_0: entered promiscuous mode [ 52.586887][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.589866][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.593467][ T5927] bridge_slave_1: entered allmulticast mode [ 52.597372][ T5927] bridge_slave_1: entered promiscuous mode [ 52.621833][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.624742][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.627430][ T5928] bridge_slave_0: entered allmulticast mode [ 52.630469][ T5928] bridge_slave_0: entered promiscuous mode [ 52.649276][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.651552][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.653984][ T5935] bridge_slave_0: entered allmulticast mode [ 52.658526][ T5935] bridge_slave_0: entered promiscuous mode [ 52.661573][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.664461][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.666723][ T5935] bridge_slave_1: entered allmulticast mode [ 52.669346][ T5935] bridge_slave_1: entered promiscuous mode [ 52.671731][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.674184][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.676454][ T5928] bridge_slave_1: entered allmulticast mode [ 52.679287][ T5928] bridge_slave_1: entered promiscuous mode [ 52.687714][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.689951][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.692380][ T5936] bridge_slave_0: entered allmulticast mode [ 52.695080][ T5936] bridge_slave_0: entered promiscuous mode [ 52.699668][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.704114][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.734536][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.745760][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.749804][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.752382][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.754795][ T5936] bridge_slave_1: entered allmulticast mode [ 52.757398][ T5936] bridge_slave_1: entered promiscuous mode [ 52.766878][ T5927] team0: Port device team_slave_0 added [ 52.769911][ T5927] team0: Port device team_slave_1 added [ 52.778398][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.788782][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.831528][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.833939][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.842058][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.847277][ T5935] team0: Port device team_slave_0 added [ 52.850737][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.856470][ T5928] team0: Port device team_slave_0 added [ 52.859600][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.861895][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.870099][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.875504][ T5935] team0: Port device team_slave_1 added [ 52.879766][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.885671][ T5928] team0: Port device team_slave_1 added [ 52.947006][ T5936] team0: Port device team_slave_0 added [ 52.954876][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.957180][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.965919][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.969788][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.972092][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.982324][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.991883][ T5936] team0: Port device team_slave_1 added [ 53.004683][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.006936][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.015073][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.019503][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.021844][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.030964][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.038699][ T5927] hsr_slave_0: entered promiscuous mode [ 53.041509][ T5927] hsr_slave_1: entered promiscuous mode [ 53.044771][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.046976][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.056562][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.078046][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.080990][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.090963][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.124797][ T5928] hsr_slave_0: entered promiscuous mode [ 53.126993][ T5928] hsr_slave_1: entered promiscuous mode [ 53.129123][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 53.130909][ T5928] Cannot create hsr debugfs directory [ 53.184066][ T5935] hsr_slave_0: entered promiscuous mode [ 53.186408][ T5935] hsr_slave_1: entered promiscuous mode [ 53.188520][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 53.190335][ T5935] Cannot create hsr debugfs directory [ 53.194960][ T5936] hsr_slave_0: entered promiscuous mode [ 53.197255][ T5936] hsr_slave_1: entered promiscuous mode [ 53.199333][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 53.201418][ T5936] Cannot create hsr debugfs directory [ 53.464584][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.474246][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.479502][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.488812][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.523711][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.529927][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.541300][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.546651][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.586557][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.591491][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.596483][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.602031][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.664487][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.677687][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.683272][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.689596][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.711465][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.742338][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.756766][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.759066][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.776061][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.778338][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.797599][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.805272][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.825288][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.828979][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.837584][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.840344][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.849649][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.852633][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.863477][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.866035][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.883249][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.888173][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.890379][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.917831][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.923922][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.926374][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.948056][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.950398][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.990722][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.024539][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.057690][ T5927] veth0_vlan: entered promiscuous mode [ 54.066955][ T5927] veth1_vlan: entered promiscuous mode [ 54.085319][ T5927] veth0_macvtap: entered promiscuous mode [ 54.098172][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.108700][ T5927] veth1_macvtap: entered promiscuous mode [ 54.125394][ T5291] Bluetooth: hci1: command tx timeout [ 54.125398][ T63] Bluetooth: hci0: command tx timeout [ 54.125633][ T63] Bluetooth: hci2: command tx timeout [ 54.125908][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.131387][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.132545][ T5932] Bluetooth: hci3: command tx timeout [ 54.139429][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.150501][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.169893][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.185404][ T5936] veth0_vlan: entered promiscuous mode [ 54.187379][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.190372][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.201614][ T5936] veth1_vlan: entered promiscuous mode [ 54.214884][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.242438][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.242722][ T5935] veth0_vlan: entered promiscuous mode [ 54.245552][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.253301][ T5928] veth0_vlan: entered promiscuous mode [ 54.271997][ T5928] veth1_vlan: entered promiscuous mode [ 54.278748][ T5935] veth1_vlan: entered promiscuous mode [ 54.289532][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.292603][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.310363][ T5936] veth0_macvtap: entered promiscuous mode [ 54.318275][ T5928] veth0_macvtap: entered promiscuous mode [ 54.325648][ T5928] veth1_macvtap: entered promiscuous mode [ 54.330708][ T5936] veth1_macvtap: entered promiscuous mode [ 54.347406][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.348854][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.358550][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.365591][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.373785][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.380108][ T5935] veth0_macvtap: entered promiscuous mode [ 54.388235][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.391914][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.403767][ T5935] veth1_macvtap: entered promiscuous mode [ 54.408927][ T1138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.420817][ T1138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.433206][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.440022][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.443046][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.453479][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.457877][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.473973][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.490651][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.515306][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.518063][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.520885][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.524160][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.526489][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.548673][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.551862][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.581607][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.585071][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.588003][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.591838][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.604806][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.607812][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.635510][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.639050][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.762874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.765949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.768700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.772830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.775800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.779353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.784904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.787637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.790850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.142258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.218446][ T6000] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 55.221981][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.447924][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 55.456345][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 55.460015][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.466844][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.477240][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 55.526004][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.570071][ T6000] usb 5-1: config index 0 descriptor too short (expected 73, got 27) [ 55.609224][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.638954][ T6000] usb 5-1: config 0 has no interfaces? [ 55.641295][ T6000] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 55.648357][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.655211][ T6038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.698907][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 55.707372][ T6000] usb 5-1: config 0 descriptor?? [ 55.779961][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.816560][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.911349][ T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.914861][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.917927][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.921929][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.990149][ T6028] process 'syz.0.1' launched '/dev/fd/10' with NULL argv: empty string added [ 56.202287][ T63] Bluetooth: hci3: command tx timeout [ 56.202362][ T5932] Bluetooth: hci1: command tx timeout [ 56.204080][ T63] Bluetooth: hci0: command tx timeout [ 56.206403][ T5932] Bluetooth: hci2: command tx timeout [ 56.242621][ T5984] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.463202][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 56.470510][ T5984] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 56.482612][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.487245][ T5984] usb 6-1: Product: syz [ 56.490593][ T5984] usb 6-1: Manufacturer: syz [ 56.495059][ T5984] usb 6-1: SerialNumber: syz [ 56.501509][ T5984] usb 6-1: config 0 descriptor?? [ 56.509369][ T5984] cdc_ether 6-1:0.0: skipping garbage [ 56.514891][ T5984] usb 6-1: bad CDC descriptors [ 56.520696][ T5984] usb 6-1: unsupported MDLM descriptors [ 56.524147][ T5984] cdc_acm 6-1:0.0: skipping garbage [ 57.101460][ T6000] usb 5-1: string descriptor 0 read error: -71 [ 57.105233][ T6000] usb 5-1: USB disconnect, device number 2 [ 57.522109][ T6065] Zero length message leads to an empty skb [ 57.526299][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 57.673913][ T6067] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.680698][ T6067] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.764022][ T1337] usb 7-1: USB disconnect, device number 2 [ 58.282757][ T5291] Bluetooth: hci2: command tx timeout [ 58.292524][ T5932] Bluetooth: hci1: command tx timeout [ 58.294269][ T5932] Bluetooth: hci3: command tx timeout [ 58.296492][ T5291] Bluetooth: hci0: command tx timeout [ 59.192293][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 60.373212][ T5932] Bluetooth: hci0: command tx timeout [ 60.375497][ T5932] Bluetooth: hci1: command tx timeout [ 60.378245][ T5291] Bluetooth: hci2: command tx timeout [ 60.380523][ T63] Bluetooth: hci3: command tx timeout [ 60.595790][ T6092] overlayfs: missing 'lowerdir' [ 60.631004][ T6000] usb 6-1: USB disconnect, device number 2 [ 60.854388][ T1337] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.043770][ T6098] syzkaller0: entered promiscuous mode [ 61.045979][ T6098] syzkaller0: entered allmulticast mode [ 61.273796][ T1337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.432640][ T1337] usb 5-1: Using ep0 maxpacket: 32 [ 61.442534][ T1337] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 61.444134][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 61.446863][ T1337] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 61.455016][ T1337] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.463778][ T1337] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 61.477947][ T1337] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 61.481777][ T1337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.485248][ T1337] usb 5-1: Product: syz [ 61.490487][ T1337] usb 5-1: Manufacturer: syz [ 61.493427][ T1337] usb 5-1: SerialNumber: syz [ 61.507728][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 61.530790][ T1337] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input5 [ 61.743772][ T1337] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 61.746794][ T1337] (id 0x00) [ 61.794160][ T1337] rc_core: IR keymap rc-imon-pad not found [ 61.796083][ T1337] Registered IR keymap rc-empty [ 61.798600][ T1337] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 61.801881][ T1337] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 61.936323][ T1337] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 61.942965][ T1337] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 61.951638][ T1337] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:3> initialized [ 61.955654][ T6121] kthread_run failed with err -4 [ 62.168651][ T6101] imon:send_packet: packet tx failed (-71) [ 62.168677][ T29] usb 5-1: USB disconnect, device number 3 [ 62.177397][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 62.202387][ T6101] imon:vfd_write: send packet #0 failed [ 62.360871][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 62.376137][ T6101] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.724271][ T40] audit: type=1326 audit(1771039742.252:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.1.25" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 