last executing test programs: 9.606376154s ago: executing program 3 (id=1520): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) openat(r1, &(0x7f0000002a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x40}}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @random="ae32d02bd476", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x8, 0x2, 0xf, 0x7, 0x8}]}}}}}}}}, 0x0) 9.470929396s ago: executing program 3 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x40}}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0/file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x70, 0x65, 0x34, 0x36]}}, {@quota}, {@noswap}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x2d, 0x34, 0x5d]}}, {@noswap}, {@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}, {@gid={'gid', 0x3d, r2}}, {@huge_never}, {@usrquota}], [{@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in6=@remote, {@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0x134}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x8014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 9.409176478s ago: executing program 3 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x388, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x361, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="3a0632994c79", {0x8, 0x5}}, 0x6, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0xfe, 0x3, 0x4e3, 0x3}}, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x1}}, [{0xdd, 0xd5, "be8dbbfa0e2f632e5b225f087cfc80669deac4ca62da58045eb83d8ade8f39b47c827c63d40a69bb423f94e142cee30693318578fe314798b7c445d5308daedec939ab92fc4386e722d80c75a84f8d5292dcb0a2659d9661abaa16865c2757cec5b9923fc7bb7c7cbc05fbf6edc3daaac0d41f42236f648422c872299345f81e2252bfa627105a7185855c57cb75549891e6553c962f9ad4d6a3929f20bf5aa4dc0284dffd5f712c5e399d60bcf524c3b01d3f498077d9554dd898792ff482cb650a2252c67249fca614d69c597cb26b2b7fcf7d5d"}, {0xdd, 0xcc, "e0c8e41bbf4e486dc57d2b299e35f0ac3dba3c74d8511a467ea3daccbbe5383ea54b6d22ea5f550b77a158835ab551be91ce9274643a72ada4d99075377a69e35127499099ecac4da3911eb86ce4269c00ab2acb94fef024a788d0afcc0ac1c46c4e0387761d33e2390b36e5e2310d736bee0382ab9719b0275349f3ce3ba217d30b87cbeb75c6842698754d62550b6500b80da12ace3a1626808e749406db7c499718d300403284de8a9eb7abaadc8238deaf96718f6081fbeca4ed659f7eff5bb50eab2555d796f9b7827e"}, {0xdd, 0x83, "1cc0ba296d8a05d9b7e61eda3051f037fed7f47bfe9820fa6e26245f145d8203d790b612ac95a7ee7890ff7c107d5ad1812049b867a59a76620ac6b9d5b0f6c626b2463fef369404fcacf5d5904cd93752819458b0d42e9e043ed0416152dc3d5d942ea4bb89efb530d0dbfbe2aae7c6db376f840faa93874195c4d1ecefa94f00abce"}, {0xdd, 0xed, "4e29a38fd9fbcd54df5ad6c395ad98a701ccc3c669bc60ca71762d56cd0100f2231170d5f77564778e095840d67755f8947ed73ee24e58223169fe39331304c86cdb646feb63d727ba59691d3e43ec316382b799a2e3627efec21dbbde795ba2e447c6b564039de8f24293477eb4df23206d2abaa67ea030ec86a0d8682bb6fbb2a86a73aa5ae71c6388b6c6d7408694e1d49e71795da1ecce6cf304d2eb68c172cbbb4345668383c10625a003e0a6f28dc611cb4fa5a320d8cb57077ca084ddfa3208495f0350054bca9cca45e660ae9039e1fe30d4d2f0bd06968c1ef515a5f8f24e227d1ac2d82c328b362d"}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000800)=0xa) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000880)={0x34, r7, 0x200, 0x800000, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="850000003b0000000000000003000003122e7bcf1ac94d9b26d24bdb8f6a41230000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x14, &(0x7f00000000c0)=""/20, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x8, 0xa}, {0x3, 0x2, 0xb, 0x4}, {0x0, 0x3, 0xe, 0x7}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xd, 0x3, 0x10, @loopback, @mcast2, 0x40, 0x8, 0x8, 0x80000000}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r9, 0x25, 0x0, @void}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000010000000a00000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 9.137542788s ago: executing program 3 (id=1524): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) r4 = openat$pmem0(0xffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000002c0)={'\x00', 0xb574, 0x401, 0x6, 0x100000000000000, 0x6, r0}) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000752b00fc010000000000000000000000000000fe8000000000000000000000000000aa87000000000000003b"], 0x0) syz_usb_disconnect(0xffffffffffffffff) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1, 0x0, 0x0) 5.977243038s ago: executing program 2 (id=1537): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x20000002, 0x980, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd71) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) openat$fb1(0xffffff9c, 0x0, 0x40000, 0x0) accept4(r3, 0x0, &(0x7f0000000180), 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r6, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x84) r10 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0), 0x0, r10) 5.606923766s ago: executing program 2 (id=1538): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x40, 0x0, 0x9, 0xdc, {{0x12, 0x4, 0x2, 0x2e, 0x48, 0x65, 0x0, 0x7, 0x52, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x2e, 0x0, [{0x7, 0xa, "f9ec15dad1ab9955"}, {0x6, 0x10, "c9132992340ae3bef81e79821e79"}, {0x2, 0xe, "7709c37b59c8dea8854c08af"}]}]}}}}}) (async) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0x2, 0x1}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102}}}}) 5.411007511s ago: executing program 2 (id=1541): unshare(0x68060200) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r1, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80000000000002000400000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x20, 0x35437b2, 0xfffffffc, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x68, 0x0, 0xd, 0x29, 0x0, @local, @loopback, {[@generic={0x82, 0x4, "568b"}, @generic={0x83, 0x3, "f9"}, @ssrr={0x89, 0x17, 0xf8, [@rand_addr=0x64010102, @private=0xa010102, @multicast1, @rand_addr=0x64010101, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_getneigh={0xe0, 0x1e, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x10200, 0x22000}, [@IFLA_VF_PORTS={0x94, 0x18, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bc1a09ae50506c58990d33f130c284b8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "44c091f1798c95566f0bbf4c7ab8d6e4"}, @IFLA_PORT_PROFILE={0x7, 0x2, '*{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_PROFILE={0x6, 0x2, '}\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4000}, @IFLA_PORT_PROFILE={0x7, 0x2, '&-\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1b3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "682e780897b2e84e9853d352b5e0d9f1"}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MAP={0x20, 0xe, {0x1, 0x100, 0x8, 0xc572, 0x5, 0x5}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.178315039s ago: executing program 1 (id=1544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x20000002, 0x980, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd71) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) openat$fb1(0xffffff9c, 0x0, 0x40000, 0x0) accept4(r3, 0x0, &(0x7f0000000180), 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r6, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x84) r10 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0), 0x0, r10) 2.620825654s ago: executing program 1 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x388, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x361, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="3a0632994c79", {0x8, 0x5}}, 0x6, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0xfe, 0x3, 0x4e3, 0x3}}, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x1}}, [{0xdd, 0xd5, "be8dbbfa0e2f632e5b225f087cfc80669deac4ca62da58045eb83d8ade8f39b47c827c63d40a69bb423f94e142cee30693318578fe314798b7c445d5308daedec939ab92fc4386e722d80c75a84f8d5292dcb0a2659d9661abaa16865c2757cec5b9923fc7bb7c7cbc05fbf6edc3daaac0d41f42236f648422c872299345f81e2252bfa627105a7185855c57cb75549891e6553c962f9ad4d6a3929f20bf5aa4dc0284dffd5f712c5e399d60bcf524c3b01d3f498077d9554dd898792ff482cb650a2252c67249fca614d69c597cb26b2b7fcf7d5d"}, {0xdd, 0xcc, "e0c8e41bbf4e486dc57d2b299e35f0ac3dba3c74d8511a467ea3daccbbe5383ea54b6d22ea5f550b77a158835ab551be91ce9274643a72ada4d99075377a69e35127499099ecac4da3911eb86ce4269c00ab2acb94fef024a788d0afcc0ac1c46c4e0387761d33e2390b36e5e2310d736bee0382ab9719b0275349f3ce3ba217d30b87cbeb75c6842698754d62550b6500b80da12ace3a1626808e749406db7c499718d300403284de8a9eb7abaadc8238deaf96718f6081fbeca4ed659f7eff5bb50eab2555d796f9b7827e"}, {0xdd, 0x83, "1cc0ba296d8a05d9b7e61eda3051f037fed7f47bfe9820fa6e26245f145d8203d790b612ac95a7ee7890ff7c107d5ad1812049b867a59a76620ac6b9d5b0f6c626b2463fef369404fcacf5d5904cd93752819458b0d42e9e043ed0416152dc3d5d942ea4bb89efb530d0dbfbe2aae7c6db376f840faa93874195c4d1ecefa94f00abce"}, {0xdd, 0xed, "4e29a38fd9fbcd54df5ad6c395ad98a701ccc3c669bc60ca71762d56cd0100f2231170d5f77564778e095840d67755f8947ed73ee24e58223169fe39331304c86cdb646feb63d727ba59691d3e43ec316382b799a2e3627efec21dbbde795ba2e447c6b564039de8f24293477eb4df23206d2abaa67ea030ec86a0d8682bb6fbb2a86a73aa5ae71c6388b6c6d7408694e1d49e71795da1ecce6cf304d2eb68c172cbbb4345668383c10625a003e0a6f28dc611cb4fa5a320d8cb57077ca084ddfa3208495f0350054bca9cca45e660ae9039e1fe30d4d2f0bd06968c1ef515a5f8f24e227d1ac2d82c328b362d"}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000800)=0xa) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000880)={0x34, r7, 0x200, 0x800000, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="850000003b0000000000000003000003122e7bcf1ac94d9b26d24bdb8f6a41230000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x14, &(0x7f00000000c0)=""/20, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x8, 0xa}, {0x3, 0x2, 0xb, 0x4}, {0x0, 0x3, 0xe, 0x7}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xd, 0x3, 0x10, @loopback, @mcast2, 0x40, 0x8, 0x8, 0x80000000}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r9, 0x25, 0x0, @void}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000010000000a00000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 2.177491501s ago: executing program 2 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x374, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xff, 0x8, 0xffff, 0xff, 0x0]}, @NL80211_ATTR_FRAME={0x342, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="3a0632994c79", {0x8, 0x5}}, 0x6, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0xfe, 0x3, 0x4e3, 0x3}}, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x1}}, [{0xdd, 0xd5, "be8dbbfa0e2f632e5b225f087cfc80669deac4ca62da58045eb83d8ade8f39b47c827c63d40a69bb423f94e142cee30693318578fe314798b7c445d5308daedec939ab92fc4386e722d80c75a84f8d5292dcb0a2659d9661abaa16865c2757cec5b9923fc7bb7c7cbc05fbf6edc3daaac0d41f42236f648422c872299345f81e2252bfa627105a7185855c57cb75549891e6553c962f9ad4d6a3929f20bf5aa4dc0284dffd5f712c5e399d60bcf524c3b01d3f498077d9554dd898792ff482cb650a2252c67249fca614d69c597cb26b2b7fcf7d5d"}, {0xdd, 0xcc, "e0c8e41bbf4e486dc57d2b299e35f0ac3dba3c74d8511a467ea3daccbbe5383ea54b6d22ea5f550b77a158835ab551be91ce9274643a72ada4d99075377a69e35127499099ecac4da3911eb86ce4269c00ab2acb94fef024a788d0afcc0ac1c46c4e0387761d33e2390b36e5e2310d736bee0382ab9719b0275349f3ce3ba217d30b87cbeb75c6842698754d62550b6500b80da12ace3a1626808e749406db7c499718d300403284de8a9eb7abaadc8238deaf96718f6081fbeca4ed659f7eff5bb50eab2555d796f9b7827e"}, {0xdd, 0x64, "1cc0ba296d8a05d9b7e61eda3051f037fed7f47bfe9820fa6e26245f145d8203d790b612ac95a7ee7890ff7c107d5ad1812049b867a59a76620ac6b9d5b0f6c626b2463fef369404fcacf5d5904cd93752819458b0d42e9e043ed0416152dc3d5d942ea4"}, {0xdd, 0xed, "4e29a38fd9fbcd54df5ad6c395ad98a701ccc3c669bc60ca71762d56cd0100f2231170d5f77564778e095840d67755f8947ed73ee24e58223169fe39331304c86cdb646feb63d727ba59691d3e43ec316382b799a2e3627efec21dbbde795ba2e447c6b564039de8f24293477eb4df23206d2abaa67ea030ec86a0d8682bb6fbb2a86a73aa5ae71c6388b6c6d7408694e1d49e71795da1ecce6cf304d2eb68c172cbbb4345668383c10625a003e0a6f28dc611cb4fa5a320d8cb57077ca084ddfa3208495f0350054bca9cca45e660ae9039e1fe30d4d2f0bd06968c1ef515a5f8f24e227d1ac2d82c328b362d"}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000800)=0xa) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000880)={0x34, r7, 0x200, 0x800000, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="850000003b0000000000000003000003122e7bcf1ac94d9b26d24bdb8f6a41230000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x14, &(0x7f00000000c0)=""/20, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x8, 0xa}, {0x3, 0x2, 0xb, 0x4}, {0x0, 0x3, 0xe, 0x7}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xd, 0x3, 0x10, @loopback, @mcast2, 0x40, 0x8, 0x8, 0x80000000}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r9, 0x25, 0x0, @void}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000010000000a00000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 2.170980994s ago: executing program 0 (id=1554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x20000002, 0x980, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd71) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) openat$fb1(0xffffff9c, 0x0, 0x40000, 0x0) accept4(r5, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r8, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x84) r12 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0), 0x0, r12) 1.881200158s ago: executing program 0 (id=1547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x20000002, 0x980, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd71) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) openat$fb1(0xffffff9c, 0x0, 0x40000, 0x0) accept4(r3, 0x0, &(0x7f0000000180), 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r6, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x84) r10 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0), 0x0, r10) 1.519894139s ago: executing program 3 (id=1525): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0xe0c5, 0x3, {0x0}, {0xee01}, 0x8, 0x7}) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0xb6b) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000\x00\x00\x00\x0000,\x00']) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000640)=r2, 0x4) sendfile(r0, r0, 0x0, 0x24002de8) 1.516495148s ago: executing program 0 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x390, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xff, 0x8, 0xffff, 0xff]}, @NL80211_ATTR_FRAME={0x361, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="3a0632994c79", {0x8, 0x5}}, 0x6, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0xfe, 0x3, 0x4e3, 0x3}}, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x1}}, [{0xdd, 0xd5, "be8dbbfa0e2f632e5b225f087cfc80669deac4ca62da58045eb83d8ade8f39b47c827c63d40a69bb423f94e142cee30693318578fe314798b7c445d5308daedec939ab92fc4386e722d80c75a84f8d5292dcb0a2659d9661abaa16865c2757cec5b9923fc7bb7c7cbc05fbf6edc3daaac0d41f42236f648422c872299345f81e2252bfa627105a7185855c57cb75549891e6553c962f9ad4d6a3929f20bf5aa4dc0284dffd5f712c5e399d60bcf524c3b01d3f498077d9554dd898792ff482cb650a2252c67249fca614d69c597cb26b2b7fcf7d5d"}, {0xdd, 0xcc, "e0c8e41bbf4e486dc57d2b299e35f0ac3dba3c74d8511a467ea3daccbbe5383ea54b6d22ea5f550b77a158835ab551be91ce9274643a72ada4d99075377a69e35127499099ecac4da3911eb86ce4269c00ab2acb94fef024a788d0afcc0ac1c46c4e0387761d33e2390b36e5e2310d736bee0382ab9719b0275349f3ce3ba217d30b87cbeb75c6842698754d62550b6500b80da12ace3a1626808e749406db7c499718d300403284de8a9eb7abaadc8238deaf96718f6081fbeca4ed659f7eff5bb50eab2555d796f9b7827e"}, {0xdd, 0x83, "1cc0ba296d8a05d9b7e61eda3051f037fed7f47bfe9820fa6e26245f145d8203d790b612ac95a7ee7890ff7c107d5ad1812049b867a59a76620ac6b9d5b0f6c626b2463fef369404fcacf5d5904cd93752819458b0d42e9e043ed0416152dc3d5d942ea4bb89efb530d0dbfbe2aae7c6db376f840faa93874195c4d1ecefa94f00abce"}, {0xdd, 0xed, "4e29a38fd9fbcd54df5ad6c395ad98a701ccc3c669bc60ca71762d56cd0100f2231170d5f77564778e095840d67755f8947ed73ee24e58223169fe39331304c86cdb646feb63d727ba59691d3e43ec316382b799a2e3627efec21dbbde795ba2e447c6b564039de8f24293477eb4df23206d2abaa67ea030ec86a0d8682bb6fbb2a86a73aa5ae71c6388b6c6d7408694e1d49e71795da1ecce6cf304d2eb68c172cbbb4345668383c10625a003e0a6f28dc611cb4fa5a320d8cb57077ca084ddfa3208495f0350054bca9cca45e660ae9039e1fe30d4d2f0bd06968c1ef515a5f8f24e227d1ac2d82c328b362d"}]}}]}, 0x390}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000800)=0xa) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000880)={0x34, r7, 0x200, 0x800000, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="850000003b0000000000000003000003122e7bcf1ac94d9b26d24bdb8f6a41230000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x14, &(0x7f00000000c0)=""/20, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x8, 0xa}, {0x3, 0x2, 0xb, 0x4}, {0x0, 0x3, 0xe, 0x7}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xd, 0x3, 