last executing test programs: 4m33.718446999s ago: executing program 1 (id=906): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200280, 0x0) io_setup(0x22f8, &(0x7f0000000180)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'erspan0\x00', {'bridge0\x00'}, 0x9ffa}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) 4m33.531028533s ago: executing program 1 (id=907): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x4}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xf, 0x0, 0x3, 0x6}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4m33.291377145s ago: executing program 1 (id=910): r0 = socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) msgget$private(0x0, 0x3ac) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x444080) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000100)) 4m31.86485653s ago: executing program 1 (id=916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = io_uring_setup(0x1d34, &(0x7f0000000540)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0xd74d, 0x20, 0x0, 0x19f, 0x0, r4}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000a0000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r6, 0x80041284, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffffffff7f3, 0x2, 0x0, 0x5, 0x10, 0x4, "995e4c8b0ba6f8ed413b1ee5f3a7c862bbf64092868fd6943a428277be3c0fd8c867f86e662e0c2dd39186b32ee0690c16eb180e81ed3e5e2ebe64446497c2fc", "a6fafe5554ac900cc641df63c82e3d2347ef4230f37485c698954b3d8be9b663e59116e54ef137506743aa54d43eeef70999ee41524cf2aef5653e90d68d5ac5", "0286bcec3e402f381e7bdad53f9018befdba9800b9e9fd123eafd0d13d4c50ed", [0x0, 0x9]}) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x4080, &(0x7f00000000c0)="4f9a6a84e0763f2277487f1fac079f9c0ff94619ea2fac723359cfaa85cba9081d", 0x21, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000002080)="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") syz_open_procfs(r7, &(0x7f0000000500)='limits\x00') 4m30.831340165s ago: executing program 1 (id=919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) dup3(r4, r6, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 4m30.571542919s ago: executing program 1 (id=921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=@newtaction={0x163c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x208, 0x1, [@m_xt={0x158, 0x0, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7ff}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf3, 0x6, "a2d361242edc78cf45ed9a8b1886fde3c5610a002565703562b5413efe99e805773e98aba9feed28fbf1a2f5e185944808e64d77a9549e39dbf3e3dea0e7c2ec08e13199a8b19fb42561e1f24f194bc0ba8304e0bc1013fac15113c6212ae19b93dbc9e46cfcdca125bdbf8d7541346713a967d5ce85bc23e48f8fbb6a7cb8d7aa91ca7ebbfb885affb1a4071a1e7ddea6fd6ba35bc5672f12d4f50eff1e4288a2a9176cea2bf5a13eef59ccc632ceb82a43e0c6a81021ac7df49aff36fa5355b36a82ce92be9859812f282b7393d2a7f2854d028d8d939141fc0610ea40d0b6fc9eb04fe59ad4914ac3fff9045ee9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_mpls={0xac, 0x7, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x70, 0x6, "27651a872a80228d067c6d81798c55a7b911ad04fb708f5bd11a4c05cfd37cf0e3f16012e688400f65e85c03c109286a2e5cf17b7cb9c4831c954d5fbdac5ec0cb8dad8415051f8a4f6d048d4076e97913affb9914a6b60f904b2e49c31dc2be203b36014341933f51a3765c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x128c, 0x1, [@m_connmark={0x12c, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf, 0x7f, 0x1, 0x3, 0x5}, 0xdef3}}]}, {0xdf, 0x6, "51ea02ef36c979d84d507e7676d43644d9ba28077ebe429a052dbc6d45f1f7ba1eee309906a63becac99ac747b448c09dd501bcced3ce117a2577d62ee38d704b2816632dd33bdc1e0abb53babf05daea613dd210cd68f1858a61102737bb0feeba420823c22783d795cdc05662d2a03bde08ad1bddc3cf98e902c444c65f5e1cf7f4df3caf6c4f30f9ae38bfc72fc1637e5f51d65f576ed432eb409f2dcfe8961baa12cea69613b534c2e0f1d77f595f5f9d28e2c3df8d1f8b55a1daea8aa173499838a9d59726108b889016f49a282d1a37d96a7f176807211c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xf0, 0x3, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x6, 0x6, 0x0, 0x3f}, {0xa, 0x2, 0x3, 0x8}, {0x2, 0x7, 0xf9, 0x10000}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x1, 0xf9, 0x1000}, {0x9, 0xd, 0xd, 0x9}, {0x6ef, 0x4, 0x4, 0xffffffff}, {0x1000, 0x9, 0xf, 0x8}, {0x2, 0x0, 0x0, 0x6}, {0x9, 0x5, 0x9, 0x3}, {0x1, 0xba, 0x3, 0x7}, {0x6, 0xfc, 0x5, 0x3597}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x47, 0x6, "6b4d59a419531073c69b1c814d555bd151ac78ab4ac9fb967ec0f9a059f7a70ea6ba83500421510767deede9ad85fe13ac238f26fe49db42598373baf047e89658cbb9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x106c, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7fa02b6f, 0x5, 0x4, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x10000, 0xffffffffffffffff, 0x3, 0x6}, 0x80}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x194, 0x1, [@m_connmark={0x12c, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0x401}}}]}, {0xde, 0x6, "4d5d3ade2bdc9e79dbc40cf5da5cf6f46f87285cdfd61ac1afd642924ce8ddf46eb1dc115df98f6ddffb9d93e9da7278a2c1592d0dbfb9d12f5ab0f41ae6af4e65899d77bd6f73a02d532ddaa74b912e2bfea03d1472c47c9ee6b2a0cae7a6c5df14d206516bf0510289662a2b5b14957cb103f3c3eca6feb9a8d0369286c7d77a0b591075e9229f1264958559e52c5e66b24d7e4087a6e01c74d91890f5148318ce45dd34fafb2366e65f1e33d9c2d84be6df238647999eded7c85fe001888685d36463438a4710cf9e08301a46331cbef2c9bd52cfed8d9c74"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x64, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x27, 0x2, 0x7, 0x3, 0x9}, @private=0xa010100, @local, 0xff}}]}, {0x14, 0x6, "cb4d226d0d30de4fa1cdeb05d2bb9ca1"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x163c}, 0x1, 0x0, 0x0, 0x4c8c4}, 0x20040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000924000/0x4000)=nil, 0x4000, 0xb, 0x110, r2, 0x64dd000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000001840)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000280)}, 0x200}, {{&(0x7f0000000600)=@phonet, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=""/105, 0x69}, 0x79}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000001340)=""/187, 0xbb}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000001480)=""/246, 0xf6}], 0x8}, 0x4004}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/27, 0x1b}], 0x2}, 0x8000}, {{&(0x7f0000000cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/228, 0xe4}, {&(0x7f0000006a00)=""/4097, 0x1001}, {&(0x7f00000010c0)=""/147, 0x93}], 0x4, &(0x7f0000001180)=""/183, 0xb7}, 0xeca}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f0000001580)=""/89, 0x59}, {&(0x7f0000001600)=""/75, 0x4b}, {&(0x7f0000001680)=""/179, 0xb3}, {&(0x7f0000001740)=""/237, 0xed}], 0x5, &(0x7f0000000b00)}, 0xf}], 0x6, 0x2002, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r6, 0x1) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) 4m30.484211853s ago: executing program 32 (id=921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=@newtaction={0x163c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x208, 0x1, [@m_xt={0x158, 0x0, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7ff}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf3, 0x6, "a2d361242edc78cf45ed9a8b1886fde3c5610a002565703562b5413efe99e805773e98aba9feed28fbf1a2f5e185944808e64d77a9549e39dbf3e3dea0e7c2ec08e13199a8b19fb42561e1f24f194bc0ba8304e0bc1013fac15113c6212ae19b93dbc9e46cfcdca125bdbf8d7541346713a967d5ce85bc23e48f8fbb6a7cb8d7aa91ca7ebbfb885affb1a4071a1e7ddea6fd6ba35bc5672f12d4f50eff1e4288a2a9176cea2bf5a13eef59ccc632ceb82a43e0c6a81021ac7df49aff36fa5355b36a82ce92be9859812f282b7393d2a7f2854d028d8d939141fc0610ea40d0b6fc9eb04fe59ad4914ac3fff9045ee9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_mpls={0xac, 0x7, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x70, 0x6, "27651a872a80228d067c6d81798c55a7b911ad04fb708f5bd11a4c05cfd37cf0e3f16012e688400f65e85c03c109286a2e5cf17b7cb9c4831c954d5fbdac5ec0cb8dad8415051f8a4f6d048d4076e97913affb9914a6b60f904b2e49c31dc2be203b36014341933f51a3765c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x128c, 0x1, [@m_connmark={0x12c, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf, 0x7f, 0x1, 0x3, 0x5}, 0xdef3}}]}, {0xdf, 0x6, "51ea02ef36c979d84d507e7676d43644d9ba28077ebe429a052dbc6d45f1f7ba1eee309906a63becac99ac747b448c09dd501bcced3ce117a2577d62ee38d704b2816632dd33bdc1e0abb53babf05daea613dd210cd68f1858a61102737bb0feeba420823c22783d795cdc05662d2a03bde08ad1bddc3cf98e902c444c65f5e1cf7f4df3caf6c4f30f9ae38bfc72fc1637e5f51d65f576ed432eb409f2dcfe8961baa12cea69613b534c2e0f1d77f595f5f9d28e2c3df8d1f8b55a1daea8aa173499838a9d59726108b889016f49a282d1a37d96a7f176807211c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xf0, 0x3, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x6, 0x6, 0x0, 0x3f}, {0xa, 0x2, 0x3, 0x8}, {0x2, 0x7, 0xf9, 0x10000}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x1, 0xf9, 0x1000}, {0x9, 0xd, 0xd, 0x9}, {0x6ef, 0x4, 0x4, 0xffffffff}, {0x1000, 0x9, 0xf, 0x8}, {0x2, 0x0, 0x0, 0x6}, {0x9, 0x5, 0x9, 0x3}, {0x1, 0xba, 0x3, 0x7}, {0x6, 0xfc, 0x5, 0x3597}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x47, 0x6, "6b4d59a419531073c69b1c814d555bd151ac78ab4ac9fb967ec0f9a059f7a70ea6ba83500421510767deede9ad85fe13ac238f26fe49db42598373baf047e89658cbb9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x106c, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7fa02b6f, 0x5, 0x4, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x10000, 0xffffffffffffffff, 0x3, 0x6}, 0x80}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x194, 0x1, [@m_connmark={0x12c, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0x401}}}]}, {0xde, 0x6, "4d5d3ade2bdc9e79dbc40cf5da5cf6f46f87285cdfd61ac1afd642924ce8ddf46eb1dc115df98f6ddffb9d93e9da7278a2c1592d0dbfb9d12f5ab0f41ae6af4e65899d77bd6f73a02d532ddaa74b912e2bfea03d1472c47c9ee6b2a0cae7a6c5df14d206516bf0510289662a2b5b14957cb103f3c3eca6feb9a8d0369286c7d77a0b591075e9229f1264958559e52c5e66b24d7e4087a6e01c74d91890f5148318ce45dd34fafb2366e65f1e33d9c2d84be6df238647999eded7c85fe001888685d36463438a4710cf9e08301a46331cbef2c9bd52cfed8d9c74"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x64, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x27, 0x2, 0x7, 0x3, 0x9}, @private=0xa010100, @local, 0xff}}]}, {0x14, 0x6, "cb4d226d0d30de4fa1cdeb05d2bb9ca1"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x163c}, 0x1, 0x0, 0x0, 0x4c8c4}, 0x20040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000924000/0x4000)=nil, 0x4000, 0xb, 0x110, r2, 0x64dd000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000001840)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000280)}, 0x200}, {{&(0x7f0000000600)=@phonet, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=""/105, 0x69}, 0x79}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000001340)=""/187, 0xbb}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000001480)=""/246, 0xf6}], 0x8}, 0x4004}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/27, 0x1b}], 0x2}, 0x8000}, {{&(0x7f0000000cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/228, 0xe4}, {&(0x7f0000006a00)=""/4097, 0x1001}, {&(0x7f00000010c0)=""/147, 0x93}], 0x4, &(0x7f0000001180)=""/183, 0xb7}, 0xeca}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f0000001580)=""/89, 0x59}, {&(0x7f0000001600)=""/75, 0x4b}, {&(0x7f0000001680)=""/179, 0xb3}, {&(0x7f0000001740)=""/237, 0xed}], 0x5, &(0x7f0000000b00)}, 0xf}], 0x6, 0x2002, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r6, 0x1) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m39.630537576s ago: executing program 4 (id=1578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m38.772368829s ago: executing program 4 (id=1580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x3, 0x3, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d000c20028008000140000000380900ff0073797a30000000000800020073797a3200000000140000001100010000000000000000000700000a315a2efd8c986dc6a05ecb71791281756c31dd6010c5d02b7021ba7fd762a3bc221bda866601734be8826d73b1a3d107b4c6390847bb0abbef6b9bb1a86de0b76668c4802d62207cdddd44"], 0x74}}, 0x8c0) 1m38.370399044s ago: executing program 4 (id=1582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x6, 0x31435750, 0x1, 0x9, [{0x9, 0x6}, {0x17e, 0x2}, {0x508, 0x400}, {0x3, 0xf}, {0x7, 0x5}, {0x4}, {0x6, 0x9}, {0xb5, 0x8001}], 0x9, 0x7, 0x3, 0x2, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1}) connect$inet(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xffffff00}]}}]}, 0x3c}}, 0x2000400c) socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100001f00050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m37.399987516s ago: executing program 4 (id=1586): syz_open_dev$sndmidi(&(0x7f0000000140), 0x8, 0xc0080) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x50, 0x0) madvise(&(0x7f00008fb000/0x2000)=nil, 0x2000, 0x15) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/40}, {&(0x7f0000000040)=""/120}], 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/123) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m36.700482767s ago: executing program 4 (id=1591): socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x1, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db", 0xd}], 0x1}, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtclass={0x6c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0x5}, {0xf, 0xc}, {0x2, 0xffee}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x46}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008841) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="516924e8b8f9"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 1m36.400254298s ago: executing program 4 (id=1592): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f6, 0x3f, 0x8, 0x3, 0x81, 0x2800, 0x2800, 0x2, 0xba2, 0x4, 0x2c, {0x7, 0xffffffff}, 0xd0, 0x9}}) (async) r1 = userfaultfd(0x801) (async) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @local}, 0x1c) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r8, r9}, 0xc) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000067a000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 1m36.30501737s ago: executing program 33 (id=1592): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f6, 0x3f, 0x8, 0x3, 0x81, 0x2800, 0x2800, 0x2, 0xba2, 0x4, 0x2c, {0x7, 0xffffffff}, 0xd0, 0x9}}) (async) r1 = userfaultfd(0x801) (async) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @local}, 0x1c) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r8, r9}, 0xc) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000067a000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 7.034521322s ago: executing program 0 (id=1971): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r4], &(0x7f0000000340)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.950355822s ago: executing program 0 (id=1975): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66beb3", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66beb3", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) (async) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x3) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000000), 0x4, 0x0, &(0x7f0000000180)="c86a3c32"}) 5.030034975s ago: executing program 2 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000900)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988a8", 0xe}], 0x1) 3.6498382s ago: executing program 3 (id=1984): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f"], 0x0, 0x26}, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCINQ(r1, 0x800448d2, &(0x7f0000000000)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/94, 0xfffffcf7) syz_emit_ethernet(0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa9938aaaa90d63f81004500"], 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002aaaaaa71a38a3973cbaa1f080042000078000000020011907800000000e000000100004e20006490780200000000000000020000008272fd2ff0f462b55dbc7ab02b9c817e4d80d2d4128a8d1ae2b4fe69783d8ec6b230e1abcaa0d208e9a039609936b29afb0ca7e540c9f66ce71c15922ce36450f28100"/139], 0x0) 3.644027039s ago: executing program 0 (id=1985): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xd9e}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000002ec0)={0x0, 0x0}) 3.587487353s ago: executing program 5 (id=1986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) dup3(r4, r6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.584814882s ago: executing program 2 (id=1987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 3.529966888s ago: executing program 3 (id=1988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b09551036"]) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e00200001b00000428bd7000fedbdf25fe880000000000040000000000000001640101010000000008000000000000004e2200044e21ffff020020003b00", @ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) kcmp(r0, r0, 0x48a9d97fbc48e937, r3, r3) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xffff) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) sendmsg$nl_route(r6, 0x0, 0x8040) 2.849792332s ago: executing program 0 (id=1989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x60000010}) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x89c, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x5ede6002) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x33}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffff4d}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x92}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x35f}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x94d}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.64991943s ago: executing program 2 (id=1990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$netlink(0x10, 0x3, 0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000340)={r4, 0x63, &(0x7f00000003c0)}, 0x10) 2.649144095s ago: executing program 5 (id=1991): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$netlink(0x10, 0x3, 0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000340)={r3, 0x63, &(0x7f00000003c0)}, 0x10) 2.4098627s ago: executing program 2 (id=1992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) dup3(0xffffffffffffffff, r5, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.35939072s ago: executing program 3 (id=1993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x20000d, @mcast1}, 