63.215703][ T40] audit: type=1326 audit(1771039742.742:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.217635][ T6160] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 63.222337][ T40] audit: type=1326 audit(1771039742.742:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.222362][ T40] audit: type=1326 audit(1771039742.742:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.222386][ T40] audit: type=1326 audit(1771039742.742:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.222406][ T40] audit: type=1326 audit(1771039742.742:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.251467][ T40] audit: type=1326 audit(1771039742.742:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.255978][ T6160] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 63.261409][ T40] audit: type=1326 audit(1771039742.792:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.269895][ T40] audit: type=1326 audit(1771039742.792:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 63.294623][ T40] audit: type=1326 audit(1771039742.822:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.26" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 65.293565][ T6193] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 65.296741][ T6193] syzkaller1: entered promiscuous mode [ 65.298486][ T6193] syzkaller1: entered allmulticast mode [ 65.616981][ T6205] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 65.621327][ T6205] Error validating options; rc = [-22] [ 65.876956][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 65.922287][ T5930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.072228][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 66.076471][ T5930] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 66.081080][ T5930] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 66.086582][ T5930] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.091873][ T5930] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 66.105489][ T5930] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 66.111420][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.112287][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.117146][ T5930] usb 7-1: Product: syz [ 66.120739][ T5930] usb 7-1: Manufacturer: syz [ 66.124397][ T5930] usb 7-1: SerialNumber: syz [ 66.137210][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 66.147387][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input7 [ 66.262297][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 66.266392][ T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.272466][ T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.278179][ T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.284106][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 66.289736][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.294483][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.297846][ T24] usb 6-1: Product: syz [ 66.299711][ T24] usb 6-1: Manufacturer: syz [ 66.301697][ T24] usb 6-1: SerialNumber: syz [ 66.362612][ T5930] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 66.365383][ T5930] (id 0x00) [ 66.412215][ T5930] rc_core: IR keymap rc-imon-pad not found [ 66.414201][ T5930] Registered IR keymap rc-empty [ 66.416117][ T5930] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 66.419472][ T5930] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 66.438906][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 66.568573][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 66.579697][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input8 [ 66.598128][ T5930] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:3> initialized [ 66.818957][ T5930] usb 7-1: USB disconnect, device number 3 [ 66.832672][ T6213] imon:send_packet: packet tx failed (-71) [ 66.854440][ T6213] imon:vfd_write: send packet #0 failed [ 67.148007][ T6248] netlink: 'syz.0.39': attribute type 10 has an invalid length. [ 67.159415][ T6248] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.974745][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 68.932285][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.963842][ T6274] syzkaller1: entered promiscuous mode [ 68.966442][ T6274] syzkaller1: entered allmulticast mode [ 69.117211][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 69.139493][ T24] usb 6-1: USB disconnect, device number 3 [ 69.146272][ T24] usblp0: removed [ 69.329133][ T6290] overlayfs: missing 'lowerdir' [ 69.472042][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.423028][ T6307] siw: device registration error -23 [ 70.812234][ T6000] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.962277][ T6000] usb 8-1: Using ep0 maxpacket: 32 [ 70.965845][ T6000] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 70.969180][ T6000] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 70.971875][ T6324] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 70.974580][ T6000] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.977352][ T6324] Error validating options; rc = [-22] [ 70.980636][ T6000] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 70.982429][ T6000] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 70.989492][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.991970][ T6000] usb 8-1: Product: syz [ 70.995060][ T6000] usb 8-1: Manufacturer: syz [ 70.996768][ T6000] usb 8-1: SerialNumber: syz [ 71.060360][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 71.070521][ T6000] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input9 [ 71.262286][ T6000] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 71.264910][ T6000] (id 0x00) [ 71.312291][ T6000] rc_core: IR keymap rc-imon-pad not found [ 71.314173][ T6000] Registered IR keymap rc-empty [ 71.315740][ T6000] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 71.319017][ T6000] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 71.402239][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.473640][ T6000] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 71.478722][ T6000] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input10 [ 71.489507][ T6000] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 71.572202][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 71.575215][ T39] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.578363][ T39] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.581433][ T39] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.586031][ T39] usb 7-1: config 1 interface 0 has no altsetting 0 [ 71.589866][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 71.593320][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.595879][ T39] usb 7-1: Product: syz [ 71.597252][ T39] usb 7-1: Manufacturer: syz [ 71.598736][ T39] usb 7-1: SerialNumber: syz [ 71.705343][ T6311] imon:send_packet: packet tx failed (-71) [ 71.705508][ T5971] usb 8-1: USB disconnect, device number 2 [ 71.722323][ T6311] imon:vfd_write: send packet #0 failed [ 72.182834][ T6317] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 72.185708][ T6317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.212605][ T6317] vhci_hcd vhci_hcd.0: Device attached [ 72.365632][ T6328] vhci_hcd: connection closed [ 72.366997][ T1136] vhci_hcd vhci_hcd.0: stop threads [ 72.371718][ T1136] vhci_hcd vhci_hcd.0: release socket [ 72.375443][ T1136] vhci_hcd vhci_hcd.0: disconnect device [ 73.149605][ T6335] syz.1.57 (6335): drop_caches: 2 [ 73.281329][ T6343] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.683242][ T39] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 73.700345][ T39] usb 7-1: USB disconnect, device number 4 [ 73.713248][ T39] usblp0: removed [ 74.002296][ T2303] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.162233][ T2303] usb 8-1: Using ep0 maxpacket: 8 [ 74.167282][ T2303] usb 8-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 74.170144][ T2303] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.174241][ T2303] usb 8-1: Product: syz [ 74.175588][ T2303] usb 8-1: Manufacturer: syz [ 74.177004][ T2303] usb 8-1: SerialNumber: syz [ 74.181336][ T2303] usb 8-1: config 0 descriptor?? [ 74.195845][ T2303] cdc_ether 8-1:0.0: skipping garbage [ 74.197609][ T2303] usb 8-1: bad CDC descriptors [ 74.199479][ T2303] usb 8-1: unsupported MDLM descriptors [ 74.201463][ T2303] cdc_acm 8-1:0.0: skipping garbage [ 74.595897][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 75.738109][ T2303] usb 8-1: USB disconnect, device number 3 [ 75.966500][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.969804][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.162313][ T6000] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.323883][ T6000] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.327595][ T6000] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.330876][ T6000] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.334172][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.341878][ T6405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.353252][ T6000] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.487219][ T6430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 77.489840][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.494549][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 77.629245][ T6431] vhci_hcd: connection closed [ 77.630416][ T58] vhci_hcd vhci_hcd.1: stop threads [ 77.636153][ T58] vhci_hcd vhci_hcd.1: release socket [ 77.638234][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 77.923869][ T6424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 77.928133][ T6424] Error validating options; rc = [-22] [ 78.272343][ T825] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.462768][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 78.545436][ T825] usb 8-1: Using ep0 maxpacket: 16 [ 78.568652][ T825] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.573109][ T825] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.576225][ T825] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.580209][ T825] usb 8-1: config 1 interface 0 has no altsetting 0 [ 78.587231][ T825] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.590414][ T825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.606524][ T825] usb 8-1: Product: syz [ 78.608044][ T825] usb 8-1: Manufacturer: syz [ 78.610272][ T825] usb 8-1: SerialNumber: syz [ 78.799195][ T10] usb 5-1: USB disconnect, device number 4 [ 79.252400][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.422211][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 79.427293][ T10] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 79.430498][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.433563][ T10] usb 5-1: Product: syz [ 79.435068][ T10] usb 5-1: Manufacturer: syz [ 79.436696][ T10] usb 5-1: SerialNumber: syz [ 79.440139][ T10] usb 5-1: config 0 descriptor?? [ 79.445563][ T10] cdc_ether 5-1:0.0: skipping garbage [ 79.447465][ T10] usb 5-1: bad CDC descriptors [ 79.449753][ T10] usb 5-1: unsupported MDLM descriptors [ 79.452023][ T10] cdc_acm 5-1:0.0: skipping garbage [ 79.790164][ T6463] binder_alloc: 6462: binder_alloc_buf, no vma [ 79.854640][ T6465] overlayfs: failed to get inode (-116) [ 79.857511][ T6465] overlayfs: failed to get inode (-116) [ 79.932973][ T6467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.335863][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 80.553601][ T825] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 80.573389][ T825] usb 8-1: USB disconnect, device number 4 [ 80.587291][ T825] usblp0: removed [ 81.167789][ T6495] kvm: user requested TSC rate below hardware speed [ 81.510832][ T10] usb 5-1: USB disconnect, device number 5 [ 82.072252][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 82.683143][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 82.683154][ T40] audit: type=1326 audit(1771039762.212:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.98" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x0 [ 82.917955][ T6542] pimreg: entered allmulticast mode [ 83.000962][ T6540] No control pipe specified [ 83.006729][ T6543] pimreg: left allmulticast mode [ 83.163095][ T6548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 83.165272][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.168183][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 83.176583][ T6548] netlink: 252 bytes leftover after parsing attributes in process `syz.2.102'. [ 83.202914][ T6549] vhci_hcd: connection closed [ 83.203097][ T12] vhci_hcd vhci_hcd.2: stop threads [ 83.206331][ T12] vhci_hcd vhci_hcd.2: release socket [ 83.208361][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 83.586420][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 83.660422][ T2303] libceph: connect (1)[c::]:6789 error -101 [ 83.663411][ T2303] libceph: mon0 (1)[c::]:6789 connect error [ 83.715165][ T6560] ceph: No mds server is up or the cluster is laggy [ 84.105047][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 84.965066][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 85.385564][ T6627] warning: `syz.2.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.590545][ T6639] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 85.602353][ T6639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.177846][ T6660] FAULT_INJECTION: forcing a failure. [ 86.177846][ T6660] name failslab, interval 1, probability 0, space 0, times 1 [ 86.181825][ T6660] CPU: 3 UID: 0 PID: 6660 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) [ 86.181839][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.181845][ T6660] Call Trace: [ 86.181849][ T6660] [ 86.181854][ T6660] dump_stack_lvl+0x100/0x190 [ 86.181872][ T6660] should_fail_ex.cold+0x5/0xa [ 86.181885][ T6660] should_failslab+0xc2/0x120 [ 86.181899][ T6660] __kmalloc_cache_node_noprof+0x7d/0x770 [ 86.181912][ T6660] ? __get_vm_area_node+0x101/0x330 [ 86.181929][ T6660] __get_vm_area_node+0x101/0x330 [ 86.181945][ T6660] __vmalloc_node_range_noprof+0x213/0x1530 [ 86.181962][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.181974][ T6660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.181991][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.182004][ T6660] ? find_held_lock+0x2b/0x80 [ 86.182019][ T6660] ? rcu_read_unlock+0x17/0x60 [ 86.182035][ T6660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.182055][ T6660] ? rcu_is_watching+0x12/0xc0 [ 86.182069][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.182081][ T6660] __vmalloc_node_noprof+0xad/0xf0 [ 86.182100][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.182114][ T6660] bpf_check+0x1c5/0xcc80 [ 86.182127][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.182149][ T6660] ? css_rstat_updated+0x1ce/0x5a0 [ 86.182169][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.182183][ T6660] ? __pfx_bpf_check+0x10/0x10 [ 86.182198][ T6660] ? find_held_lock+0x2b/0x80 [ 86.182211][ T6660] ? bpf_prog_load+0x1b83/0x2c20 [ 86.182225][ T6660] ? bpf_prog_load+0x1b83/0x2c20 [ 86.182239][ T6660] ? rcu_is_watching+0x12/0xc0 [ 86.182253][ T6660] ? __asan_memset+0x23/0x50 [ 86.182263][ T6660] ? lsm_blob_alloc+0x2b/0x90 [ 86.182276][ T6660] ? bpf_prog_load+0x1c86/0x2c20 [ 86.182289][ T6660] bpf_prog_load+0x1c86/0x2c20 [ 86.182303][ T6660] ? _parse_integer_limit+0x17f/0x1d0 [ 86.182318][ T6660] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.182332][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.182357][ T6660] __sys_bpf+0x223a/0x4b90 [ 86.182373][ T6660] ? __pfx___sys_bpf+0x10/0x10 [ 86.182388][ T6660] ? proc_fail_nth_write+0x9f/0x220 [ 86.182402][ T6660] ? find_held_lock+0x2b/0x80 [ 86.182419][ T6660] ? find_held_lock+0x2b/0x80 [ 86.182433][ T6660] ? ksys_write+0x190/0x250 [ 86.182447][ T6660] ? __mutex_unlock_slowpath+0x15c/0x790 [ 86.182471][ T6660] ? fput+0x79/0x100 [ 86.182486][ T6660] ? ksys_write+0x1ac/0x250 [ 86.182500][ T6660] __ia32_sys_bpf+0x79/0xf0 [ 86.182515][ T6660] ? lockdep_hardirqs_on+0x78/0x100 [ 86.182529][ T6660] __do_fast_syscall_32+0xe3/0x8c0 [ 86.182546][ T6660] do_fast_syscall_32+0x32/0x70 [ 86.182562][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.182574][ T6660] RIP: 0023:0xf6fcef6c [ 86.182583][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 86.182593][ T6660] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 86.182603][ T6660] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 86.182610][ T6660] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.182615][ T6660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.182621][ T6660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.182626][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.182639][ T6660] [ 86.302400][ T6660] syz.1.128: vmalloc error: size 384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 86.308102][ T6660] CPU: 2 UID: 0 PID: 6660 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) [ 86.308123][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.308132][ T6660] Call Trace: [ 86.308138][ T6660] [ 86.308145][ T6660] dump_stack_lvl+0x100/0x190 [ 86.308173][ T6660] warn_alloc.cold+0x95/0x1c1 [ 86.308198][ T6660] ? __pfx_warn_alloc+0x10/0x10 [ 86.308215][ T6660] ? rcu_is_watching+0x12/0xc0 [ 86.308235][ T6660] ? trace_kmalloc+0x83/0xb0 [ 86.308254][ T6660] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 86.308274][ T6660] ? __kasan_kmalloc+0x8a/0xb0 [ 86.308293][ T6660] ? __get_vm_area_node+0x208/0x330 [ 86.308319][ T6660] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 86.308341][ T6660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.308366][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.308386][ T6660] ? find_held_lock+0x2b/0x80 [ 86.308406][ T6660] ? rcu_read_unlock+0x17/0x60 [ 86.308429][ T6660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.308458][ T6660] ? rcu_is_watching+0x12/0xc0 [ 86.308478][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.308495][ T6660] __vmalloc_node_noprof+0xad/0xf0 [ 86.308518][ T6660] ? bpf_check+0x1c5/0xcc80 [ 86.308538][ T6660] bpf_check+0x1c5/0xcc80 [ 86.308557][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.308573][ T6660] ? css_rstat_updated+0x1ce/0x5a0 [ 86.308600][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.308619][ T6660] ? __pfx_bpf_check+0x10/0x10 [ 86.308642][ T6660] ? find_held_lock+0x2b/0x80 [ 86.308661][ T6660] ? bpf_prog_load+0x1b83/0x2c20 [ 86.308682][ T6660] ? bpf_prog_load+0x1b83/0x2c20 [ 86.308703][ T6660] ? rcu_is_watching+0x12/0xc0 [ 86.308723][ T6660] ? __asan_memset+0x23/0x50 [ 86.308738][ T6660] ? lsm_blob_alloc+0x2b/0x90 [ 86.308757][ T6660] ? bpf_prog_load+0x1c86/0x2c20 [ 86.308777][ T6660] bpf_prog_load+0x1c86/0x2c20 [ 86.308797][ T6660] ? _parse_integer_limit+0x17f/0x1d0 [ 86.308819][ T6660] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.308838][ T6660] ? __lock_acquire+0x4a5/0x2630 [ 86.308876][ T6660] __sys_bpf+0x223a/0x4b90 [ 86.308906][ T6660] ? __pfx___sys_bpf+0x10/0x10 [ 86.308928][ T6660] ? proc_fail_nth_write+0x9f/0x220 [ 86.308948][ T6660] ? find_held_lock+0x2b/0x80 [ 86.308972][ T6660] ? find_held_lock+0x2b/0x80 [ 86.308993][ T6660] ? ksys_write+0x190/0x250 [ 86.309014][ T6660] ? __mutex_unlock_slowpath+0x15c/0x790 [ 86.309048][ T6660] ? fput+0x79/0x100 [ 86.309069][ T6660] ? ksys_write+0x1ac/0x250 [ 86.309090][ T6660] __ia32_sys_bpf+0x79/0xf0 [ 86.309113][ T6660] ? lockdep_hardirqs_on+0x78/0x100 [ 86.309134][ T6660] __do_fast_syscall_32+0xe3/0x8c0 [ 86.309158][ T6660] do_fast_syscall_32+0x32/0x70 [ 86.309179][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.309198][ T6660] RIP: 0023:0xf6fcef6c [ 86.309211][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 86.309225][ T6660] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 86.309239][ T6660] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 86.309248][ T6660] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.309257][ T6660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.309265][ T6660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.309274][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.309294][ T6660] [ 86.309299][ T6660] Mem-Info: [ 86.320860][ T1321] cfg80211: failed to load regulatory.db [ 86.324048][ T6660] active_anon:11562 inactive_anon:1 isolated_anon:0 [ 86.324048][ T6660] active_file:4525 inactive_file:34803 isolated_file:0 [ 86.324048][ T6660] unevictable:1768 dirty:483 writeback:0 [ 86.324048][ T6660] slab_reclaimable:6093 slab_unreclaimable:51547 [ 86.324048][ T6660] mapped:31009 shmem:7933 pagetables:1128 [ 86.324048][ T6660] sec_pagetables:309 bounce:0 [ 86.324048][ T6660] kernel_misc_reclaimable:0 [ 86.324048][ T6660] free:52036 free_pcp:14977 free_cma:0 [ 86.437925][ T6660] Node 0 active_anon:2356kB inactive_anon:4kB active_file:288kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2456kB dirty:12kB writeback:0kB shmem:5720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:1592kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB [ 86.447901][ T6660] Node 1 active_anon:43876kB inactive_anon:0kB active_file:17812kB inactive_file:139192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:121592kB dirty:1920kB writeback:0kB shmem:26012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4512kB pagetables:2976kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB [ 86.458025][ T6660] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:96kB free_cma:0kB [ 86.467456][ T6660] lowmem_reserve[]: 0 286 286 286 286 [ 86.469210][ T6660] Node 0 DMA32 free:15768kB boost:0kB min:13088kB low:16360kB high:19632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2356kB inactive_anon:4kB active_file:288kB inactive_file:20kB unevictable:3536kB writepending:12kB zspages:0kB present:1032196kB managed:293804kB mlocked:0kB bounce:0kB free_pcp:11224kB local_pcp:3360kB free_cma:0kB [ 86.479674][ T6660] lowmem_reserve[]: 0 0 0 0 0 [ 86.481231][ T6660] Node 1 DMA32 free:190220kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43876kB inactive_anon:0kB active_file:17812kB inactive_file:139192kB unevictable:3536kB writepending:1920kB zspages:2340kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:48524kB local_pcp:18592kB free_cma:0kB [ 86.491656][ T6660] lowmem_reserve[]: 0 0 0 0 0 [ 86.493237][ T6660] Node 0 DMA: 5*4kB (UM) 3*8kB (UM) 2*16kB (U) 4*32kB (U) 5*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2060kB [ 86.497693][ T6660] Node 0 DMA32: 654*4kB (UME) 92*8kB (UE) 2*16kB (ME) 61*32kB (UE) 19*64kB (UME) 6*128kB (UME) 9*256kB (UM) 10*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 15768kB [ 86.502970][ T6660] Node 1 DMA32: 517*4kB (UME) 602*8kB (UME) 420*16kB (UE) 109*32kB (UE) 120*64kB (UME) 37*128kB (UE) 18*256kB (UE) 17*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 30*4096kB (UM) = 190276kB [ 86.508725][ T6660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.511730][ T6660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.514719][ T6660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.517786][ T6660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.520704][ T6660] 48021 total pagecache pages [ 86.522323][ T6660] 764 pages in swap cache [ 86.523712][ T6660] Free swap = 117488kB [ 86.525059][ T6660] Total swap = 124996kB [ 86.526395][ T6660] 524155 pages RAM [ 86.527605][ T6660] 0 pages HighMem/MovableOnly [ 86.529129][ T6660] 209811 pages reserved [ 86.530467][ T6660] 0 pages cma reserved [ 86.731900][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.803100][ T40] audit: type=1326 audit(1771039766.332:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.830232][ T40] audit: type=1326 audit(1771039766.332:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.859216][ T40] audit: type=1326 audit(1771039766.332:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.871375][ T40] audit: type=1326 audit(1771039766.342:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.878972][ T40] audit: type=1326 audit(1771039766.342:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.886663][ T40] audit: type=1326 audit(1771039766.342:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.900937][ T40] audit: type=1326 audit(1771039766.342:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f572b code=0x7ffc0000 [ 86.917034][ T40] audit: type=1326 audit(1771039766.342:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.931157][ T6400] udevd[6400]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 86.934406][ T40] audit: type=1326 audit(1771039766.342:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 86.953213][ T6682] netlink: 14 bytes leftover after parsing attributes in process `syz.2.135'. [ 86.984291][ T6682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.991725][ T6682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.004398][ T6682] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 87.004450][ T6683] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 87.025017][ T6682] bond0 (unregistering): Released all slaves [ 87.171318][ T6690] netlink: 'syz.3.136': attribute type 39 has an invalid length. [ 87.745277][ T40] kauditd_printk_skb: 240 callbacks suppressed [ 87.745291][ T40] audit: type=1326 audit(1771039767.272:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.752600][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 87.755146][ T40] audit: type=1326 audit(1771039767.282:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70bef87 code=0x7ffc0000 [ 87.772351][ T40] audit: type=1326 audit(1771039767.282:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.778907][ T40] audit: type=1326 audit(1771039767.282:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70bef87 code=0x7ffc0000 [ 87.792578][ T40] audit: type=1326 audit(1771039767.282:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.799151][ T40] audit: type=1326 audit(1771039767.292:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.809106][ T40] audit: type=1326 audit(1771039767.292:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70bef87 code=0x7ffc0000 [ 87.816655][ T40] audit: type=1326 audit(1771039767.292:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.824269][ T40] audit: type=1326 audit(1771039767.312:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 87.831284][ T40] audit: type=1326 audit(1771039767.312:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70bef87 code=0x7ffc0000 [ 88.057156][ T6704] nbd: socks must be embedded in a SOCK_ITEM attr [ 88.059348][ T6071] block nbd64: NBD_DISCONNECT [ 88.061505][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 88.073778][ T6709] nbd: socks must be embedded in a SOCK_ITEM attr [ 88.201064][ T6400] block nbd64: NBD_DISCONNECT [ 88.361155][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 89.301723][ T6783] fuse: Unknown parameter 'ffjœX' [ 89.304410][ T1339] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.315594][ T6783] overlay: Unknown parameter 'hash' [ 89.475586][ T1339] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.478619][ T1339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.481361][ T1339] usb 5-1: Product: syz [ 89.484030][ T1339] usb 5-1: Manufacturer: syz [ 89.485529][ T1339] usb 5-1: SerialNumber: syz [ 89.509650][ T1339] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.549904][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.755291][ T1321] usb 5-1: USB disconnect, device number 6 [ 90.263985][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 90.299379][ T6806] nbd: socks must be embedded in a SOCK_ITEM attr [ 90.318217][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 90.321662][ T6806] nbd: nbd64 already in use [ 90.494364][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 90.602350][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 90.604962][ T24] ath9k_htc: Failed to initialize the device [ 90.608146][ T1321] usb 5-1: ath9k_htc: USB layer deinitialized [ 91.931987][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 92.187775][ T6849] Illegal XDP return value 4294967294 on prog (id 10) dev N/A, expect packet loss! [ 92.195310][ T6841] fuse: Unknown parameter 'rootmod%' [ 92.331414][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 93.505655][ T6892] pim6reg: entered allmulticast mode [ 93.508730][ T6892] team0: entered allmulticast mode [ 93.513425][ T6892] team_slave_0: entered allmulticast mode [ 93.515980][ T6892] team_slave_1: entered allmulticast mode [ 93.529088][ T6893] team0: left allmulticast mode [ 93.530673][ T6893] team_slave_0: left allmulticast mode [ 93.532686][ T6893] team_slave_1: left allmulticast mode [ 93.534770][ T6893] pim6reg: left allmulticast mode [ 93.660185][ T6899] netlink: 56 bytes leftover after parsing attributes in process `syz.2.163'. [ 93.923022][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 95.375540][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 95.516300][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 95.518630][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.521480][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.524723][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(20) [ 95.526841][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.529420][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.532130][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(22) [ 95.534260][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.536889][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.550264][ T6926] block device autoloading is deprecated and will be removed. [ 95.600870][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(24) [ 95.603004][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.606392][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.642692][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(26) [ 95.645160][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.648142][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.661179][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(28) [ 95.663420][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.667243][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.669720][ T6954] netlink: 'syz.0.171': attribute type 39 has an invalid length. [ 95.672563][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(30) [ 95.674657][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.677301][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.686592][ T6954] veth0_macvtap: left promiscuous mode [ 95.688753][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(32) [ 95.691054][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.693953][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 95.718476][ T6930] vhci_hcd vhci_hcd.0: port 0 already used [ 95.729623][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.168'. [ 95.784618][ T1336] usb 40-1: SetAddress Request (3) to port 0 [ 95.799511][ T1336] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 95.823628][ T6957] vhci_hcd: connection closed [ 95.824446][ T6955] vhci_hcd: connection closed [ 95.824688][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.831336][ T6948] vhci_hcd: connection closed [ 95.831343][ T6951] vhci_hcd: connection closed [ 95.834250][ T6942] vhci_hcd: connection closed [ 95.834279][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.836277][ T6934] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 95.837911][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.839876][ T6938] vhci_hcd: connection closed [ 95.842899][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.844066][ T6935] vhci_hcd: connection closed [ 95.846151][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.847925][ T6933] vhci_hcd: connection closed [ 95.849816][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.857578][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.862497][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.865727][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.869069][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.873003][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.877233][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.892852][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.896877][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.899532][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.903580][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.906880][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.909371][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.911981][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.915263][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.917615][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 95.934987][ T70] vhci_hcd vhci_hcd.1: stop threads [ 95.937223][ T70] vhci_hcd vhci_hcd.1: release socket [ 95.939939][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 96.049375][ T6974] netlink: 'syz.1.174': attribute type 39 has an invalid length. [ 96.315588][ T6987] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 96.682566][ T6990] bond1: (slave geneve2): making interface the new active one [ 96.686490][ T6990] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.692063][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.714561][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.730216][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.743022][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.775563][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 96.788667][ T6994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.176'. [ 97.208062][ T7002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.484878][ T7011] loop6: detected capacity change from 0 to 7 [ 97.493508][ T7011] Dev loop6: unable to read RDB block 7 [ 97.496046][ T7011] loop6: unable to read partition table [ 97.498397][ T7011] loop6: partition table beyond EOD, truncated [ 97.500560][ T7011] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.242034][ T7023] capability: warning: `syz.0.186' uses deprecated v2 capabilities in a way that may be insecure [ 98.643918][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.092345][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.111432][ T7037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.111441][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.121629][ T7045] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 99.968601][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 101.222453][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 101.222469][ T40] audit: type=1326 audit(1771039780.552:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.231150][ T40] audit: type=1326 audit(1771039780.552:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.238154][ T40] audit: type=1326 audit(1771039780.552:493): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.245588][ T40] audit: type=1326 audit(1771039780.552:494): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d572b code=0x7ffc0000 [ 101.252563][ T40] audit: type=1326 audit(1771039780.552:495): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.259314][ T40] audit: type=1326 audit(1771039780.552:496): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.266309][ T40] audit: type=1326 audit(1771039780.552:497): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.273282][ T40] audit: type=1326 audit(1771039780.552:498): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.280045][ T40] audit: type=1326 audit(1771039780.552:499): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.287498][ T40] audit: type=1326 audit(1771039780.552:500): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.197" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 101.333093][ T1336] usb 40-1: device descriptor read/8, error -110 [ 101.651047][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 101.963951][ T7105] ======================================================= [ 