last executing test programs: 21.589893173s ago: executing program 1 (id=908): syz_io_uring_setup(0x4005a5f, &(0x7f0000000640)={0x0, 0xec27, 0x80, 0x0, 0x386}, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 21.589538355s ago: executing program 2 (id=909): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4005a5f, &(0x7f0000000640)={0x0, 0xec27, 0x80, 0x0, 0x386}, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}}], 0x1, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 20.668655136s ago: executing program 2 (id=911): syz_io_uring_setup(0x4005a5f, &(0x7f0000000640)={0x0, 0xec27, 0x80, 0x0, 0x386}, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 19.760379286s ago: executing program 1 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)={0xb, 0x29, 0x1, {0x6}}, 0xb) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) readv(r0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 19.609845853s ago: executing program 3 (id=914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, r3, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 19.239414149s ago: executing program 0 (id=915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 19.220373648s ago: executing program 3 (id=923): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x25, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r1, r2, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) setrlimit(0x2, &(0x7f0000000500)={0x10001, 0x6}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, 0x0) 18.930402948s ago: executing program 2 (id=916): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f0000000000)={0x4000, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, {0x0, 0x0, 0x0, 0xd}, {0x0, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x0) 18.761932562s ago: executing program 1 (id=917): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x72}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, {0x0, 0x0, 0x0, 0xd}, {0x0, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x0) 18.140207875s ago: executing program 0 (id=918): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, r3, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 18.139867614s ago: executing program 3 (id=919): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a00000000000000fe8000000000000000000000000000bb00"/112], 0x70}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) close(r7) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r9, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r9}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18.082249798s ago: executing program 1 (id=920): syz_io_uring_setup(0x19ff, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) lseek(0xffffffffffffffff, 0x9, 0x0) 18.01308904s ago: executing program 2 (id=921): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x10e41e77, 0x20000000, 0xac5a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setrlimit(0x0, &(0x7f00000003c0)={0x4, 0x100}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0xc, 0x2, 0x3, 0x4b2, "0000000000f4ff00", "01090700", "71efff7f", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c974f8b084000", "0001ff00"]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000180)={0x0, 0x0, 0x5, {0x80000004, 0xfffffff8, 0x7ffb, 0x2}}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x0, 0x25, 0x148, 0x340, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'bridge_slave_1\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x48}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) 17.342613083s ago: executing program 3 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 17.130089162s ago: executing program 0 (id=924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 16.936023824s ago: executing program 2 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x7fffffffffffef9, 0x40000002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 16.890000343s ago: executing program 0 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)={0xb, 0x29, 0x1, {0x6}}, 0xb) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) readv(r0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 16.458924281s ago: executing program 1 (id=927): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x25, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r1, r2, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) setrlimit(0x2, &(0x7f0000000500)={0x10001, 0x6}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, 0x0) 15.116980518s ago: executing program 3 (id=928): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$notify(r1, 0x402, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000280)={0xb, 0x29, 0x1, {0x6}}, 0xb) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) readv(r0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 15.116568452s ago: executing program 0 (id=929): syz_io_uring_setup(0x4005a5f, &(0x7f0000000640)={0x0, 0xec27, 0x80, 0x0, 0x386}, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 15.116271592s ago: executing program 1 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20) 14.670127835s ago: executing program 2 (id=931): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket(0x2b, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) accept4$unix(r0, &(0x7f0000000300), 0x0, 0x800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 14.40983085s ago: executing program 0 (id=932): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x1e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r5 = syz_open_dev$vcsu(0x0, 0x800, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r5, 0x10000000) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0xfffffffdffffffff) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22890' (ED25519) to the list of known hosts. [ 42.015094][ T5869] cgroup: Unknown subsys name 'net' [ 42.184921][ T5869] cgroup: Unknown subsys name 'cpuset' [ 42.191175][ T5869] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.069318][ T5869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.347782][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.351557][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.355169][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.358630][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.358805][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.362466][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.367079][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.370448][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.372959][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.376489][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.379210][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.382130][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.384566][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.385983][ T69] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.387720][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.390647][ T69] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.393230][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.395775][ T69] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.397627][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.400098][ T69] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.736034][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.743223][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.806525][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 46.948695][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 47.050144][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.052928][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.055335][ T5959] bridge_slave_0: entered allmulticast mode [ 47.058090][ T5959] bridge_slave_0: entered promiscuous mode [ 47.061888][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.064679][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.067567][ T5947] bridge_slave_0: entered allmulticast mode [ 47.070670][ T5947] bridge_slave_0: entered promiscuous mode [ 47.098716][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.102715][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.105348][ T5956] bridge_slave_0: entered allmulticast mode [ 47.107945][ T5956] bridge_slave_0: entered promiscuous mode [ 47.111361][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.113749][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.116071][ T5956] bridge_slave_1: entered allmulticast mode [ 47.118678][ T5956] bridge_slave_1: entered promiscuous mode [ 47.137031][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.139348][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.141682][ T5959] bridge_slave_1: entered allmulticast mode [ 47.145131][ T5959] bridge_slave_1: entered promiscuous mode [ 47.148359][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.151756][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.154829][ T5947] bridge_slave_1: entered allmulticast mode [ 47.158756][ T5947] bridge_slave_1: entered promiscuous mode [ 47.202977][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.242758][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.269469][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.290008][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.322542][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.326282][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.329520][ T5952] bridge_slave_0: entered allmulticast mode [ 47.333685][ T5952] bridge_slave_0: entered promiscuous mode [ 47.362588][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.389356][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.392516][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.395587][ T5952] bridge_slave_1: entered allmulticast mode [ 47.400389][ T5952] bridge_slave_1: entered promiscuous mode [ 47.419425][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.442057][ T5947] team0: Port device team_slave_0 added [ 47.467019][ T5956] team0: Port device team_slave_0 added [ 47.493132][ T5947] team0: Port device team_slave_1 added [ 47.511340][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.516038][ T5956] team0: Port device team_slave_1 added [ 47.547403][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.587949][ T5959] team0: Port device team_slave_0 added [ 47.643646][ T5959] team0: Port device team_slave_1 added [ 47.646720][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.649808][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.657819][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.662540][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.664908][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.674380][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.679933][ T5952] team0: Port device team_slave_0 added [ 47.682421][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.684857][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.697484][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.735385][ T5952] team0: Port device team_slave_1 added [ 47.738158][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.741176][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.751327][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.770952][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.773185][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.782353][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.833420][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.836176][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.846958][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.858795][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.862985][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.872351][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.896298][ T5947] hsr_slave_0: entered promiscuous mode [ 47.898631][ T5947] hsr_slave_1: entered promiscuous mode [ 47.928065][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.930331][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.938409][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.996792][ T5956] hsr_slave_0: entered promiscuous mode [ 47.999052][ T5956] hsr_slave_1: entered promiscuous mode [ 48.001333][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.003784][ T5956] Cannot create hsr debugfs directory [ 48.042566][ T5959] hsr_slave_0: entered promiscuous mode [ 48.045795][ T5959] hsr_slave_1: entered promiscuous mode [ 48.048615][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.051797][ T5959] Cannot create hsr debugfs directory [ 48.198444][ T5952] hsr_slave_0: entered promiscuous mode [ 48.201266][ T5952] hsr_slave_1: entered promiscuous mode [ 48.203506][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.206589][ T5952] Cannot create hsr debugfs directory [ 48.470268][ T5951] Bluetooth: hci0: command tx timeout [ 48.470274][ T5305] Bluetooth: hci2: command tx timeout [ 48.470536][ T69] Bluetooth: hci3: command tx timeout [ 48.479887][ T69] Bluetooth: hci1: command tx timeout [ 48.502778][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.510817][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.524888][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.534880][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.546325][ T5956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.553265][ T5956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.561972][ T5956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.566063][ T5956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.616925][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.624630][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.629455][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.633752][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.695492][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.717171][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.723538][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.733282][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.735874][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.754207][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.773641][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.776060][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.790673][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.795548][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.797843][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.832122][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.842022][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.844311][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.862613][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.864974][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.873708][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.910733][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.925535][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.928397][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.946053][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.948344][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.962448][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.986660][ T5959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.992051][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.003632][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.016943][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.019938][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.047716][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.050205][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.067863][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.104756][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.147941][ T5947] veth0_vlan: entered promiscuous mode [ 49.155424][ T5947] veth1_vlan: entered promiscuous mode [ 49.158411][ T5956] veth0_vlan: entered promiscuous mode [ 49.166274][ T5956] veth1_vlan: entered promiscuous mode [ 49.174040][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.198692][ T5947] veth0_macvtap: entered promiscuous mode [ 49.208511][ T5947] veth1_macvtap: entered promiscuous mode [ 49.230369][ T5959] veth0_vlan: entered promiscuous mode [ 49.237161][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.245058][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.252083][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.255822][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.258686][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.261873][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.268821][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.273309][ T5956] veth0_macvtap: entered promiscuous mode [ 49.282749][ T5959] veth1_vlan: entered promiscuous mode [ 49.287999][ T5956] veth1_macvtap: entered promiscuous mode [ 49.319764][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.323617][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.327532][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.340172][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.343457][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.347369][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.365984][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.370547][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.374509][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.377379][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.396418][ T5959] veth0_macvtap: entered promiscuous mode [ 49.400719][ T5952] veth0_vlan: entered promiscuous mode [ 49.407337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.411325][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.418612][ T5959] veth1_macvtap: entered promiscuous mode [ 49.426313][ T5952] veth1_vlan: entered promiscuous mode [ 49.439852][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.442289][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.453014][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.456821][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.460510][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.464296][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.470083][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.483476][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.490011][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.493934][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.497248][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.500680][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.503992][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.508201][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.517935][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.523916][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.525416][ T5959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526702][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.531808][ T5959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.535995][ T5959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.538862][ T5959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.544955][ T5952] veth0_macvtap: entered promiscuous mode [ 49.561792][ T5952] veth1_macvtap: entered promiscuous mode [ 49.596848][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.599691][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.602499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.602961][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.608837][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.610501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.614669][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.615316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.618417][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.622078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.624922][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.631317][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.652115][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.652503][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.656647][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.656659][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.656668][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.656674][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.656681][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.657526][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.661186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.665433][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690478][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693470][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.696311][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.794758][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.797327][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.104552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.109312][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.169545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.172321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.549625][ T69] Bluetooth: hci1: command tx timeout [ 50.552499][ T5951] Bluetooth: hci0: command tx timeout [ 50.552663][ T5955] Bluetooth: hci2: command tx timeout [ 50.557421][ T5305] Bluetooth: hci3: command tx timeout [ 50.676254][ T6031] macsec0: entered promiscuous mode [ 50.678933][ T6031] macsec0: entered allmulticast mode [ 50.680766][ T6031] veth1_macvtap: entered allmulticast mode [ 51.069516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.074415][ T6034] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 51.077747][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6'. [ 51.079612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.124572][ T6034] team0: Port device geneve0 added [ 51.411152][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.418727][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.508759][ T6042] Zero length message leads to an empty skb [ 51.566037][ T6042] SET target dimension over the limit! [ 51.897083][ T6052] dccp_close: ABORT with 20 bytes unread [ 51.956059][ T40] audit: type=1800 audit(1745436246.754:2): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.9" name="/newroot/1/bus" dev="tmpfs" ino=23 res=0 errno=0 [ 51.989505][ T6058] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 51.991666][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.995225][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 51.997858][ T6062] syz_tun: entered allmulticast mode [ 52.001720][ T6058] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 52.003818][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.006305][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 52.009766][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.016718][ T6058] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 52.018815][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.023450][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 52.029033][ T6058] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 52.031210][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.033959][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 52.038284][ T6058] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 52.040474][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.043907][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 52.047162][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.051504][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.057098][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.101740][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.113273][ T6067] vhci_hcd: connection closed [ 52.114059][ T6059] vhci_hcd: connection closed [ 52.114526][ T6063] vhci_hcd: connection closed [ 52.117974][ T1139] vhci_hcd: stop threads [ 52.122677][ T6065] vhci_hcd: connection closed [ 52.123187][ T1139] vhci_hcd: release socket [ 52.125364][ T6069] vhci_hcd: connection closed [ 52.136758][ T1139] vhci_hcd: disconnect device [ 52.146045][ T1139] vhci_hcd: stop threads [ 52.153721][ T1139] vhci_hcd: release socket [ 52.156253][ T1139] vhci_hcd: disconnect device [ 52.160039][ T1139] vhci_hcd: stop threads [ 52.161814][ T1139] vhci_hcd: release socket [ 52.163598][ T1139] vhci_hcd: disconnect device [ 52.165485][ T1139] vhci_hcd: stop threads [ 52.166986][ T1139] vhci_hcd: release socket [ 52.168704][ T1139] vhci_hcd: disconnect device [ 52.173500][ T1139] vhci_hcd: stop threads [ 52.175021][ T1139] vhci_hcd: release socket [ 52.176810][ T1139] vhci_hcd: disconnect device [ 52.189580][ T6001] vhci_hcd: vhci_device speed not set [ 52.209007][ T6073] UHID_CREATE from different security context by process 11 (syz.3.13), this is not allowed. [ 52.218013][ T6073] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 52.224521][ T24] hid (null): unknown global tag 0xd [ 52.226982][ T24] hid (null): unknown global tag 0xe [ 52.230526][ T24] hid (null): report_id 0 is invalid [ 52.233544][ T24] hid (null): report_id 52304 is invalid [ 52.235703][ T24] hid (null): report_id 1387920681 is invalid [ 52.237779][ T24] hid (null): unknown global tag 0xe [ 52.239677][ T24] hid (null): unknown global tag 0xd [ 52.241497][ T24] hid (null): invalid report_size -1887810091 [ 52.244166][ T24] hid (null): global environment stack underflow [ 52.247038][ T24] hid (null): unknown global tag 0xc [ 52.250159][ T24] hid (null): unknown global tag 0xc [ 52.252543][ T24] hid (null): invalid report_count 40881 [ 52.255138][ T24] hid (null): report_id 0 is invalid [ 52.257417][ T24] hid (null): unknown global tag 0xd [ 52.259751][ T24] hid (null): invalid report_size -1506165907 [ 52.261830][ T24] hid (null): report_id 0 is invalid [ 52.264158][ T24] hid (null): unknown global tag 0xc [ 52.266611][ T24] hid (null): unknown global tag 0xe [ 52.268958][ T24] hid (null): report_id 3194748728 is invalid [ 52.271676][ T24] hid (null): unknown global tag 0xe [ 52.274108][ T24] hid (null): unknown global tag 0xd [ 52.276561][ T24] hid (null): invalid report_count 41695 [ 52.279035][ T24] hid (null): invalid report_count 1565389719 [ 52.282248][ T24] hid (null): global environment stack overflow [ 52.285007][ T24] hid (null): invalid report_size 697642177 [ 52.287697][ T24] hid (null): invalid report_size 9747 [ 52.290523][ T24] hid (null): unknown global tag 0xd [ 52.294163][ T24] hid (null): unknown global tag 0xc [ 52.297637][ T24] hid (null): report_id 6688 is invalid [ 52.300195][ T24] hid (null): unknown global tag 0xd [ 52.303042][ T24] hid (null): unknown global tag 0xd [ 52.305080][ T24] hid (null): report_id 65373 is invalid [ 52.307540][ T24] hid (null): unknown global tag 0x4a [ 52.310250][ T24] hid (null): unknown global tag 0x5f [ 52.312460][ T24] hid (null): unknown global tag 0xb8 [ 52.314363][ T24] hid (null): unknown global tag 0xd [ 52.316372][ T24] hid (null): report_id 3562054314 is invalid [ 52.318720][ T24] hid (null): global environment stack overflow [ 52.321452][ T24] hid (null): report_id 47366 is invalid [ 52.323306][ T24] hid (null): unknown global tag 0xc [ 52.325195][ T24] hid (null): unknown global tag 0xe [ 52.326957][ T24] hid (null): unknown global tag 0x78 [ 52.328968][ T24] hid (null): report_id 0 is invalid [ 52.331328][ T24] hid (null): unknown global tag 0xe [ 52.339999][ T24] hid-generic 0101:0081:0009.0002: unknown main item tag 0x7 [ 52.343170][ T24] hid-generic 0101:0081:0009.0002: unknown global tag 0xd [ 52.345851][ T24] hid-generic 0101:0081:0009.0002: item 0 0 1 13 parsing failed [ 52.348565][ T24] hid-generic 0101:0081:0009.0002: probe with driver hid-generic failed with error -22 [ 52.423204][ T6048] block nbd0: shutting down sockets [ 52.469572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.476285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.631184][ T5955] Bluetooth: hci2: command tx timeout [ 52.631220][ T5305] Bluetooth: hci0: command tx timeout [ 52.631257][ T5951] Bluetooth: hci3: command tx timeout [ 52.631293][ T5951] Bluetooth: hci1: command tx timeout [ 52.769414][ T6084] capability: warning: `syz.3.14' uses 32-bit capabilities (legacy support in use) [ 52.799895][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.805667][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.834452][ T6079] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.845315][ T6061] syz_tun: left allmulticast mode [ 52.851839][ T6079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 53.329782][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.397935][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.456300][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.461387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 53.570996][ T6071] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.596076][ T6071] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.628418][ T6071] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.660842][ T6071] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.929862][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.395401][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 54.414935][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.423648][ T10] usb 7-1: config 0 has no interface number 0 [ 54.426375][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.433111][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.436651][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.450837][ T10] usb 7-1: config 0 descriptor?? [ 54.459315][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 54.709291][ T5305] Bluetooth: hci2: command tx timeout [ 54.710080][ T5955] Bluetooth: hci0: command tx timeout [ 54.711473][ T5305] Bluetooth: hci1: command tx timeout [ 54.711486][ T69] Bluetooth: hci3: command tx timeout [ 54.764859][ T40] audit: type=1326 audit(1745436249.564:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.781206][ T40] audit: type=1326 audit(1745436249.564:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.791947][ T40] audit: type=1326 audit(1745436249.564:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.801108][ T40] audit: type=1326 audit(1745436249.