0x10, @loopback, @mcast2, 0x40, 0x8, 0x8, 0x80000000}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r9, 0x25, 0x0, @void}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000010000000a00000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 1.51442192s ago: executing program 1 (id=1558): r0 = openat$cdrom(0xffffff9c, &(0x7f0000002140), 0x200, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200de489602110c6a0517c3255bf4e590b6070000000000f50b0000000000008100000000000000b00b000000000000ffff000000000000"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) getdents64(r5, &(0x7f0000000040)=""/233, 0xe9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904", @ANYBLOB="e9ff"], 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x7fffffff}, @in6={0xa, 0x4e23, 0xe4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x58dc, @private0, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ca}, @in6={0xa, 0x4e23, 0x5a, @local, 0x6}, @in6={0xa, 0x4e23, 0x6fd9, @remote, 0x10001}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x81, @remote, 0xd}], 0xf4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.390841421s ago: executing program 3 (id=1548): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x108) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a0001d4a9a24a000000000080"], 0x14}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x408000f}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) move_mount(r5, &(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r9, 0x800455c9, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000b800)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) 1.141297428s ago: executing program 1 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, 0x0) time(0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="9e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 1.138682212s ago: executing program 1 (id=1550): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_sco(r2, &(0x7f00000004c0)={0x1f, @fixed}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000580)=0x80e9) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\b', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000b00)="cdf11c857ea5be3158b53546f849d40f131c9c9c160fc846dc71454c06871455955316db11a616678d84059f8c8bd51d084aeb387a9938245e76418affc6bc7c90c26fb4161dc0735505f563f605aad28ef15717cab45f68ee5753dfc753e4c3bec611dfab0f4ab5126dd789db127d294763f073a30359d0cfc049357adf3779c49ea969f7af924c8580eb4eeba0a7edf371d12c20b22cb4b132e3ed38d562f9d1ad1efeb84c2bd5e4537376bef8fc54f637f8d9b15719fc009f63959ec386e9", 0xc0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r6}, &(0x7f0000000440)=""/224, 0xe0, &(0x7f00000005c0)={&(0x7f0000000540)={'crc32-pclmul\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x3c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc008561c, &(0x7f0000000040)={0x980915, 0x3, @value=0x140000000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='blacklist\x00', &(0x7f0000000100)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, r11, 0xce9e1000) 1.100509908s ago: executing program 2 (id=1552): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="6001000010000100ffffffff00000000e0000001000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ff0200000000000000000000000000cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000002c0017000400000000000000000000000000000000000000000000000000000000000000000000000000000048000300"], 0x160}}, 0x0) 980.637361ms ago: executing program 2 (id=1553): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x28, &(0x7f0000000000), 0x0}, 0x4c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="66f30f1ef92e2626f20f1140008fe968906df5ea63800000bc008fc978d7e4263e0f01ca260f208666ba43003e0fc5fee4ef26f20f011a0fc71f", 0x3a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0xc0844123, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = io_uring_setup(0x4d66, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 741.051429ms ago: executing program 1 (id=1555): timer_create(0x3, 0x0, &(0x7f0000001400)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001300)={{0x0, 0x989680}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006c40)=[{&(0x7f0000004200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000006480)=[{&(0x7f0000004240)="91", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000004800)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004dc0)=ANY=[@ANYBLOB="2c0000008400000001000000000000000400"/40, @ANYRES32=0x0, @ANYBLOB="14"], 0x40}], 0x1, 0x0) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) dup2(r1, r0) 550.788004ms ago: executing program 0 (id=1556): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x20000002, 0x980, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd71) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) openat$fb1(0xffffff9c, 0x0, 0x40000, 0x0) accept4(r5, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r8, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x84) r12 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0), 0x0, r12) 130.999223ms ago: executing program 0 (id=1559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bond0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000300)={0xa, 0x200, 0xffe4, 0x9}, 0x8) wait4(0x0, 0x0, 0x80000003, 0x0) close(r3) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x101, 0x34325241, 0x2, [r11], [0xeedb], [0x0, 0x4000000]}) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x4, 0x7]}, &(0x7f00000002c0)=0x44) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f05000000010000000000000003000000005f0000000000002e"], &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x20) 0s ago: executing program 0 (id=1560): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x8, 0x18, 0x7, 0x401}, &(0x7f0000000700)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='track_foreign_dirty\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') write$P9_RCLUNK(r5, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.2.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 152.012430][ T56] usbhid 6-1:0.0: can't add hid device: -71 [ 152.014738][ T56] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 152.022269][ T56] usb 6-1: USB disconnect, device number 7 [ 152.568494][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.983619][ T8061] overlayfs: missing 'lowerdir' [ 153.068900][ T8066] binder: 8065:8066 ioctl c0306201 20000480 returned -22 [ 153.130645][ T8071] binder: BC_ATTEMPT_ACQUIRE not supported [ 153.132811][ T8071] binder: 8067:8071 ioctl c0306201 20000380 returned -22 [ 153.241211][ T8071] md0: using deprecated bitmap file support [ 153.243592][ T8071] md0: error: bitmap file must be a regular file [ 153.480559][ T8088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.712'. [ 153.483499][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'. [ 153.608473][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.392294][ T8131] Cannot find map_set index 1 as target [ 154.598612][ T8140] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.608144][ T8140] CIFS mount error: No usable UNC path provided in device string! [ 154.608144][ T8140] [ 154.612208][ T8140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.658453][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.692086][ T8146] netlink: 'syz.1.729': attribute type 21 has an invalid length. [ 155.663968][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 155.688438][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.239629][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x7 [ 156.242510][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x6 [ 156.244984][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.247556][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.251893][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.255858][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.258312][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.262243][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.264451][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.266461][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.269863][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.272101][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.274096][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.276126][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.278149][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.280533][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.282602][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.284544][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.286609][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.288688][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.291003][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.292963][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.294985][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.296918][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.299039][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.300982][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.303898][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.306000][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.308025][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.310167][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.312189][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.314782][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.316876][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.319004][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.321141][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.323195][ T56] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 156.330425][ T56] hid-generic 0000:0000:0003.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 156.499769][ T5350] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 156.553892][ T8217] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 156.652731][ T5350] usb 6-1: config 0 has no interfaces? [ 156.654436][ T5350] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 156.656788][ T5350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.660082][ T5350] usb 6-1: config 0 descriptor?? [ 156.728458][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.751770][ T8233] nbd: must specify at least one socket [ 156.758107][ T8233] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 156.764248][ T8233] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 156.766163][ T8233] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 156.892870][ T5390] usb 6-1: USB disconnect, device number 8 [ 157.068505][ T8245] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 157.084314][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 157.109542][ T8247] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.760'. [ 157.112123][ T8247] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 157.279468][ T8259] netlink: 3 bytes leftover after parsing attributes in process `syz.3.762'. [ 157.353961][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.618814][ T1413] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 157.768445][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.778800][ T1413] usb 8-1: Using ep0 maxpacket: 8 [ 157.795772][ T1413] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 157.802587][ T1413] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 157.812649][ T1413] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 157.825452][ T1413] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 157.830464][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 157.835008][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 157.841790][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.854482][ T1413] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 157.857901][ T1413] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 157.864830][ T1413] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 157.871202][ T1413] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 157.876115][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 157.882947][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 157.888501][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.909604][ T1413] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 157.914253][ T1413] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 157.917092][ T1413] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 157.920581][ T1413] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 157.925691][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 157.935596][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 157.951141][ T1413] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.991174][ T1413] usb 8-1: string descriptor 0 read error: -22 [ 157.992900][ T1413] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.000734][ T1413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.009201][ T1413] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 158.207271][ T8279] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 158.818441][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.839724][ T8296] pim6reg: entered allmulticast mode [ 158.853867][ T8296] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 158.857460][ T8296] syz_tun: entered promiscuous mode [ 158.870430][ T8296] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 158.876508][ T8296] pim6reg: left allmulticast mode [ 158.977218][ T5363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.984773][ T5363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.991752][ T5363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.000588][ T5363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.004187][ T5363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.006211][ T1098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.011643][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.025699][ T4779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.027913][ T4779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.032073][ T4779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.041658][ T4779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.046150][ T4779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.056179][ T4779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.108204][ T1098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.174546][ T1098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.284588][ T8309] sp0: Synchronizing with TNC [ 159.304959][ T1098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.383150][ T1413] usb 8-1: USB disconnect, device number 10 [ 159.440468][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 159.532450][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.535460][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.538132][ T8297] bridge_slave_0: entered allmulticast mode [ 159.542815][ T8297] bridge_slave_0: entered promiscuous mode [ 159.547897][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.550534][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.553045][ T8297] bridge_slave_1: entered allmulticast mode [ 159.555821][ T8297] bridge_slave_1: entered promiscuous mode [ 159.616178][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.620956][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.678808][ T8297] team0: Port device team_slave_0 added [ 159.680798][ T1098] bridge_slave_1: left allmulticast mode [ 159.682428][ T1098] bridge_slave_1: left promiscuous mode [ 159.685519][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.697082][ T1098] bridge_slave_0: left allmulticast mode [ 159.699431][ T1098] bridge_slave_0: left promiscuous mode [ 159.701180][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.853329][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.203828][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.215716][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.221721][ T1098] bond0 (unregistering): Released all slaves [ 160.234479][ T8297] team0: Port device team_slave_1 added [ 160.274274][ T8344] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 0, id = 0 [ 160.340675][ T8346] IPVS: length: 195 != 8 [ 160.341887][ T8346] IPVS: length: 195 != 8 [ 160.349569][ T8347] binder: 8345:8347 ioctl c018620c 20003640 returned -1 [ 160.354071][ T8346] binder: 8345:8346 ioctl c018620c 20003640 returned -1 [ 160.362812][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.364621][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.371557][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.374799][ T1098] : left promiscuous mode [ 160.440269][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.442073][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.453850][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.534760][ T8297] hsr_slave_0: entered promiscuous mode [ 160.536820][ T8297] hsr_slave_1: entered promiscuous mode [ 160.549888][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.551894][ T8297] Cannot create hsr debugfs directory [ 160.888468][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.950752][ T1098] hsr_slave_0: left promiscuous mode [ 160.953528][ T1098] hsr_slave_1: left promiscuous mode [ 160.956522][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.958732][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.967857][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.970795][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.004765][ T1098] veth1_macvtap: left promiscuous mode [ 161.006837][ T1098] veth0_macvtap: left promiscuous mode [ 161.008627][ T1098] veth1_vlan: left promiscuous mode [ 161.011010][ T1098] veth0_vlan: left promiscuous mode [ 161.130513][ T4779] Bluetooth: hci2: command tx timeout [ 161.938465][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.261690][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 162.386789][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 162.969938][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.218511][ T4779] Bluetooth: hci2: command tx timeout [ 163.767464][ T8297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.787442][ T8297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.810624][ T8297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.817492][ T8297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.850994][ T8420] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.879452][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.890616][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.896908][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.899742][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.916699][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.918762][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.007044][ T8438] geneve3: entered promiscuous mode [ 164.008509][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.011523][ T8438] geneve3: entered allmulticast mode [ 164.078712][ T5589] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 164.114548][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.154179][ T8297] veth0_vlan: entered promiscuous mode [ 164.161521][ T8297] veth1_vlan: entered promiscuous mode [ 164.179435][ T8297] veth0_macvtap: entered promiscuous mode [ 164.184338][ T8297] veth1_macvtap: entered promiscuous mode [ 164.197073][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.202206][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.205726][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.209659][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.213051][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.216670][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.223610][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.231005][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.234858][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.238348][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.239145][ T5589] usb 5-1: Using ep0 maxpacket: 8 [ 164.244805][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.249121][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.252793][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.257320][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.261140][ T5589] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.264080][ T5589] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.267578][ T5589] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.273490][ T8297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.276617][ T8297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.280043][ T5589] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.283547][ T5589] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.288131][ T5589] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.291621][ T8297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.294695][ T8297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.299908][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.350940][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.353840][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.367685][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.371851][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.511155][ T5589] usb 5-1: GET_CAPABILITIES returned 0 [ 164.512721][ T5589] usbtmc 5-1:16.0: can't read capabilities [ 165.048657][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.298513][ T4779] Bluetooth: hci2: command tx timeout [ 165.966611][ T8471] mkiss: ax0: crc mode is auto. [ 166.088615][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.133935][ T39] kauditd_printk_skb: 226 callbacks suppressed [ 166.133953][ T39] audit: type=1326 audit(414.009:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.154571][ T39] audit: type=1326 audit(414.009:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.167937][ T39] audit: type=1326 audit(414.009:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.188295][ T39] audit: type=1326 audit(414.009:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.198571][ T39] audit: type=1326 audit(414.009:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.206521][ T39] audit: type=1326 audit(414.009:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.216426][ T39] audit: type=1326 audit(414.009:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.225636][ T39] audit: type=1326 audit(414.019:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.233791][ T39] audit: type=1326 audit(414.019:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.241496][ T39] audit: type=1326 audit(414.019:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 166.836721][ T979] usb 5-1: USB disconnect, device number 11 [ 167.128439][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.381750][ T4779] Bluetooth: hci2: command tx timeout [ 167.428493][ T5350] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.598648][ T5350] usb 5-1: Using ep0 maxpacket: 8 [ 167.632459][ T5350] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.636148][ T5350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.639983][ T5350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.653242][ T5350] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.670192][ T5350] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.675005][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.904457][ T5350] usb 5-1: GET_CAPABILITIES returned 0 [ 167.907082][ T5350] usbtmc 5-1:16.0: can't read capabilities [ 168.168459][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.240517][ T979] usb 5-1: USB disconnect, device number 12 [ 169.085578][ T8546] overlayfs: failed to resolve './file0': -2 [ 169.208612][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.222931][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 170.248467][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.581699][ T8620] syz.3.844: attempt to access beyond end of device [ 170.581699][ T8620] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.586897][ T8620] SQUASHFS error: Failed to read block 0x0: -5 [ 170.591027][ T8620] unable to read squashfs_super_block [ 170.598850][ T8622] netlink: 'syz.1.845': attribute type 9 has an invalid length. [ 170.603604][ T8622] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.845'. [ 171.288444][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.350724][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 172.248535][ T5390] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 172.328488][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.408790][ T5390] usb 7-1: Using ep0 maxpacket: 32 [ 172.419881][ T5390] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 172.422967][ T5390] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.426736][ T5390] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.448688][ T5390] usb 7-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 172.453697][ T5390] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.460207][ T5390] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.463592][ T5390] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.467123][ T5390] usb 7-1: Product: syz [ 172.478866][ T5390] usb 7-1: Manufacturer: syz [ 172.480679][ T5390] usb 7-1: SerialNumber: syz [ 172.484189][ T5390] usb 7-1: config 0 descriptor?? [ 172.491563][ T5390] ldusb 7-1:0.0: Interrupt in endpoint not found [ 172.698659][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.855'. [ 172.804736][ T64] usb 7-1: USB disconnect, device number 17 [ 172.972107][ T8670] sctp: [Deprecated]: syz.0.857 (pid 8670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.972107][ T8670] Use struct sctp_sack_info instead [ 173.329098][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 173.329111][ T39] audit: type=1326 audit(421.209:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.859" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 173.368554][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.384810][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 174.418467][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.475499][ T8715] netlink: 'syz.2.869': attribute type 21 has an invalid length. [ 174.770134][ T39] audit: type=1326 audit(422.649:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.775411][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 174.777515][ T39] audit: type=1326 audit(422.649:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.787277][ T39] audit: type=1326 audit(422.649:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.795852][ T39] audit: type=1326 audit(422.649:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.803423][ T39] audit: type=1326 audit(422.649:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.811585][ T39] audit: type=1326 audit(422.649:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.818953][ T39] audit: type=1326 audit(422.649:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.826236][ T39] audit: type=1326 audit(422.649:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.836142][ T39] audit: type=1326 audit(422.649:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.875" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 174.888631][ T1992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.048596][ T1992] usb 6-1: Using ep0 maxpacket: 32 [ 175.050333][ T1992] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 175.050365][ T1992] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 175.050422][ T1992] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 175.050446][ T1992] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 175.050469][ T1992] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.052282][ T1992] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 175.052309][ T1992] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 175.052328][ T1992] usb 6-1: Product: syz [ 175.052341][ T1992] usb 6-1: Manufacturer: syz [ 175.052355][ T1992] usb 6-1: SerialNumber: syz [ 175.053916][ T1992] usb 6-1: config 0 descriptor?? [ 175.057963][ T1992] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 175.066070][ T1992] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 175.448469][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.466919][ T8734] Process accounting resumed [ 175.875594][ T8723] syz.1.873: attempt to access beyond end of device [ 175.875594][ T8723] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 175.901138][ T8723] syz.1.873: attempt to access beyond end of device [ 175.901138][ T8723] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 175.922267][ T8723] syz.1.873: attempt to access beyond end of device [ 175.922267][ T8723] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 175.931587][ T8723] syz.1.873: attempt to access beyond end of device [ 175.931587][ T8723] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 175.950144][ T8723] syz.1.873: attempt to access beyond end of device [ 175.950144][ T8723] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 175.981279][ T8723] syz.1.873: attempt to access beyond end of device [ 175.981279][ T8723] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 176.005627][ T1992] usb 6-1: USB disconnect, device number 9 [ 176.009521][ T1992] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 176.377796][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 176.488446][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.575229][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 176.582004][ T8791] netlink: 'syz.0.890': attribute type 11 has an invalid length. [ 176.625276][ T8791] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.629109][ T8791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.632465][ T8791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.635741][ T8791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.643411][ T8791] vxlan0: entered promiscuous mode [ 176.696169][ T8795] overlayfs: missing 'lowerdir' [ 176.836284][ T8799] hsr0: entered promiscuous mode [ 176.838631][ T8799] hsr_slave_0: left promiscuous mode [ 176.840676][ T8799] hsr_slave_1: left promiscuous mode [ 176.854952][ T8799] hsr0 (unregistering): left promiscuous mode [ 177.528470][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.114916][ T8855] jfs: Unrecognized mount option "gid=" or missing value [ 178.568441][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.344728][ T8871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.347855][ T8871] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 179.351561][ T8871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.608517][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.847213][ T8890] fuse: Bad value for 'fd' [ 179.868579][ T39] kauditd_printk_skb: 109 callbacks suppressed [ 179.868598][ T39] audit: type=1326 audit(427.739:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.915" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 180.455005][ T8909] vlan2: entered promiscuous mode [ 180.457045][ T8909] vlan2: entered allmulticast mode [ 180.648443][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.938550][ T5392] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 181.078924][ T5392] usb 6-1: device descriptor read/64, error -71 [ 181.338503][ T5392] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 181.478536][ T5392] usb 6-1: device descriptor read/64, error -71 [ 181.520060][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 181.601376][ T5392] usb usb6-port1: attempt power cycle [ 181.688433][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.948779][ T5392] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 181.979238][ T5392] usb 6-1: device descriptor read/8, error -71 [ 182.118498][ T5589] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.228661][ T5392] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 182.260978][ T5392] usb 6-1: device descriptor read/8, error -71 [ 182.278550][ T5589] usb 5-1: Using ep0 maxpacket: 8 [ 182.284943][ T5589] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 182.288277][ T5589] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.291901][ T5589] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.295289][ T5589] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.298933][ T5589] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.303748][ T5589] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.306978][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.368740][ T5392] usb usb6-port1: unable to enumerate USB device [ 182.519685][ T5589] usb 5-1: usb_control_msg returned -32 [ 182.523198][ T5589] usbtmc 5-1:16.0: can't read capabilities [ 182.728465][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.298479][ T979] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 183.450997][ T979] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.454761][ T979] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.457418][ T979] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.468469][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.476430][ T8967] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.480133][ T979] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.724310][ T5589] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.731430][ T5589] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 183.749509][ T979] usb 8-1: USB disconnect, device number 11 [ 183.768624][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.881953][ T8988] program syz.2.