101.963951][ T7105] WARNING: The mand mount option has been deprecated and [ 101.963951][ T7105] and is ignored by this kernel. Remove the mand [ 101.963951][ T7105] option from the mount to silence this warning. [ 101.963951][ T7105] ======================================================= [ 102.070612][ T7105] mmap: syz.1.204 (7105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.075536][ T1336] usb usb40-port1: attempt power cycle [ 102.693479][ T1336] usb usb40-port1: unable to enumerate USB device [ 103.244807][ T7136] fuse: Bad value for 'user_id' [ 103.246804][ T7136] fuse: Bad value for 'user_id' [ 103.473262][ T7146] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.579412][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 103.853467][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 104.230819][ T7171] smc: net device bond0 applied user defined pnetid SYZ2 [ 104.824966][ T7187] netlink: 'syz.1.221': attribute type 3 has an invalid length. [ 105.073790][ T7192] No such timeout policy "syz1" [ 105.348540][ T7218] netlink: 'syz.1.229': attribute type 8 has an invalid length. [ 105.443527][ T7223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.463434][ T7223] block device autoloading is deprecated and will be removed. [ 106.497420][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 107.079287][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 107.453402][ T7292] overlay: Unknown parameter 'fscontext' [ 107.981245][ T7318] kAFS: unparsable volume name [ 108.057469][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 108.381386][ T7327] 9pnet_virtio: no channels available for device syz [ 108.383889][ T7326] 9pnet_virtio: no channels available for device syz [ 109.253944][ T7349] syzkaller0: entered promiscuous mode [ 109.255712][ T7349] syzkaller0: entered allmulticast mode [ 109.261193][ T7349] tipc: Started in network mode [ 109.269246][ T7349] tipc: Node identity 66e93dcea2c7, cluster identity 4711 [ 109.271927][ T7349] tipc: Enabled bearer , priority 0 [ 109.289831][ T7349] tipc: Resetting bearer [ 109.299242][ T7348] tipc: Resetting bearer [ 109.309795][ T7348] tipc: Disabling bearer [ 109.450444][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 109.772602][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 111.394327][ T7384] netlink: 68 bytes leftover after parsing attributes in process `syz.0.259'. [ 111.404365][ T7384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.407638][ T7384] IPv6: NLM_F_CREATE should be set when creating new route [ 111.477738][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.481586][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.558667][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.567421][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.568479][ T7406] evm: overlay not supported [ 111.577102][ T7407] overlayfs: failed lookup in lower (newroot/72, name='file1', err=-40): overlapping layers [ 111.641525][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 111.678813][ T1339] syz0: Port: 1 Link DOWN [ 111.679974][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.692706][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.695543][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.698322][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.004230][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 112.625405][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.783953][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.787702][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.790709][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.802215][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.805090][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.810270][ T34] usb 8-1: config 0 descriptor?? [ 113.227839][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.230306][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.234373][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.236727][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.239044][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.241377][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.244082][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.246554][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.252786][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.255262][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.273829][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.515111][ T34] usb 8-1: USB disconnect, device number 6 [ 113.572220][ T2303] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 113.694602][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 113.737051][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.739940][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.744665][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.752333][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.756031][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.764314][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.767135][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.771740][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.779317][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.782945][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.790034][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.792737][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.796656][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.803777][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.814304][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.825117][ T2303] usb 5-1: string descriptor 0 read error: -22 [ 113.827193][ T2303] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.830043][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.845425][ T2303] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 114.282321][ T1336] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 114.433621][ T1336] usb 8-1: config 0 has an invalid interface number: 157 but max is 3 [ 114.436246][ T1336] usb 8-1: config 0 has an invalid interface number: 115 but max is 3 [ 114.452196][ T1336] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 114.455074][ T1336] usb 8-1: config 0 has an invalid interface number: 111 but max is 3 [ 114.457637][ T1336] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 114.460404][ T1336] usb 8-1: config 0 has an invalid interface number: 161 but max is 3 [ 114.463401][ T1336] usb 8-1: config 0 has no interface number 0 [ 114.465458][ T1336] usb 8-1: config 0 has no interface number 1 [ 114.467989][ T1336] usb 8-1: config 0 has no interface number 2 [ 114.469940][ T1336] usb 8-1: config 0 has no interface number 3 [ 114.471983][ T1336] usb 8-1: config 0 interface 157 altsetting 128 bulk endpoint 0x89 has invalid maxpacket 1024 [ 114.475705][ T1336] usb 8-1: config 0 interface 157 altsetting 128 endpoint 0x6 has an invalid bInterval 129, changing to 11 [ 114.479289][ T1336] usb 8-1: config 0 interface 157 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 114.482955][ T1336] usb 8-1: config 0 interface 157 altsetting 128 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 114.486507][ T1336] usb 8-1: config 0 interface 157 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 114.489900][ T1336] usb 8-1: config 0 interface 157 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 114.493645][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 114.497590][ T1336] usb 8-1: config 0 interface 115 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 114.500985][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 114.504605][ T1336] usb 8-1: config 0 interface 115 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 114.508102][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 114.511449][ T1336] usb 8-1: config 0 interface 115 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 114.515222][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 114.518730][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 114.522092][ T1336] usb 8-1: config 0 interface 115 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 114.525702][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 114.529132][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 114.532679][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 114.536205][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 114.539773][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 114.544316][ T1336] usb 8-1: config 0 interface 111 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.547393][ T1336] usb 8-1: config 0 interface 111 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 114.550883][ T1336] usb 8-1: config 0 interface 111 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 114.554625][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 114.557998][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 114.561510][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 