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.808991][ T40] audit: type=1326 audit(1745436249.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.825299][ T40] audit: type=1326 audit(1745436249.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.844215][ T40] audit: type=1326 audit(1745436249.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.863881][ T40] audit: type=1326 audit(1745436249.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 54.881228][ T40] audit: type=1326 audit(1745436249.574:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.21" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 55.275380][ T10] usb 7-1: USB disconnect, device number 2 [ 55.551264][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 58.299350][ T1019] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.470512][ T1019] usb 5-1: Using ep0 maxpacket: 8 [ 58.474825][ T1019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.480965][ T1019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.485301][ T1019] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 58.491150][ T1019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.499536][ T1019] usb 5-1: config 0 descriptor?? [ 59.001809][ T1019] usbhid 5-1:0.0: can't add hid device: -71 [ 59.003811][ T1019] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 59.010118][ T1019] usb 5-1: USB disconnect, device number 2 [ 59.586719][ T6192] xt_ecn: cannot match TCP bits for non-tcp packets [ 60.587508][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 60.946813][ T6213] 9pnet_virtio: no channels available for device ./file0/file0 [ 61.062180][ T6216] warning: `syz.3.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.067231][ T6216] mmap: syz.3.45 (6216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.254091][ T6219] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.995861][ T6260] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 67.369469][ T6298] siw: device registration error -23 [ 67.858752][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.019325][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 68.026441][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.064956][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.082611][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 68.087322][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.167806][ T9] usb 7-1: config 0 descriptor?? [ 68.199306][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 68.199318][ T40] audit: type=1326 audit(1745436262.994:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.215976][ T40] audit: type=1326 audit(1745436262.994:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.385539][ T6331] Cannot find add_set index 3 as target [ 68.391361][ T40] audit: type=1326 audit(1745436262.994:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.398265][ T40] audit: type=1326 audit(1745436263.004:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.406542][ T40] audit: type=1326 audit(1745436263.004:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.413608][ T40] audit: type=1326 audit(1745436263.004:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.420470][ T40] audit: type=1326 audit(1745436263.014:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.427709][ T40] audit: type=1326 audit(1745436263.014:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.435902][ T40] audit: type=1326 audit(1745436263.014:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.445190][ T40] audit: type=1326 audit(1745436263.224:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 68.769493][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 68.776285][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 68.788933][ T9] usb 7-1: USB disconnect, device number 3 [ 69.023488][ T6339] pim6reg: entered allmulticast mode [ 69.032656][ T6339] pim6reg: left allmulticast mode [ 69.377405][ T6341] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 70.342693][ T6365] xt_ecn: cannot match TCP bits for non-tcp packets [ 70.874949][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.877226][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.209454][ T6391] siw: device registration error -23 [ 72.921367][ T6401] netlink: 71 bytes leftover after parsing attributes in process `syz.1.85'. [ 73.033110][ T6407] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 73.373481][ T6412] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 73.405723][ T6412] veth0_vlan: left promiscuous mode [ 73.410082][ T6412] veth0_vlan: entered promiscuous mode [ 73.415121][ T6412] team0: Device veth0_vlan failed to register rx_handler [ 76.012391][ T6442] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.026180][ T6454] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.077499][ T6478] gre0: Master is either lo or non-ether device [ 78.099756][ T6100] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.258837][ T6501] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 79.965229][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 81.119672][ T66] cfg80211: failed to load regulatory.db [ 85.299293][ T6008] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.459310][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 85.466377][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.470708][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.474438][ T6008] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 85.478205][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.485155][ T6008] usb 6-1: config 0 descriptor?? [ 85.661155][ T6563] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 85.909100][ T6008] usbhid 6-1:0.0: can't add hid device: -71 [ 85.911642][ T6008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 85.918696][ T6008] usb 6-1: USB disconnect, device number 2 [ 86.857054][ T66] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 86.875785][ T6587] gre0: Master is either lo or non-ether device [ 87.359808][ T6605] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 96.782700][ T6669] syz.1.128: attempt to access beyond end of device [ 96.782700][ T6669] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 96.968192][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 96.992005][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 96.995347][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 96.998625][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.006071][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.009640][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.012764][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.015216][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.017596][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.020292][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.023075][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.025570][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.028084][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.031548][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.034251][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.037523][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.040340][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.042992][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.045462][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.047880][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.051772][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.058841][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.062373][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.067348][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.072575][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.077318][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.082688][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.088271][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.092798][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.095908][ T6681] batadv_slave_0: entered promiscuous mode [ 97.097872][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.100940][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.103827][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 97.114247][ T1971] hid-generic 0004:FFFFFFFF:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 97.219200][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 97.614301][ T6668] batadv_slave_0: left promiscuous mode [ 97.911560][ T60] usb 6-1: config 0 has no interfaces? [ 97.913403][ T60] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 97.917009][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.923892][ T60] usb 6-1: config 0 descriptor?? [ 98.237095][ T1971] usb 6-1: USB disconnect, device number 3 [ 98.296817][ T6692] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET) [ 98.368183][ T6692] IPVS: length: 246 != 24 [ 98.933327][ T6699] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 99.108420][ T6707] gre0: Master is either lo or non-ether device [ 99.119674][ T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 100.283005][ T1019] IPVS: starting estimator thread 0... [ 100.299057][ T6722] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.370453][ T6726] IPVS: using max 46 ests per chain, 110400 per kthread [ 100.942463][ T6740] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 100.945543][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 100.954176][ T6744] tipc: Failed to remove unknown binding: 66,1,1/0:1591609455/1591609457 [ 100.957171][ T6744] tipc: Failed to remove unknown binding: 66,1,1/0:1591609455/1591609457 [ 100.962509][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 100.983698][ T6740] team0: Port device geneve0 added [ 101.539228][ T1019] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 101.699237][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 101.699249][ T40] audit: type=1326 audit(1745436296.487:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.701118][ T1019] usb 7-1: config 27 has an invalid descriptor of length 168, skipping remainder of the config [ 101.701309][ T40] audit: type=1326 audit(1745436296.487:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.708499][ T1019] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.729992][ T40] audit: type=1326 audit(1745436296.487:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.737334][ T1019] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.750212][ T40] audit: type=1326 audit(1745436296.487:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.756638][ T1019] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.757534][ T40] audit: type=1326 audit(1745436296.487:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.767012][ T1019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.773135][ T40] audit: type=1326 audit(1745436296.497:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.782079][ T40] audit: type=1326 audit(1745436296.497:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.791417][ T40] audit: type=1326 audit(1745436296.497:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.800873][ T40] audit: type=1326 audit(1745436296.517:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.810678][ T40] audit: type=1326 audit(1745436296.527:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 101.830526][ T1019] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.833204][ T1019] usb 7-1: invalid MIDI out EP 0 [ 101.937052][ T1019] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 102.014436][ T6762] udevd[6762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.041404][ T1019] usb 7-1: USB disconnect, device number 4 [ 104.377181][ T6795] input: syz1 as /devices/virtual/input/input10 [ 104.420545][ T6796] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 105.151245][ T6810] /dev/sr0: Can't open blockdev [ 105.853011][ T6822] syz.3.162: attempt to access beyond end of device [ 105.853011][ T6822] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 