last executing test programs: 4.452217009s ago: executing program 3 (id=807): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) r0 = socket$inet6(0xa, 0x1, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) fcntl$setflags(r0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa9088aaaaaabb080046000020c6353a5100100000000000000000001c0500"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@loopback, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x6, 0x85}, 0x3c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000080)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000180)='ntfs\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x1, r8, 0x4000) syz_open_dev$video(&(0x7f0000000200), 0x5, 0x40000) r9 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) 3.154854585s ago: executing program 3 (id=817): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.939586756s ago: executing program 3 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 2.879974945s ago: executing program 0 (id=822): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0x1118, 0x30, 0x2, 0x10000, 0x25dfdbfb, {}, [{0x1104, 0x1, [@m_tunnel_key={0x10ac, 0xc, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc, 0x3, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xfffffff7, 0x3, 0x2, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x20000003, 0x9, 0xf2c6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x3fff, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd}}}, @TCA_IFE_DMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x804}, 0x200408d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x700, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r6 = io_uring_setup(0x194e, &(0x7f0000000000)={0x0, 0xd3d5, 0x8, 0x5, 0x2b0}) vmsplice(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)="e1b677656d17f434ba9b4fb2f65fa86ae04699ecbdc66380476602340fea6cd3bb026af70225d8d53c5fdd7d0dce36c1b0b561b0e4c1848722922062fc458971153d220a8c3761f8369480", 0x4b}, {&(0x7f0000000100)="d6d60a150a28f03a09b73ac420e631d701ccddc8e90b85f1ef25f0b8d4245ebcd2dff7fc7635b6e5f5acdef8bb577ba5669a1b31f5004b0b6b7c5b37ed523e40fe3d852a2b75b89d5cba4f470b2e6379b95aba7489a3c1e4d9f105b48e6313180db27a3cfdc06fab1840fb99393dc3c7b227cb0270183af49ecaa1e65a6cd50278a5132b320581f4aba678a1030cb699ba299ca3d0539933104605f759c82260abe8fb0025ba8095d13e552a579ad8960076e12d77a0f9ee7b9df6034ad0f23a2c93edcdf5392b0ab6dbc0ae95d79c163e5c54b9efbcfdb7de7f29dd1d", 0xdd}, {&(0x7f0000000200)="aae5585e426de43bdfe48d6501df1a12f7cfadd9203bb49ee0a129110426c159f1e1aa4df0dbf639848913261201defd0fe59275b48bbbb6ba70d1098ce9150374bcb14620f73e71f0c779cc0624d3ab52e8e51409a82036c4ed0db83f568d97c7d5545a3abcf4606839249810593b5ecb53a02ba1765fdcab260a50e5c8447831318f", 0x83}, {&(0x7f00000002c0)="a34b1aa349c596269c067d5ab650bbc81544b6fde180150e9d49df45119d4ec631c6e65e03dbc335fd427f74724d2179c0d50d25d5b89efccc056881ab42e5e7fd6cf6a6e134ef8eb1dce564dfd46d9ea9341c96093a07ebac0c456a6d08ec8aee025891fe9fc2577726dbbc00ad424837b9564ff7d85e55495ca9cfc1fe522b505cb217ec6944", 0x87}, {&(0x7f00000003c0)="787090c9c1a69ec46ca85711171da89d3fa324f2dc84ec40d90687710d8719f7a5d39722b25df2eb6d3f2562d909608767f02b2c6172511f3602d6d33e9bd481d72fbe", 0x43}, {&(0x7f0000000440)="1c17472c27574913f2096c029d47c4ee6aa4bee67f2e1a3c9c1708dd127664c6f45558", 0x23}, {&(0x7f0000000480)="6c66371135d568ab5492b06993e5ea2b37169f45450ef9790eb47992710a5b1eeaf5e26ee674562c8672ad0af194f69dd790b404e4fb77069e99d19d424195f02e0275fc80049f9dc3d9161d8f5d6ce0e70276855f23f534e6a7ccd65efb5b709703a6be8f5fa1dc95dd4ac175172f4377cbb25e34116dde21277e8ccdf978580b975af0cceee732b2c43ce260cff0fbe414ef048545729252eb5e60a2b80f4531670cf5", 0xa4}, {&(0x7f0000000540)="b583423c6f02c1d2afa3efb4a81321d09c93d57268ddcf09d242ffc1468a92a08d5bde68a8c62eedba3a761f9fe3bca91be85f2a309e60dff4165a1f7e67308d0188215ffbfcd49229376426e9d919dcbd83798c4b45e8f78454db958df8b32b02515aff79de6bc6e0a64b6346f6c84a1d", 0x71}, {&(0x7f0000000640)="6bd965ee76144d1a1401f6541a704d25695aebd76242bea13457cb885fd5a6a971f7fe4d36f464277cd93955b1c292fa39d667daa64a6960404f2030411323b5c2449aae51a92b7aa7", 