114.565182][ T1336] usb 8-1: config 0 interface 111 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 114.569853][ T1336] usb 8-1: config 0 interface 161 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 114.573422][ T1336] usb 8-1: config 0 interface 161 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 114.576760][ T1336] usb 8-1: config 0 interface 161 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 114.580101][ T1336] usb 8-1: config 0 interface 161 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 114.583746][ T1336] usb 8-1: config 0 interface 157 has no altsetting 0 [ 114.585898][ T1336] usb 8-1: config 0 interface 115 has no altsetting 0 [ 114.588061][ T1336] usb 8-1: config 0 interface 161 has no altsetting 0 [ 114.591882][ T1336] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=b1.ef [ 114.595476][ T1336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.598037][ T1336] usb 8-1: Product: 䜟í±ê‘¾â‚‘ᆛ④쇈ꆗ퀡â™ç€Žì´ê¾§îº²é‚³å‡¶è¹ªé–軸盈︎生ç²è§«â¿“╱ኑ弨䞫åœá™—⇰Ç仸᠅䌊牃㲘å„쓰夻ѽ஦췒ﬞ柌 [ 114.603157][ T1336] usb 8-1: Manufacturer: †[ 114.604662][ T1336] usb 8-1: SerialNumber: ヿ轉ک耺ꑛ期ç†ï¶Ÿî˜¡é¼­â⋸ບﮌ [ 114.613948][ T1336] usb 8-1: config 0 descriptor?? [ 114.616090][ T7478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.853414][ T1336] kaweth 8-1:0.157: Firmware present in device. [ 114.862223][ T1336] kaweth 8-1:0.157: Error reading configuration (-71), no net device created [ 114.865351][ T1336] kaweth 8-1:0.157: probe with driver kaweth failed with error -5 [ 114.899177][ T1336] kaweth 8-1:0.115: Firmware present in device. [ 114.911341][ T1336] kaweth 8-1:0.115: Error reading configuration (-71), no net device created [ 114.914390][ T1336] kaweth 8-1:0.115: probe with driver kaweth failed with error -5 [ 114.930852][ T1336] kaweth 8-1:0.111: Firmware present in device. [ 114.936018][ T1336] kaweth 8-1:0.111: Error reading configuration (-71), no net device created [ 114.936734][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 114.939118][ T1336] kaweth 8-1:0.111: probe with driver kaweth failed with error -5 [ 114.973840][ T1336] kaweth 8-1:0.161: Firmware present in device. [ 114.977483][ T1336] kaweth 8-1:0.161: Error reading configuration (-71), no net device created [ 114.980422][ T1336] kaweth 8-1:0.161: probe with driver kaweth failed with error -5 [ 114.985999][ T1336] usb 8-1: USB disconnect, device number 7 [ 115.828191][ T35] ------------[ cut here ]------------ [ 115.830169][ T35] UBSAN: shift-out-of-bounds in drivers/ata/libata-core.c:5166:24 [ 115.832701][ T35] shift exponent 4210818301 is too large for 64-bit type 'long long unsigned int' [ 115.837021][ T35] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0H Not tainted syzkaller #0 PREEMPT(full) [ 115.837034][ T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.837042][ T35] Workqueue: events_highpri ata_scsi_deferred_qc_work [ 115.837059][ T35] Call Trace: [ 115.837063][ T35] [ 115.837068][ T35] dump_stack_lvl+0x100/0x190 [ 115.837085][ T35] ubsan_epilogue+0xa/0x30 [ 115.837096][ T35] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 115.837114][ T35] ata_qc_issue.cold+0x90/0x9f [ 115.837130][ T35] ? ata_std_qc_defer+0x14b/0x190 [ 115.837144][ T35] ata_scsi_deferred_qc_work+0x154/0x1f0 [ 115.837158][ T35] process_one_work+0x9c2/0x1840 [ 115.837176][ T35] ? __pfx_process_one_work+0x10/0x10 [ 115.837193][ T35] ? __pfx_ata_scsi_deferred_qc_work+0x10/0x10 [ 115.837207][ T35] worker_thread+0x5da/0xe40 [ 115.837232][ T35] ? kthread+0x13a/0x450 [ 115.837247][ T35] ? __pfx_worker_thread+0x10/0x10 [ 115.837266][ T35] kthread+0x370/0x450 [ 115.837281][ T35] ? __pfx_kthread+0x10/0x10 [ 115.837298][ T35] ret_from_fork+0x754/0xd80 [ 115.837320][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 115.837340][ T35] ? __switch_to+0x7b4/0x10c0 [ 115.837355][ T35] ? __pfx_kthread+0x10/0x10 [ 115.837375][ T35] ret_from_fork_asm+0x1a/0x30 [ 115.837403][ T35] [ 115.837408][ T35] ---[ end trace ]--- [ 115.881129][ T35] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 115.883420][ T35] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0H Not tainted syzkaller #0 PREEMPT(full) [ 115.886330][ T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.889515][ T35] Workqueue: events_highpri ata_scsi_deferred_qc_work [ 115.891692][ T35] Call Trace: [ 115.892768][ T35] [ 115.893727][ T35] dump_stack_lvl+0x100/0x190 [ 115.895236][ T35] vpanic+0x552/0x970 [ 115.896529][ T35] ? __pfx_vpanic+0x10/0x10 [ 115.897990][ T35] panic+0xd1/0xe0 [ 115.899200][ T35] ? __pfx_panic+0x10/0x10 [ 115.900639][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 115.902240][ T35] ? check_panic_on_warn+0x1f/0x90 [ 115.903882][ T35] check_panic_on_warn.cold+0x19/0x34 [ 115.905594][ T35] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 115.907645][ T35] ata_qc_issue.cold+0x90/0x9f [ 115.909182][ T35] ? ata_std_qc_defer+0x14b/0x190 [ 115.910794][ T35] ata_scsi_deferred_qc_work+0x154/0x1f0 [ 115.912614][ T35] process_one_work+0x9c2/0x1840 [ 115.914235][ T35] ? __pfx_process_one_work+0x10/0x10 [ 115.915960][ T35] ? __pfx_ata_scsi_deferred_qc_work+0x10/0x10 [ 115.917914][ T35] worker_thread+0x5da/0xe40 [ 115.919403][ T35] ? kthread+0x13a/0x450 [ 115.920775][ T35] ? __pfx_worker_thread+0x10/0x10 [ 115.922416][ T35] kthread+0x370/0x450 [ 115.923828][ T35] ? __pfx_kthread+0x10/0x10 [ 115.925323][ T35] ret_from_fork+0x754/0xd80 [ 115.926809][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 115.928465][ T35] ? __switch_to+0x7b4/0x10c0 [ 115.929983][ T35] ? __pfx_kthread+0x10/0x10 [ 115.931482][ T35] ret_from_fork_asm+0x1a/0x30 [ 115.933040][ T35] [ 117.000844][ T35] Shutting down cpus with NMI [ 117.003053][ T35] Kernel Offset: disabled [ 117.004503][ T35] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:29:55 Registers: info registers vcpu 0 CPU#0 RAX=000000475122dcb2 RBX=ffff88802b223f80 RCX=00000000000006e0 RDX=0000000000000047 RSI=ffff88802b223f80 RDI=0000000000000a77 RBP=0000000000000a77 RSP=ffffc900071ffa30 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=ffffffff940964c0 RIP=ffffffff81b3db55 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097192000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f741b608 CR3=0000000055af5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000056 RBX=ffff88802a85afc0 RCX=0000000000000001 RDX=0000000073af3e20 RSI=000000003e5bda27 RDI=000000006e619b00 RBP=ffff88802a85a480 RSP=ffffc90000590d80 R8 =000000003005c0d9 R9 =0000000000000056 R10=ffffffff9b189d48 R11=0000000000000001 R12=0000000000000000 R13=0000000000000056 R14=0000000000020000 R15=d5b862aa73af3e20 RIP=ffffffff81e2d5f5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097292000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3ee2b4 CR3=000000005fa93000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000036d71b70 RCX=ffffffff84eaebf4 RDX=0000000000000432 RSI=0000000000000000 RDI=ffff88802516c900 RBP=ffff88805c92ebce RSP=ffffc9000402f190 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000432 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000432 R14=0000000000000431 R15=0000000000000000 RIP=ffffffff82066b90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5996161300 ffffffff 00c00000 GS =0000 ffff888097392000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055db5a99f000 CR3=000000004d815000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000126 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003180800060800 2008000600738406 000003e700000002 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7300030009000000 00317a7973000100 090700000a000000 000000000001010a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000002c000000 00317a7973000100 0902000000400200 080700000a000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000030a 00000000280a0000 0500000000000000 0000010010000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1401c40809800309 8002028003028002 0390030008000388 030fffffffff0203 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2204000df8032808 000df00308048400 0dec030002000dea 031402000de80300 ZMM25=1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa 1ee140fa1ee140fa ZMM26=87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf 87cfe5bf87cfe5bf ZMM27=eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb eede87ebeede87eb ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9a0300009a030000 9a0300009a030000 9a0300009a030000 9a0300009a030000 9a0300009a030000 9a0300009a030000 9a0300009a030000 9a0300009a030000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856cd705 RDI=ffffffff9b445dc0 RBP=ffffffff9b445d80 RSP=ffffc900005df650 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000005d R14=0000000000000010 R15=ffffffff856cd6a0 RIP=ffffffff856cd72f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097492000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080d52018 CR3=000000006e737000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000