105.926077][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.930003][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.932593][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.935281][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.937882][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.944100][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.946846][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.949748][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.952335][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.954893][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.957760][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.960863][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.963575][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.966772][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.969869][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.972570][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.975197][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.977686][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.981356][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.983878][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.986391][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.988938][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.991823][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.994897][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 105.997477][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.000402][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.009206][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.011697][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.014225][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.016708][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.019265][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.022027][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 106.031145][ T1019] hid-generic 0004:FFFFFFFF:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 106.189331][ T6008] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 106.351072][ T6008] usb 8-1: config 0 has no interfaces? [ 106.353443][ T6008] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 106.356462][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.360943][ T6008] usb 8-1: config 0 descriptor?? [ 106.569697][ T6100] usb 8-1: USB disconnect, device number 2 [ 106.642031][ T6826] IPVS: length: 246 != 24 [ 106.834873][ T6835] tipc: Failed to remove unknown binding: 66,1,1/0:2189018734/2189018736 [ 106.838464][ T6835] tipc: Failed to remove unknown binding: 66,1,1/0:2189018734/2189018736 [ 106.844287][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 108.774444][ T6856] input: syz1 as /devices/virtual/input/input11 [ 109.416587][ T6873] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 109.420072][ T6873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.171'. [ 109.434474][ T6873] team0: Port device geneve0 added [ 109.657937][ T6884] input: syz1 as /devices/virtual/input/input12 [ 109.800879][ T6886] /dev/sr0: Can't open blockdev [ 110.676817][ T6893] macsec0: entered promiscuous mode [ 110.678613][ T6893] macsec0: entered allmulticast mode [ 110.680345][ T6893] veth1_macvtap: entered allmulticast mode [ 111.353765][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 111.682622][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.749495][ T6917] vlan2: entered allmulticast mode [ 111.751182][ T6917] bond0: entered allmulticast mode [ 111.752837][ T6917] bond_slave_0: entered allmulticast mode [ 111.754688][ T6917] bond_slave_1: entered allmulticast mode [ 112.365961][ T40] audit: type=1326 audit(1745436307.157:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.376686][ T40] audit: type=1326 audit(1745436307.157:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.386432][ T40] audit: type=1326 audit(1745436307.167:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.398790][ T40] audit: type=1326 audit(1745436307.167:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.407793][ T40] audit: type=1326 audit(1745436307.167:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.416974][ T40] audit: type=1326 audit(1745436307.167:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.425915][ T40] audit: type=1326 audit(1745436307.167:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.433414][ T40] audit: type=1326 audit(1745436307.167:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.441588][ T40] audit: type=1326 audit(1745436307.177:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 112.480379][ T40] audit: type=1326 audit(1745436307.277:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 113.267750][ T6933] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 113.270566][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.184'. [ 113.282128][ T6933] team0: Port device geneve0 added [ 117.203041][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 117.205939][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 117.212409][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 117.215305][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 117.232571][ T6993] input: syz1 as /devices/virtual/input/input13 [ 117.464549][ T6995] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 117.481151][ T6995] bond1: entered promiscuous mode [ 117.481687][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 117.484054][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.484809][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 117.512922][ T6995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.516676][ T6995] bond1: (slave bond2): making interface the new active one [ 117.519010][ T6995] bond2: entered promiscuous mode [ 117.521976][ T6995] bond1: (slave bond2): Enslaving as an active interface with an up link [ 117.672046][ T835] IPVS: starting estimator thread 0... [ 117.837384][ T6989] ceph: No mds server is up or the cluster is laggy [ 117.879309][ T7006] IPVS: using max 45 ests per chain, 108000 per kthread [ 117.985178][ T7012] input: syz1 as /devices/virtual/input/input14 [ 119.191453][ T7034] kvm: vcpu 8: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 120.064824][ T7053] input: syz1 as /devices/virtual/input/input15 [ 120.449254][ T835] IPVS: starting estimator thread 0... [ 120.569393][ T7060] IPVS: using max 45 ests per chain, 108000 per kthread [ 120.705336][ T7064] macsec0: entered promiscuous mode [ 120.708006][ T7064] macsec0: entered allmulticast mode [ 120.710354][ T7064] veth1_macvtap: entered allmulticast mode [ 121.066378][ T7072] gfs2: gfs2 mount does not exist [ 121.544072][ T7082] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.074644][ T7116] input: syz1 as /devices/virtual/input/input16 [ 124.573093][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 125.577700][ T7134] kernel read not supported for file /eth0 (pid: 7134 comm: syz.2.231) [ 125.581510][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 125.581523][ T40] audit: type=1800 audit(1745436320.377:83): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.231" name="eth0" dev="mqueue" ino=12788 res=0 errno=0 [ 125.650612][ T7138] cifs: Unknown parameter 'mode' [ 126.276067][ T7150] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 126.293765][ T7150] bond1: entered promiscuous mode [ 126.295914][ T7150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.321393][ T7150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.325054][ T7150] bond1: (slave bond2): making interface the new active one [ 126.327808][ T7150] bond2: entered promiscuous mode [ 126.330416][ T7150] bond1: (slave bond2): Enslaving as an active interface with an up link [ 126.357281][ T7155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'. [ 126.652246][ T7157] input: syz1 as /devices/virtual/input/input17 [ 127.673595][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 129.048173][ T7197] input: syz1 as /devices/virtual/input/input18 [ 129.123740][ T7198] input: syz1 as /devices/virtual/input/input19 [ 129.343402][ T40] audit: type=1326 audit(1745436324.137:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.350565][ T40] audit: type=1326 audit(1745436324.137:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.357572][ T40] audit: type=1326 audit(1745436324.137:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.369640][ T40] audit: type=1326 audit(1745436324.137:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.378633][ T40] audit: type=1326 audit(1745436324.137:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.390038][ T40] audit: type=1326 audit(1745436324.137:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.398766][ T40] audit: type=1326 audit(1745436324.147:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.410155][ T40] audit: type=1326 audit(1745436324.147:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 129.418543][ T40] audit: type=1326 audit(1745436324.147:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.3.246" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 130.261808][ T7216] input: syz1 as /devices/virtual/input/input20 [ 131.202845][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 131.293542][ T7235] vlan0: entered allmulticast mode [ 131.295240][ T7235] bond0: entered allmulticast mode [ 131.296860][ T7235] bond_slave_0: entered allmulticast mode [ 131.298643][ T7235] bond_slave_1: entered allmulticast mode [ 131.438516][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 132.315914][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.318656][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318500][ T7259] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.578390][ T7261] input: syz1 as /devices/virtual/input/input21 [ 136.293213][ T7300] input: syz1 as /devices/virtual/input/input22 [ 136.832467][ T7310] input: syz1 as /devices/virtual/input/input23 [ 137.330588][ T7319] input: syz1 as /devices/virtual/input/input24 [ 137.854166][ T7332] input: syz1 as /devices/virtual/input/input25 [ 138.601840][ T7344] exFAT-fs (nullb0): invalid boot record signature [ 138.604754][ T7344] exFAT-fs (nullb0): failed to read boot sector [ 138.607282][ T7344] exFAT-fs (nullb0): failed to recognize exfat type [ 138.616250][ T7336] input: syz1 as /devices/virtual/input/input26 [ 139.204190][ T7366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 139.217935][ T7361] input: syz1 as /devices/virtual/input/input27 [ 140.317410][ T7408] input: syz1 as /devices/virtual/input/input28 [ 141.125508][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 141.639270][ T7426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.298'. [ 142.697949][ T7432] input: syz1 as /devices/virtual/input/input29 [ 142.745138][ T7441] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 143.207009][ T7446] input: syz1 as /devices/virtual/input/input30 [ 143.589942][ T7455] input: syz1 as /devices/virtual/input/input31 [ 143.929793][ T7462] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 144.125018][ T7465] input: syz1 as /devices/virtual/input/input32 [ 145.192335][ T7479] input: syz1 as /devices/virtual/input/input33 [ 145.379218][ T7480] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 145.991044][ T7501] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.481079][ T7511] input: syz1 as /devices/virtual/input/input34 [ 147.362366][ T7525] input: syz1 as /devices/virtual/input/input35 [ 147.762292][ T7530] input: syz1 as /devices/virtual/input/input36 [ 148.857429][ T7552] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 149.582342][ T7569] input: syz1 as /devices/virtual/input/input37 [ 149.665821][ T7574] input: syz1 as /devices/virtual/input/input38 [ 150.393082][ T7584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.346'. [ 151.922843][ T7609] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.115465][ T7614] input: syz1 as /devices/virtual/input/input39 [ 152.663710][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 152.802456][ T7630] /dev/nullb0: Can't open blockdev [ 153.802691][ T7646] input: syz1 as /devices/virtual/input/input40 [ 154.749963][ T7661] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 154.820134][ T7663] siw: device registration error -23 [ 154.830953][ T7663] fuse: Unknown parameter '000000000000000000030xffffffffffffffff' [ 154.855778][ T7666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.171685][ T7673] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 155.635517][ T7677] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 155.699052][ T7674] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 156.119542][ T6008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.289262][ T6008] usb 5-1: Using ep0 maxpacket: 32 [ 156.294451][ T6008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 156.305013][ T6008] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.308785][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.312892][ T6008] usb 5-1: Product: syz [ 156.314706][ T6008] usb 5-1: Manufacturer: syz [ 156.316805][ T6008] usb 5-1: SerialNumber: syz [ 156.323467][ T6008] usb 5-1: config 0 descriptor?? [ 156.328325][ T7681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.383574][ T7692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.554210][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.559559][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.073366][ T60] usb 5-1: USB disconnect, device number 3 [ 157.110844][ T5955] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 157.114734][ T5955] Bluetooth: hci2: Injecting HCI hardware error event [ 157.118938][ T5305] Bluetooth: hci2: hardware error 0x00 [ 159.151816][ T7706] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 159.158435][ T7706] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 159.167186][ T7706] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 159.188446][ T7706] bond0: (slave wlan1): Opening slave failed [ 159.191651][ T5305] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 159.341118][ T7716] process 'syz.3.368' launched './file0' with NULL argv: empty string added [ 159.385264][ T7716] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 159.791141][ T7722] input: syz1 as /devices/virtual/input/input41 [ 160.272126][ T7728] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.084192][ T7745] /dev/nullb0: Can't open blockdev [ 161.509568][ T7748] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.183507][ T7757] netlink: 168 bytes leftover