0x49}], 0x9, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 2.278972659s ago: executing program 2 (id=823): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) (async, rerun: 32) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1a04c, 0x4, 0x1, 0x7, 0x7, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0xfffffffd}}, 0xe8) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async) close(r1) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (async) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x50b402, 0x0) 2.180536981s ago: executing program 2 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff010000000000000000000000000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000014000400020000000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400"], 0x174}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 1.50955233s ago: executing program 3 (id=826): openat$hwrng(0xffffff9c, 0x0, 0x80800, 0x0) (async) openat$hwrng(0xffffff9c, 0x0, 0x80800, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="222a49a8c1000000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf257b0000000c00990043000000120000000a00060008021100000000000a000600ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x50091) bind$netlink(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}}, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r9, 0x4610, &(0x7f0000000000)={0x9}) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x3c00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) 1.48683633s ago: executing program 0 (id=827): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc04c5349, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x20000092}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0xbf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1d, 0x4007, @fd, 0x51de, 0x0, 0x0, 0x6, 0x0, {0x3}}) io_uring_enter(r5, 0x62a, 0x4c1, 0x43, 0x0, 0x5e) write$nbd(r2, &(0x7f0000000180)={0x67446698, 0x1, 0x2, 0x2, 0x1, "2871ea426fe84b008aa16b1a38fc4d039e87c97c5dfe5eaa24ad05b9d547a47470a78e31b7ff93be03b985a8c81999e512d94e3ae14d43"}, 0x47) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x54, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 1.323826019s ago: executing program 0 (id=829): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a}, 0x20) r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}, 0x1, 0x4000}, 0x0) 1.255342086s ago: executing program 2 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88032, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x3, 0x4, 0x80, 0x10, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e40)={0x2, 0x0, @ioapic={0x1000, 0xffffffff, 0x40, 0x4, 0x0, [{0x4, 0x85, 0x8, '\x00', 0x6}, {0x4, 0x84, 0x0, '\x00', 0xa}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xe}, {0x2, 0xff, 0x9, '\x00', 0x1}, {0xf0, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x3}, {0x80, 0x74, 0x3, '\x00', 0xa}, {0xe7, 0xfe, 0xfe, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x7f}, {0xa6, 0x0, 0xd, '\x00', 0x18}, {0x15, 0x8, 0x0, '\x00', 0x6}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x3}, {0x5, 0x3, 0x80, '\x00', 0x2}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x1}, {0x0, 0x2, 0x4, '\x00', 0xa7}, {0x0, 0xfe, 0xfd, '\x00', 0x9}, {0xe, 0x11, 0x2}, {0xd, 0x9, 0x1, '\x00', 0x8}]}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0xb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', 0x0, 0x301200a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4004000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1.254978643s ago: executing program 0 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x37, 0x4608, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xfb}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x8000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000380)='./file1\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') socket$kcm(0x29, 0x5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x7, @loopback, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{0x0, 