0x56) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc1c4, 0x5, 0x4, 0xd311, 0x400, 0x9da, 0x92eb, 0x9fbd, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {0xfff3, 0xb}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=[{'DIGITAL3', @void}, {'LINE', @val={' \'', 'Line Capture Switch'}}, {'DIGITAL2', @val={' \'', 'Master Playback Volume'}}, {'LINE1', @void}, {'IMIX', @void}], 0x7b) shutdown(r8, 0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'veth1_to_hsr\x00', 0xdd543b56a4dae4da}) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x4, 0x0) 2.300058144s ago: executing program 5 (id=1994): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) pipe2$9p(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000aab000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x2000000000009, 0x8, 0x7) r1 = openat$fb1(0xffffff9c, &(0x7f0000000100), 0x88040, 0x0) mmap$fb(&(0x7f00007cf000/0x3000)=nil, 0x3000, 0x8, 0x810, r1, 0x6a000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 2.098751186s ago: executing program 3 (id=1995): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001040)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0], 0x0, 0x4c, &(0x7f00000010c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x9e, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x0, 0x26, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x10, 0x3}, {0xfff3, 0x1}, {0x5, 0x7}}, [{}, {}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18009000000000fdffffff0000fff6ff80e50002000000000095000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x5, @remote}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x3c, @rand_addr, 0x0, 0x0, 'ovf\x00', 0x4, 0xfffffffc}, 0x2c) sendto$llc(0xffffffffffffffff, &(0x7f0000000080)="e3b3980bf0f2e9b63651f6672887831c38d5f7a0ac244cc36a91479a2fc4d70b0ee9d6318d74fdd1b7d8", 0x2a, 0x7cc0834f68b531f, &(0x7f00000000c0)={0x1a, 0x323, 0x31, 0xbf, 0x2, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 1.299762282s ago: executing program 2 (id=1996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x1000000}}, 0x20) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x401) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 1.229869076s ago: executing program 2 (id=1997): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x101008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeed, &(0x7f0000000240)=0x5) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x10a00ac, 0x0) r4 = syz_io_uring_setup(0x896, &(0x7f0000000440)={0x0, 0x9a07, 0x4, 0x0, 0x316}, &(0x7f0000000540)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x205734, &(0x7f0000000380)={0x0, 0x304c, 0x20, 0x2, 0x3ba}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r7, r6, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20000000007fffffff5ba8add5654b00"], 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) 695.462138ms ago: executing program 0 (id=1998): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) 637.335738ms ago: executing program 5 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x6, 0xe5, 0x3e, 0x220, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x7, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) copy_file_range(r0, &(0x7f0000000000)=0x7fffffff, r1, &(0x7f0000000040)=0xa93e, 0x8, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="1400000016000b63075a80648c25943b1f3eae25", 0x14}, {&(0x7f0000000100)="f330f31e0a054dc76aa2d7282ca36339d1cf30b6f4e7bea4d9302eb84eefdcf05508221a1990709b9c3d2fd3b4a1472e581c2971859cb06990463aa4c59dcef6"}], 0x1, 0x0, 0x7}, 0x20000000) 520.184878ms ago: executing program 0 (id=2000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup3(r4, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 514.244111ms ago: executing program 5 (id=2001): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$netlink(0x10, 0x3, 0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000340)={r4, 0x63, &(0x7f00000003c0)}, 0x10) 269.017061ms ago: executing program 3 (id=2002): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$netlink(0x10, 0x3, 0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000340)={r3, 0x63, &(0x7f00000003c0)}, 0x10) 202.318741ms ago: executing program 5 (id=2003): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="4b1ce661", 0x4}], 0x1, 0xfffffffd, 0x7fffffff, 0x1a) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000001540), &(0x7f0000001580)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg$unix(r4, &(0x7f0000002dc0)=[{{&(0x7f0000001000), 0x6e, &(0x7f0000001100), 0x0, &(0x7f0000001240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc4}}, {{&(0x7f0000001640), 0x6e, &(0x7f00000011c0)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/151, 0x97}, {&(0x7f0000001140)=""/21, 0x15}, {&(0x7f0000001080)=""/154, 0x9a}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x5, &(0x7f0000001380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002ac0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002b40)=""/225, 0xe1}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000002c40)=""/179, 0xb3}], 0x3, &(0x7f0000002d40)}}], 0x3, 0x10001, &(0x7f0000002e40)) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x100, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3800000500000000000000000000000009000200735e0008004100736d7700140033006c6f000000000000000000000000ce24e61825e9877d440861b577bf539abd0fe0a93488b77e798f745cc5301067bb459eca01e8c3"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20000000) (async) sendmsg$nl_route_sched(r6, 0x0, 0x10099) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000140)) (async) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) (async, rerun: 32) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000000)) (async) socket$igmp(0x2, 0x3, 0x2) 0s ago: executing program 3 (id=2004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r6, @ANYBLOB="40004ee20071b45642e10100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300068cdcd4942789d02f60e3d4fda88e5b370000000400a00e08000600a5a680bd1d21a07b1792780b5ebd6543b97c6ee9a5e3a70cd82bbdc0a5d2dec58d14665091fc6c8f6431a1565d52381f211b51d1f33f8ada2c34a034f14147ee9841d6a23ebb34199f14f5a8bb716f7e8697d925d9ad641c67811e914773e11d343421818e70303e936f4508ad09cda68e89dddd3288bcd5f84f425bedae", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) rseq(0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mlockall(0x7) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mq_getsetattr(r8, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r8, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x5, 0x0) kernel console output (not intermixed with test programs): 4-port1: unable to enumerate USB device [ 359.692465][ T6029] usb usb46-port1: unable to enumerate USB device [ 359.703670][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1141'. [ 359.808837][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1142'. [ 360.829717][T11168] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1148'. [ 360.840288][T11168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1148'. [ 361.806404][T11183] pim6reg: entered allmulticast mode [ 362.722243][ T5953] Bluetooth: hci0: command 0x0406 tx timeout [ 363.876420][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1162'. [ 363.971186][T11232] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1161'. [ 364.060326][T11234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1161'. [ 364.094939][ T75] usb 38-1: device descriptor read/8, error -110 [ 364.492618][ T75] usb usb38-port1: attempt power cycle [ 364.536991][T11235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 364.539262][T11235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 364.542181][T11235] vhci_hcd vhci_hcd.0: Device attached [ 364.699609][T11242] vhci_hcd: connection closed [ 364.699985][ T9397] vhci_hcd vhci_hcd.3: stop threads [ 364.711865][ T9397] vhci_hcd vhci_hcd.3: release socket [ 364.713878][ T9397] vhci_hcd vhci_hcd.3: disconnect device [ 364.916584][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 365.052948][ T75] usb usb38-port1: unable to enumerate USB device [ 365.088164][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 366.704383][T11269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.787289][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 366.802143][ T5953] Bluetooth: hci3: command 0x0406 tx timeout [ 367.077797][T11282] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1173'. [ 367.102373][ T5981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 367.116130][T11282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1173'. [ 367.301780][ T5981] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 367.309365][ T5981] usb 5-1: config 0 has no interface number 0 [ 367.345271][ T5981] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 367.353554][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.361813][ T5981] usb 5-1: Product: syz [ 367.368564][ T5981] usb 5-1: Manufacturer: syz [ 367.370755][ T5981] usb 5-1: SerialNumber: syz [ 367.388188][ T5981] usb 5-1: config 0 descriptor?? [ 367.393539][ T5981] hub 5-1:0.217: bad descriptor, ignoring hub [ 367.396229][ T5981] hub 5-1:0.217: probe with driver hub failed with error -5 [ 367.595017][T11274] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 367.599324][ T5981] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 367.607866][ T5981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.612454][ T5981] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 367.616246][ T5981] usb 5-1: media controller created [ 367.629419][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.664208][ T5981] DVB: Unable to find symbol dib7000p_attach() [ 367.666464][ T5981] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 367.732541][ T5981] rc_core: IR keymap rc-dib0700-rc5 not found [ 367.734710][ T5981] Registered IR keymap rc-empty [ 367.737585][ T5981] dvb-usb: could not initialize remote control. [ 367.739746][ T5981] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 367.817638][ T5981] usb 5-1: USB disconnect, device number 4 [ 367.851599][T11292] x_tables: duplicate underflow at hook 1 [ 367.854819][T11293] x_tables: duplicate underflow at hook 1 [ 367.856599][ T5981] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 368.635096][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 369.501732][T11316] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 369.539657][T11316] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.544368][T11316] bond0: (slave team0): Enslaving as an active interface with an up link [ 369.581610][T11316] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 369.590283][T11316] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 369.611233][T11316] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.618505][T11316] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 369.708326][T11315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.067939][T11333] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 370.070792][T11333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.082127][T11333] vhci_hcd vhci_hcd.0: Device attached [ 370.093187][T11334] vhci_hcd: connection closed [ 370.093403][ T9397] vhci_hcd vhci_hcd.2: stop threads [ 370.102084][ T9397] vhci_hcd vhci_hcd.2: release socket [ 370.104056][ T9397] vhci_hcd vhci_hcd.2: disconnect device [ 370.258010][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 370.482113][ T5953] Bluetooth: hci0: command 0x0406 tx timeout [ 371.996272][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 372.193793][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 373.118697][T11358] netlink: 'syz.0.1192': attribute type 10 has an invalid length. [ 373.128326][T11358] team0: Device bond0 is already an upper device of the team interface [ 373.138637][T11358] netlink: 2236 bytes leftover after parsing attributes in process `syz.0.1192'. [ 374.699652][T11373] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 374.701854][T11373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 374.712085][T11373] vhci_hcd vhci_hcd.0: Device attached [ 374.881781][T11374] vhci_hcd: connection closed [ 374.882034][ T9397] vhci_hcd vhci_hcd.2: stop threads [ 374.885368][ T9397] vhci_hcd vhci_hcd.2: release socket [ 374.888346][ T9397] vhci_hcd vhci_hcd.2: disconnect device [ 375.122030][ T5953] Bluetooth: hci1: command 0x0406 tx timeout [ 375.889157][T11390] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 375.897564][T11390] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.940360][T11393] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 376.022568][T11390] siw: device registration error -23 [ 376.046919][T11398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1200'. [ 377.261229][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1204'. [ 377.282533][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1204'. [ 377.306947][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 377.990529][T11418] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.198311][T11426] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.210363][T11426] ovl_remap_lower_ino: 34 callbacks suppressed [ 378.210374][T11426] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 378.215473][T11426] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 378.218750][T11426] overlayfs: d_ino too big (65, ino=9223372036854776156, xinobits=3) [ 378.221648][T11426] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 378.224793][T11426] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 378.228194][T11426] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 378.231103][T11426] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 378.235299][T11426] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 378.238234][T11426] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 378.241113][T11426] overlayfs: d_ino too big (instances, ino=4611686018427391086, xinobits=3) [ 378.312074][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 378.472062][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 378.475882][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.480550][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.485273][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 378.490572][ T34] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 378.494752][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.500850][ T34] usb 7-1: config 0 descriptor?? [ 378.919907][ T34] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 378.922365][ T34] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 378.924672][ T34] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 378.926984][ T34] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 378.929267][ T34] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 378.937193][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 378.964924][ T34] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 378.967704][ T34] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 379.117173][T11422] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1208'. [ 379.287891][T11439] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 379.291056][T11439] batman_adv: batadv0: Removing interface: team0 [ 379.297100][T11439] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.301850][T11439] team_slave_0: entered promiscuous mode [ 379.303981][T11439] team_slave_1: entered promiscuous mode [ 379.306998][T11439] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.321651][ T6085] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 379.326887][ T5972] usb 7-1: USB disconnect, device number 11 [ 379.336655][T11439] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 379.339497][ T6085] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 379.347566][ T6085] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 379.355988][T11439] siw: device registration error -23 [ 379.435327][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 380.532501][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 380.532519][ T40] audit: type=1326 audit(1766680866.135:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11450 comm="syz.2.1214" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 380.984489][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 380.988208][T11470] netlink: 'syz.4.1216': attribute type 5 has an invalid length. [ 380.991572][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1216'. [ 381.181044][T11467] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 381.198454][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 381.271288][T11470] geneve2: entered promiscuous mode [ 381.274122][T11470] geneve2: entered allmulticast mode [ 381.277186][ T1142] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 381.280893][ T1142] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 381.290139][ T1142] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 381.293945][ T1142] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 382.067774][T11489] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1223'. [ 382.114162][T11486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1223'. [ 382.475317][T11503] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1224'. [ 382.483085][T11503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1224'. [ 383.005258][T11516] MPI: mpi too large (129416 bits) [ 383.096447][T11519] cgroup: none used incorrectly [ 383.122117][ T5953] Bluetooth: hci0: command 0x0406 tx timeout [ 383.285844][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.287936][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.409743][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 383.467623][T11533] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 383.469764][T11533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.474404][T11533] vhci_hcd vhci_hcd.0: Device attached [ 383.524840][T11534] vhci_hcd: connection closed [ 383.525102][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 383.528514][ T1144] vhci_hcd vhci_hcd.2: release socket [ 383.530284][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 383.827497][T11544] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1235'. [ 