after parsing attributes in process `syz.0.378'. [ 162.186662][ T7757] netlink: 168 bytes leftover after parsing attributes in process `syz.0.378'. [ 163.956480][ T7785] netlink: 'syz.3.387': attribute type 29 has an invalid length. [ 164.813964][ T7797] fuse: Unknown parameter '000000000000000000030xffffffffffffffff' [ 164.888017][ T7798] netlink: 'syz.3.387': attribute type 29 has an invalid length. [ 165.027351][ T7792] netlink: 'syz.3.387': attribute type 29 has an invalid length. [ 165.064845][ T7795] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.349666][ T7805] /dev/nullb0: Can't open blockdev [ 166.349817][ T7821] netlink: 'syz.3.396': attribute type 8 has an invalid length. [ 166.352344][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 167.834604][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 167.834616][ T40] audit: type=1326 audit(1745436362.627:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.843644][ T40] audit: type=1326 audit(1745436362.627:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.850641][ T40] audit: type=1326 audit(1745436362.627:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.858195][ T40] audit: type=1326 audit(1745436362.627:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.867342][ T40] audit: type=1326 audit(1745436362.627:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.874820][ T40] audit: type=1326 audit(1745436362.627:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.882040][ T40] audit: type=1326 audit(1745436362.627:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.888689][ T40] audit: type=1326 audit(1745436362.627:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.896618][ T40] audit: type=1326 audit(1745436362.627:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 167.904102][ T40] audit: type=1326 audit(1745436362.627:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 169.454807][ T1019] IPVS: starting estimator thread 0... [ 169.547889][ T7861] sp0: Synchronizing with TNC [ 169.556204][ T7860] IPVS: using max 46 ests per chain, 110400 per kthread [ 169.614828][ T7861] [U] è [ 170.229539][ T69] Bluetooth: hci1: command 0x0406 tx timeout [ 170.234367][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 171.193025][ T7885] input: syz1 as /devices/virtual/input/input42 [ 173.662172][ T7915] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.289890][ T5305] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 175.511588][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.516175][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.519676][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.522706][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.526101][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.528926][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.531790][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.534989][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.537714][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.540796][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.543353][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.545818][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.548290][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.552037][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.554655][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.557065][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.559749][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.562190][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.565074][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.567909][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.572326][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.574892][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.577399][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.580168][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.582640][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.585070][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.587563][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.591339][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.593777][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.596131][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.598613][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.601414][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.603857][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.606242][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.608710][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.613533][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.615991][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.618412][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.621499][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.624255][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.626638][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.629067][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.632894][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.635343][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.637734][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.640476][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.642889][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.647871][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.651829][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.655383][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.657874][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.660619][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.662991][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 175.666163][ T1971] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 175.819746][ T7944] IPVS: length: 78 != 8 [ 176.522568][ T7970] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.775628][ T7978] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 176.782910][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 177.015119][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 177.972845][ T7993] netlink: 'syz.0.437': attribute type 29 has an invalid length. [ 178.409290][ T835] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 178.410894][ T8006] netlink: 'syz.0.437': attribute type 29 has an invalid length. [ 178.579221][ T835] usb 7-1: Using ep0 maxpacket: 32 [ 178.583280][ T835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.589834][ T835] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.593587][ T835] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.597563][ T835] usb 7-1: Product: syz [ 178.599345][ T835] usb 7-1: Manufacturer: syz [ 178.600936][ T835] usb 7-1: SerialNumber: syz [ 178.604677][ T835] usb 7-1: config 0 descriptor?? [ 178.608910][ T8001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.694157][ T7998] netlink: 'syz.0.437': attribute type 29 has an invalid length. [ 178.695366][ T5305] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 178.827819][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.831441][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.243125][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 179.243202][ T40] audit: type=1326 audit(1745436373.997:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.363142][ T5305] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.366587][ T5305] Bluetooth: hci3: Injecting HCI hardware error event [ 179.372621][ T5305] Bluetooth: hci3: hardware error 0x00 [ 179.409030][ T40] audit: type=1326 audit(1745436373.997:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.416746][ T40] audit: type=1326 audit(1745436373.997:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.423698][ T40] audit: type=1326 audit(1745436373.997:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.432181][ T40] audit: type=1326 audit(1745436373.997:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.433501][ T66] usb 7-1: USB disconnect, device number 5 [ 179.439218][ T40] audit: type=1326 audit(1745436373.997:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.448895][ T40] audit: type=1326 audit(1745436373.997:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.455835][ T40] audit: type=1326 audit(1745436373.997:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.464754][ T40] audit: type=1326 audit(1745436373.997:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 179.473450][ T40] audit: type=1326 audit(1745436374.007:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.3.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 181.015001][ T8036] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 181.051768][ T8043] syz_tun: entered allmulticast mode [ 181.076581][ T8043] loop8: detected capacity change from 0 to 7 [ 181.083819][ T6679] Dev loop8: unable to read RDB block 7 [ 181.085854][ T6679] loop8: unable to read partition table [ 181.087812][ T6679] loop8: partition table beyond EOD, truncated [ 181.097435][ T8043] Dev loop8: unable to read RDB block 7 [ 181.099946][ T8043] loop8: unable to read partition table [ 181.101824][ T8043] loop8: partition table beyond EOD, truncated [ 181.104784][ T8043] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 181.116337][ T8042] syz_tun: left allmulticast mode [ 181.292259][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 181.420154][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 181.429393][ T5305] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.442491][ T8053] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.460020][ T8053] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.463601][ T8053] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.466616][ T8053] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.472999][ T8053] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 181.479833][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.656625][ T8052] input: syz1 as /devices/virtual/input/input43 [ 181.718610][ T8061] input: syz1 as /devices/virtual/input/input44 [ 182.710304][ T5305] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 182.714456][ T5305] Bluetooth: hci0: Injecting HCI hardware error event [ 182.718049][ T5305] Bluetooth: hci0: hardware error 0x00 [ 182.857496][ T8080] input: syz1 as /devices/virtual/input/input45 [ 183.313919][ T8083] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.300863][ T8094] input: syz1 as /devices/virtual/input/input46 [ 184.319705][ T8096] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 184.789300][ T5305] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 185.772969][ T8123] input: syz1 as /devices/virtual/input/input47 [ 186.518471][ T8136] input: syz1 as /devices/virtual/input/input48 [ 187.755362][ T8152] input: syz1 as /devices/virtual/input/input49 [ 187.943723][ T8155] input: syz1 as /devices/virtual/input/input50 [ 188.049648][ T8156] input: syz1 as /devices/virtual/input/input51 [ 188.992045][ T8175] input: syz1 as /devices/virtual/input/input52 [ 189.172967][ T8177] input: syz1 as /devices/virtual/input/input53 [ 189.219435][ T835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.379417][ T835] usb 6-1: Using ep0 maxpacket: 32 [ 189.382674][ T835] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.417838][ T835] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.421897][ T835] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.424492][ T835] usb 6-1: Product: syz [ 189.425807][ T835] usb 6-1: Manufacturer: syz [ 189.433671][ T835] usb 6-1: SerialNumber: syz [ 189.445081][ T835] usb 6-1: config 0 descriptor?? [ 189.447396][ T8174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.663905][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.667690][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.509457][ T1971] usb 6-1: USB disconnect, device number 4 [ 191.695772][ T8217] input: syz1 as /devices/virtual/input/input54 [ 192.634033][ T8232] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 192.636258][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.638674][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 192.674463][ T8232] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 192.676843][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.679669][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 192.695716][ T8232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.711391][ T8232] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 192.713838][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.716725][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 192.723666][ T8232] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 192.726016][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.729301][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 192.745127][ T8232] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 192.747464][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.752110][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 192.760828][ T8232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.770574][ T8232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.779554][ T8232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.819276][ T1019] vhci_hcd: vhci_device speed not set [ 192.855561][ T8244] vhci_hcd: connection closed [ 192.855708][ T67] vhci_hcd: stop threads [ 192.858673][ T8242] vhci_hcd: connection closed [ 192.859063][ T8238] vhci_hcd: connection closed [ 192.859087][ T8236] vhci_hcd: connection closed [ 192.860377][ T8240] vhci_hcd: connection closed [ 192.865215][ T67] vhci_hcd: release socket [ 192.869302][ T67] vhci_hcd: disconnect device [ 192.871250][ T67] vhci_hcd: stop threads [ 192.872950][ T67] vhci_hcd: release socket [ 192.875767][ T67] vhci_hcd: disconnect device [ 192.877926][ T67] vhci_hcd: stop threads [ 192.879324][ T1019] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 192.880580][ T67] vhci_hcd: release socket [ 192.885054][ T67] vhci_hcd: disconnect device [ 192.887421][ T67] vhci_hcd: stop threads [ 192.888889][ T67] vhci_hcd: release socket [ 192.890769][ T67] vhci_hcd: disconnect device [ 192.892950][ T67] vhci_hcd: stop threads [ 192.894892][ T67] vhci_hcd: release socket [ 192.896847][ T67] vhci_hcd: disconnect device [ 193.751599][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.754373][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.122800][ T8271] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 195.162857][ T8268] input: syz1 as /devices/virtual/input/input55 [ 195.263759][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 196.226542][ T8295] sp0: Synchronizing with TNC [ 196.232794][ T8295] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 196.290332][ T8295] [U] è [ 196.984643][ T8313] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.397230][ T8324] input: syz1 as /devices/virtual/input/input56 [ 197.704135][ T8321] input: syz1 as /devices/virtual/input/input57 [ 197.814980][ T8330] input: syz1 as /devices/virtual/input/input58 [ 197.979290][ T1019] vhci_hcd: vhci_device speed not set [ 198.548797][ T8338] input: syz1 as /devices/virtual/input/input59 [ 198.687322][ T8341] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 201.075324][ T8390] input: syz1 as /devices/virtual/input/input60 [ 201.695652][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 203.725062][ T8429] ======================================================= [ 203.725062][ T8429] WARNING: The mand mount option has been deprecated and [ 203.725062][ T8429] and is ignored by this kernel. Remove the mand [ 203.725062][ T8429] option from the mount to silence this warning. [ 203.725062][ T8429] ======================================================= [ 203.738016][ T8429] overlay: Unknown parameter '' [ 203.746426][ T8429] overlayfs: overlapping lowerdir path [ 204.051560][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 204.051578][ T40] audit: type=1800 audit(1745436398.837:143): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.534" name="bus" dev="overlay" ino=719 res=0 errno=0 [ 204.066922][ T8429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.069056][ T8429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.585556][ T8460] input: syz1 as /devices/virtual/input/input61 [ 206.070235][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 206.133251][ T8463] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 206.968592][ T8489] input: syz1 as /devices/virtual/input/input62 [ 208.150274][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 208.666338][ T8511] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 209.020609][ T8518] input: syz1 as /devices/virtual/input/input63 [ 209.513061][ T8524] input: syz1 as /devices/virtual/input/input64 [ 210.096940][ T8540] input: syz1 as /devices/virtual/input/input65 [ 210.588742][ T8536] input: syz1 as /devices/virtual/input/input66 [ 212.760650][ T8579] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 213.444160][ T8594] input: syz1 as /devices/virtual/input/input67 [ 213.749480][ T5305] Bluetooth: hci1: command 0x0406 tx timeout [ 214.115464][ T8604] input: syz1 as /devices/virtual/input/input68 [ 214.408773][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.573'. [ 214.985109][ T8624] netlink: 344 bytes leftover after parsing attributes in process `syz.0.573'. [ 215.004422][ T8624] block device autoloading is deprecated and will be removed. [ 215.066069][ T8625] netlink: 'syz.1.575': attribute type 11 has an invalid length. [ 215.070105][ T8625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.575'. [ 215.490144][ T8636] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 216.253556][ T8643] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 216.333281][ T8649] overlay: Unknown parameter '' [ 216.335995][ T8649] overlayfs: overlapping lowerdir path [ 216.451657][ T8649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.854076][ T8662] input: syz1 as /devices/virtual/input/input69 [ 217.062268][ T8666] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.031234][ T8683] capability: warning: `syz.3.586' uses deprecated v2 capabilities in a way that may be insecure [ 218.407674][ T8691] ALSA: mixer_oss: invalid index 40000 [ 218.488223][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 218.975826][ T40] audit: type=1326 audit(1745436413.747:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.983288][ T40] audit: type=1326 audit(1745436413.747:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.990313][ T40] audit: type=1326 audit(1745436413.747:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.997783][ T40] audit: type=1326 audit(1745436413.747:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.004799][ T40] audit: type=1326 audit(1745436413.747:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.011872][ T40] audit: type=1326 audit(1745436413.747:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.019424][ T40] audit: type=1326 audit(1745436413.747:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.026808][ T40] audit: type=1326 audit(1745436413.747:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.034860][ T40] audit: type=1326 audit(1745436413.747:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.078547][ T40] audit: type=1326 audit(1745436413.867:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 220.155103][ T8717] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 223.167461][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 223.952362][ T8760] netlink: 344 bytes leftover after parsing attributes in process `syz.3.603'. [ 224.915471][ T8772] misc userio: Can't change port type on an already running userio instance [ 225.131087][ T8775] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 225.149307][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.608'. [ 225.622045][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 225.622055][ T40] audit: type=1800 audit(1745436420.417:159): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="bus" dev="overlay" ino=838 res=0 errno=0 [ 226.464020][ T8797] input: syz1 as /devices/virtual/input/input71 [ 227.250064][ T8803] tipc: Started in network mode [ 227.251928][ T8803] tipc: Node identity ffffffff, cluster identity 4711 [ 227.254107][ T8803] tipc: Node number set to 4294967295 [ 227.841854][ T8813] input: syz1 as /devices/virtual/input/input72 [ 230.590183][ T8852] netlink: 'syz.0.622': attribute type 11 has an invalid length. [ 230.592862][ T8852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.622'. [ 231.104869][ T8864] input: syz1 as /devices/virtual/input/input73 [ 231.477238][ T8860] input: syz1 as /devices/virtual/input/input74 [ 232.040546][ T8872] ALSA: mixer_oss: invalid index 40000 [ 232.105484][ T8879] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 233.033344][ T8897] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 233.524891][ T8907] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 233.708500][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 233.783524][ T8913] input: syz1 as /devices/virtual/input/input75 [ 234.504979][ T8925] input: syz1 as /devices/virtual/input/input76 [ 236.440025][ T8940] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.482593][ T8958] input: syz1 as /devices/virtual/input/input77 [ 239.135498][ T8993] input: syz1 as /devices/virtual/input/input78 [ 239.629660][ T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 239.757036][ T9001] netlink: 72 bytes leftover after parsing attributes in process `syz.3.657'. [ 239.779332][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 239.785852][ T66] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 239.793708][ T66] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.796863][ T66] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.803029][ T66] usb 6-1: Product: syz [ 239.804696][ T66] usb 6-1: Manufacturer: syz [ 239.806340][ T66] usb 6-1: SerialNumber: syz [ 239.818410][ T66] usb 6-1: config 0 descriptor?? [ 239.823535][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.825661][ T9006] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 239.832452][ T66] hub 6-1:0.0: bad descriptor, ignoring hub [ 239.834407][ T66] hub 6-1:0.0: probe with driver hub failed with error -5 [ 240.609353][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 241.613256][ T1939] usb 6-1: USB disconnect, device number 5 [ 242.139249][ T1939] Process accounting resumed [ 242.612665][ T9045] input: syz1 as /devices/virtual/input/input79 [ 243.209414][ T9055] netlink: 'syz.3.667': attribute type 11 has an invalid length. [ 243.212053][ T9055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.667'. [ 243.325775][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 243.766250][ T9066] input: syz1 as /devices/virtual/input/input80 [ 244.286199][ T9081] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 244.448630][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 246.086515][ T9116] input: syz1 as /devices/virtual/input/input81 [ 246.229980][ T9117] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 247.373958][ T9136] input: syz1 as /devices/virtual/input/input82 [ 247.384877][ T9133] overlayfs: failed to resolve './file0': -2 [ 249.193032][ T9151] input: syz1 as /devices/virtual/input/input83 [ 249.460175][ T9160] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 249.926022][ T9161] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 249.944774][ T9161] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 250.352162][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 250.356606][ T9172] netlink: 'syz.3.691': attribute type 2 has an invalid length. [ 250.360019][ T9172] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.691'. [ 250.377598][ T9172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.386351][ T9172] team0: Port device bond0 added [ 250.399806][ T9172] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 250.402924][ T9172] bond0: (slave wlan1): Opening slave failed [ 250.747319][ T1939] libceph: connect (1)[c::]:6789 error -101 [ 250.751396][ T1939] libceph: mon0 (1)[c::]:6789 connect error [ 250.797153][ T9185] ceph: No mds server is up or the cluster is laggy [ 250.997120][ T9189] input: syz1 as /devices/virtual/input/input84 [ 252.390969][ T9203] input: syz1 as /devices/virtual/input/input85 [ 253.924949][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 255.194444][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.198014][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.249908][ T9250] Cannot find del_set index 320 as target [ 255.259748][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 255.262541][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 255.390286][ T9257] input: syz1 as /devices/virtual/input/input86 [ 256.416322][ T9276] input: syz1 as /devices/virtual/input/input87 [ 256.833014][ T9282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 259.654077][ T9321] qrtr: Invalid version 0 [ 260.095440][ T9327] input: syz1 as /devices/virtual/input/input88 [ 260.274012][ T9341] Cannot find add_set index 0 as target [ 260.741203][ T9349] syz.0.733 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 260.920744][ T9354] bridge_slave_0: left allmulticast mode [ 260.923598][ T9354] bridge_slave_0: left promiscuous mode [ 260.930606][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.938546][ T9355] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 260.962958][ T9356] input: syz1 as /devices/virtual/input/input89 [ 260.995730][ T9354] bridge_slave_1: left allmulticast mode [ 260.998784][ T9354] bridge_slave_1: left promiscuous mode [ 261.012266][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.027745][ T9354] bond0: (slave bond_slave_0): Releasing backup interface [ 261.031719][ T9354] bond_slave_0: left allmulticast mode [ 261.040937][ T9354] bond0: (slave bond_slave_1): Releasing backup interface [ 261.052563][ T9354] bond_slave_1: left allmulticast mode [ 261.089030][ T9354] team0: Port device team_slave_0 removed [ 261.105006][ T9354] team0: Port device team_slave_1 removed [ 261.112005][ T9354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.115757][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.129714][ T9354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.132318][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.151940][ T9354] team0: Port device geneve0 removed [ 261.157077][ T9352] tipc: Started in network mode [ 261.159214][ T9352] tipc: Node identity ffffffff, cluster identity 4711 [ 261.161355][ T9352] tipc: Node number set to 4294967295 [ 261.166843][ T9355] bond0: (slave wlan1): Opening slave failed [ 262.164079][ T9376] input: syz1 as /devices/virtual/input/input90 [ 262.173673][ T9371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.714448][ T9384] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 262.716955][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.738'. [ 263.421250][ T9399] input: syz1 as /devices/virtual/input/input91 [ 263.642701][ T9394] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 264.300805][ T9416] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 264.710249][ T9423] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 265.073378][ T835] libceph: connect (1)[c::]:6789 error -101 [ 265.074633][ T9438] input: syz1 as /devices/virtual/input/input92 [ 265.075859][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 265.112156][ T9434] ceph: No mds server is up or the cluster is laggy [ 265.629574][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.030982][ T9456] input: syz1 as /devices/virtual/input/input93 [ 268.948749][ T9503] input: syz1 as /devices/virtual/input/input94 [ 269.161154][ T9498] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 269.554649][ T9513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.769'. [ 269.657832][ T40] audit: type=1326 audit(1745436464.447:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.2.769" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 269.775855][ T9521] input: syz1 as /devices/virtual/input/input95 [ 270.053349][ T9524] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 271.991539][ T9555] wireguard0: entered promiscuous mode [ 271.993644][ T9555] wireguard0: entered allmulticast mode [ 272.130704][ T9568] input: syz1 as /devices/virtual/input/input96 [ 273.879339][ T835] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 