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.808472][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.603472][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 185.848470][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.034905][ T9047] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 186.888575][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.139660][ T9073] binder: 9066:9073 ioctl c0306201 20000300 returned -14 [ 187.142338][ T9073] binder: 9066:9073 ioctl ae41 1 returned -22 [ 187.404396][ T39] audit: type=1804 audit(435.279:708): pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.963" name="/newroot/224/file0/file1" dev="ramfs" ino=25238 res=1 errno=0 [ 187.621937][ T9070] binder: 9066:9070 ioctl c0306201 20000280 returned -14 [ 187.795385][ T9085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.928482][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.936206][ T8962] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 187.981694][ T5589] usb 5-1: USB disconnect, device number 13 [ 188.968472][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.580934][ T9099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.693530][ T9111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.804617][ T9119] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.973'. [ 189.807984][ T9119] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.978272][ T9122] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 190.008837][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.018680][ T9122] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 190.968505][ T5589] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 190.982814][ T9144] mmap: syz.3.982 (9144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.048546][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.148803][ T979] libceph: connect (1)[c::]:6789 error -101 [ 191.151260][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 191.161631][ T5589] usb 7-1: Using ep0 maxpacket: 8 [ 191.170822][ T5589] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 191.174474][ T5589] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.177561][ T5589] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.190592][ T5589] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.205896][ T5589] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.209542][ T5589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.272034][ T9149] ceph: No mds server is up or the cluster is laggy [ 191.435899][ T5589] usb 7-1: GET_CAPABILITIES returned 0 [ 191.441136][ T5589] usbtmc 7-1:16.0: can't read capabilities [ 191.639171][ T5350] usb 7-1: USB disconnect, device number 18 [ 191.880729][ T9196] libceph: resolve '. [ 191.880729][ T9196] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 191.880729][ T9196] ' (ret=-3): failed [ 192.088451][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.894017][ T9205] ipt_rpfilter: unknown options [ 193.138461][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.190193][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 193.281389][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 193.458891][ T5390] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 193.610546][ T5390] usb 6-1: no configurations [ 193.611812][ T5390] usb 6-1: can't read configurations, error -22 [ 193.748532][ T5390] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 193.860666][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.921377][ T5390] usb 6-1: no configurations [ 193.922989][ T5390] usb 6-1: can't read configurations, error -22 [ 193.928669][ T5390] usb usb6-port1: attempt power cycle [ 194.053287][ T9239] netlink: 'syz.3.1005': attribute type 29 has an invalid length. [ 194.056491][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 194.072192][ T9239] netlink: 'syz.3.1005': attribute type 29 has an invalid length. [ 194.075048][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 194.168429][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.288635][ T5390] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 194.318243][ T5390] usb 6-1: no configurations [ 194.323047][ T5390] usb 6-1: can't read configurations, error -22 [ 194.448546][ T5390] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 194.480229][ T5390] usb 6-1: no configurations [ 194.482040][ T5390] usb 6-1: can't read configurations, error -22 [ 194.498904][ T5390] usb usb6-port1: unable to enumerate USB device [ 194.786011][ T9245] dlm: no locking on control device [ 195.208487][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.273920][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 195.284897][ T9260] ~ѼP: renamed from bridge_slave_0 (while UP) [ 195.957662][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1011'. [ 195.961447][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'. [ 196.028162][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 196.036707][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 196.117933][ T9277] sctp: [Deprecated]: syz.2.1013 (pid 9277) Use of int in max_burst socket option deprecated. [ 196.117933][ T9277] Use struct sctp_assoc_value instead [ 196.249529][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.498555][ T1413] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 196.660321][ T1413] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.664439][ T1413] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.668447][ T1413] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.678281][ T1413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.710865][ T9284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.721623][ T1413] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.810934][ T9316] fuse: Unknown parameter 'user_it' [ 196.974694][ T5589] usb 5-1: USB disconnect, device number 14 [ 197.288479][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.568275][ T9335] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 197.694087][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.328464][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.345723][ T39] audit: type=1326 audit(447.219:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.368537][ T39] audit: type=1326 audit(447.219:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.376183][ T39] audit: type=1326 audit(447.219:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.378484][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.394459][ T39] audit: type=1326 audit(447.219:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.408831][ T39] audit: type=1326 audit(447.219:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.425123][ T39] audit: type=1326 audit(447.229:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.448630][ T39] audit: type=1326 audit(447.229:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.454871][ T39] audit: type=1326 audit(447.229:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.467861][ T39] audit: type=1326 audit(447.229:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.478966][ T39] audit: type=1326 audit(447.229:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 199.498268][ T9386] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 199.503635][ T9386] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 199.582967][ T9388] syz.1.1039: attempt to access beyond end of device [ 199.582967][ T9388] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 199.586996][ T9388] SQUASHFS error: Failed to read block 0x0: -5 [ 199.631839][ T9388] unable to read squashfs_super_block [ 200.408492][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.448442][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.765965][ T9420] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 201.946157][ T9420] team0: Port device wlan1 added [ 202.488439][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.646572][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 202.661353][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1050'. [ 203.396749][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 203.528478][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.979106][ T9465] overlayfs: failed to resolve './file1': -2 [ 204.568441][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.836912][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 205.439711][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 205.608502][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.806498][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 205.806693][ T39] audit: type=1326 audit(453.679:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.815551][ T39] audit: type=1326 audit(453.679:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.823357][ T39] audit: type=1326 audit(453.689:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.832120][ T39] audit: type=1326 audit(453.699:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.839884][ T39] audit: type=1326 audit(453.709:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.847776][ T39] audit: type=1326 audit(453.709:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.855670][ T39] audit: type=1326 audit(453.709:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.863650][ T39] audit: type=1326 audit(453.709:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.873743][ T39] audit: type=1326 audit(453.709:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 205.901229][ T39] audit: type=1326 audit(453.709:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 206.658449][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.405457][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 207.419045][ T9525] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 207.474823][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.477495][ T9525] team0: Port device bond0 added [ 207.635916][ T9530] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 207.645316][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 207.688889][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.738552][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 209.778479][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.373244][ T9589] macsec1: entered allmulticast mode [ 210.808445][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.848437][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.630687][ T9627] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1100'. [ 212.660591][ T1097] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.703103][ T9635] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 212.812085][ T39] kauditd_printk_skb: 46 callbacks suppressed [ 212.812101][ T39] audit: type=1326 audit(460.689:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 212.827470][ T39] audit: type=1326 audit(460.699:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741e579 code=0x7fc00000 [ 212.888488][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 213.446500][ T9645] input: syz0 as /devices/virtual/input/input17 [ 213.449700][ T39] audit: type=1326 audit(461.329:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.464472][ T39] audit: type=1326 audit(461.329:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.491256][ T39] audit: type=1326 audit(461.349:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.517207][ T39] audit: type=1326 audit(461.349:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.527899][ T39] audit: type=1326 audit(461.349:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.541472][ T39] audit: type=1326 audit(461.349:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.552065][ T39] audit: type=1326 audit(461.349:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.574666][ T39] audit: type=1326 audit(461.349:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.2.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 213.743850][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.751068][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.754578][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.760074][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.763076][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.765783][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.797820][ T5359] bond0: (slave syz_tun): Releasing backup interface [ 213.818489][ T9652] netlink: 'syz.0.1104': attribute type 30 has an invalid length. [ 213.995232][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 214.111572][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.114504][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.117531][ T9650] bridge_slave_0: entered allmulticast mode [ 214.122141][ T9650] bridge_slave_0: entered promiscuous mode [ 214.127342][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.134664][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.137651][ T9650] bridge_slave_1: entered allmulticast mode [ 214.145343][ T9650] bridge_slave_1: entered promiscuous mode [ 214.222873][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.229922][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.277931][ T9650] team0: Port device team_slave_0 added [ 214.282680][ T9650] team0: Port device team_slave_1 added [ 214.321948][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.324862][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.335303][ T9650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.342099][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.344980][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.355668][ T9650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.410248][ T9650] hsr_slave_0: entered promiscuous mode [ 214.414188][ T9650] hsr_slave_1: entered promiscuous mode [ 214.417327][ T9650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.421049][ T9650] Cannot create hsr debugfs directory [ 214.563218][ T9650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.666380][ T9650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.728916][ T5363] Bluetooth: hci4: command 0xfc11 tx timeout [ 214.731608][ T4779] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 214.809663][ T9650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.842603][ T9671] binder: 9670:9671 ioctl c018620c 20000100 returned -22 [ 214.916263][ T9650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.049134][ T9650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.058116][ T9650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.065534][ T9650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.089288][ T9650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.173178][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.184470][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.202132][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 215.221319][ T9650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.224574][ T9650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.235745][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.238334][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.249958][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.252542][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.410205][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.451034][ T9650] veth0_vlan: entered promiscuous mode [ 215.457838][ T9650] veth1_vlan: entered promiscuous mode [ 215.483014][ T9650] veth0_macvtap: entered promiscuous mode [ 215.492613][ T9650] veth1_macvtap: entered promiscuous mode [ 215.507339][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.515950][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.519989][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.523864][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.527466][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.538164][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.543432][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.547122][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.553285][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.561093][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.564978][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.568244][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.576124][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.580232][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.583973][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.587483][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.592404][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.597095][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.601832][ T9650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.604240][ T9650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.607415][ T9650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.613305][ T9650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.686407][ T9706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.691248][ T9706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.718281][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.721886][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.848714][ T4779] Bluetooth: hci3: command tx timeout [ 216.088422][ T9738] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 216.089614][ T979] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 216.201268][ T9738] block nbd2: shutting down sockets [ 216.426342][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 216.441876][ T979] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 216.445565][ T979] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.448862][ T979] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.455606][ T979] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.458939][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.461843][ T979] usb 6-1: Product: syz [ 216.463353][ T979] usb 6-1: Manufacturer: Т [ 216.465084][ T979] usb 6-1: SerialNumber: syz [ 216.691916][ T979] usb 6-1: 0:2 : does not exist [ 216.709600][ T979] usb 6-1: USB disconnect, device number 18 [ 217.431857][ T9794] sp0: Synchronizing with TNC [ 217.610732][ T9807] overlay: Unknown parameter 'permit_directio' [ 217.614340][ T9794] mkiss: ax0: crc mode is auto. [ 217.721114][ T9809] syzkaller0: entered promiscuous mode [ 217.724207][ T9809] syzkaller0: entered allmulticast mode [ 217.928509][ T4779] Bluetooth: hci3: command tx timeout [ 217.963434][ T9824] fuse: Bad value for 'user_id' [ 217.965331][ T9824] fuse: Bad value for 'user_id' [ 218.170155][ T5350] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 218.360065][ T5350] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.364248][ T5350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 218.368239][ T5350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.410622][ T5350] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.415391][ T5350] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.418866][ T5350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.429442][ T5350] usb 8-1: config 0 descriptor?? [ 218.431847][ T9822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.645800][ T5350] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 218.660383][ T5350] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 218.670303][ T5350] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 218.699522][ T1413] usb 8-1: USB disconnect, device number 12 [ 219.168532][ T1413] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 219.345966][ T1413] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 219.350319][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.353480][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.357325][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.377166][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.380602][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.385174][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.390142][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.393145][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.400265][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.406106][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.408616][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.411439][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.418865][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.421267][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.428682][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.440917][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.444867][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.449214][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.467651][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.479315][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.482861][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.487389][ T1413] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.500213][ T1413] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.504273][ T1413] usb 8-1: config 0 interface 0 has no altsetting 0 [ 219.533339][ T1413] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 219.538829][ T1413] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 219.541923][ T1413] usb 8-1: Product: syz [ 219.543482][ T1413] usb 8-1: Manufacturer: syz [ 219.545223][ T1413] usb 8-1: SerialNumber: syz [ 219.547343][ T1413] usb 8-1: config 0 descriptor?? [ 219.664743][ T1413] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 219.876578][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 219.885641][ T1413] usb 8-1: USB disconnect, device number 13 [ 219.918622][ T1413] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 220.018452][ T4779] Bluetooth: hci3: command tx timeout [ 220.666640][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 220.670368][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 221.096481][ T9874] kvm: kvm [9873]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 221.345476][ T9884] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 221.349852][ T9884] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1155'. [ 221.354764][ T9884] netlink: 'syz.1.1155': attribute type 8 has an invalid length. [ 221.547537][ T39] kauditd_printk_skb: 4279 callbacks suppressed [ 221.547556][ T39] audit: type=1326 audit(469.419:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 221.562604][ T39] audit: type=1326 audit(469.439:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 221.580184][ T39] audit: type=1326 audit(469.439:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 221.589131][ T39] audit: type=1326 audit(469.439:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 221.603102][ T39] audit: type=1326 audit(469.439:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 221.630082][ T9896] No control pipe specified [ 222.098483][ T4779] Bluetooth: hci3: command tx timeout [ 222.114700][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.258835][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 222.408797][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 222.414431][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 222.418116][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.421797][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.425357][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.435237][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.441108][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.444647][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.468485][ T5350] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 222.618549][ T5350] usb 6-1: Using ep0 maxpacket: 8 [ 222.622167][ T5350] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 222.624485][ T5350] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 222.626415][ T5350] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 222.659730][ T5350] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 222.662849][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 222.665943][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.669411][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.673478][ T5350] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 222.673514][ T8] usb 7-1: usb_control_msg returned -32 [ 222.675786][ T5350] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 222.677263][ T8] usbtmc 7-1:16.0: can't read capabilities [ 222.679274][ T5350] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 222.679345][ T5350] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 222.679359][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 222.717990][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.722203][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.725905][ T5350] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 222.728183][ T5350] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 222.730867][ T5350] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 222.734518][ T5350] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 222.737908][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 222.741292][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.744181][ T5350] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.762957][ T5350] usb 6-1: string descriptor 0 read error: -22 [ 222.764667][ T5350] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.767042][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.788666][ T5350] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 223.444226][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 223.590668][ T9943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1171'. [ 223.596214][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 223.774104][ T9945] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 223.953431][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.968979][ T9945] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 224.035311][ T9945] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 224.046825][ T9945] bond1 (unregistering): Released all slaves [ 224.408654][ T8] usb 6-1: USB disconnect, device number 19 [ 224.661033][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 224.874506][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1179'. [ 225.195851][ T9984] libceph: resolve '. [ 225.195851][ T9984] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 225.195851][ T9984] ' (ret=-3): failed [ 225.209946][ T9986] libceph: resolve '. [ 225.209946][ T9986] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 225.209946][ T9986] ' (ret=-3): failed [ 225.241667][ T9984] No control pipe specified [ 225.320996][ T9984] syz.3.1182: attempt to access beyond end of device [ 225.320996][ T9984] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 225.324606][ T9984] qnx4: unable to read the superblock [ 225.329053][ T9986] syz.3.1182: attempt to access beyond end of device [ 225.329053][ T9986] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 225.332440][ T9986] qnx4: unable to read the superblock [ 225.374262][ T30] usb 7-1: USB disconnect, device number 19 [ 225.578641][ T9987] syz.1.1180 (9987): drop_caches: 2 [ 225.586453][ T9987] syz.1.1180 (9987): drop_caches: 2 [ 227.798887][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 228.919182][T10058] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 228.921308][T10058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1197'. [ 230.041409][T10072] gretap0: entered promiscuous mode [ 230.134248][T10072] erspan0: entered promiscuous mode [ 230.140158][T10072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.142205][T10072] Cannot create hsr debugfs directory [ 230.151410][T10072] vivid-000: ================= START STATUS ================= [ 230.153445][T10072] vivid-000: Test Pattern: 75% Colorbar [ 230.160498][T10072] vivid-000: Fill Percentage of Frame: 100 [ 230.162078][T10072] vivid-000: Horizontal Movement: No Movement [ 230.163728][T10072] vivid-000: Vertical Movement: No Movement [ 230.165359][T10072] vivid-000: OSD Text Mode: All [ 230.175150][T10072] vivid-000: Show Border: false [ 230.176490][T10072] vivid-000: Show Square: false [ 230.177790][T10072] vivid-000: Sensor Flipped Horizontally: false [ 230.186257][T10072] vivid-000: Sensor Flipped Vertically: false [ 230.188322][T10072] vivid-000: Insert SAV Code in Image: false [ 230.196340][T10072] vivid-000: Insert EAV Code in Image: false [ 230.202655][T10072] vivid-000: Insert Video Guard Band: false [ 230.212603][T10072] vivid-000: Reduced Framerate: false [ 230.214458][T10072] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 230.222868][T10072] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 230.225467][T10072] vivid-000: Enable Capture Cropping: true grabbed [ 230.241356][T10072] vivid-000: Enable Capture Composing: true grabbed [ 230.243102][T10072] vivid-000: Enable Capture Scaler: true grabbed [ 230.245873][T10072] vivid-000: Timestamp Source: End of Frame [ 230.247655][T10072] vivid-000: Colorspace: Rec. 709 [ 230.254625][T10072] vivid-000: Transfer Function: Default [ 230.258049][T10072] vivid-000: Y'CbCr Encoding: Default [ 230.262476][T10072] vivid-000: HSV Encoding: Hue 0-179 [ 230.264637][T10072] vivid-000: Quantization: Default [ 230.267508][T10072] vivid-000: Apply Alpha To Red Only: false [ 230.270234][T10072] vivid-000: Standard Aspect Ratio: 4x3 [ 230.271903][T10072] vivid-000: DV Timings Signal Mode: Current DV Timings [ 230.275190][T10072] vivid-000: DV Timings: 640x480p59 inactive [ 230.278607][T10072] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 230.284414][T10072] vivid-000: Maximum EDID Blocks: 2 [ 230.287316][T10072] vivid-000: Limited RGB Range (16-235): true [ 230.293898][T10072] vivid-000: Rx RGB Quantization Range: Automatic [ 230.295905][T10072] vivid-000: Power Present: 0x00000001 [ 230.297304][T10072] tpg source WxH: 1280x720 (Y'CbCr) [ 230.300941][T10072] tpg field: 1 [ 230.303494][T10072] tpg crop: 64x720@0x0 [ 230.306356][T10072] tpg compose: 16x720@0x0 [ 230.307585][T10072] tpg colorspace: 3 [ 230.311243][T10072] tpg transfer function: 0/1 [ 230.312484][T10072] tpg Y'CbCr encoding: 0/2 [ 230.314567][T10072] tpg quantization: 0/2 [ 230.315789][T10072] tpg RGB range: 0/1 [ 230.320223][T10072] vivid-000: ================== END STATUS ================== [ 230.727605][ T39] audit: type=1326 audit(478.599:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.734478][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'. [ 230.745926][ T39] audit: type=1326 audit(478.599:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.755175][ T39] audit: type=1326 audit(478.609:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.779099][ T39] audit: type=1326 audit(478.609:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.788683][ T39] audit: type=1326 audit(478.609:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.794373][ T39] audit: type=1326 audit(478.609:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.808484][ T39] audit: type=1326 audit(478.609:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.808679][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 230.817537][ T39] audit: type=1326 audit(478.609:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.829881][ T39] audit: type=1326 audit(478.609:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 230.857307][ T39] audit: type=1326 audit(478.609:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 231.150089][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 231.262435][T10111] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 231.279094][T10113] block device autoloading is deprecated and will be removed. [ 231.285089][T10113] syz.0.1211: attempt to access beyond end of device [ 231.285089][T10113] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 231.563656][T10131] bpf: Bad value for 'mode' [ 232.187194][T10145] syzkaller0: entered promiscuous mode [ 232.191664][T10145] syzkaller0: entered allmulticast mode [ 232.614655][T10166] binder: 10158:10166 ioctl 541b 0 returned -22 [ 234.850362][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 234.856704][T10183] dummy0: entered promiscuous mode [ 234.872813][T10183] dummy0: left promiscuous mode [ 234.967931][T10193] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 234.994441][T10193] netlink: 636 bytes leftover after parsing attributes in process `syz.3.1231'. [ 235.210781][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 235.282951][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 235.368650][ T5350] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.533659][ T5350] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 235.534726][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 235.536982][ T5350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.545576][ T5350] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 235.549422][ T5350] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 235.552503][ T5350] usb 5-1: Manufacturer: syz [ 235.556024][ T5350] usb 5-1: config 0 descriptor?? [ 235.618495][ T5350] rc_core: IR keymap rc-hauppauge not found [ 235.620606][ T5350] Registered IR keymap rc-empty [ 235.629725][ T5350] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 235.637443][ T5350] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 236.369250][T10231] ptrace attach of ""[10232] was attempted by "/syz-executor exec"[10231] [ 237.155510][T10252] syz.2.1243: attempt to access beyond end of device [ 237.155510][T10252] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 237.172714][T10252] EXT4-fs (loop2): unable