383.883090][T11547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1235'. [ 384.378496][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 385.094020][T11566] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1239'. [ 386.732066][ T5953] Bluetooth: hci2: command tx timeout [ 386.806918][T11590] __nla_validate_parse: 3 callbacks suppressed [ 386.806930][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 386.807850][T11586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 386.981510][T11598] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1249'. [ 386.989978][T11598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1249'. [ 387.043410][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 387.113271][T11603] kAFS: unable to lookup cell 'Þ({^ú@' [ 387.291407][T11611] use of bytesused == 0 is deprecated and will be removed in the future, [ 387.295467][T11611] use the actual size instead. [ 387.930251][T11618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.225315][T11624] geneve2: entered promiscuous mode [ 388.227624][T11624] geneve2: entered allmulticast mode [ 388.603796][T11635] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 389.157893][T11657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 389.160229][T11657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 389.164101][T11657] vhci_hcd vhci_hcd.0: Device attached [ 389.298387][T11663] kAFS: unable to lookup cell 'Þ({^ú@' [ 389.432062][ T5923] usb 46-1: SetAddress Request (18) to port 0 [ 389.434170][ T5923] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 389.518501][T11658] vhci_hcd: connection reset by peer [ 389.520641][ T13] vhci_hcd vhci_hcd.4: stop threads [ 389.522636][ T13] vhci_hcd vhci_hcd.4: release socket [ 389.524610][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 390.602239][T11685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1268'. [ 392.545100][T11714] binder_alloc: binder_alloc_mmap_handler: 11713 80ffd000-80ffe000 already mapped failed -16 [ 392.573185][ T40] audit: type=1326 audit(1766680878.355:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1273" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 392.690436][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'. [ 392.982507][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'. [ 393.035123][T11730] xt_cluster: node mask cannot exceed total number of nodes [ 393.859694][T11733] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 393.861957][T11733] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.865040][T11733] vhci_hcd vhci_hcd.0: Device attached [ 393.896641][T11733] fuse: Unknown parameter 'bootmode' [ 394.142414][ T5972] usb 44-1: SetAddress Request (72) to port 0 [ 394.145325][ T5972] usb 44-1: new SuperSpeed USB device number 72 using vhci_hcd [ 394.390542][T11741] vhci_hcd: connection reset by peer [ 394.394309][ T4982] vhci_hcd vhci_hcd.3: stop threads [ 394.396682][ T4982] vhci_hcd vhci_hcd.3: release socket [ 394.399318][ T4982] vhci_hcd vhci_hcd.3: disconnect device [ 394.426769][T11746] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1283'. [ 394.482410][ T5923] usb 46-1: device descriptor read/8, error -110 [ 394.883122][ T5923] usb usb46-port1: attempt power cycle [ 395.348965][T11758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 395.353656][T11758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 395.354788][T11758] vhci_hcd vhci_hcd.0: Device attached [ 395.464493][ T5923] usb usb46-port1: unable to enumerate USB device [ 395.632341][ T5923] usb 38-1: SetAddress Request (79) to port 0 [ 395.634493][ T5923] usb 38-1: new SuperSpeed USB device number 79 using vhci_hcd [ 396.132326][T11772] tmpfs: Unknown parameter '0x000000000000000000000000000000000005' [ 396.136140][T11772] tmpfs: Unknown parameter '0x000000000000000000000000000000000005' [ 396.165541][T11762] vhci_hcd: connection reset by peer [ 396.172053][ T1178] vhci_hcd vhci_hcd.0: stop threads [ 396.173879][ T1178] vhci_hcd vhci_hcd.0: release socket [ 396.175834][ T1178] vhci_hcd vhci_hcd.0: disconnect device [ 396.360465][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 396.784917][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 397.225791][T11798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1293'. [ 397.349714][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1293'. [ 398.782055][ T5953] Bluetooth: hci3: command 0x0406 tx timeout [ 399.202690][ T5972] usb 44-1: device descriptor read/8, error -110 [ 399.592848][ T5972] usb usb44-port1: attempt power cycle [ 400.653067][ T5972] usb usb44-port1: unable to enumerate USB device [ 400.722699][ T5923] usb 38-1: device descriptor read/8, error -110 [ 400.936294][T11852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1305'. [ 400.945336][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'. [ 401.133490][ T5923] usb usb38-port1: attempt power cycle [ 401.606037][T11856] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 401.693637][ T5923] usb usb38-port1: unable to enumerate USB device [ 401.779067][T11859] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 402.532328][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 403.246348][T11890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 403.248539][T11890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 403.261164][T11890] vhci_hcd vhci_hcd.0: Device attached [ 403.372668][T11890] wg2 speed is unknown, defaulting to 1000 [ 403.376381][T11890] wg2 speed is unknown, defaulting to 1000 [ 403.378795][T11890] wg2 speed is unknown, defaulting to 1000 [ 403.532099][ T6085] usb 44-1: SetAddress Request (76) to port 0 [ 403.534156][ T6085] usb 44-1: new SuperSpeed USB device number 76 using vhci_hcd [ 403.820587][T11891] vhci_hcd: connection reset by peer [ 403.822696][ T1217] vhci_hcd vhci_hcd.3: stop threads [ 403.825014][ T1217] vhci_hcd vhci_hcd.3: release socket [ 403.827361][ T1217] vhci_hcd vhci_hcd.3: disconnect device [ 404.121424][T11890] infiniband syz2: set active [ 404.126029][ T29] wg2 speed is unknown, defaulting to 1000 [ 404.128526][T11890] infiniband syz2: added wg2 [ 404.259693][T11890] RDS/IB: syz2: added [ 404.278205][T11890] smc: adding ib device syz2 with port count 1 [ 404.280377][T11890] smc: ib device syz2 port 1 has no pnetid [ 404.288740][ T29] wg2 speed is unknown, defaulting to 1000 [ 404.294329][T11890] wg2 speed is unknown, defaulting to 1000 [ 404.562051][ T5953] Bluetooth: hci3: command 0x0406 tx timeout [ 404.875840][T11912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1317'. [ 405.041430][T11890] wg2 speed is unknown, defaulting to 1000 [ 405.921346][T11890] wg2 speed is unknown, defaulting to 1000 [ 406.132538][T11923] tmpfs: Bad value for 'mpol' [ 406.158112][T11890] wg2 speed is unknown, defaulting to 1000 [ 406.249850][T11929] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1320'. [ 406.273276][T11927] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1320'. [ 407.255213][T11954] netlink: 'syz.4.1325': attribute type 14 has an invalid length. [ 407.801169][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 408.282055][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 408.433844][ T34] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.437637][ T34] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 408.442077][ T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.445975][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 408.450670][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 408.457175][ T34] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.461169][ T34] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.464785][ T34] usb 9-1: Product: syz [ 408.466812][ T34] usb 9-1: Manufacturer: syz [ 408.478121][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 408.483317][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 408.490317][ T34] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 408.492851][ T34] cdc_wdm 9-1:1.0: Unknown control protocol [ 408.643874][ T6085] usb 44-1: device descriptor read/8, error -110 [ 408.833973][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.837374][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.032666][ T6085] usb usb44-port1: attempt power cycle [ 409.487121][T11988] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1334'. [ 409.491815][T11983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1334'. [ 409.593465][ T6085] usb usb44-port1: unable to enumerate USB device [ 409.666903][T11991] nvme_fabrics: missing parameter 'transport=%s' [ 409.670229][T11991] nvme_fabrics: missing parameter 'nqn=%s' [ 409.780485][T11996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 409.783258][T11996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 409.788792][T11996] vhci_hcd vhci_hcd.0: Device attached [ 409.842399][ T5953] Bluetooth: hci0: command 0x0406 tx timeout [ 410.052083][ T5972] usb 44-1: SetAddress Request (80) to port 0 [ 410.054142][ T5972] usb 44-1: new SuperSpeed USB device number 80 using vhci_hcd [ 410.167294][T11997] vhci_hcd: connection reset by peer [ 410.169494][ T4982] vhci_hcd vhci_hcd.3: stop threads [ 410.171341][ T4982] vhci_hcd vhci_hcd.3: release socket [ 410.173871][ T4982] vhci_hcd vhci_hcd.3: disconnect device [ 410.858517][T12013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.938593][T12013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.024611][T12013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.043278][T12025] program syz.2.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.050666][ T29] usb 9-1: USB disconnect, device number 2 [ 411.050687][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 411.055472][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 411.057973][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 411.120214][T12013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.152109][ T5923] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 411.275502][ T6757] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.278192][ T6757] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.286349][ T6757] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.298167][ T6757] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.306408][T12012] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.309681][ T5923] usb 5-1: config 5 has an invalid interface number: 222 but max is 2 [ 411.313771][ T5923] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 411.317686][ T5923] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 411.321545][ T5923] usb 5-1: config 5 has an invalid interface number: 242 but max is 2 [ 411.325253][ T5923] usb 5-1: config 5 has an invalid interface number: 177 but max is 2 [ 411.328786][ T5923] usb 5-1: config 5 has no interface number 0 [ 411.331488][ T5923] usb 5-1: config 5 has no interface number 1 [ 411.334537][ T5923] usb 5-1: config 5 has no interface number 2 [ 411.337274][ T5923] usb 5-1: config 5 interface 222 altsetting 8 endpoint 0x8 has invalid maxpacket 8, setting to 0 [ 411.344659][ T5923] usb 5-1: config 5 interface 222 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.349363][ T5923] usb 5-1: config 5 interface 222 altsetting 8 endpoint 0x6 is Bulk; changing to Interrupt [ 411.353810][ T5923] usb 5-1: config 5 interface 222 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 411.358511][ T5923] usb 5-1: config 5 interface 222 altsetting 8 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 411.364099][ T5923] usb 5-1: config 5 interface 222 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.368482][ T5923] usb 5-1: config 5 interface 222 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.372929][T12012] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.373181][ T5923] usb 5-1: config 5 interface 222 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 411.382254][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 411.382285][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 411.382309][ T5923] usb 5-1: config 5 interface 242 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 411.382339][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 411.382364][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 411.382388][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 411.382411][ T5923] usb 5-1: config 5 interface 242 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 411.382431][ T5923] usb 5-1: config 5 interface 242 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 411.382454][ T5923] usb 5-1: config 5 interface 242 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 411.382518][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 411.382541][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 411.382562][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 411.382581][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has an endpoint descriptor with address 0x76, changing to 0x6 [ 411.382605][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 411.382628][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 411.382651][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 411.382670][ T5923] usb 5-1: config 5 interface 177 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 411.382690][ T5923] usb 5-1: config 5 interface 222 has no altsetting 0 [ 411.382704][ T5923] usb 5-1: config 5 interface 242 has no altsetting 0 [ 411.382718][ T5923] usb 5-1: config 5 interface 177 has no altsetting 0 [ 411.445982][T12012] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.469648][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 411.472097][ T6085] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 411.522843][T12012] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.663959][ T6085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.667741][ T6085] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.671268][ T6085] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.675426][ T6085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.680861][ T6085] usb 7-1: config 0 descriptor?? [ 411.687009][ T6085] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.690855][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 411.700085][ T6085] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.704282][ T6085] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.707223][ T6085] usb 7-1: media controller created [ 411.709943][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.718233][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 411.720865][ T6085] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 411.727511][ T6085] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input10 [ 411.739562][ T6085] dvb-usb: schedule remote query interval to 150 msecs. [ 411.742926][ T6085] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 411.886888][T12031] dvb-usb: bulk message failed: -22 (2/0) [ 411.890480][ T6029] usb 7-1: USB disconnect, device number 12 [ 411.949073][ T6029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 412.593279][T12044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 412.595477][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.602438][T12044] vhci_hcd vhci_hcd.0: Device attached [ 412.872117][ T6085] usb 42-1: SetAddress Request (66) to port 0 [ 412.874445][ T6085] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 413.085552][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 413.364629][T12045] vhci_hcd: connection reset by peer [ 413.367553][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 413.369191][ T1144] vhci_hcd vhci_hcd.2: release socket [ 413.370932][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 413.911205][ T5923] usb 5-1: New USB device found, idVendor=0572, idProduct=cb02, bcdDevice=18.26 [ 413.917954][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.924127][ T5923] usb 5-1: can't set config #5, error -71 [ 413.930769][ T5923] usb 5-1: USB disconnect, device number 5 [ 414.023586][T12056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1347'. [ 415.122040][ T5953] Bluetooth: hci2: command tx timeout [ 415.132033][ T5972] usb 44-1: device descriptor read/8, error -110 [ 415.165640][ T9397] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.174233][ T9397] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.184267][ T9397] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.190468][ T9397] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.292343][ T827] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 415.422498][ T827] usb 9-1: device descriptor read/64, error -71 [ 415.542632][ T5972] usb usb44-port1: attempt power cycle [ 415.672289][ T827] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 415.802393][ T827] usb 9-1: device descriptor read/64, error -71 [ 415.924488][ T827] usb usb9-port1: attempt power cycle [ 416.122864][ T5972] usb usb44-port1: unable to enumerate USB device [ 416.272015][ T827] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 416.304609][ T827] usb 9-1: device descriptor read/8, error -71 [ 416.535224][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 416.592304][ T827] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 416.614517][ T827] usb 9-1: device descriptor read/8, error -71 [ 416.724480][ T827] usb usb9-port1: unable to enumerate USB device [ 417.013191][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 417.122570][ T5953] Bluetooth: hci3: command 0x0406 tx timeout [ 417.207719][T12092] JFS: discard option not supported on device [ 417.210681][T12092] Mount JFS Failure: -22 [ 417.212798][T12092] jfs_mount failed w/return code = -22 [ 417.408772][T12104] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 417.412520][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1354'. [ 417.477914][T12101] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1357'. [ 417.490142][T12101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1357'. [ 417.922853][ T6085] usb 42-1: device descriptor read/8, error -110 [ 418.313115][ T6085] usb usb42-port1: attempt power cycle [ 418.873915][ T6085] usb usb42-port1: unable to enumerate USB device [ 419.042109][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 419.829730][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 