274.289378][ T835] usb 7-1: Using ep0 maxpacket: 32 [ 274.293217][ T835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.298816][ T835] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.302837][ T835] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.309490][ T835] usb 7-1: Product: syz [ 274.310969][ T835] usb 7-1: Manufacturer: syz [ 274.312432][ T835] usb 7-1: SerialNumber: syz [ 274.324594][ T835] usb 7-1: config 0 descriptor?? [ 274.328097][ T9590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.332768][ T835] hub 7-1:0.0: bad descriptor, ignoring hub [ 274.334686][ T835] hub 7-1:0.0: probe with driver hub failed with error -5 [ 275.132755][ T9620] input: syz1 as /devices/virtual/input/input97 [ 275.543504][ T6018] usb 7-1: USB disconnect, device number 6 [ 276.427988][ T9629] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 276.865799][ T9640] bridge_slave_0: left allmulticast mode [ 276.868639][ T9640] bridge_slave_0: left promiscuous mode [ 276.871964][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.885279][ T9640] bridge_slave_1: left allmulticast mode [ 276.887686][ T9640] bridge_slave_1: left promiscuous mode [ 276.892566][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.903955][ T9640] bond0: (slave bond_slave_0): Releasing backup interface [ 276.911881][ T9640] bond0: (slave bond_slave_1): Releasing backup interface [ 276.912170][ T9643] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 276.940364][ T9640] team0: Port device team_slave_0 removed [ 276.958301][ T9640] team0: Port device team_slave_1 removed [ 276.962877][ T9640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.966052][ T9640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.973694][ T9640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.977026][ T9640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.995193][ T9640] team0: Port device geneve0 removed [ 277.004616][ T9640] bond1: (slave bond2): Releasing backup interface [ 277.007166][ T9640] bond2: left promiscuous mode [ 277.026889][ T9643] bond0: (slave wlan1): Opening slave failed [ 277.672032][ T9653] input: syz1 as /devices/virtual/input/input98 [ 279.021323][ T9673] input: syz1 as /devices/virtual/input/input99 [ 279.376077][ T9667] input: syz1 as /devices/virtual/input/input100 [ 279.730605][ T9676] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 281.613843][ T9707] input: syz1 as /devices/virtual/input/input101 [ 281.931565][ T9704] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 281.933928][ T9704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.936318][ T9704] vhci_hcd vhci_hcd.0: Device attached [ 281.942033][ T9715] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 281.945573][ T80] vhci_hcd: stop threads [ 281.947374][ T80] vhci_hcd: release socket [ 281.949339][ T80] vhci_hcd: disconnect device [ 283.280278][ T9735] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 284.362348][ T9762] input: syz1 as /devices/virtual/input/input102 [ 285.149899][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'. [ 285.281765][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 285.630559][ T9787] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 285.997995][ T9791] --map-set only usable from mangle table [ 286.662873][ T9800] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.737949][ T9800] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.924821][ T9800] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.982147][ T9800] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.057932][ T9800] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.065656][ T9800] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.076347][ T9800] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.086738][ T9800] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.111018][ T9808] input: syz1 as /devices/virtual/input/input103 [ 288.251088][ T9831] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 289.884303][ T9848] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 290.284509][ T9855] wireguard0: entered promiscuous mode [ 290.286743][ T9855] wireguard0: entered allmulticast mode [ 291.331338][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 291.335503][ T9874] netlink: 'syz.0.848': attribute type 9 has an invalid length. [ 291.345064][ T9874] macvlan2: entered allmulticast mode [ 291.347480][ T9874] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 291.445448][ T9874] random: crng reseeded on system resumption [ 292.094405][ T9917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.256926][ T9919] input: syz1 as /devices/virtual/input/input105 [ 292.894895][ T9927] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 293.219694][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.855'. [ 293.287337][ T40] audit: type=1326 audit(1745436488.077:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.1.855" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 293.728755][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 293.733970][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 293.927758][ T9948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 293.930531][ T9948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.940002][ T9948] vhci_hcd vhci_hcd.0: Device attached [ 293.954116][ T9949] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 293.957738][ T1147] vhci_hcd: stop threads [ 293.960556][ T1147] vhci_hcd: release socket [ 293.962029][ T1147] vhci_hcd: disconnect device [ 294.136259][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'. [ 294.216808][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 295.458843][ T9982] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 295.462376][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.863'. [ 295.487855][ T9982] team0: Port device geneve0 added [ 296.171502][ T9993] input: syz1 as /devices/virtual/input/input106 [ 296.291079][ T9997] netlink: 52 bytes leftover after parsing attributes in process `syz.2.867'. [ 296.322419][ T9997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.187663][ T40] audit: type=1800 audit(1745436492.977:162): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.873" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 298.474069][T10024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.050562][T10028] input: syz1 as /devices/virtual/input/input107 [ 300.668591][T10050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.881'. [ 300.683423][T10050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.725683][T10074] input: syz1 as /devices/virtual/input/input108 [ 303.140857][ T60] libceph: connect (1)[c::]:6789 error -101 [ 303.146013][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 303.295112][T10083] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 303.445573][ T60] libceph: connect (1)[c::]:6789 error -101 [ 303.511430][T10078] ceph: No mds server is up or the cluster is laggy [ 303.516963][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 303.956278][T10095] input: syz1 as /devices/virtual/input/input109 [ 304.298119][T10101] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 304.720505][T10102] input: syz1 as /devices/virtual/input/input110 [ 304.769316][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 304.919258][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 304.931596][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 304.938191][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.945572][ T10] usb 7-1: Product: syz [ 304.950026][ T10] usb 7-1: Manufacturer: syz [ 304.955116][ T10] usb 7-1: SerialNumber: syz [ 304.964197][ T10] usb 7-1: config 0 descriptor?? [ 305.194091][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.198724][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.204061][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.207176][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.222879][ T10] usb read operation failed. (-71) [ 305.229313][ T10] usb write operation failed. (-71) [ 305.239285][ T10] usb write operation failed. (-71) [ 305.241934][ T10] usb write operation failed. (-71) [ 305.244192][ T10] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 305.252226][ T10] usb 7-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 305.256364][ T10] usb 7-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 305.643527][ C2] hpet: Lost 1 RTC interrupts [ 305.749354][ C2] hpet: Lost 1 RTC interrupts [ 305.839366][ C2] hpet: Lost 1 RTC interrupts [ 305.939606][ C2] hpet: Lost 3 RTC interrupts [ 306.067008][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'. [ 306.355932][T10120] input: syz1 as /devices/virtual/input/input111 [ 306.644013][T10138] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 307.055863][T10143] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 308.003729][T10160] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 308.024722][T10162] input: syz1 as /devices/virtual/input/input112 [ 308.069797][T10165] Cannot find add_set index 0 as target [ 309.236638][T10185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'. [ 309.306076][ T40] audit: type=1326 audit(1745436504.097:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.907" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 310.229565][T10201] input: syz1 as /devices/virtual/input/input113 [ 310.695803][T10206] input: syz1 as /devices/virtual/input/input114 [ 311.348779][T10214] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 312.787207][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 313.099350][T10252] set match dimension is over the limit! [ 313.405726][T10254] input: syz1 as /devices/virtual/input/input115 [ 314.072610][T10268] input: syz1 as /devices/virtual/input/input116 [ 314.372428][T10269] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 315.950269][T10285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 316.455631][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.458561][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.462071][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.465170][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.468356][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.471593][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.474305][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.476908][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.479885][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 316.644882][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.647508][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.108639][T10301] input: syz1 as /devices/virtual/input/input117 [ 330.979843][ T5305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.983715][ T5305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.987605][ T5305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.992202][ T5305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.994984][ T5305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.420128][ T5951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.440939][ T5951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.444580][ T5951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.448909][ T5951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.454063][ T5951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.029257][ T5305] Bluetooth: hci4: command tx timeout [ 333.286654][ T5951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.290991][ T5951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.303277][ T5951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.320370][ T5951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.324259][ T5951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.794182][ T5305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.798337][ T5305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.802699][ T5305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.806105][ T5305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.808716][ T5305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.899517][ T1416] ================================================================== [ 333.902095][ T1416] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 333.904359][ T1416] Read of size 1 at addr ffff88805bf14490 by task aoe_tx0/1416 [ 333.908056][ T1416] [ 333.909275][ T1416] CPU: 2 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 333.909290][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.909297][ T1416] Call Trace: [ 333.909302][ T1416] [ 333.909307][ T1416] dump_stack_lvl+0x116/0x1f0 [ 333.909327][ T1416] print_report+0xc3/0x670 [ 333.909342][ T1416] ? __virt_addr_valid+0x5e/0x590 [ 333.909358][ T1416] ? __phys_addr+0xc6/0x150 [ 333.909372][ T1416] ? handle_tx+0x5dc/0x630 [ 333.909389][ T1416] kasan_report+0xe0/0x110 [ 333.909402][ T1416] ? handle_tx+0x5dc/0x630 [ 333.909419][ T1416] handle_tx+0x5dc/0x630 [ 333.909435][ T1416] dev_hard_start_xmit+0x93/0x740 [ 333.909449][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 333.909462][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.909477][ T1416] ? finish_task_switch.isra.0+0x221/0xc10 [ 333.909490][ T1416] ? rcu_is_watching+0x12/0xc0 [ 333.909502][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 333.909515][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 333.909530][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 333.909545][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 333.909555][ T1416] ? find_held_lock+0x2b/0x80 [ 333.909566][ T1416] ? skb_dequeue+0x126/0x180 [ 333.909576][ T1416] ? find_held_lock+0x2b/0x80 [ 333.909587][ T1416] ? rcu_is_watching+0x12/0xc0 [ 333.909598][ T1416] tx+0xcc/0x190 [ 333.909615][ T1416] ? __pfx_tx+0x10/0x10 [ 333.909666][ T1416] kthread+0x1e1/0x3e0 [ 333.909687][ T1416] ? find_held_lock+0x2b/0x80 [ 333.909703][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909717][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 333.909729][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.909744][ T1416] ? __kthread_parkme+0x19e/0x250 [ 333.909758][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909771][ T1416] kthread+0x3c2/0x780 [ 