to read superblock [ 237.232224][T10252] hub 2-0:1.0: USB hub found [ 237.235456][T10252] hub 2-0:1.0: 6 ports detected [ 237.355886][T10260] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 237.361730][T10260] batman_adv: batadv0: Adding interface: ip6gretap1 [ 237.363597][T10260] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.371414][T10260] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 237.402598][ T4779] block nbd1: Receive control failed (result -32) [ 237.408528][ T5350] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 237.410232][T10234] block nbd1: shutting down sockets [ 237.583210][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.609205][ T5350] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 237.612376][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 237.615598][ T5350] usb 2-1: Product: QEMU USB Tablet [ 237.617423][ T5350] usb 2-1: Manufacturer: QEMU [ 237.620170][ T5350] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 237.640718][ T5392] usb 5-1: USB disconnect, device number 15 [ 237.649761][ T5350] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input19 [ 237.736136][ T5350] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 238.359454][T10285] sp0: Synchronizing with TNC [ 240.654497][T10345] serio: Serial port ptm0 [ 240.886952][T10335] syz.3.1264 (10335): drop_caches: 1 [ 240.937551][T10335] syz.3.1264 (10335): drop_caches: 1 [ 241.282508][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.296050][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.829521][T10370] input: syz1 as /devices/virtual/input/input20 [ 241.930281][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 242.057384][ T30] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 242.228468][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 242.234542][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.237432][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.240911][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.244411][ T30] usb 7-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 242.247972][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.277068][ T30] usb 7-1: config 0 descriptor?? [ 242.685587][T10387] @: renamed from vlan0 (while UP) [ 242.701400][ T30] hid-generic 0003:1E7D:71CE.0008: collection stack underflow [ 242.704212][ T30] hid-generic 0003:1E7D:71CE.0008: item 0 2 0 12 parsing failed [ 242.707412][ T30] hid-generic 0003:1E7D:71CE.0008: probe with driver hid-generic failed with error -22 [ 243.768578][ T5363] Bluetooth: hci3: command 0x0405 tx timeout [ 243.912538][T10430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1288'. [ 244.058957][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1289'. [ 244.939540][ T64] usb 7-1: USB disconnect, device number 20 [ 244.997037][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 245.484896][T10482] fuse: Bad value for 'group_id' [ 245.486750][T10482] fuse: Bad value for 'group_id' [ 246.086267][T10527] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1302'. [ 246.162531][T10535] dccp_v4_rcv: dropped packet with invalid checksum [ 246.165181][T10532] kvm: kvm [10531]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 246.175468][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'. [ 246.389912][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.443490][T10543] netlink: 'syz.2.1307': attribute type 26 has an invalid length. [ 246.870640][T10552] overlayfs: missing 'lowerdir' [ 247.650327][T10576] random: crng reseeded on system resumption [ 247.719307][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 248.109929][ T39] kauditd_printk_skb: 46 callbacks suppressed [ 248.109939][ T39] audit: type=1326 audit(495.989:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.0.1323" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 248.718666][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 248.888659][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 248.899227][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 248.901428][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.903963][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.906495][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.909293][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.912711][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.915147][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.120828][ T8] usb 6-1: usb_control_msg returned -32 [ 249.122348][ T8] usbtmc 6-1:16.0: can't read capabilities [ 249.170264][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.173339][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.180239][T10649] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 249.189550][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1331'. [ 249.199641][ T8] usb 6-1: USB disconnect, device number 20 [ 249.251488][T10652] IPv6: Can't replace route, no match found [ 249.751202][ T39] audit: type=1326 audit(497.629:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1343" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 251.028484][ T5390] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 251.188491][ T5390] usb 7-1: Using ep0 maxpacket: 32 [ 251.197478][ T5390] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 251.208676][ T5390] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 251.212913][ T5390] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 251.216848][ T5390] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 251.221679][ T5390] usb 7-1: config 0 interface 0 has no altsetting 0 [ 251.226434][ T5390] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 251.230204][ T5390] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 251.233265][ T5390] usb 7-1: Product: syz [ 251.235433][ T5390] usb 7-1: Manufacturer: syz [ 251.237155][ T5390] usb 7-1: SerialNumber: syz [ 251.247284][ T5390] usb 7-1: config 0 descriptor?? [ 251.254443][ T5390] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 251.264440][ T5390] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 251.484943][ T64] usb 7-1: USB disconnect, device number 21 [ 251.488689][ T64] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 251.879170][T10716] syzkaller0: entered promiscuous mode [ 251.881022][T10716] syzkaller0: entered allmulticast mode [ 252.367902][T10737] netlink: 'syz.0.1358': attribute type 5 has an invalid length. [ 254.348326][T10737] : entered promiscuous mode [ 254.354315][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 254.364466][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 254.507726][T10750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'. [ 254.512146][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 254.515493][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 255.290679][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.295893][ T5390] libceph: connect (1)[c::]:6789 error -101 [ 255.298286][ T5390] libceph: mon0 (1)[c::]:6789 connect error [ 255.383758][T10806] fuse: Invalid rootmode [ 255.502072][T10798] ceph: No mds server is up or the cluster is laggy [ 255.848869][ T5390] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 255.972390][T10832] trusted_key: encrypted_key: key user:syz not found [ 256.028492][ T5390] usb 5-1: Using ep0 maxpacket: 32 [ 256.038750][ T5390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.042628][ T5390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.046047][ T5390] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.051731][ T5390] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 256.055085][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.068899][ T5390] usb 5-1: config 0 descriptor?? [ 256.284906][ T5390] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input21 [ 256.292615][T10805] [U]  [ 256.364496][T10836] macvlan0: entered allmulticast mode [ 256.392241][ T5390] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input22 [ 256.443289][ T5390] kye 0003:0458:5011.0009: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 256.663824][ T1992] usb 5-1: USB disconnect, device number 16 [ 256.711296][T10841] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1380'. [ 256.756331][ T9710] Bluetooth: hci4: Frame reassembly failed (-84) [ 257.095864][T10849] overlayfs: overlapping lowerdir path [ 258.277686][T10871] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 258.286142][T10870] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 258.291487][T10870] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 258.808802][ T5363] Bluetooth: hci4: command 0xfc11 tx timeout [ 258.813546][ T4779] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 259.039458][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1394'. [ 259.077446][ T9710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.079611][ T9710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.519864][ T39] audit: type=1326 audit(507.399:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.0.1399" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 259.895143][T10916] overlayfs: missing 'lowerdir' [ 260.113827][T10924] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1404'. [ 270.342243][ T5363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.351202][ T5363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.354539][ T5363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.360478][ T5363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.364394][ T5363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.366689][ T5363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.547115][T10962] chnl_net:caif_netlink_parms(): no params data found [ 270.576392][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 270.627946][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.631769][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.634738][T10962] bridge_slave_0: entered allmulticast mode [ 270.637889][T10962] bridge_slave_0: entered promiscuous mode [ 270.644110][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.647963][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.653035][T10962] bridge_slave_1: entered allmulticast mode [ 270.657815][T10962] bridge_slave_1: entered promiscuous mode [ 270.716023][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.736029][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.837080][T10962] team0: Port device team_slave_0 added [ 270.849585][T10962] team0: Port device team_slave_1 added [ 270.910267][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.912756][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.921284][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.926358][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.928907][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.937755][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.006980][T10962] hsr_slave_0: entered promiscuous mode [ 271.011257][T10962] hsr_slave_1: entered promiscuous mode [ 271.018482][T10962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.021211][T10962] Cannot create hsr debugfs directory [ 271.141145][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.183060][T10962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.282258][T10962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.426935][T10962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.545714][T10962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.738178][T10962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.761557][T10962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.770573][T10962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.780554][T10962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.867104][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.903074][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.942376][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.944239][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.030320][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.032855][ T9706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.152055][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.197443][T10962] veth0_vlan: entered promiscuous mode [ 272.212650][T10962] veth1_vlan: entered promiscuous mode [ 272.257543][T10962] veth0_macvtap: entered promiscuous mode [ 272.268099][T10962] veth1_macvtap: entered promiscuous mode [ 272.278330][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.281970][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.285170][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.288197][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.291284][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.294407][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.297485][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.303404][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.306958][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.310981][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.315094][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.324206][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.327731][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.332188][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.335901][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.339459][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.342745][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.345927][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.350436][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.352919][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.356254][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.361203][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.367991][T10962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.372110][T10962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.375106][T10962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.378126][T10962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.411075][ T4779] Bluetooth: hci4: command tx timeout [ 272.446692][ T9706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.460324][ T9706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.487027][ T9706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.495920][ T9706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.818862][ T39] audit: type=1326 audit(776.701:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.836540][ T39] audit: type=1326 audit(776.701:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.850946][ T39] audit: type=1326 audit(776.701:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.868046][ T39] audit: type=1326 audit(776.701:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.876927][ T39] audit: type=1326 audit(776.751:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.882147][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 272.887148][ T39] audit: type=1326 audit(776.751:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.887567][ T39] audit: type=1326 audit(776.751:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.887584][ T39] audit: type=1326 audit(776.751:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.887601][ T39] audit: type=1326 audit(776.751:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.887616][ T39] audit: type=1326 audit(776.751:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1427" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 272.887759][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.887803][T11032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.889970][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.890011][T11032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.890988][T11032] batman_adv: batadv0: Removing interface: hsr_slave_0 [ 273.731820][T11057] program syz.1.1431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.736637][T11057] 9pnet_fd: Insufficient options for proto=fd [ 273.800335][T11063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1433'. [ 273.893590][ T4779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 273.896515][ T4779] CPU: 2 UID: 0 PID: 4779 Comm: kworker/u33:1 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 273.899372][ T4779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.902201][ T4779] Workqueue: hci3 hci_rx_work [ 273.903493][ T4779] Call Trace: [ 273.904411][ T4779] [ 273.905205][ T4779] dump_stack_lvl+0x16c/0x1f0 [ 273.906469][ T4779] sysfs_warn_dup+0x7f/0xa0 [ 273.907682][ T4779] sysfs_create_dir_ns+0x24d/0x2b0 [ 273.909017][ T4779] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 273.910520][ T4779] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.911958][ T4779] ? kobject_add_internal+0x12d/0x990 [ 273.913410][ T4779] ? do_raw_spin_unlock+0x172/0x230 [ 273.914782][ T4779] kobject_add_internal+0x2c8/0x990 [ 273.916125][ T4779] kobject_add+0x16f/0x240 [ 273.917290][ T4779] ? __pfx_kobject_add+0x10/0x10 [ 273.918597][ T4779] ? class_to_subsys+0x3e/0x160 [ 273.919913][ T4779] ? do_raw_spin_unlock+0x172/0x230 [ 273.921269][ T4779] ? kobject_put+0xab/0x5a0 [ 273.922493][ T4779] device_add+0x289/0x1a70 [ 273.923695][ T4779] ? __pfx_dev_set_name+0x10/0x10 [ 273.925051][ T4779] ? __pfx_device_add+0x10/0x10 [ 273.926373][ T4779] ? mgmt_send_event_skb+0x2f2/0x460 [ 273.927760][ T4779] hci_conn_add_sysfs+0x17e/0x230 [ 273.929121][ T4779] le_conn_complete_evt+0xfc7/0x1cf0 [ 273.930606][ T4779] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 273.932159][ T4779] ? trace_contention_end+0xea/0x140 [ 273.933584][ T4779] ? __mutex_lock+0x1a6/0x9c0 [ 273.934854][ T4779] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 273.936445][ T4779] ? skb_pull_data+0x166/0x210 [ 273.937728][ T4779] hci_le_meta_evt+0x2e2/0x5d0 [ 273.939000][ T4779] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 273.940714][ T4779] hci_event_packet+0x666/0x1190 [ 273.942043][ T4779] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 273.943479][ T4779] ? __pfx_hci_event_packet+0x10/0x10 [ 273.944924][ T4779] ? mark_held_locks+0x9f/0xe0 [ 273.946221][ T4779] ? kcov_remote_start+0x3cf/0x6e0 [ 273.947587][ T4779] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.948983][ T4779] hci_rx_work+0x2c6/0x16c0 [ 273.950188][ T4779] ? lock_acquire+0x2f/0xb0 [ 273.951407][ T4779] ? process_one_work+0x8bb/0x1b30 [ 273.952770][ T4779] process_one_work+0x958/0x1b30 [ 273.954104][ T4779] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 273.955596][ T4779] ? __pfx_process_one_work+0x10/0x10 [ 273.957043][ T4779] ? assign_work+0x1a0/0x250 [ 273.958288][ T4779] worker_thread+0x6c8/0xf00 [ 273.959536][ T4779] ? __pfx_worker_thread+0x10/0x10 [ 273.960912][ T4779] kthread+0x2c1/0x3a0 [ 273.962016][ T4779] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.963409][ T4779] ? __pfx_kthread+0x10/0x10 [ 273.964675][ T4779] ret_from_fork+0x45/0x80 [ 273.965871][ T4779] ? __pfx_kthread+0x10/0x10 [ 273.967112][ T4779] ret_from_fork_asm+0x1a/0x30 [ 273.968437][ T4779] [ 273.970704][ T4779] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.976052][ T4779] Bluetooth: hci3: failed to register connection device [ 274.492512][ T4779] Bluetooth: hci4: command tx timeout [ 275.040330][T11079] netlink: 'syz.0.1443': attribute type 9 has an invalid length. [ 275.043253][T11079] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1443'. [ 275.806570][T11106] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 276.008473][ T4779] Bluetooth: hci3: command 0x0405 tx timeout [ 276.581521][ T4779] Bluetooth: hci4: command tx timeout [ 276.761015][T11128] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 276.772677][T11128] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 277.498541][ T979] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 277.648817][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 277.662082][ T979] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 277.665820][ T979] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 277.672263][ T979] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 277.676448][ T979] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 277.680835][ T979] usb 6-1: config 0 interface 0 has no altsetting 0 [ 277.690820][ T979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 277.693232][ T979] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 277.695420][ T979] usb 6-1: Product: syz [ 277.697483][ T979] usb 6-1: Manufacturer: syz [ 277.699407][ T979] usb 6-1: SerialNumber: syz [ 277.702822][ T979] usb 6-1: config 0 descriptor?? [ 277.709839][ T979] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.712864][ T979] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 278.658500][ T4779] Bluetooth: hci4: command tx timeout [ 279.203363][T11142] sctp: [Deprecated]: syz.0.1453 (pid 11142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.203363][T11142] Use struct sctp_sack_info instead [ 279.213783][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 279.213794][ T39] audit: type=1326 audit(783.091:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.0.1453" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 279.588808][ T64] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 279.728604][ T64] usb 8-1: device descriptor read/64, error -71 [ 279.968511][ T64] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 280.108483][ T64] usb 8-1: device descriptor read/64, error -71 [ 280.142319][T11157] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 280.222987][ T64] usb usb8-port1: attempt power cycle [ 280.568938][ T64] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 280.599227][ T64] usb 8-1: device descriptor read/8, error -71 [ 280.790538][ T979] usb 6-1: USB disconnect, device number 21 [ 280.799305][ T979] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 280.818642][T11166] netlink: 'syz.2.1461': attribute type 4 has an invalid length. [ 280.863015][ T64] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 280.872868][T11168] netlink: 'syz.2.1461': attribute type 4 has an invalid length. [ 280.876350][ T39] audit: type=1326 audit(784.751:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.894460][ T39] audit: type=1326 audit(784.761:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.903616][ T64] usb 8-1: device descriptor read/8, error -71 [ 280.919863][ T39] audit: type=1326 audit(784.771:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.927220][ T39] audit: type=1326 audit(784.771:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.945471][ T39] audit: type=1326 audit(784.771:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.953415][ T39] audit: type=1326 audit(784.771:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.972657][ T39] audit: type=1326 audit(784.771:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.983317][ T39] audit: type=1326 audit(784.771:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 280.995352][ T39] audit: type=1326 audit(784.771:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 281.008845][ T64] usb usb8-port1: unable to enumerate USB device [ 281.248628][ T1429] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 281.318494][ T5350] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 281.398636][ T1429] usb 5-1: Using ep0 maxpacket: 32 [ 281.407632][ T1429] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023 [ 281.411715][ T1429] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.416366][ T1429] usb 5-1: config 1 interface 0 has no altsetting 0 [ 281.427603][ T1429] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 281.431091][ T1429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.434060][ T1429] usb 5-1: Product: П [ 281.435604][ T1429] usb 5-1: Manufacturer: 근Ꞇ本ᢐ竲쳕᪶ [ 281.438061][ T1429] usb 5-1: SerialNumber: ࠧ [ 281.446535][T11165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.480556][ T5350] usb 6-1: config 0 has no interfaces? [ 281.482509][ T5350] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 281.484923][ T5350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.492187][ T5350] usb 6-1: config 0 descriptor?? [ 281.669029][ T1429] usb 5-1: USB disconnect, device number 17 [ 282.024900][ T1429] usb 6-1: USB disconnect, device number 22 [ 282.234194][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 282.546129][T11195] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 282.648807][T11195] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 282.656427][T11195] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 282.669313][T11195] kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 282.675274][T11195] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 282.679682][T11195] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 282.684700][T11195] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 282.703461][T11195] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 282.713831][T11195] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 282.734710][T11195] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 282.978624][ T4779] Bluetooth: hci2: command 0x0406 tx timeout [ 282.990670][T11203] netlink: 'syz.1.1473': attribute type 4 has an invalid length. [ 283.067687][T11203] netlink: 'syz.1.1473': attribute type 4 has an invalid length. [ 283.495097][T11208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 284.902767][T11234] input: syz0 as /devices/virtual/input/input23 [ 285.906159][T11274] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1490'. [ 286.545357][T11291] syzkaller0: entered allmulticast mode [ 288.124472][T11322] usb usb8: usbfs: process 11322 (syz.0.1502) did not claim interface 0 before use [ 288.287827][T11324] create_pit_timer: 27 callbacks suppressed [ 288.287894][T11324] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 288.705784][T11335] siw: device registration error -23 [ 290.564121][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 291.047296][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 291.550485][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.680287][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.695711][ T4779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.702665][ T4779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.705304][ T4779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.729641][ T4779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.732533][ T4779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.734827][ T4779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.817266][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.909952][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.995599][T11419] chnl_net:caif_netlink_parms(): no params data found [ 292.221945][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.224395][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.226994][T11419] bridge_slave_0: entered allmulticast mode [ 292.232204][T11419] bridge_slave_0: entered promiscuous mode [ 292.244801][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.246713][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.249023][T11419] bridge_slave_1: entered allmulticast mode [ 292.250973][T11419] bridge_slave_1: entered promiscuous mode [ 292.255015][ T79] team0: left allmulticast mode [ 292.256416][ T79] team_slave_0: left allmulticast mode [ 292.258102][ T79] team_slave_1: left allmulticast mode [ 292.259728][ T79] team0: left promiscuous mode [ 292.261073][ T79] team_slave_0: left promiscuous mode [ 292.262736][ T79] team_slave_1: left promiscuous mode [ 292.264332][ T79] bridge0: port 3(team0) entered disabled state [ 292.267672][ T79] bridge_slave_0: left allmulticast mode [ 292.270185][ T79] bridge_slave_0: left promiscuous mode [ 292.272111][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.323290][ T79] batman_adv: batadv0: Removing interface: ip6gretap1 [ 292.431473][ T79] erspan0 (unregistering): left promiscuous mode [ 292.459848][ T79] gretap0 (unregistering): left promiscuous mode [ 292.556798][T11444] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 292.843624][ T9707] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.976891][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.984232][ T79] bond_slave_0: left promiscuous mode [ 292.992496][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.996309][ T79] bond_slave_1: left promiscuous mode [ 293.000145][ T79] bond0 (unregistering): Released all slaves [ 293.056800][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.085369][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.087875][ T79] : left promiscuous mode [ 293.125786][T11419] team0: Port device team_slave_0 added [ 293.132421][T11419] team0: Port device team_slave_1 added [ 293.153039][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.154951][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.174671][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.179415][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.182257][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.215207][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.257038][ T79] IPVS: stopping backup sync thread 8344 ... [ 293.306822][T11419] hsr_slave_0: entered promiscuous mode [ 293.320224][T11419] hsr_slave_1: entered promiscuous mode [ 293.322716][T11419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.325525][T11419] Cannot create hsr debugfs directory [ 293.768796][ T5363] Bluetooth: hci1: command tx timeout [ 293.824934][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.827890][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.843214][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.846822][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.904749][ T79] veth1_macvtap: left promiscuous mode [ 293.913419][ T79] veth0_macvtap: left promiscuous mode [ 293.915779][ T79] veth1_vlan: left promiscuous mode [ 293.917840][ T79] veth0_vlan: left promiscuous mode [ 294.891089][ T4779] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 294.891139][ T5363] Bluetooth: hci5: command 0xfc11 tx timeout [ 295.862753][ T4779] Bluetooth: hci1: command tx timeout [ 295.910972][ T79] team0 (unregistering): Port device team_slave_1 removed [ 296.056382][ T79] team0 (unregistering): Port device team_slave_0 removed [ 297.928507][ T4779] Bluetooth: hci1: command tx timeout [ 298.062691][T11419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.083645][T11419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.099935][T11419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.132891][T11419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.254624][T11419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.314926][T11419] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.329625][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.332326][ T9707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.342882][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.345703][ T9710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.681821][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.716834][T11419] veth0_vlan: entered promiscuous mode [ 298.734102][T11419] veth1_vlan: entered promiscuous mode [ 298.764561][T11419] veth0_macvtap: entered promiscuous mode [ 298.772205][T11419] veth1_macvtap: entered promiscuous mode [ 298.782824][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.786528][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.790238][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.793900][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.796807][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.808842][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.812539][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.815221][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.830198][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.850874][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.854602][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.858047][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.861825][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.865352][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.870123][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.873607][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.877256][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.881939][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.889359][T11419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.892511][T11419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.895577][T11419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.898984][T11419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.953356][ T9706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.955746][ T9706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.973494][ T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.975622][ T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.162072][T11574] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 299.402138][ T79] Bluetooth: hci5: Frame reassembly failed (-84) [ 299.768664][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 299.768685][ T39] audit: type=1326 audit(803.641:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.1.1555" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23579 code=0x0 [ 300.018537][ T66] Bluetooth: hci1: command tx timeout [ 300.440706][T11604] 9pnet_fd: Insufficient options for proto=fd [ 300.525820][T11608] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks SYZFAIL: bad