420.864743][ T827] libceph: connect (1)[c::]:6789 error -101 [ 420.914261][ T827] libceph: mon0 (1)[c::]:6789 connect error [ 420.918356][T12168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1369'. [ 420.949456][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 420.952178][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 421.203557][ T5953] Bluetooth: hci2: command 0x0406 tx timeout [ 421.213130][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 421.215451][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 421.218489][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 421.220731][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 421.518748][T12154] ceph: No mds server is up or the cluster is laggy [ 421.523950][T12159] ceph: No mds server is up or the cluster is laggy [ 422.614467][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 422.914554][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 424.642074][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 424.708911][T12220] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1379'. [ 424.714023][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1379'. [ 425.253750][T12234] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 425.256357][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.312771][T12234] vhci_hcd vhci_hcd.0: Device attached [ 425.613149][ T6029] usb 42-1: SetAddress Request (70) to port 0 [ 425.615723][ T6029] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 425.743175][T12251] tipc: Started in network mode [ 425.745368][T12251] tipc: Node identity , cluster identity 4711 [ 425.748027][T12251] tipc: Failed to obtain node identity [ 425.750435][T12251] tipc: Enabling of bearer rejected, failed to enable media [ 425.792830][T12235] vhci_hcd: connection reset by peer [ 425.795507][T12180] vhci_hcd vhci_hcd.2: stop threads [ 425.797920][T12180] vhci_hcd vhci_hcd.2: release socket [ 425.800236][T12180] vhci_hcd vhci_hcd.2: disconnect device [ 426.658515][T12265] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 426.858372][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 426.991695][T12286] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1393'. [ 427.006884][T12283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1393'. [ 428.949876][T12324] ceph: No mds server is up or the cluster is laggy [ 428.957280][ T29] libceph: connect (1)[c::]:6789 error -101 [ 428.960388][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 428.962994][T12317] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 429.134815][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 429.723854][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 429.728023][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 429.732977][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 429.736352][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 429.740338][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 429.744291][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 429.747725][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 429.751416][T12339] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 429.755216][T12339] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 429.795437][T12341] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 429.934529][ T29] IPVS: starting estimator thread 0... [ 430.022025][T12354] IPVS: using max 44 ests per chain, 105600 per kthread [ 430.566097][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 430.642312][ T6029] usb 42-1: device descriptor read/8, error -110 [ 431.032775][ T6029] usb usb42-port1: attempt power cycle [ 431.546711][T12390] trusted_key: encrypted_key: insufficient parameters specified [ 431.593544][ T6029] usb usb42-port1: unable to enumerate USB device [ 433.335204][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'. [ 433.450669][T12414] kernel read not supported for file /eth0 (pid: 12414 comm: syz.4.1425) [ 433.455033][ T40] audit: type=1800 audit(1766680919.235:150): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1425" name="eth0" dev="mqueue" ino=40449 res=0 errno=0 [ 433.700726][ T40] audit: type=1326 audit(1766680919.475:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.701330][T12409] /dev/nullb0: Can't open blockdev [ 433.709134][ T40] audit: type=1326 audit(1766680919.475:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.720643][ T40] audit: type=1326 audit(1766680919.475:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.903008][ T40] audit: type=1326 audit(1766680919.485:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.910167][ T40] audit: type=1326 audit(1766680919.485:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.918939][ T40] audit: type=1326 audit(1766680919.495:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.927321][ T40] audit: type=1326 audit(1766680919.495:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.936532][ T40] audit: type=1326 audit(1766680919.495:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.946033][ T40] audit: type=1326 audit(1766680919.495:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1424" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 433.968874][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 433.973082][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 434.110268][T12436] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1431'. [ 434.168991][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 434.311520][T12436] team0: Port device team_slave_0 removed [ 434.363900][T12438] wg2 speed is unknown, defaulting to 1000 [ 434.723989][T12466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 434.726613][T12466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.729934][T12466] vhci_hcd vhci_hcd.0: Device attached [ 434.982063][ T5923] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 435.002028][T12471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1437'. [ 435.006243][T12471] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1437'. [ 435.009337][T12471] netlink: 'syz.3.1437': attribute type 6 has an invalid length. [ 435.012313][T12471] netlink: 'syz.3.1437': attribute type 5 has an invalid length. [ 435.014900][T12471] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1437'. [ 435.403175][T12467] vhci_hcd: connection reset by peer [ 435.412433][T12181] vhci_hcd vhci_hcd.2: stop threads [ 435.414867][T12181] vhci_hcd vhci_hcd.2: release socket [ 435.417287][T12181] vhci_hcd vhci_hcd.2: disconnect device [ 436.687912][T12499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 436.690206][T12499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.720500][T12499] vhci_hcd vhci_hcd.0: Device attached [ 436.735674][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 436.973320][T12500] vhci_hcd: connection closed [ 436.973760][ T225] vhci_hcd vhci_hcd.2: stop threads [ 436.981822][ T225] vhci_hcd vhci_hcd.2: release socket [ 436.984677][ T225] vhci_hcd vhci_hcd.2: disconnect device [ 437.602820][T12507] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 437.605049][T12507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.607863][T12507] vhci_hcd vhci_hcd.0: Device attached [ 437.628838][T12509] vhci_hcd: connection closed [ 437.635986][T12182] vhci_hcd vhci_hcd.4: stop threads [ 437.639392][T12182] vhci_hcd vhci_hcd.4: release socket [ 437.641187][T12182] vhci_hcd vhci_hcd.4: disconnect device [ 438.160253][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1448'. [ 438.164129][T12519] netlink: 'syz.2.1448': attribute type 16 has an invalid length. [ 438.166771][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 439.418068][T12547] binder: 12545:12547 ioctl c0306201 0 returned -14 [ 440.072389][ T5923] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 440.218950][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 440.373647][T12568] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1460'. [ 440.379735][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1460'. [ 440.879756][T12574] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 440.883070][T12574] UDF-fs: Scanning with blocksize 2048 failed [ 440.891533][T12574] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 440.894577][T12574] UDF-fs: Scanning with blocksize 4096 failed [ 441.832615][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 441.835688][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 441.907061][ T34] usb usb42-port1: attempt power cycle [ 442.375921][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1470'. [ 442.458903][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1471'. [ 442.467449][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1471'. [ 442.492584][ T34] usb usb42-port1: unable to enumerate USB device [ 442.562272][T12608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 442.564654][T12608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.733462][T12608] vhci_hcd vhci_hcd.0: Device attached [ 442.896983][T12610] vhci_hcd: connection closed [ 442.897333][ T6122] vhci_hcd vhci_hcd.0: stop threads [ 442.901290][ T6122] vhci_hcd vhci_hcd.0: release socket [ 442.904482][ T6122] vhci_hcd vhci_hcd.0: disconnect device [ 442.912290][ T6029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 443.554000][T12623] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1472'. [ 443.579387][T12623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1472'. [ 444.048585][T12637] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 444.726014][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.728172][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.854195][T12658] dlm: no local IP address has been set [ 444.857234][T12658] dlm: cannot start dlm midcomms -107 [ 444.865446][T12658] netlink: 'syz.0.1480': attribute type 12 has an invalid length. [ 445.847134][T12674] __nla_validate_parse: 2 callbacks suppressed [ 445.847146][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 445.854272][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 446.032132][T12690] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1484'. [ 446.064077][T12690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1484'. [ 446.946442][T12711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 447.017424][T12717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 447.019628][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 447.028428][T12717] vhci_hcd vhci_hcd.0: Device attached [ 447.292340][ T6029] usb 44-1: SetAddress Request (84) to port 0 [ 447.294578][ T6029] usb 44-1: new SuperSpeed USB device number 84 using vhci_hcd [ 448.225439][T12718] vhci_hcd: connection reset by peer [ 448.232217][T12179] vhci_hcd vhci_hcd.3: stop threads [ 448.234538][T12179] vhci_hcd vhci_hcd.3: release socket [ 448.242063][T12179] vhci_hcd vhci_hcd.3: disconnect device [ 448.332472][T12737] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 448.334687][T12737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 448.338164][T12737] vhci_hcd vhci_hcd.0: Device attached [ 448.413902][T12737] rdma_rxe: rxe_newlink: failed to add wg2 [ 448.413956][ T1178] wlan0: Trigger new scan to find an IBSS to join [ 448.542033][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 448.622037][ T6027] usb 46-1: SetAddress Request (22) to port 0 [ 448.624184][ T6027] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 448.702017][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 448.706834][ T34] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 448.709953][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.712880][ T34] usb 7-1: Product: syz [ 448.714416][ T34] usb 7-1: Manufacturer: syz [ 448.716243][ T34] usb 7-1: SerialNumber: syz [ 448.725110][ T34] usb 7-1: config 0 descriptor?? [ 448.929936][ T34] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 448.938499][T12738] vhci_hcd: connection reset by peer [ 448.941232][ T1178] vhci_hcd vhci_hcd.4: stop threads [ 448.943385][ T1178] vhci_hcd vhci_hcd.4: release socket [ 448.945335][ T1178] vhci_hcd vhci_hcd.4: disconnect device [ 448.980275][T12745] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1500'. [ 448.985192][T12745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1500'. [ 449.111289][T12751] overlayfs: failed to resolve './bus': -2 [ 449.140139][T12728] bond3 (unregistering): Released all slaves [ 449.166344][T12755] ip6t_srh: unknown srh invflags 7160 [ 449.221797][ T34] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 449.230646][ T34] usb 7-1: USB disconnect, device number 13 [ 449.342426][T12759] input: syz1 as /devices/virtual/input/input12 [ 450.246680][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 450.250821][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 450.387315][T12780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1507'. [ 451.443552][ T6122] wlan0: Trigger new scan to find an IBSS to join [ 452.011722][T12797] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 452.013817][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 452.073391][T12797] vhci_hcd vhci_hcd.0: Device attached [ 452.103187][T12801] 0x00000000000c-0x00000002000f : "" [ 452.105680][T12801] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff4 [ 452.212368][T12804] input: syz0 as /devices/virtual/input/input13 [ 452.240969][T12801] ftl_cs: FTL header corrupt! [ 452.322989][ T6029] usb 44-1: device descriptor read/8, error -110 [ 452.563465][T12798] vhci_hcd: connection closed [ 452.572244][T12179] vhci_hcd vhci_hcd.4: stop threads [ 452.576449][T12179] vhci_hcd vhci_hcd.4: release socket [ 452.581170][T12179] vhci_hcd vhci_hcd.4: disconnect device [ 452.732994][ T6029] usb usb44-port1: attempt power cycle [ 452.796076][T12812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 452.818306][T12812] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 452.823024][T12812] overlayfs: failed to look up (tracing) for ino (-66) [ 453.146487][T12827] wg2 speed is unknown, defaulting to 1000 [ 453.221599][T12829] trusted_key: syz.2.1518 sent an empty control message without MSG_MORE. [ 453.683233][ T6027] usb 46-1: device descriptor read/8, error -110 [ 453.832891][T12841] syzkaller0: entered promiscuous mode [ 453.835385][T12841] syzkaller0: entered allmulticast mode [ 454.072866][ T6027] usb usb46-port1: attempt power cycle [ 454.223018][ T6029] usb usb44-port1: unable to enumerate USB device [ 454.402163][ T6122] wlan0: Trigger new scan to find an IBSS to join [ 454.644373][ T6027] usb usb46-port1: unable to enumerate USB device [ 455.304027][T12180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.568264][T12881] geneve2: left promiscuous mode [ 455.922356][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 456.904872][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 456.904885][ T40] audit: type=1326 audit(1766680942.685:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.2.1537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 456.915024][ T40] audit: type=1326 audit(1766680942.685:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.2.1537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 456.922346][ T40] audit: type=1326 audit(1766680942.685:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.2.1537" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 456.968601][T12913] wg2 speed is unknown, defaulting to 1000 [ 457.016870][ T40] audit: type=1326 audit(1766680942.795:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.2.1537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 457.036200][ T40] audit: type=1326 audit(1766680942.795:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.2.1537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 457.503168][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 458.683898][T12947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 458.686703][T12947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 458.717543][T12947] vhci_hcd vhci_hcd.0: Device attached [ 459.002608][ T34] usb 42-1: SetAddress Request (78) to port 0 [ 459.005274][ T34] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 459.834334][T12948] vhci_hcd: connection reset by peer [ 459.836488][ T9397] vhci_hcd vhci_hcd.2: stop threads [ 459.838383][ T9397] vhci_hcd vhci_hcd.2: release socket [ 459.840302][ T9397] vhci_hcd vhci_hcd.2: disconnect device [ 462.617425][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1555'. [ 463.959967][T13030] ubi31: attaching mtd0 [ 463.964300][T13030] ubi31: scanning is finished [ 463.966149][T13030] ubi31: empty MTD device detected [ 464.132100][ T34] usb 42-1: device descriptor read/8, error -110 [ 464.422750][T13030] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 464.514485][T13037] Bluetooth: MGMT ver 1.23 [ 464.558526][ T34] usb usb42-port1: attempt power cycle [ 465.508338][T13065] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 465.511257][T13065] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 465.515826][T13065] vhci_hcd vhci_hcd.0: Device attached [ 465.553378][T13066] vhci_hcd: connection closed [ 465.553953][ T225] vhci_hcd vhci_hcd.0: stop threads [ 465.557489][ T225] vhci_hcd vhci_hcd.0: release socket [ 465.559325][ T225] vhci_hcd vhci_hcd.0: disconnect device [ 465.792496][ T34] usb usb42-port1: unable to enumerate USB device [ 465.970060][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'. [ 466.572761][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 466.600444][T13068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.682355][T13103] overlayfs: overlapping lowerdir path [ 467.688615][T13103] overlayfs: failed to verify upper root origin [ 467.804304][T13107] xt_ecn: cannot match TCP bits for non-tcp packets [ 468.643443][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 468.743460][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 468.747449][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1580'. [ 469.089313][T13126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.302008][T13129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1582'. [ 469.439998][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 469.446395][T13134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1584'. [ 