333.909857][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909878][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909893][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909911][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909926][ T1416] ? rcu_is_watching+0x12/0xc0 [ 333.909937][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909953][ T1416] ret_from_fork+0x45/0x80 [ 333.909964][ T1416] ? __pfx_kthread+0x10/0x10 [ 333.909979][ T1416] ret_from_fork_asm+0x1a/0x30 [ 333.910000][ T1416] [ 333.910003][ T1416] [ 333.982603][ T1416] Allocated by task 7554: [ 333.984348][ T1416] kasan_save_stack+0x33/0x60 [ 333.986375][ T1416] kasan_save_track+0x14/0x30 [ 333.988261][ T1416] __kasan_kmalloc+0xaa/0xb0 [ 333.990109][ T1416] alloc_tty_struct+0x96/0x8c0 [ 333.992018][ T1416] tty_init_dev.part.0+0x1e/0x500 [ 333.994478][ T1416] tty_open+0xa50/0xf90 [ 333.996182][ T1416] chrdev_open+0x231/0x6a0 [ 333.998093][ T1416] do_dentry_open+0x741/0x1c10 [ 334.000357][ T1416] vfs_open+0x82/0x3f0 [ 334.002000][ T1416] path_openat+0x1e5e/0x2d40 [ 334.003953][ T1416] do_filp_open+0x20b/0x470 [ 334.005925][ T1416] do_sys_openat2+0x11b/0x1d0 [ 334.007819][ T1416] __ia32_compat_sys_openat+0x16d/0x210 [ 334.010013][ T1416] __do_fast_syscall_32+0x73/0x120 [ 334.012049][ T1416] do_fast_syscall_32+0x32/0x80 [ 334.014116][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.016581][ T1416] [ 334.017552][ T1416] Freed by task 1971: [ 334.019148][ T1416] kasan_save_stack+0x33/0x60 [ 334.021006][ T1416] kasan_save_track+0x14/0x30 [ 334.022895][ T1416] kasan_save_free_info+0x3b/0x60 [ 334.025217][ T1416] __kasan_slab_free+0x51/0x70 [ 334.027160][ T1416] kfree+0x2b6/0x4d0 [ 334.028706][ T1416] process_one_work+0x9cc/0x1b70 [ 334.030683][ T1416] worker_thread+0x6c8/0xf10 [ 334.032654][ T1416] kthread+0x3c2/0x780 [ 334.034520][ T1416] ret_from_fork+0x45/0x80 [ 334.036554][ T1416] ret_from_fork_asm+0x1a/0x30 [ 334.038833][ T1416] [ 334.039966][ T1416] Last potentially related work creation: [ 334.042569][ T1416] kasan_save_stack+0x33/0x60 [ 334.044646][ T1416] kasan_record_aux_stack+0xb8/0xd0 [ 334.047038][ T1416] insert_work+0x36/0x230 [ 334.049119][ T1416] __queue_work+0x97e/0x10f0 [ 334.050946][ T1416] queue_work_on+0x1a4/0x1f0 [ 334.052562][ T1416] release_tty+0x4de/0x5d0 [ 334.054216][ T1416] tty_release_struct+0xb7/0xe0 [ 334.055981][ T1416] tty_release+0xe2d/0x1430 [ 334.057576][ T1416] __fput+0x3ff/0xb70 [ 334.059335][ T1416] task_work_run+0x14d/0x240 [ 334.061441][ T1416] do_exit+0xafb/0x2c30 [ 334.063247][ T1416] do_group_exit+0xd3/0x2a0 [ 334.065127][ T1416] get_signal+0x2673/0x26d0 [ 334.066649][ T1416] arch_do_signal_or_restart+0x8f/0x7a0 [ 334.068557][ T1416] syscall_exit_to_user_mode+0x150/0x2a0 [ 334.070530][ T1416] __do_fast_syscall_32+0x80/0x120 [ 334.072414][ T1416] do_fast_syscall_32+0x32/0x80 [ 334.074174][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.076207][ T1416] [ 334.076977][ T1416] The buggy address belongs to the object at ffff88805bf14000 [ 334.076977][ T1416] which belongs to the cache kmalloc-cg-2k of size 2048 [ 334.081327][ T1416] The buggy address is located 1168 bytes inside of [ 334.081327][ T1416] freed 2048-byte region [ffff88805bf14000, ffff88805bf14800) [ 334.085571][ T1416] [ 334.086403][ T1416] The buggy address belongs to the physical page: [ 334.088381][ T1416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bf16000 pfn:0x5bf10 [ 334.091557][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 334.094204][ T1416] memcg:ffff88805b44a201 [ 334.095531][ T1416] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 334.098099][ T1416] page_type: f5(slab) [ 334.099384][ T1416] raw: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 334.102385][ T1416] raw: ffff88805bf16000 0000000000080003 00000000f5000000 ffff88805b44a201 [ 334.104773][ T1416] head: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 334.107790][ T1416] head: ffff88805bf16000 0000000000080003 00000000f5000000 ffff88805b44a201 [ 334.110640][ T1416] head: 04fff00000000003 ffffea00016fc401 00000000ffffffff 00000000ffffffff [ 334.113380][ T1416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 334.116062][ T1416] page dumped because: kasan: bad access detected [ 334.118098][ T1416] page_owner tracks the page as allocated [ 334.119925][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5959, tgid 5959 (syz-executor), ts 48636426049, free_ts 48617690647 [ 334.126882][ T1416] post_alloc_hook+0x181/0x1b0 [ 334.128858][ T1416] get_page_from_freelist+0x135c/0x3920 [ 334.130656][ T1416] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 334.132522][ T1416] alloc_pages_mpol+0x1fb/0x550 [ 334.134106][ T1416] new_slab+0x244/0x340 [ 334.135421][ T1416] ___slab_alloc+0xd9c/0x1940 [ 334.136893][ T1416] __slab_alloc.constprop.0+0x56/0xb0 [ 334.138581][ T1416] __kmalloc_noprof+0x2f2/0x510 [ 334.140134][ T1416] __register_sysctl_table+0xb3/0x1900 [ 334.141835][ T1416] __devinet_sysctl_register+0x1b9/0x360 [ 334.143622][ T1416] devinet_sysctl_register+0x17b/0x200 [ 334.145319][ T1416] inetdev_event+0x1638/0x18a0 [ 334.146852][ T1416] notifier_call_chain+0xb9/0x410 [ 334.148446][ T1416] call_netdevice_notifiers_info+0xbe/0x140 [ 334.150277][ T1416] netif_change_name+0x554/0x920 [ 334.151845][ T1416] do_setlink.constprop.0+0x33fe/0x44b0 [ 334.153594][ T1416] page last free pid 5964 tgid 5964 stack trace: [ 334.156014][ T1416] __free_frozen_pages+0x69d/0xff0 [ 334.158243][ T1416] __put_partials+0x16d/0x1c0 [ 334.160113][ T1416] qlist_free_all+0x4e/0x120 [ 334.161975][ T1416] kasan_quarantine_reduce+0x195/0x1e0 [ 334.164165][ T1416] __kasan_slab_alloc+0x69/0x90 [ 334.166258][ T1416] __kvmalloc_node_noprof+0x22e/0x600 [ 334.168720][ T1416] seq_read_iter+0x826/0x12c0 [ 334.170665][ T1416] kernfs_fop_read_iter+0x40f/0x5a0 [ 334.172927][ T1416] vfs_read+0x8c8/0xc70 [ 334.174838][ T1416] ksys_read+0x12a/0x240 [ 334.177011][ T1416] do_syscall_64+0xcd/0x230 [ 334.178893][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.181355][ T1416] [ 334.182452][ T1416] Memory state around the buggy address: [ 334.184896][ T1416] ffff88805bf14380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.188111][ T1416] ffff88805bf14400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.191251][ T1416] >ffff88805bf14480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.194059][ T1416] ^ [ 334.195514][ T1416] ffff88805bf14500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.198003][ T1416] ffff88805bf14580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.200505][ T1416] ================================================================== [ 334.204032][ C2] hpet: Lost 19 RTC interrupts [ 334.205909][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.208186][ T1416] CPU: 2 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 334.211832][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.215309][ T1416] Call Trace: [ 334.216435][ T1416] [ 334.217446][ T1416] dump_stack_lvl+0x3d/0x1f0 [ 334.219097][ T1416] panic+0x71c/0x800 [ 334.220444][ T1416] ? __pfx_panic+0x10/0x10 [ 334.221959][ T1416] ? mark_held_locks+0x49/0x80 [ 334.223553][ T1416] ? handle_tx+0x5dc/0x630 [ 334.224965][ T1416] ? check_panic_on_warn+0x1f/0xb0 [ 334.226608][ T1416] ? handle_tx+0x5dc/0x630 [ 334.228034][ T1416] check_panic_on_warn+0xab/0xb0 [ 334.229711][ T1416] end_report+0x107/0x170 [ 334.231120][ T1416] kasan_report+0xee/0x110 [ 334.232605][ T1416] ? handle_tx+0x5dc/0x630 [ 334.234352][ T1416] handle_tx+0x5dc/0x630 [ 334.235698][ T1416] dev_hard_start_xmit+0x93/0x740 [ 334.237287][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 334.238895][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 334.240529][ T1416] ? finish_task_switch.isra.0+0x221/0xc10 [ 334.242421][ T1416] ? rcu_is_watching+0x12/0xc0 [ 334.243940][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 334.245667][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 334.247412][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 334.249084][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 334.250817][ T1416] ? find_held_lock+0x2b/0x80 [ 334.252439][ T1416] ? skb_dequeue+0x126/0x180 [ 334.253961][ T1416] ? find_held_lock+0x2b/0x80 [ 334.255459][ T1416] ? rcu_is_watching+0x12/0xc0 [ 334.256973][ T1416] tx+0xcc/0x190 [ 334.258136][ T1416] ? __pfx_tx+0x10/0x10 [ 334.259467][ T1416] kthread+0x1e1/0x3e0 [ 334.260753][ T1416] ? find_held_lock+0x2b/0x80 [ 334.262279][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.263749][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 334.265582][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 334.267265][ T1416] ? __kthread_parkme+0x19e/0x250 [ 334.268851][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.270317][ T1416] kthread+0x3c2/0x780 [ 334.271619][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.273201][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.274687][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.276162][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.277637][ T1416] ? rcu_is_watching+0x12/0xc0 [ 334.279144][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.280608][ T1416] ret_from_fork+0x45/0x80 [ 334.282022][ T1416] ? __pfx_kthread+0x10/0x10 [ 334.283519][ T1416] ret_from_fork_asm+0x1a/0x30 [ 334.285027][ T1416] [ 334.286754][ T1416] Kernel Offset: disabled [ 334.288069][ T1416] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:28:48 Registers: info registers vcpu 0 CPU#0 RAX=000000000066af07 RBX=0000000000000000 RCX=ffffffff8b6f13e9 RDX=0000000000000000 RSI=ffffffff8dbe98f0 RDI=ffffffff8bf44f80 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90866910 R15=0000000000000000 RIP=ffffffff8b6efc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcb2c820748 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000009 Opmask01=0000000000090000 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc90360ec0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e205d32393230 31545b5d36353338 36342e3631332020 5b3e343c002e2700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6564205732333230 3154515736353332 3634243631332020 5134343600242700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34393234203a2935 20303a3734372030 3134363320353432 3128393439323420 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432323120000000 20000037342e0000 3034303320353432 2022202c31000020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7e6b6f78692a79 7a6b677e63680a00 3a723a376f6e6569 2a333d3f6f6e3a3d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e637f6b2a30233f 3e3b303d3e3d2439 3b3e3c393e3f3e3d 3b227e636e7f6b2a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000074bf3fff RCX=ffffffff84d23c74 RDX=ffff888041698000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88805aef7d91 RSP=ffffc900021deae0 R8 =0000000000000007 R9 =0000000000000000 R10=000000000000026f R11=ffff88804be10030 R12=dffffc0000000000 R13=000000000000026f R14=000000000000026e R15=ffff88804be10000 RIP=ffffffff84d23c74 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f55000 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffd0 Opmask01=0000000000000008 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe81e9eee0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff0f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00204b4e494c0020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 000000ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5b9fb3df6a6fb86 737326d7af041627 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000040 000000003130323a 376963682f376963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636972656e65675f 697363732f303a30 3a303a302f303a30 3a30746567726174 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07695d0002100330 045c100a5c1f3a1f 49435b5c4c1f4949 491f744a1407035b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffdff7fffffdffb 7f7d3fffff7f7fff 6f7b7ffefc7fffdf 7f7f7f7b7f7f7f5f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30744e6f687974 00005576616c182f 0000000000000030 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000241 000000000000002f 0000000000000030 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854afbc5 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc900073bf460 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9ae0cb40 R15=ffffffff854afb60 RIP=ffffffff854afbef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7447b34 CR3=000000006cb24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002f4669 RBX=0000000000000003 RCX=ffffffff8b6f13e9 RDX=0000000000000000 RSI=ffffffff8dbe98f0 RDI=ffffffff8bf44f80 RBP=ffffed1003b56000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dab0000 R14=ffffffff90866910 R15=0000000000000000 RIP=ffffffff8b6efc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffb2eb94 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=00000000fff7ee00 Opmask02=000000000000ffdf Opmask03=0000000804420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d97e6b5e26570d00 c32a90d54fafccc5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c891cb7fc473aac8 4ec8d1d678a32b8d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09d156d0af251313 42e856aa82c63a7e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e063a5d5fbc11de7 b09e17ff93b16d11 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000004c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 38aac58e00800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000cb000000cb 000000cb00800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38a17102000000cb 00800100389f722a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000cb3aa4cd32 3a6add06000000cb ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5eabfccb6d54e5dd 58947664cff4306b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b9b4aa3981690bd 85409c30bada0115 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f346963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003030323a 346963682f346963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 662e373030367a61 2d37682d63657461 727265742d627375 2d6276642f657261 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a18671e5f0 000055a18672ad90 000000000000c181 0000000000000077 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000