allocate request allocated=0 size=4294966775/4294966776 (errno 9: Bad file descriptor) [ 300.932434][ T582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.936137][ T582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.053772][ T582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.056800][ T582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.125969][ T582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.129031][ T582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.199402][ T582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.202128][ T582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.324255][ T582] bridge_slave_1: left allmulticast mode [ 301.326368][ T582] bridge_slave_1: left promiscuous mode [ 301.328651][ T582] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.346799][ T582] ~ѼP: left allmulticast mode [ 301.350298][ T582] ~ѼP: left promiscuous mode [ 301.352145][ T582] bridge0: port 1(~ѼP) entered disabled state [ 301.455813][ T66] Bluetooth: hci5: command 0xfc11 tx timeout [ 301.459965][ T4779] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 301.970985][ T582] team0: Port device bond0 removed [ 301.975593][ T582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.981752][ T582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.994403][ T582] bond0 (unregistering): Released all slaves [ 302.003503][ T582] bond1 (unregistering): Released all slaves [ 302.097279][ T582] : left promiscuous mode [ 302.305257][ T582] [ 302.305951][ T582] ====================================================== [ 302.308186][ T582] WARNING: possible circular locking dependency detected [ 302.310641][ T582] 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 Not tainted [ 302.313233][ T582] ------------------------------------------------------ [ 302.315758][ T582] kworker/u32:5/582 is trying to acquire lock: [ 302.317990][ T582] ffff88805dee4d40 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 302.320826][ T582] [ 302.320826][ T582] but task is already holding lock: [ 302.323442][ T582] ffff8880606b0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0xfe/0x760 [ 302.327166][ T582] [ 302.327166][ T582] which lock already depends on the new lock. [ 302.327166][ T582] [ 302.330825][ T582] [ 302.330825][ T582] the existing dependency chain (in reverse order) is: [ 302.333950][ T582] [ 302.333950][ T582] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 302.336586][ T582] __mutex_lock+0x175/0x9c0 [ 302.337836][ T582] ieee80211_open+0x12f/0x260 [ 302.339480][ T582] __dev_open+0x2d4/0x4e0 [ 302.341174][ T582] dev_open+0xf4/0x160 [ 302.342556][ T582] team_add_slave+0xa8c/0x1ff0 [ 302.344230][ T582] do_set_master+0x1bc/0x230 [ 302.345979][ T582] do_setlink+0xa82/0x3ee0 [ 302.347746][ T582] __rtnl_newlink+0xc3a/0x1920 [ 302.349511][ T582] rtnl_newlink+0x67/0xa0 [ 302.350990][ T582] rtnetlink_rcv_msg+0x3c7/0xea0 [ 302.352920][ T582] netlink_rcv_skb+0x165/0x410 [ 302.354732][ T582] netlink_unicast+0x53c/0x7f0 [ 302.356579][ T582] netlink_sendmsg+0x8b8/0xd70 [ 302.358477][ T582] ____sys_sendmsg+0x9ae/0xb40 [ 302.360358][ T582] ___sys_sendmsg+0x135/0x1e0 [ 302.362247][ T582] __sys_sendmsg+0x117/0x1f0 [ 302.364174][ T582] __do_fast_syscall_32+0x73/0x120 [ 302.365821][ T582] do_fast_syscall_32+0x32/0x80 [ 302.367737][ T582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.369889][ T582] [ 302.369889][ T582] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 302.372290][ T582] __lock_acquire+0x250b/0x3ce0 [ 302.374168][ T582] lock_acquire.part.0+0x11b/0x380 [ 302.376143][ T582] __mutex_lock+0x175/0x9c0 [ 302.377891][ T582] team_del_slave+0x31/0x1b0 [ 302.379691][ T582] team_device_event+0xd0/0x770 [ 302.381635][ T582] notifier_call_chain+0xb9/0x410 [ 302.383652][ T582] call_netdevice_notifiers_info+0xbe/0x140 [ 302.385951][ T582] unregister_netdevice_many_notify+0x8d5/0x1e50 [ 302.388132][ T582] unregister_netdevice_queue+0x307/0x3f0 [ 302.390366][ T582] _cfg80211_unregister_wdev+0x624/0x7f0 [ 302.392298][ T582] ieee80211_remove_interfaces+0x36d/0x760 [ 302.393961][ T582] ieee80211_unregister_hw+0x55/0x3a0 [ 302.396037][ T582] mac80211_hwsim_del_radio+0x268/0x370 [ 302.398240][ T582] hwsim_exit_net+0x33f/0x6d0 [ 302.400144][ T582] ops_exit_list+0xb0/0x180 [ 302.401951][ T582] cleanup_net+0x5b7/0xb40 [ 302.403711][ T582] process_one_work+0x958/0x1b30 [ 302.405632][ T582] worker_thread+0x6c8/0xf00 [ 302.407475][ T582] kthread+0x2c1/0x3a0 [ 302.409078][ T582] ret_from_fork+0x45/0x80 [ 302.410767][ T582] ret_from_fork_asm+0x1a/0x30 [ 302.412658][ T582] [ 302.412658][ T582] other info that might help us debug this: [ 302.412658][ T582] [ 302.415320][ T582] Possible unsafe locking scenario: [ 302.415320][ T582] [ 302.417274][ T582] CPU0 CPU1 [ 302.419023][ T582] ---- ---- [ 302.420857][ T582] lock(&rdev->wiphy.mtx); [ 302.422426][ T582] lock(team->team_lock_key#4); [ 302.425004][ T582] lock(&rdev->wiphy.mtx); [ 302.427489][ T582] lock(team->team_lock_key#4); [ 302.429296][ T582] [ 302.429296][ T582] *** DEADLOCK *** [ 302.429296][ T582] [ 302.431935][ T582] 5 locks held by kworker/u32:5/582: [ 302.433868][ T582] #0: ffff88801baff148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 302.437215][ T582] #1: ffffc90003687d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 302.439591][ T582] #2: ffffffff8faad510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 302.442461][ T582] #3: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 302.445956][ T582] #4: ffff8880606b0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0xfe/0x760 [ 302.449755][ T582] [ 302.449755][ T582] stack backtrace: [ 302.451900][ T582] CPU: 2 UID: 0 PID: 582 Comm: kworker/u32:5 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 302.455745][ T582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.459572][ T582] Workqueue: netns cleanup_net [ 302.461344][ T582] Call Trace: [ 302.462560][ T582] [ 302.463664][ T582] dump_stack_lvl+0x116/0x1f0 [ 302.465378][ T582] print_circular_bug+0x419/0x5d0 [ 302.467274][ T582] check_noncircular+0x31a/0x400 [ 302.469073][ T582] ? __pfx_check_noncircular+0x10/0x10 [ 302.471007][ T582] ? lockdep_lock+0xc6/0x200 [ 302.472710][ T582] ? __pfx_lockdep_lock+0x10/0x10 [ 302.474553][ T582] __lock_acquire+0x250b/0x3ce0 [ 302.476273][ T582] ? __pfx___lock_acquire+0x10/0x10 [ 302.478049][ T582] ? skb_dequeue+0x126/0x180 [ 302.479662][ T582] lock_acquire.part.0+0x11b/0x380 [ 302.481527][ T582] ? team_del_slave+0x31/0x1b0 [ 302.483261][ T582] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 302.485343][ T582] ? rcu_is_watching+0x12/0xc0 [ 302.487062][ T582] ? trace_lock_acquire+0x14a/0x1d0 [ 302.488931][ T582] ? team_del_slave+0x31/0x1b0 [ 302.490238][ T582] ? lock_acquire+0x2f/0xb0 [ 302.491892][ T582] ? team_del_slave+0x31/0x1b0 [ 302.493614][ T582] __mutex_lock+0x175/0x9c0 [ 302.495252][ T582] ? team_del_slave+0x31/0x1b0 [ 302.496939][ T582] ? __mutex_lock+0x1a6/0x9c0 [ 302.498590][ T582] ? team_del_slave+0x31/0x1b0 [ 302.500282][ T582] ? __pfx___mutex_lock+0x10/0x10 [ 302.502089][ T582] ? __pfx___mutex_lock+0x10/0x10 [ 302.503953][ T582] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.505835][ T582] ? rt_flush_dev+0x479/0x620 [ 302.507545][ T582] ? team_del_slave+0x31/0x1b0 [ 302.509301][ T582] team_del_slave+0x31/0x1b0 [ 302.510978][ T582] team_device_event+0xd0/0x770 [ 302.512762][ T582] notifier_call_chain+0xb9/0x410 [ 302.514614][ T582] ? __pfx_team_device_event+0x10/0x10 [ 302.516606][ T582] call_netdevice_notifiers_info+0xbe/0x140 [ 302.518707][ T582] unregister_netdevice_many_notify+0x8d5/0x1e50 [ 302.521016][ T582] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 302.523463][ T582] ? find_held_lock+0x2d/0x110 [ 302.525231][ T582] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 302.527258][ T582] ? __pfx_lock_release+0x10/0x10 [ 302.529109][ T582] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 302.531332][ T582] unregister_netdevice_queue+0x307/0x3f0 [ 302.533431][ T582] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 302.535580][ T582] _cfg80211_unregister_wdev+0x624/0x7f0 [ 302.537532][ T582] ieee80211_remove_interfaces+0x36d/0x760 [ 302.539556][ T582] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 302.541792][ T582] ieee80211_unregister_hw+0x55/0x3a0 [ 302.543643][ T582] mac80211_hwsim_del_radio+0x268/0x370 [ 302.545551][ T582] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 302.547359][ T582] ? hwsim_exit_net+0x2f3/0x6d0 [ 302.549069][ T582] ? __local_bh_enable_ip+0xa4/0x120 [ 302.550902][ T582] hwsim_exit_net+0x33f/0x6d0 [ 302.552526][ T582] ? __pfx_hwsim_exit_net+0x10/0x10 [ 302.554347][ T582] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 302.556209][ T582] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 302.558145][ T582] ? __pfx_hwsim_exit_net+0x10/0x10 [ 302.560005][ T582] ops_exit_list+0xb0/0x180 [ 302.561572][ T582] cleanup_net+0x5b7/0xb40 [ 302.563136][ T582] ? __pfx_cleanup_net+0x10/0x10 [ 302.564965][ T582] ? trace_lock_acquire+0x14a/0x1d0 [ 302.566854][ T582] ? process_one_work+0x8bb/0x1b30 [ 302.568239][ T582] ? lock_acquire+0x2f/0xb0 [ 302.569411][ T582] ? process_one_work+0x8bb/0x1b30 [ 302.570883][ T582] process_one_work+0x958/0x1b30 [ 302.572553][ T582] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 302.574477][ T582] ? __pfx_process_one_work+0x10/0x10 [ 302.576290][ T582] ? assign_work+0x1a0/0x250 [ 302.577793][ T582] worker_thread+0x6c8/0xf00 [ 302.579430][ T582] ? __kthread_parkme+0x148/0x220 [ 302.581255][ T582] ? __pfx_worker_thread+0x10/0x10 [ 302.583103][ T582] kthread+0x2c1/0x3a0 [ 302.584633][ T582] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.586518][ T582] ? __pfx_kthread+0x10/0x10 [ 302.588162][ T582] ret_from_fork+0x45/0x80 [ 302.589352][ T582] ? __pfx_kthread+0x10/0x10 [ 302.591041][ T582] ret_from_fork_asm+0x1a/0x30 [ 302.592774][ T582] [ 302.593931][ C2] vkms_vblank_simulate: vblank timer overrun [ 302.598298][ T582] team0: Port device wlan1 removed [ 302.833124][ T582] hsr_slave_0: left promiscuous mode [ 302.836914][ T582] hsr_slave_1: left promiscuous mode [ 302.842308][ T582] veth1_macvtap: left promiscuous mode [ 302.843817][ T582] veth0_macvtap: left allmulticast mode [ 302.845280][ T582] veth0_macvtap: left promiscuous mode [ 302.849476][ T582] veth1_vlan: left promiscuous mode [ 302.851620][ T582] veth0_vlan: left promiscuous mode [ 303.356456][ T582] team0 (unregistering): Port device team_slave_1 removed [ 303.448086][ T582] team0 (unregistering): Port device team_slave_0 removed [ 303.768118][ T582] smc: removing net device wg0 with user defined pnetid SYZ0 [ 304.161551][ T582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.223083][ T582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.295880][ T582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.429921][ T582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.509051][ T582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.614458][ T582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.672617][ T582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.732921][ T582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.820103][ T582] bridge_slave_1: left allmulticast mode [ 304.822146][ T582] bridge_slave_1: left promiscuous mode [ 304.824244][ T582] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.827995][ T582] bridge_slave_0: left allmulticast mode [ 304.830678][ T582] bridge_slave_0: left promiscuous mode [ 304.832864][ T582] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.837603][ T582] bridge_slave_1: left allmulticast mode [ 304.839201][ T582] bridge_slave_1: left promiscuous mode [ 304.841197][ T582] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.844918][ T582] bridge_slave_0: left allmulticast mode [ 304.846991][ T582] bridge_slave_0: left promiscuous mode [ 304.849678][ T582] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.104019][ T582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.108869][ T582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.112687][ T582] bond0 (unregistering): Released all slaves [ 305.119862][ T582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.125304][ T582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.128762][ T582] bond0 (unregistering): Released all slaves [ 305.573593][ T582] hsr_slave_0: left promiscuous mode [ 305.575938][ T582] hsr_slave_1: left promiscuous mode [ 305.578314][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.581407][ T582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.584320][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.586959][ T582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.591979][ T582] hsr_slave_0: left promiscuous mode [ 305.594243][ T582] hsr_slave_1: left promiscuous mode [ 305.596531][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.599299][ T582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.609097][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.611881][ T582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.618253][ T582] veth1_macvtap: left promiscuous mode [ 305.621900][ T582] veth0_macvtap: left promiscuous mode [ 305.623806][ T582] veth1_vlan: left promiscuous mode [ 305.625191][ T582] veth0_vlan: left promiscuous mode [ 305.628120][ T582] veth1_macvtap: left promiscuous mode [ 305.630095][ T582] veth0_macvtap: left promiscuous mode [ 305.632054][ T582] veth1_vlan: left promiscuous mode [ 305.633924][ T582] veth0_vlan: left promiscuous mode [ 305.849489][ T582] team0 (unregistering): Port device team_slave_1 removed [ 305.893832][ T582] team0 (unregistering): Port device team_slave_0 removed [ 306.157557][ T582] team0 (unregistering): Port device team_slave_1 removed [ 306.200121][ T582] team0 (unregistering): Port device team_slave_0 removed [ 306.970521][ T582] bridge_slave_1: left allmulticast mode [ 306.972074][ T582] bridge_slave_1: left promiscuous mode [ 306.973652][ T582] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.975972][ T582] bridge_slave_0: left allmulticast mode [ 306.977468][ T582] bridge_slave_0: left promiscuous mode [ 306.979048][ T582] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.073322][ T582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.076329][ T582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.079341][ T582] bond0 (unregistering): Released all slaves [ 307.374208][ T582] hsr_slave_0: left promiscuous mode [ 307.376783][ T582] hsr_slave_1: left promiscuous mode [ 307.379859][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.381782][ T582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.383873][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.385796][ T582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.389108][ T582] veth1_macvtap: left promiscuous mode [ 307.390570][ T582] veth0_macvtap: left promiscuous mode [ 307.392023][ T582] veth1_vlan: left promiscuous mode [ 307.393388][ T582] veth0_vlan: left promiscuous mode [ 307.581122][ T582] team0 (unregistering): Port device team_slave_1 removed [ 307.622553][ T582] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 18:59:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88806e644400 RCX=ffffffff89be3a5c RDX=0000000000000000 RSI=ffffffff8bb12320 RDI=ffffffff8d81ab80 RBP=dffffc0000000000 RSP=ffffc900000074d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffffc900000077e8 R14=0000000000000000 R15=ffff8880243494b8 RIP=ffffffff81730920 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000026b36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900033efa78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc900033efca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813bb068 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000040b2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000049c00000000 0000001000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff969993b8 RBX=ffff8880221ed4c8 RCX=ffffffff81694e8e RDX=fffffbfff2d31589 RSI=dffffc0000000000 RDI=ffffffff96b519a8 RBP=ffff8880221ed4ea RSP=ffffc900036861d0 R8 =0000000000000000 R9 =fffffbfff2d31588 R10=ffffffff9698ac47 R11=0000000000000077 R12=ffffffff96b51998 R13=ffff8880221ed4f0 R14=ffff8880221ed512 R15=ffff8880221ec880 RIP=ffffffff816a1d88 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000056f60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000049c00000000 0000001000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004385d1 RBX=0000000000000003 RCX=ffffffff8b130829 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb123a0 RBP=ffffed10036ec488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cd188 R15=0000000000000000 RIP=ffffffff8b131c0f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000007025a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000