469.465480][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.469240][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.206887][T13145] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.1587'. [ 470.290418][T12178] Bluetooth: hci4: Frame reassembly failed (-84) [ 470.299203][T13149] tmpfs: Unknown parameter 'usrqrdlimSi' [ 470.738450][T12378] syz_tun (unregistering): left allmulticast mode [ 470.996850][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.004013][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 471.125373][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.130468][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 471.212826][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.216451][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.219951][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.225108][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.233801][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.242334][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.250786][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 471.737941][T13152] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 471.752543][T13152] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 471.753391][T13156] wg2 speed is unknown, defaulting to 1000 [ 471.810574][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.815416][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 471.871278][T13159] overlayfs: failed to resolve './file3': -2 [ 472.064425][T13156] chnl_net:caif_netlink_parms(): no params data found [ 472.115399][ T61] bridge_slave_1: left allmulticast mode [ 472.117430][ T61] bridge_slave_1: left promiscuous mode [ 472.119448][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.126667][ T61] bridge_slave_0: left allmulticast mode [ 472.128784][ T61] bridge_slave_0: left promiscuous mode [ 472.130841][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.322968][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 472.323152][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 472.359041][T13180] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1598'. [ 472.363088][T13180] openvswitch: netlink: Flow key attr not present in new flow. [ 472.498830][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.504237][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.508433][ T61] bond0 (unregistering): Released all slaves [ 472.583351][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.586881][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.590348][T13156] bridge_slave_0: entered allmulticast mode [ 472.595116][T13156] bridge_slave_0: entered promiscuous mode [ 472.605206][T13169] wg2 speed is unknown, defaulting to 1000 [ 472.605357][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.611901][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.615378][T13156] bridge_slave_1: entered allmulticast mode [ 472.619868][T13156] bridge_slave_1: entered promiscuous mode [ 472.688647][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.697235][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.777890][T13156] team0: Port device team_slave_0 added [ 472.795999][T13156] team0: Port device team_slave_1 added [ 472.850746][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.854076][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.866897][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.888028][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.891406][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.912332][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.047758][ T61] hsr_slave_0: left promiscuous mode [ 473.050571][ T61] hsr_slave_1: left promiscuous mode [ 473.052765][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.056157][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.059772][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.065926][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.090014][ T61] veth1_macvtap: left promiscuous mode [ 473.099797][ T61] veth0_macvtap: left promiscuous mode [ 473.129815][T13199] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1601'. [ 473.158191][ T61] pim6reg (unregistering): left allmulticast mode [ 473.282099][ T64] Bluetooth: hci2: command tx timeout [ 473.756512][ T61] team0 (unregistering): Port device team_slave_1 removed [ 474.258967][T13156] hsr_slave_0: entered promiscuous mode [ 474.276140][T13156] hsr_slave_1: entered promiscuous mode [ 474.278475][T13156] debugfs: 'hsr0' already exists in 'hsr' [ 474.280506][T13156] Cannot create hsr debugfs directory [ 474.529998][T13156] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.536315][T13156] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.555724][T13156] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.565397][T13156] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.616113][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.651288][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.663133][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.665511][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.673920][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.676399][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.875652][ T61] IPVS: stop unused estimator thread 0... [ 474.983572][T13244] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 474.986306][T13244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.990064][T13244] vhci_hcd vhci_hcd.0: Device attached [ 475.025374][T13244] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 475.151723][T13242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1606'. [ 475.282740][ T6029] usb 44-1: SetAddress Request (88) to port 0 [ 475.285161][ T6029] usb 44-1: new SuperSpeed USB device number 88 using vhci_hcd [ 475.328437][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.364678][ T64] Bluetooth: hci2: command tx timeout [ 475.555613][T13156] veth0_vlan: entered promiscuous mode [ 475.559899][T13245] vhci_hcd: connection reset by peer [ 475.563915][ T61] vhci_hcd vhci_hcd.3: stop threads [ 475.566248][ T61] vhci_hcd vhci_hcd.3: release socket [ 475.569110][T13156] veth1_vlan: entered promiscuous mode [ 475.576823][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 475.595444][T13156] veth0_macvtap: entered promiscuous mode [ 475.601298][T13156] veth1_macvtap: entered promiscuous mode [ 475.616423][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.624665][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.637265][ T9397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.640276][ T9397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.643857][ T9397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.647247][ T9397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.692424][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.695098][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.715063][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.717778][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.009158][ T40] audit: type=1804 audit(1766680961.705:179): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1609" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 477.026051][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 477.029123][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 477.033851][T13300] bond_slave_0: left promiscuous mode [ 477.036024][T13300] bond_slave_1: left promiscuous mode [ 477.038095][T13300] team_slave_0: left promiscuous mode [ 477.040169][T13300] team_slave_1: left promiscuous mode [ 477.442277][ T64] Bluetooth: hci2: command tx timeout [ 477.494179][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 478.209350][T13326] 9pnet_virtio: no channels available for device syz [ 479.360614][T13340] wg2 speed is unknown, defaulting to 1000 [ 479.532495][ T64] Bluetooth: hci2: command tx timeout [ 480.322481][ T6029] usb 44-1: device descriptor read/8, error -110 [ 480.684664][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 480.724889][ T6029] usb usb44-port1: attempt power cycle [ 480.962616][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 481.282982][ T6029] usb usb44-port1: unable to enumerate USB device [ 481.602160][ T64] Bluetooth: hci2: command tx timeout [ 482.363731][T13406] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 482.366603][T13406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 482.370613][T13404] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 482.373405][T13404] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 482.377116][T13406] vhci_hcd vhci_hcd.0: Device attached [ 482.381163][T13404] vhci_hcd vhci_hcd.0: Device attached [ 482.398412][T13407] vhci_hcd: connection closed [ 482.398635][ T6122] vhci_hcd vhci_hcd.5: stop threads [ 482.398684][T13408] vhci_hcd: connection closed [ 482.400215][ T6122] vhci_hcd vhci_hcd.5: release socket [ 482.405774][ T6122] vhci_hcd vhci_hcd.5: disconnect device [ 482.445668][ T6122] vhci_hcd vhci_hcd.5: stop threads [ 482.447855][ T6122] vhci_hcd vhci_hcd.5: release socket [ 482.450064][ T6122] vhci_hcd vhci_hcd.5: disconnect device [ 482.471823][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1637'. [ 482.969370][T13421] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 482.972215][T13421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 482.976104][T13421] vhci_hcd vhci_hcd.0: Device attached [ 483.292911][ T29] usb 48-1: SetAddress Request (2) to port 0 [ 483.295302][ T29] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 483.468390][T13422] vhci_hcd: connection reset by peer [ 483.471222][ T46] vhci_hcd vhci_hcd.5: stop threads [ 483.474581][ T46] vhci_hcd vhci_hcd.5: release socket [ 483.476734][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 483.682139][ T64] Bluetooth: hci2: command tx timeout [ 484.625000][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1645'. [ 484.629255][T13446] comedi: valid board names for 8255 driver are: [ 484.631900][T13446] 8255 [ 484.633451][T13446] comedi: valid board names for vmk80xx driver are: [ 484.635893][T13446] vmk80xx [ 484.637077][T13446] comedi: valid board names for usbduxsigma driver are: [ 484.639930][T13446] usbduxsigma [ 484.641164][T13446] comedi: valid board names for usbduxfast driver are: [ 484.643818][T13446] usbduxfast [ 484.645089][T13446] comedi: valid board names for usbdux driver are: [ 484.647529][T13446] usbdux [ 484.648653][T13446] comedi: valid board names for ni6501 driver are: [ 484.651316][T13446] ni6501 [ 484.652699][T13446] comedi: valid board names for dt9812 driver are: [ 484.655071][T13446] dt9812 [ 484.656197][T13446] comedi: valid board names for ni_labpc_cs driver are: [ 484.658812][T13446] ni_labpc_cs [ 484.660129][T13446] comedi: valid board names for ni_daq_700 driver are: [ 484.662908][T13446] ni_daq_700 [ 484.664219][T13446] comedi: valid board names for labpc_pci driver are: [ 484.666724][T13446] labpc_pci [ 484.667996][T13446] comedi: valid board names for adl_pci9118 driver are: [ 484.670618][T13446] pci9118dg [ 484.672074][T13446] pci9118hg [ 484.673554][T13446] pci9118hr [ 484.674916][T13446] comedi: valid board names for 8255_pci driver are: [ 484.677290][T13446] 8255_pci [ 484.678444][T13446] comedi: valid board names for s526 driver are: [ 484.680643][T13446] s526 [ 484.681662][T13446] comedi: valid board names for multiq3 driver are: [ 484.684214][T13446] multiq3 [ 484.685466][T13446] comedi: valid board names for pcmuio driver are: [ 484.687864][T13446] pcmuio48 [ 484.689080][T13446] pcmuio96 [ 484.690283][T13446] comedi: valid board names for pcmmio driver are: [ 484.692957][T13446] pcmmio [ 484.694158][T13446] comedi: valid board names for pcmda12 driver are: [ 484.696564][T13446] pcmda12 [ 484.697801][T13446] comedi: valid board names for pcmad driver are: [ 484.700182][T13446] pcmad12 [ 484.701372][T13446] pcmad16 [ 484.702643][T13446] comedi: valid board names for ni_labpc driver are: [ 484.705284][T13446] lab-pc-1200 [ 484.706662][T13446] lab-pc-1200ai [ 484.708073][T13446] lab-pc+ [ 484.709262][T13446] comedi: valid board names for atmio16 driver are: [ 484.711668][T13446] atmio16 [ 484.712958][T13446] atmio16d [ 484.714314][T13446] comedi: valid board names for ni_at_ao driver are: [ 484.716819][T13446] at-ao-6 [ 484.718110][T13446] at-ao-10 [ 484.719345][T13446] comedi: valid board names for ni_at_a2150 driver are: [ 484.722220][T13446] ni_at_a2150 [ 484.723620][T13446] comedi: valid board names for adq12b driver are: [ 484.726193][T13446] adq12b [ 484.727401][T13446] comedi: valid board names for mpc624 driver are: [ 484.730073][T13446] mpc624 [ 484.731278][T13446] comedi: valid board names for c6xdigio driver are: [ 484.733773][T13446] c6xdigio [ 484.735097][T13446] comedi: valid board names for aio_iiro_16 driver are: [ 484.737896][T13446] aio_iiro_16 [ 484.739274][T13446] comedi: valid board names for aio_aio12_8 driver are: [ 484.741753][T13446] aio_aio12_8 [ 484.742092][ T6153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 484.743142][T13446] aio_ai12_8 [ 484.747693][T13446] aio_ao12_4 [ 484.749245][T13446] comedi: valid board names for fl512 driver are: [ 484.751678][T13446] fl512 [ 484.753058][T13446] comedi: valid board names for dmm32at driver are: [ 484.755501][T13446] dmm32at [ 484.756669][T13446] comedi: valid board names for dt282x driver are: [ 484.759063][T13446] dt2821 [ 484.760228][T13446] dt2821-f [ 484.761514][T13446] dt2821-g [ 484.762770][T13446] dt2823 [ 484.763936][T13446] dt2824-pgh [ 484.765256][T13446] dt2824-pgl [ 484.766540][T13446] dt2825 [ 484.767553][T13446] dt2827 [ 484.768726][T13446] dt2828 [ 484.769695][T13446] dt2829 [ 484.770775][T13446] dt21-ez [ 484.772032][T13446] dt23-ez [ 484.773161][T13446] dt24-ez [ 484.774271][T13446] dt24-ez-pgl [ 484.775523][T13446] comedi: valid board names for dt2817 driver are: [ 484.777821][T13446] dt2817 [ 484.778946][T13446] comedi: valid board names for dt2815 driver are: [ 484.781329][T13446] dt2815 [ 484.782162][T13435] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 484.782771][T13446] comedi: valid board names for dt2814 driver are: [ 484.787315][T13446] dt2814 [ 484.788407][T13446] comedi: valid board names for dt2811 driver are: [ 484.790947][T13446] dt2811-pgh [ 484.792245][T13446] dt2811-pgl [ 484.793342][T13435] bond3: entered promiscuous mode [ 484.793495][T13446] comedi: valid board names for dt2801 driver are: [ 484.795398][T13435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.797606][T13446] dt2801 [ 484.801097][T13446] comedi: valid board names for das6402 driver are: [ 484.803606][T13446] das6402-12 [ 484.804889][T13446] das6402-16 [ 484.806107][T13446] comedi: valid board names for das1800 driver are: [ 484.808505][T13446] das-1701st [ 484.809730][T13446] das-1701st-da [ 484.811157][T13446] das-1702st [ 484.812826][T13446] das-1702st-da [ 484.814148][T13446] das-1702hr [ 484.815195][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1641'. [ 484.815522][T13446] das-1702hr-da [ 484.819907][T13446] das-1701ao [ 484.821175][T13446] das-1702ao [ 484.823413][T13446] das-1801st [ 484.824734][T13446] das-1801st-da [ 484.826150][T13446] das-1802st [ 484.827403][T13446] das-1802st-da [ 484.827977][T13435] bond4: Unable to set down delay as MII monitoring is disabled [ 484.828728][T13446] das-1802hr [ 484.828735][T13446] das-1802hr-da [ 484.836256][T13446] das-1801hc [ 484.837564][T13435] bond4 (unregistering): Released all slaves [ 484.837649][T13446] das-1802hc [ 484.841014][T13446] das-1801ao [ 484.842669][T13446] das-1802ao [ 484.843890][T13446] comedi: valid board names for das800 driver are: [ 484.846288][T13446] das-800 [ 484.848103][T13446] cio-das800 [ 484.849393][T13446] das-801 [ 484.850540][T13446] cio-das801 [ 484.851823][T13446] das-802 [ 484.853499][T13446] cio-das802 [ 484.854894][T13446] cio-das802/16 [ 484.856354][T13446] comedi: valid board names for isa-das08 driver are: [ 484.858915][T13446] isa-das08 [ 484.860152][T13446] das08-pgm [ 484.861399][T13446] das08-pgh [ 484.862978][T13446] das08-pgl [ 484.864280][T13446] das08-aoh [ 484.865477][T13446] das08-aol [ 484.866739][T13446] das08-aom [ 484.867965][T13446] das08/jr-ao [ 484.869343][T13446] das08jr-16-ao [ 484.870856][T13446] pc104-das08 [ 484.873013][T13446] das08jr/16 [ 484.874449][T13446] comedi: valid board names for das16m1 driver are: [ 484.876969][T13446] das16m1 [ 484.878243][T13446] comedi: valid board names for dac02 driver are: [ 484.880778][T13446] dac02 [ 484.881884][T13446] comedi: valid board names for rti802 driver are: [ 484.884695][T13446] rti802 [ 484.885903][T13446] comedi: valid board names for rti800 driver are: [ 484.888263][T13446] rti800 [ 484.889507][T13446] rti815 [ 484.890717][T13446] comedi: valid board names for pcm3724 driver are: [ 484.893408][T13446] pcm3724 [ 484.894683][T13446] comedi: valid board names for pcl818 driver are: [ 484.897212][T13446] pcl818l [ 484.898388][T13446] pcl818h [ 484.899727][T13446] pcl818hd [ 484.900964][T13446] pcl818hg [ 484.902103][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 484.902592][T13446] pcl818 [ 484.905735][T13446] pcl718 [ 484.906268][ T6153] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 484.906909][T13446] pcm3718 [ 484.906918][T13446] comedi: valid board names for pcl816 driver are: [ 484.906926][T13446] pcl816 [ 484.906934][T13446] pcl814b [ 484.906941][T13446] comedi: valid board names for pcl812 driver are: [ 484.906948][T13446] pcl812 [ 484.906954][T13446] pcl812pg [ 484.906960][T13446] acl8112pg [ 484.906967][T13446] acl8112dg [ 484.910515][ T6153] usb 5-1: config 0 has no interface number 0 [ 484.911669][T13446] acl8112hg [ 484.911678][T13446] a821pgl [ 484.914825][ T6153] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.915668][T13446] a821pglnda [ 484.915674][T13446] a821pgh [ 484.917155][ T6153] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 484.919543][T13446] a822pgl [ 484.920947][ T6153] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.922052][T13446] a822pgh [ 484.922061][T13446] a823pgl [ 484.922067][T13446] a823pgh [ 484.923579][ T6153] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.924701][T13446] pcl813 [ 484.924707][T13446] pcl813b [ 484.924711][T13446] acl8113 [ 484.924715][T13446] iso813 [ 484.924719][T13446] acl8216 [ 484.929017][ T6153] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 484.929727][T13446] a826pg [ 484.929734][T13446] comedi: valid board names for pcl730 driver are: [ 484.929739][T13446] pcl730 [ 484.935093][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.935906][T13446] iso730 [ 484.938756][ T6153] usb 5-1: config 0 descriptor?? [ 484.940989][T13446] acl7130 [ 484.940995][T13446] pcm3730 [ 484.940999][T13446] pcl725 [ 484.941003][T13446] p8r8dio [ 484.941006][T13446] acl7225b [ 484.941010][T13446] p16r16dio [ 484.941014][T13446] pcl733 [ 484.941017][T13446] pcl734 [ 484.941021][T13446] opmm-1616-xt [ 484.941025][T13446] pearl-mm-p [ 484.941028][T13446] ir104-pbf [ 484.941032][T13446] comedi: valid board names for pcl726 driver are: [ 484.941038][T13446] pcl726 [ 484.941041][T13446] pcl727 [ 484.941045][T13446] pcl728 [ 484.941049][T13446] acl6126 [ 484.948671][ T6153] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 484.949919][T13446] acl6128 [ 485.000463][T13446] comedi: valid board names for pcl724 driver are: [ 485.002923][T13446] pcl724 [ 485.004232][T13446] pcl722 [ 485.005544][T13446] pcl731 [ 485.006759][T13446] acl7122 [ 485.007970][T13446] acl7124 [ 485.009244][T13446] pet48dio [ 485.010462][T13446] pcmio48 [ 485.011778][T13446] onyx-mm-dio [ 485.013353][T13446] comedi: valid board names for pcl711 driver are: [ 485.016099][T13446] pcl711 [ 485.017438][T13446] pcl711b [ 485.018802][T13446] acl8112hg [ 485.020158][T13446] acl8112dg [ 485.021313][T13446] comedi: valid board names for amplc_pc263 driver are: [ 485.024085][T13446] pc263 [ 485.025144][T13446] comedi: valid board names for amplc_pc236 driver are: [ 485.027473][T13446] pc36at [ 485.028496][T13446] comedi: valid board names for amplc_dio200 driver are: [ 485.030850][T13446] pc212e [ 485.031855][T13446] pc214e [ 485.033057][T13446] pc215e [ 485.034197][T13446] pc218e [ 485.035383][T13446] pc272e [ 485.036653][T13446] comedi: valid board names for comedi_parport driver are: [ 485.040368][T13446] comedi_parport [ 485.042331][T13446] comedi: valid board names for comedi_test driver are: [ 485.045050][T13446] comedi_test [ 485.046346][T13446] comedi: valid board names for comedi_bond driver are: [ 485.048934][T13446] comedi_bond [ 485.069484][T13455] Bluetooth: MGMT ver 1.23 [ 486.528277][T13499] pim6reg: entered allmulticast mode [ 486.533873][T13499] team0: entered allmulticast mode [ 486.535997][T13499] team_slave_0: entered allmulticast mode [ 486.538031][T13499] team_slave_1: entered allmulticast mode [ 486.540200][T13499] team0: left allmulticast mode [ 486.543788][T13499] team_slave_0: left allmulticast mode [ 486.551616][T13499] team_slave_1: left allmulticast mode [ 486.558895][T13499] dummy0: left allmulticast mode [ 486.560868][T13499] pim6reg: left allmulticast mode [ 486.635993][T13504] Scaler: ================= START STATUS ================= [ 486.639331][T13504] Scaler: ================== END STATUS ================== [ 486.761772][T13511] input: syz1 as /devices/virtual/input/input14 [ 487.440134][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1654'. [ 487.547379][ T34] usb 5-1: USB disconnect, device number 6 [ 487.559390][ T34] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 487.711672][T13523] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 487.727711][T13523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.743448][T13523] bond3: (slave geneve2): making interface the new active one [ 487.746825][T13523] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 487.749740][ T6122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.756554][ T6122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.767739][ T6122] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.770490][ T6122] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.074909][T13535] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 488.077145][T13535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.085245][T13535] vhci_hcd vhci_hcd.0: Device attached [ 488.524829][T13546] Bluetooth: MGMT ver 1.23 [ 488.607020][T13546] 9p: Bad value for 'rfdno' [ 488.668778][T13536] vhci_hcd: connection reset by peer [ 488.671038][ T46] vhci_hcd vhci_hcd.5: stop threads [ 488.675610][ T46] vhci_hcd vhci_hcd.5: release socket [ 488.678207][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 488.678920][ T29] usb 48-1: device descriptor read/8, error -110 [ 489.298800][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 489.562430][ T29] usb usb48-port1: attempt power cycle [ 490.132457][ T29] usb usb48-port1: unable to enumerate USB device [ 490.416610][T13582] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1669'. [ 490.459241][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 491.038599][T13589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1672'. [ 491.242554][T13592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.252694][T13592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.296993][T13593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1671'. [ 492.279967][T13602] binder: BINDER_SET_CONTEXT_MGR already set [ 492.288843][T13602] binder: 13601:13602 ioctl 4018620d 800002c0 returned -16 [ 494.100845][T13619] wg2 speed is unknown, defaulting to 1000 [ 494.429112][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'. [ 494.448831][T13628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 494.472064][ T40] audit: type=1326 audit(494.296:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 494.481057][ T40] audit: type=1326 audit(494.296:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.506090][ T40] audit: type=1326 audit(494.296:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.524101][ T40] audit: type=1326 audit(494.296:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.542055][ T40] audit: type=1326 audit(494.296:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.561372][ T40] audit: type=1326 audit(494.296:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.574137][ T40] audit: type=1326 audit(494.296:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.584200][ T40] audit: type=1326 audit(494.296:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.594400][ T40] audit: type=1326 audit(494.296:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 494.603340][ T40] audit: type=1326 audit(494.296:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f12598 code=0x7ffc0000 [ 495.330620][T13637] netlink: 9764 bytes leftover after parsing attributes in process `syz.3.1682'. [ 495.344984][T13637] openvswitch: netlink: Flow key attr not present in new flow. [ 495.361323][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 495.622024][ T6153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 495.752033][ T6153] usb 5-1: device descriptor read/64, error -71 [ 495.874336][T13599] tipc: Started in network mode [ 495.876051][T13599] tipc: Node identity 52d910b980bd, cluster identity 4711 [ 495.880821][T13599] tipc: Enabled bearer , priority 0 [ 495.896779][T13599] syzkaller0: entered promiscuous mode [ 495.898647][T13599] syzkaller0: entered allmulticast mode [ 495.992039][ T6153] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 496.016928][T13599] tipc: Resetting bearer [ 496.033166][T13598] tipc: Resetting bearer [ 496.053114][T13598] tipc: Disabling bearer [ 496.122130][ T6153] usb 5-1: device descriptor read/64, error -71 [ 496.232381][ T6153] usb usb5-port1: attempt power cycle [ 496.485488][T13655] bridge_slave_0: left allmulticast mode [ 496.488186][T13655] bridge_slave_0: left promiscuous mode [ 496.490859][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.497868][T13655] bridge_slave_1: left allmulticast mode [ 496.500523][T13655] bridge_slave_1: left promiscuous mode [ 496.504611][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.513142][T13655] bond0: (slave bond_slave_0): Releasing backup interface [ 496.516175][T13655] bond_slave_0: left promiscuous mode [ 496.520054][T13655] bond0: (slave bond_slave_1): Releasing backup interface [ 496.524182][T13655] bond_slave_1: left promiscuous mode [ 496.529634][T13655] team0: Port device team_slave_0 removed [ 496.534861][T13655] team0: Port device team_slave_1 removed [ 496.537368][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.539804][T13655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.543908][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.546286][T13655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.549721][T13655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.572838][ T6153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 496.580532][T13655] netlink: 2128 bytes leftover after parsing attributes in process `syz.2.1687'. [ 496.592439][ T6153] usb 5-1: device descriptor read/8, error -71 [ 496.832055][ T6153] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 496.853316][ T6153] usb 5-1: device descriptor read/8, error -71 [ 496.963104][ T6153] usb usb5-port1: unable to enumerate USB device [ 497.457294][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1689'. [ 497.460743][T13663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1689'. [ 498.360593][T13679] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1690'. [ 498.742988][ T75] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 498.752276][ C2] raw-gadget.0 gadget.5: ignoring, device is not running [ 498.887135][ T75] usb 10-1: device descriptor read/64, error -32 [ 499.022013][ T5923] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 499.133865][ T75] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 499.154230][ T5923] usb 5-1: device descriptor read/64, error -71 [ 499.303914][ T75] usb 10-1: config 0 has no interfaces? [ 499.306383][ T75] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 499.310584][ T75] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.322480][ T75] usb 10-1: config 0 descriptor?? [ 499.402317][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 499.532294][ T5923] usb 5-1: device descriptor read/64, error -71 [ 499.652364][ T5923] usb usb5-port1: attempt power cycle [ 500.012247][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 500.033756][ T5923] usb 5-1: device descriptor read/8, error -71 [ 500.282014][ T5923] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 500.314991][ T5923] usb 5-1: device descriptor read/8, error -71 [ 500.353669][T13706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.356311][T13706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.360700][T13706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.363471][T13706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.365894][T13706] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 500.372503][T13706] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 500.432912][ T5923] usb usb5-port1: unable to enumerate USB device [ 501.117928][ T5923] usb 10-1: USB disconnect, device number 3 [ 501.946728][T13724] futex_wake_op: syz.3.1702 tries to shift op by -1; fix this program [ 501.950265][ T40] kauditd_printk_skb: 2453 callbacks suppressed [ 501.950275][ T40] audit: type=1326 audit(501.826:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 501.959824][ T40] audit: type=1326 audit(501.836:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 501.967684][ T40] audit: type=1326 audit(501.836:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 501.974945][ T40] audit: type=1326 audit(501.836:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 501.981897][ T40] audit: type=1326 audit(501.836:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 502.002032][ T40] audit: type=1326 audit(501.856:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 502.402085][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 502.402135][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 502.402450][T13734] Bluetooth: hci1: command 0x0406 tx timeout [ 502.408155][T13706] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 502.817908][T13743] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.900634][T13743] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.975151][T13743] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.040486][T13743] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.139705][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.143658][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.153735][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.161232][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.256115][T13746] wg2 speed is unknown, defaulting to 1000 [ 503.365009][ T40] audit: type=1326 audit(503.246:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.5.1707" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0 [ 503.590768][T13757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 503.593774][T13757] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.599040][T13757] vhci_hcd vhci_hcd.0: Device attached [ 503.625642][T13757] tmpfs: Unknown parameter '›­ïh$|ðùƒ«ON' [ 503.872083][ T34] usb 42-1: SetAddress Request (82) to port 0 [ 503.872102][ T75] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 503.874764][ T34] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 504.042548][ T75] usb 7-1: Using ep0 maxpacket: 8 [ 504.053629][ T75] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.058022][ T75] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.061204][ T75] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.074094][ T75] usb 7-1: config 0 descriptor?? [ 504.310294][ T75] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 504.482084][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 504.774654][T13775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1713'. [ 505.806693][T13788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1717'. [ 505.897621][T13793] tipc: Started in network mode [ 505.899633][T13793] tipc: Node identity d2ddd1b6172c, cluster identity 4711 [ 505.902297][T13793] tipc: Enabled bearer , priority 0 [ 505.918571][T13792] tipc: Disabling bearer [ 506.164787][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.562064][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 506.857324][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1722'. [ 506.967285][T13758] vhci_hcd: connection reset by peer [ 506.967411][ T29] usb 7-1: USB disconnect, device number 14 [ 506.971732][ T225] vhci_hcd vhci_hcd.2: stop threads [ 506.973699][ T225] vhci_hcd vhci_hcd.2: release socket [ 506.975751][ T225] vhci_hcd vhci_hcd.2: disconnect device [ 508.422538][ T5945] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 508.972861][ T34] usb 42-1: device descriptor read/8, error -110 [ 509.347093][T13853] fuse: Unknown parameter 'f' [ 509.347139][T13855] fuse: Unknown parameter 'f' [ 509.424426][ T34] usb usb42-port1: attempt power cycle [ 509.445241][T13860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 509.447404][T13860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.460863][T13860] vhci_hcd vhci_hcd.0: Device attached [ 509.550376][T13860] overlayfs: failed to resolve './bus': -2 [ 509.786509][T13870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1734'. [ 509.789575][ T75] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 509.985629][T13861] vhci_hcd: connection reset by peer [ 509.988247][T12182] vhci_hcd vhci_hcd.3: stop threads [ 509.990091][T12182] vhci_hcd vhci_hcd.3: release socket [ 509.992761][T12182] vhci_hcd vhci_hcd.3: disconnect device [ 510.022978][ T34] usb usb42-port1: unable to enumerate USB device [ 510.482122][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 511.353843][T13888] comedi comedi0: Cannot bond this driver to itself! [ 511.560812][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1741'. [ 512.137854][T13912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 512.355476][T13918] bond1 (unregistering): Released all slaves [ 512.483837][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 512.488026][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 512.562136][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 512.569911][ T5945] Bluetooth: hci1: hardware error 0x00 [ 514.554444][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 514.642104][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 514.872129][ T75] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 515.052565][T13991] tipc: Enabled bearer , priority 0 [ 515.055174][T13991] syzkaller0: entered promiscuous mode [ 515.057297][T13991] syzkaller0: entered allmulticast mode [ 515.108893][T13991] tipc: Resetting bearer [ 515.112612][T13990] tipc: Resetting bearer [ 515.120448][T13990] tipc: Disabling bearer [ 515.276946][T13996] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1759'. [ 517.111246][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 517.861238][T14034] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1768'. [ 518.399856][T14049] netlink: 'syz.3.1772': attribute type 3 has an invalid length. [ 518.404462][T14048] netlink: 'syz.3.1772': attribute type 3 has an invalid length. [ 518.943289][ T40] audit: type=1326 audit(518.786:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 518.952413][ T40] audit: type=1326 audit(518.786:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 518.972252][ T40] audit: type=1326 audit(518.786:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 518.982654][ T40] audit: type=1326 audit(518.786:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 518.990109][ T40] audit: type=1326 audit(518.786:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 519.002123][ T40] audit: type=1326 audit(518.786:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 519.008958][ T40] audit: type=1326 audit(518.796:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 519.017325][ T40] audit: type=1326 audit(518.796:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 519.024963][ T40] audit: type=1326 audit(518.796:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 519.032481][ T40] audit: type=1326 audit(518.796:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14053 comm="syz.3.1773" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 520.246449][ T6153] libceph: connect (1)[c::]:6789 error -101 [ 520.248459][ T6153] libceph: mon0 (1)[c::]:6789 connect error [ 520.286705][T14063] ceph: No mds server is up or the cluster is laggy [ 520.498065][T14077] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 520.554013][T14078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.713196][T14078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.738137][T14083] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1780'. [ 520.924699][T14078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.000113][T14078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.085761][ T6122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.096782][ T1178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.105362][ T1178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.114910][ T1178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.720480][T14102] pimreg: entered allmulticast mode [ 521.744019][T14106] syzkaller0: entered promiscuous mode [ 521.745923][T14106] syzkaller0: entered allmulticast mode [ 521.790432][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1786'. [ 521.799929][T14109] kAFS: unparsable volume name [ 522.493880][T14129] bridge0: entered promiscuous mode [ 522.496291][T14129] bridge0: entered allmulticast mode [ 522.517465][T14129] team0: Port device bridge0 added [ 522.640650][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 522.693737][T14136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1793'. [ 523.653582][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 523.658221][T14149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1795'. [ 523.689681][T14149] bridge_slave_1: left allmulticast mode [ 523.692095][T14149] bridge_slave_1: left promiscuous mode [ 523.701175][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.720397][T14149] bridge_slave_0: left allmulticast mode [ 523.722718][T14149] bridge_slave_0: left promiscuous mode [ 523.724941][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.367006][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 524.408726][T14156] hsr_slave_1 (unregistering): left promiscuous mode [ 524.424001][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 524.812089][ T6153] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 524.962066][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 524.965060][ T6153] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 524.968733][ T6153] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 524.972421][ T6153] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.976013][ T6153] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.980313][ T6153] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.983638][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.192073][ T6153] usb 5-1: usb_control_msg returned -32 [ 525.193966][ T6153] usbtmc 5-1:16.0: can't read capabilities [ 525.217365][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.220391][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.229625][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.233539][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.239669][T14162] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 525.346930][T14170] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:0 [ 525.348342][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'. [ 525.374676][ T6153] usb 5-1: USB disconnect, device number 15 [ 525.478894][T14176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1804'. [ 526.425179][T14188] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 526.666418][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 526.670453][T14185] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 526.673853][T14192] netlink: 'syz.5.1807': attribute type 5 has an invalid length. [ 526.677421][T14192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1807'. [ 526.688063][T14192] geneve2: entered promiscuous mode [ 526.690379][T14192] geneve2: entered allmulticast mode [ 526.694515][ T6122] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 526.702341][ T6122] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 526.714416][T12182] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 526.718375][T12182] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 527.312474][T14200] lo speed is unknown, defaulting to 1000 [ 527.314543][T14200] lo speed is unknown, defaulting to 1000 [ 527.317061][T14200] lo speed is unknown, defaulting to 1000 [ 527.323673][T14200] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 527.334239][T14200] lo speed is unknown, defaulting to 1000 [ 527.337164][T14200] lo speed is unknown, defaulting to 1000 [ 527.339842][T14200] lo speed is unknown, defaulting to 1000 [ 527.342640][T14200] lo speed is unknown, defaulting to 1000 [ 527.830611][T14212] libceph: resolve '0' (ret=-3): failed [ 528.064455][T14223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1816'. [ 528.759737][T14236] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 528.762598][T14236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 528.767045][T14236] vhci_hcd vhci_hcd.0: Device attached [ 529.041132][T14253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1823'. [ 529.042139][ T6805] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 529.049723][ T29] usb 38-1: SetAddress Request (83) to port 0 [ 529.052101][ T29] usb 38-1: new SuperSpeed USB device number 83 using vhci_hcd [ 529.517741][ T6805] usb 5-1: config 0 has no interfaces? [ 529.526516][ T6805] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 529.529788][ T6805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.578711][ T6805] usb 5-1: Product: syz [ 529.580604][ T6805] usb 5-1: Manufacturer: syz [ 529.582496][ T6805] usb 5-1: SerialNumber: syz [ 529.662473][ T6805] usb 5-1: config 0 descriptor?? [ 529.837352][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1826'. [ 530.220047][T14286] TCP: TCP_TX_DELAY enabled [ 530.824641][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 531.008828][T14299] debugfs: 'ttyS3' already exists in 'caif_serial' [ 531.298676][T14311] vivid-000: disconnect [ 531.321140][T14310] vivid-000: reconnect [ 531.542933][ T826] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 531.719050][ T826] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 531.722963][ T826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.726675][ T826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.731110][ T826] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.740948][ T826] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.746745][ T826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.799463][ T826] usb 7-1: config 0 descriptor?? [ 531.815937][ T75] usb 5-1: USB disconnect, device number 16 [ 532.314428][T14238] vhci_hcd: connection reset by peer [ 532.441817][ T6122] vhci_hcd vhci_hcd.0: stop threads [ 532.443969][ T826] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 14/15 [ 532.444097][ T6122] vhci_hcd vhci_hcd.0: release socket [ 532.448044][ T826] plantronics 0003:047F:FFFF.0004: parse failed [ 532.462151][ T826] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 532.472742][ T6122] vhci_hcd vhci_hcd.0: disconnect device [ 532.765587][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 533.569391][ T75] libceph: connect (1)[c::]:6789 error -101 [ 533.571726][ T75] libceph: mon0 (1)[c::]:6789 connect error [ 533.669001][T14368] ceph: No mds server is up or the cluster is laggy [ 534.056685][T14338] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 534.162220][ T29] usb 38-1: device descriptor read/8, error -110 [ 534.315053][ T34] usb 7-1: USB disconnect, device number 15 [ 534.563532][ T29] usb usb38-port1: attempt power cycle [ 534.627196][T14388] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1847'. [ 534.630273][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1847'. [ 535.001447][T14391] gretap0: entered promiscuous mode [ 535.003933][T14391] vlan0: entered promiscuous mode [ 535.187386][ T29] usb usb38-port1: unable to enumerate USB device [ 535.240070][T14338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.244186][T14338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.972525][ T75] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 535.997474][T14426] tipc: Trying to set illegal importance in message [ 536.082066][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 536.082289][ T5945] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 536.102045][ T75] usb 7-1: device descriptor read/64, error -71 [ 536.342030][ T75] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 536.489237][ T75] usb 7-1: device descriptor read/64, error -71 [ 536.592377][ T75] usb usb7-port1: attempt power cycle [ 536.932310][ T75] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 536.962402][ T75] usb 7-1: device descriptor read/8, error -71 [ 537.222128][ T75] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 537.252656][ T75] usb 7-1: device descriptor read/8, error -71 [ 537.282083][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.363221][ T75] usb usb7-port1: unable to enumerate USB device [ 537.819943][T14471] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1860'. [ 537.824575][T14470] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1860'. [ 537.828646][T14471] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1860'. [ 537.968719][T14475] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 537.970907][T14475] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 537.973981][T14475] vhci_hcd vhci_hcd.0: Device attached [ 537.981893][T14473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 538.252069][ T75] usb 38-1: SetAddress Request (87) to port 0 [ 538.254872][ T75] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 538.463471][T14476] vhci_hcd: connection reset by peer [ 538.466074][T12181] vhci_hcd vhci_hcd.0: stop threads [ 538.468282][T12181] vhci_hcd vhci_hcd.0: release socket [ 538.470568][T12181] vhci_hcd vhci_hcd.0: disconnect device [ 539.042347][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 539.042357][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 539.887277][T14490] loop5: detected capacity change from 0 to 7 [ 539.899216][T14163] Dev loop5: unable to read RDB block 7 [ 539.901202][T14163] loop5: unable to read partition table [ 539.905645][T14163] loop5: partition table beyond EOD, truncated [ 539.914590][T14490] Dev loop5: unable to read RDB block 7 [ 539.917022][T14490] loop5: unable to read partition table [ 539.919558][T14490] loop5: partition table beyond EOD, truncated [ 539.923634][T14490] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 540.055956][T14502] vlan1: entered promiscuous mode [ 540.058455][T14502] vlan1: entered allmulticast mode [ 540.061000][T14502] hsr_slave_1: entered allmulticast mode [ 542.477549][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'. [ 543.384978][ T75] usb 38-1: device descriptor read/8, error -110 [ 543.903091][ T75] usb usb38-port1: attempt power cycle [ 544.473275][ T75] usb usb38-port1: unable to enumerate USB device [ 544.563564][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'. [ 544.566564][T14574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1884'. [ 544.569950][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'. [ 545.160042][T14588] Process accounting resumed [ 545.513601][T14621] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20002 [ 545.854211][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 545.854227][ T40] audit: type=1326 audit(545.736:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.871203][ T40] audit: type=1326 audit(545.736:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.879596][ T40] audit: type=1326 audit(545.736:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.887200][ T40] audit: type=1326 audit(545.736:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.894993][ T40] audit: type=1326 audit(545.736:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.902387][ T40] audit: type=1326 audit(545.736:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.909253][ T40] audit: type=1326 audit(545.746:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.916912][ T40] audit: type=1326 audit(545.746:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.925808][ T40] audit: type=1326 audit(545.746:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 545.932481][ T40] audit: type=1326 audit(545.746:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.1893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 546.032091][T14656] wg2 speed is unknown, defaulting to 1000 [ 546.273362][T14656] lo speed is unknown, defaulting to 1000 [ 547.080120][T14681] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 547.082769][T14681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 547.086050][T14681] vhci_hcd vhci_hcd.0: Device attached [ 547.092103][T14683] vhci_hcd: connection closed [ 547.092716][ T9397] vhci_hcd vhci_hcd.0: stop threads [ 547.100065][ T9397] vhci_hcd vhci_hcd.0: release socket [ 547.103910][ T9397] vhci_hcd vhci_hcd.0: disconnect device [ 547.789117][T14701] fuse: blksize only supported for fuseblk [ 547.822247][T14703] overlayfs: failed to resolve './file1': -2 [ 547.955369][T14705] Invalid ELF header magic: != ELF [ 548.251354][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.254138][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.354437][T14698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.378645][T14698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.890756][ T827] lo speed is unknown, defaulting to 1000 [ 548.895259][ T7374] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.899199][ T7374] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 548.903159][ T827] syz0: Port: 1 Link DOWN [ 548.912067][ T7374] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.915925][ T7374] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 548.919787][ T7374] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.945455][ T7374] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 548.955547][ T7374] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.960792][ T7374] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 549.096130][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 549.099704][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 549.103224][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 549.569678][T14715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 549.762068][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 549.765206][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 550.021287][T14739] No control pipe specified [ 550.642644][T14758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 550.645711][T14758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 550.650168][T14758] vhci_hcd vhci_hcd.0: Device attached [ 550.746646][T14758] netlink: 'syz.0.1916': attribute type 2 has an invalid length. [ 551.112238][ T827] usb 38-1: SetAddress Request (91) to port 0 [ 551.122382][ T827] usb 38-1: new SuperSpeed USB device number 91 using vhci_hcd [ 551.381238][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 551.662528][T14759] vhci_hcd: connection reset by peer [ 551.664472][T14772] wg2 speed is unknown, defaulting to 1000 [ 551.665156][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 551.669103][ T1144] vhci_hcd vhci_hcd.0: release socket [ 551.671702][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 551.849538][T14772] lo speed is unknown, defaulting to 1000 [ 552.147170][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 552.147186][ T40] audit: type=1326 audit(552.026:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.166741][ T40] audit: type=1326 audit(552.036:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.179653][ T40] audit: type=1326 audit(552.036:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.187459][ T40] audit: type=1326 audit(552.036:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.195734][ T40] audit: type=1326 audit(552.036:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.202808][ T40] audit: type=1326 audit(552.036:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.209677][ T40] audit: type=1326 audit(552.036:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.216600][ T40] audit: type=1326 audit(552.036:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.223740][ T40] audit: type=1326 audit(552.036:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.230427][ T40] audit: type=1326 audit(552.036:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.3.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 552.248086][T14779] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 552.250096][T14779] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 552.605543][T14785] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 552.608269][T14785] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.611324][T14785] vhci_hcd vhci_hcd.0: Device attached [ 552.725815][T14785] nft_compat: unsupported protocol 0 [ 553.287338][T14786] vhci_hcd: connection closed [ 553.290042][T12179] vhci_hcd vhci_hcd.0: stop threads [ 553.294922][T12179] vhci_hcd vhci_hcd.0: release socket [ 553.297223][T12179] vhci_hcd vhci_hcd.0: disconnect device [ 553.775384][T14823] overlayfs: failed to resolve './file1': -2 [ 553.914338][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 554.034763][T14827] FAT-fs (sr0): bogus number of reserved sectors [ 554.037249][T14827] FAT-fs (sr0): Can't find a valid FAT filesystem [ 555.377561][T14841] netlink: 'syz.5.1939': attribute type 34 has an invalid length. [ 556.320806][ T827] usb 38-1: device descriptor read/8, error -110 [ 556.847395][ T827] usb usb38-port1: attempt power cycle [ 557.174993][T14876] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1948'. [ 557.462989][ T827] usb usb38-port1: unable to enumerate USB device [ 558.589454][T14913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 558.591646][T14913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 558.592609][ T1119] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 558.594454][T14913] vhci_hcd vhci_hcd.0: Device attached [ 558.597716][ T1119] sr 2:0:0:0: [sr0] tag#23 Sense Key : Illegal Request [current] [ 558.602261][ T1119] sr 2:0:0:0: [sr0] tag#23 Add. Sense: Invalid command operation code [ 558.605040][ T1119] sr 2:0:0:0: [sr0] tag#23 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 558.608027][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 558.611558][ T1119] buffer_io_error: 320 callbacks suppressed [ 558.611566][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 558.618864][T14919] vhci_hcd: connection closed [ 558.622003][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 558.625695][ T1144] vhci_hcd vhci_hcd.3: release socket [ 558.632047][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 559.540349][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 559.540364][ T40] audit: type=1326 audit(559.416:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14942 comm="syz.0.1964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7fc00000 [ 560.072124][T14956] overlay: Unknown parameter 'func' [ 560.629763][T14975] netlink: 'syz.0.1971': attribute type 21 has an invalid length. [ 561.212395][T14979] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 561.214576][T14979] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 561.222364][T14979] vhci_hcd vhci_hcd.0: Device attached [ 561.227447][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1972'. [ 561.361527][T14990] fuse: Unknown parameter 'f¾³0x0000000000000005' [ 561.361552][T14989] fuse: Unknown parameter 'f¾³0x0000000000000005' [ 561.492273][ T6029] usb 48-1: SetAddress Request (6) to port 0 [ 561.493303][T14994] wg2 speed is unknown, defaulting to 1000 [ 561.494232][ T6029] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 561.576122][T14994] lo speed is unknown, defaulting to 1000 [ 562.321561][T14983] vhci_hcd: connection reset by peer [ 562.324113][T12182] vhci_hcd vhci_hcd.5: stop threads [ 562.326045][T12182] vhci_hcd vhci_hcd.5: release socket [ 562.327893][T12182] vhci_hcd vhci_hcd.5: disconnect device [ 563.776046][T15028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1984'. [ 563.793302][T15029] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.825541][T15034] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 563.929388][T15029] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.278069][T15029] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.325871][T15041] usb usb5: usbfs: process 15041 (syz.3.1988) did not claim interface 0 before use [ 564.348922][T15029] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.427027][T12179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.437008][T12179] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.449096][ T6122] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.460332][ T6122] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.347464][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 566.631374][ T6029] usb 48-1: device descriptor read/8, error -110 [ 566.643444][T15075] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:0 [ 567.022639][ T6029] usb usb48-port1: attempt power cycle [ 567.582600][ T6029] usb usb48-port1: unable to enumerate USB device [ 567.605691][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.691022][T15104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 567.693212][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 567.730344][T15104] vhci_hcd vhci_hcd.0: Device attached [ 568.076424][T15117] openvswitch: netlink: Flow actions attr not present in new flow. [ 568.138353][ T9] usb 44-1: SetAddress Request (92) to port 0 [ 568.141013][ T9] usb 44-1: new SuperSpeed USB device number 92 using vhci_hcd [ 568.276515][T15105] vhci_hcd: connection reset by peer [ 568.279364][ T46] vhci_hcd vhci_hcd.3: stop threads [ 568.281243][ T46] vhci_hcd vhci_hcd.3: release socket [ 568.283195][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 573.590583][ T9] usb 44-1: device descriptor read/8, error -110 [ 574.007697][ T9] usb usb44-port1: attempt power cycle [ 574.607255][ T9] usb usb44-port1: unable to enumerate USB device [ 585.093019][ T5951] Process accounting paused [ 585.146840][ T1415] ================================================================== [ 585.150114][ T1415] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 585.152789][ T1415] Read of size 8 at addr ffff88806928d020 by task aoe_tx0/1415 [ 585.157522][ T1415] [ 585.158481][ T1415] CPU: 2 UID: 0 PID: 1415 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.158512][ T1415] Tainted: [L]=SOFTLOCKUP [ 585.158518][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 585.158529][ T1415] Call Trace: [ 585.158536][ T1415] [ 585.158542][ T1415] dump_stack_lvl+0x116/0x1f0 [ 585.158583][ T1415] print_report+0xcd/0x630 [ 585.158609][ T1415] ? __virt_addr_valid+0x81/0x610 [ 585.158635][ T1415] ? __phys_addr+0xe8/0x180 [ 585.158661][ T1415] ? tty_write_room+0x7d/0x90 [ 585.158678][ T1415] kasan_report+0xe0/0x110 [ 585.158704][ T1415] ? tty_write_room+0x7d/0x90 [ 585.158723][ T1415] tty_write_room+0x7d/0x90 [ 585.158739][ T1415] handle_tx+0x14f/0x630 [ 585.158761][ T1415] dev_hard_start_xmit+0x97/0x6e0 [ 585.158783][ T1415] __dev_queue_xmit+0x6d7/0x4650 [ 585.158804][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.158829][ T1415] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 585.158856][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 585.158879][ T1415] ? __lock_acquire+0x436/0x2890 [ 585.158896][ T1415] ? ref_tracker_free+0x37c/0x830 [ 585.158918][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 585.158939][ T1415] ? find_held_lock+0x2b/0x80 [ 585.158961][ T1415] ? skb_dequeue+0x126/0x180 [ 585.158987][ T1415] ? find_held_lock+0x2b/0x80 [ 585.159008][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.159033][ T1415] tx+0xcc/0x190 [ 585.159049][ T1415] ? __pfx_tx+0x10/0x10 [ 585.159062][ T1415] kthread+0x1e4/0x3e0 [ 585.159084][ T1415] ? find_held_lock+0x2b/0x80 [ 585.159106][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.159129][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 585.159153][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.159179][ T1415] ? __kthread_parkme+0x19e/0x250 [ 585.159206][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.159228][ T1415] kthread+0x3c5/0x780 [ 585.159245][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.159263][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.159286][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.159304][ T1415] ret_from_fork+0x983/0xb10 [ 585.159323][ T1415] ? __pfx_ret_from_fork+0x10/0x10 [ 585.159341][ T1415] ? __switch_to+0x7af/0x10d0 [ 585.159364][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.159380][ T1415] ret_from_fork_asm+0x1a/0x30 [ 585.159412][ T1415] [ 585.159418][ T1415] [ 585.249417][ T1415] Allocated by task 12310: [ 585.251402][ T1415] kasan_save_stack+0x33/0x60 [ 585.253524][ T1415] kasan_save_track+0x14/0x30 [ 585.255146][ T1415] __kasan_kmalloc+0xaa/0xb0 [ 585.256697][ T1415] alloc_tty_struct+0x96/0x8c0 [ 585.258302][ T1415] tty_init_dev.part.0+0x1e/0x500 [ 585.260012][ T1415] tty_open+0xa4f/0xf90 [ 585.261421][ T1415] chrdev_open+0x234/0x6a0 [ 585.262929][ T1415] do_dentry_open+0x748/0x1590 [ 585.264559][ T1415] vfs_open+0x82/0x3f0 [ 585.265958][ T1415] path_openat+0x2078/0x3140 [ 585.267560][ T1415] do_filp_open+0x20b/0x470 [ 585.269103][ T1415] do_sys_openat2+0x121/0x290 [ 585.270702][ T1415] __ia32_compat_sys_openat+0x16d/0x210 [ 585.272559][ T1415] __do_fast_syscall_32+0xe8/0x680 [ 585.274306][ T1415] do_fast_syscall_32+0x32/0x80 [ 585.275963][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.278120][ T1415] [ 585.278950][ T1415] Freed by task 9: [ 585.280239][ T1415] kasan_save_stack+0x33/0x60 [ 585.281859][ T1415] kasan_save_track+0x14/0x30 [ 585.283461][ T1415] kasan_save_free_info+0x3b/0x60 [ 585.285173][ T1415] __kasan_slab_free+0x5f/0x80 [ 585.286833][ T1415] kfree+0x2f8/0x6e0 [ 585.288167][ T1415] process_one_work+0x9ba/0x1b20 [ 585.289858][ T1415] worker_thread+0x6c8/0xf10 [ 585.291387][ T1415] kthread+0x3c5/0x780 [ 585.292782][ T1415] ret_from_fork+0x983/0xb10 [ 585.294392][ T1415] ret_from_fork_asm+0x1a/0x30 [ 585.296022][ T1415] [ 585.296849][ T1415] Last potentially related work creation: [ 585.298764][ T1415] kasan_save_stack+0x33/0x60 [ 585.300378][ T1415] kasan_record_aux_stack+0xa7/0xc0 [ 585.302150][ T1415] insert_work+0x36/0x230 [ 585.303592][ T1415] __queue_work+0x94f/0x10e0 [ 585.305142][ T1415] queue_work_on+0x1a4/0x1f0 [ 585.306754][ T1415] release_tty+0x4de/0x5d0 [ 585.308265][ T1415] tty_release_struct+0xb7/0xe0 [ 585.309915][ T1415] tty_release+0xe2d/0x1470 [ 585.311476][ T1415] __fput+0x402/0xb70 [ 585.312839][ T1415] task_work_run+0x150/0x240 [ 585.314410][ T1415] do_exit+0x87f/0x2bd0 [ 585.315846][ T1415] do_group_exit+0xd3/0x2a0 [ 585.317419][ T1415] get_signal+0x2671/0x26d0 [ 585.318981][ T1415] arch_do_signal_or_restart+0x8f/0x7a0 [ 585.320834][ T1415] exit_to_user_mode_loop+0x8c/0x540 [ 585.322639][ T1415] __do_fast_syscall_32+0x4a4/0x680 [ 585.324411][ T1415] do_fast_syscall_32+0x32/0x80 [ 585.326065][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.328202][ T1415] [ 585.329029][ T1415] The buggy address belongs to the object at ffff88806928d000 [ 585.329029][ T1415] which belongs to the cache kmalloc-cg-2k of size 2048 [ 585.333741][ T1415] The buggy address is located 32 bytes inside of [ 585.333741][ T1415] freed 2048-byte region [ffff88806928d000, ffff88806928d800) [ 585.338263][ T1415] [ 585.339088][ T1415] The buggy address belongs to the physical page: [ 585.341231][ T1415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806928a000 pfn:0x69288 [ 585.344597][ T1415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 585.347422][ T1415] memcg:ffff88804d3ae181 [ 585.348856][ T1415] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 585.351722][ T1415] page_type: f5(slab) [ 585.353084][ T1415] raw: 04fff00000000240 ffff88801b44c140 ffffea0001ac8010 ffff888040402708 [ 585.355955][ T1415] raw: ffff88806928a000 0000000000080006 00000000f5000000 ffff88804d3ae181 [ 585.358863][ T1415] head: 04fff00000000240 ffff88801b44c140 ffffea0001ac8010 ffff888040402708 [ 585.361772][ T1415] head: ffff88806928a000 0000000000080006 00000000f5000000 ffff88804d3ae181 [ 585.364649][ T1415] head: 04fff00000000003 ffffea0001a4a201 00000000ffffffff 00000000ffffffff [ 585.367586][ T1415] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 585.370514][ T1415] page dumped because: kasan: bad access detected [ 585.372650][ T1415] page_owner tracks the page as allocated [ 585.374580][ T1415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 55331873442, free_ts 0 [ 585.381167][ T1415] post_alloc_hook+0x1af/0x220 [ 585.382812][ T1415] get_page_from_freelist+0xd0b/0x31a0 [ 585.384677][ T1415] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 585.386717][ T1415] alloc_pages_mpol+0x1fb/0x550 [ 585.388349][ T1415] new_slab+0x2c3/0x430 [ 585.389771][ T1415] ___slab_alloc+0xe18/0x1c90 [ 585.391369][ T1415] __slab_alloc.constprop.0+0x63/0x110 [ 585.393205][ T1415] __kmalloc_noprof+0x4fc/0x910 [ 585.394866][ T1415] __register_sysctl_table+0xb3/0x1900 [ 585.396731][ T1415] __devinet_sysctl_register+0x1b9/0x360 [ 585.398632][ T1415] devinet_sysctl_register+0x17b/0x200 [ 585.400468][ T1415] inetdev_init+0x2b8/0x580 [ 585.402050][ T1415] inetdev_event+0xc32/0x1870 [ 585.403642][ T1415] notifier_call_chain+0xbc/0x3e0 [ 585.405344][ T1415] call_netdevice_notifiers_info+0xbe/0x110 [ 585.407370][ T1415] register_netdevice+0x1792/0x21d0 [ 585.409149][ T1415] page_owner free stack trace missing [ 585.411031][ T1415] [ 585.411859][ T1415] Memory state around the buggy address: [ 585.413748][ T1415] ffff88806928cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 585.416469][ T1415] ffff88806928cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 585.419180][ T1415] >ffff88806928d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.422037][ T1415] ^ [ 585.423797][ T1415] ffff88806928d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.426507][ T1415] ffff88806928d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.429218][ T1415] ================================================================== [ 585.432024][ T1415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 585.434449][ T1415] CPU: 2 UID: 0 PID: 1415 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.437979][ T1415] Tainted: [L]=SOFTLOCKUP [ 585.439474][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 585.443055][ T1415] Call Trace: [ 585.444221][ T1415] [ 585.445361][ T1415] dump_stack_lvl+0x3d/0x1f0 [ 585.447472][ T1415] vpanic+0x640/0x6f0 [ 585.449173][ T1415] panic+0xca/0xd0 [ 585.450751][ T1415] ? __pfx_panic+0x10/0x10 [ 585.452690][ T1415] ? check_panic_on_warn+0x1f/0xb0 [ 585.454774][ T1415] check_panic_on_warn+0xab/0xb0 [ 585.456964][ T1415] end_report+0x107/0x160 [ 585.458603][ T1415] kasan_report+0xee/0x110 [ 585.460128][ T1415] ? tty_write_room+0x7d/0x90 [ 585.461776][ T1415] tty_write_room+0x7d/0x90 [ 585.463334][ T1415] handle_tx+0x14f/0x630 [ 585.464794][ T1415] dev_hard_start_xmit+0x97/0x6e0 [ 585.466521][ T1415] __dev_queue_xmit+0x6d7/0x4650 [ 585.468222][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.469880][ T1415] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 585.471995][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 585.473851][ T1415] ? __lock_acquire+0x436/0x2890 [ 585.475527][ T1415] ? ref_tracker_free+0x37c/0x830 [ 585.477258][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 585.478976][ T1415] ? find_held_lock+0x2b/0x80 [ 585.480502][ T1415] ? skb_dequeue+0x126/0x180 [ 585.482129][ T1415] ? find_held_lock+0x2b/0x80 [ 585.483717][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.485358][ T1415] tx+0xcc/0x190 [ 585.486639][ T1415] ? __pfx_tx+0x10/0x10 [ 585.488066][ T1415] kthread+0x1e4/0x3e0 [ 585.489455][ T1415] ? find_held_lock+0x2b/0x80 [ 585.491078][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.492675][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 585.494666][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.496439][ T1415] ? __kthread_parkme+0x19e/0x250 [ 585.498183][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.499788][ T1415] kthread+0x3c5/0x780 [ 585.501255][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.502849][ T1415] ? rcu_is_watching+0x12/0xc0 [ 585.504504][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.506083][ T1415] ret_from_fork+0x983/0xb10 [ 585.507687][ T1415] ? __pfx_ret_from_fork+0x10/0x10 [ 585.509504][ T1415] ? __switch_to+0x7af/0x10d0 [ 585.511112][ T1415] ? __pfx_kthread+0x10/0x10 [ 585.512721][ T1415] ret_from_fork_asm+0x1a/0x30 [ 585.514369][ T1415] [ 585.516166][ T1415] Kernel Offset: disabled [ 585.517650][ T1415] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:44:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000015b876b RBX=0000000000000000 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca977 RDI=ffffffff8bf2b580 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088e8d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563546068088 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000600001 Opmask01=0000000000000001 Opmask02=0000000000000180 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c74b25ff5281891 c1f6ba68ee24f6fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 afb6e0f973fec0fc b667fbaac888ff82 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfc9ce0fac623c67 bead589b03122e70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9bc1da4423c7509 bf2b15655ad2ea5e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d0b922600dcb0ae 0000000000000163 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e62c356d26b2fc 0081e05b6d807f94 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d12d8ce00000163 0000000000000163 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000163 00ee9f2e8c7b1a68 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a938f8fb52e956e f7dc8b0e8fa41385 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 feef7dc37da03054 f9e4985a8a2a904a ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34542020205b5d34 3600006563697665 6420425355206574 6172656d756e6500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3454202020515734 3600006563637665 6420425355206574 6172656775646500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3174726f702d3434 6273752062737520 5d3954202020205b 5d3535323730362e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030636637 78303d65646f6320 3937356433303766 78303d706920313d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461706d6f632030 34323d6c6c616373 7973203330303030 3030343d68637261 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d6769732022 726f747563657865 2d7a79732f223d65 7865202234363931 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e302e7a7973223d 6d6d6f6320323439 34313d6469702064 656e69666e6f636e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888026b2c980 RSI=ffffffff816b9c71 RDI=ffffffff8bf2b580 RBP=ffff88805fd56940 RSP=ffffc9000f04f628 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9088e8d7 R11=ffff888026b2d4b0 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b33bd00 R15=ffffed100bfaad28 RIP=ffffffff8b755dcf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000585144ac CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7466ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301125 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc90007fdf3b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9aed9220 R15=ffffffff853010c0 RIP=ffffffff8530114f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f055c0 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000092383d RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca977 RDI=ffffffff8bf2b580 RBP=ffffed1003b50000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801da80b30 R12=0000000000000003 R13=ffff88801da80000 R14=ffffffff9088e8d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7442028 CR3=000000004b654000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000