0x9, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) shutdown(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) syz_emit_ethernet(0x5b, &(0x7f00000001c0)={@local, @link_local={0x3}, @void, {@generic={0x8914, "c13440e6f502026355cf246282276ad50f0f770c5f91a3443ef30e113e2997ae95a781c9804acd719e1cbfc20faa13d5a85b16749c8c77fc1c75456b3c681c50808c33885d476277f3034c0741"}}}, 0x0) 1.243922701s ago: executing program 1 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x3d8, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x9e}, @nested={0x3c0, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x3b3, 0x101, 0x0, 0x1, [@nested={0x10, 0x7, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x95}, @nested={0x4, 0x42}]}, @nested={0x113, 0x4c, 0x0, 0x1, [@generic="343b13a6fb2717ddc614b243b438f59f210f3f817c", @generic="3dc55c9a26d2f2f904eb34598e61c9dbadf883aef094af69d102dcf512d98bd3a08795ca8cbcaf1bc784d3f983504fd606e5", @nested={0x4, 0x31}, @generic="ae084cff6db9b4b96dfe606506b2538e98fc71ad36a011b5fddb9cbefc389bcb753ed05a5baa708b977ec65d27ffb60840e99c82b0a54443c9b0e5a4f8b5dbb94640fca6f5b615ac03033ca5fa36c6b98e81609ea745791cf13d86ee433f8f0f32ca927a453447e33344022dab8dab229680925949b0a98eb8a8ddf75cc52c0c5229d4ebc9dc33696985aedb27f9d0650c7ed218431ef5681c37b155519ee7e04d67a3fb6c9dd81124bc7cdc61f942ada8d4b544cfc71b52a4285bc49bbda5c92b6ab7d8"]}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0x745}, @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x11c, 0x100, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x23}, @nested={0x4, 0x58}, @generic="d41cf052be6e9445a34b3bafebfb5564c74637e261b423f16488af0273fb69b00c941dd51526817f63174cd6ce67fb9f5aa00672f238a64bfe499ce8f03898116292fc2f08ddd1b3f38bba587dba2243873f8763a80c467c7e4e25894bf2700dc8cbda94b06ccd7429d77fc960e74893bed02e8347eacad86626ceacb20e943f1d293c3d2d5d23bb4d67e09334b7d2b8f1fce3a9bf5b2d9788375ae5d4eb9e1a9217cb8daf23754cb5b27aa708fb7f73274727", @generic="6120c1291edbebdb1281231f53c2d61412c71e18372d547f772933e59b88db432644dfdfb589b9b481a00a403e8e8ee6d7122d9626b86f85ddc0d345d1c5e392ab35011ed79db8e474aae842d18c8489ecd32381dc"]}, @typed={0x6, 0xc2, 0x0, 0x0, @str='\x80\n'}, @nested={0x13c, 0x12e, 0x0, 0x1, [@generic="95e80c1d5ceba6339a5636c85b9c24fc122ff372d64db2428122f7429616bee5eaafd8b744574116206e4739ea940a0861c4b19fbb8f71713bb624c6838b83eb2e5403e6fe2939f7eae8d8ffd879e1af4753", @generic="874a5debe24f1084d6b3fa0d1454bfdff0980b52b09c2a80eda9454803a3b12de37a90af2b2785cdbb8b7c9f31b012fa26d2a4a47d042dc9358ff3be6d101e5e6052716ddeb3380fa0e3ee8874e5da874a276fd39ded883a346f33e762a3582f6ae411fe8cf6efc6ff494cfd2544c6dc045d5b4316e37d7c557df86343c1594558006da97bde86fa31d06a3c047b90f879702e1f39bb9b852f89fd1a0c83924c65223c016e40071827acd23c1a30d11b9491f842769fb12dc68e8a215d045fc184466bce57fc00f3c554fd52875ee7e1fbc0ef389445bf70ae9ff6ab3b93937bf0f1", @typed={0x4, 0xcf}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}, @generic="22485c6ac58a8070e587f06d814628"]}]}]}, 0x3d8}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) 1.129974104s ago: executing program 1 (id=833): ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x8000, {0xfed1, 0x4, 0x2, 0x9, 0x8, 0xe60}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.128408363s ago: executing program 1 (id=834): socket$packet(0x11, 0x3, 0x300) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x406602, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlockall(0x7) socket(0x3, 0x4, 0x3) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000000000000000010000000000000000000"]) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="032304000000fcffffff0c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup3(r5, r6, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000340), 0xc610, 0x282) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f00000000c0)={0x2, 0x800, 0x2, {0x9, 0x400}, 0x6, 0xffff8001}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc800) sendfile(r0, r6, &(0x7f0000000300)=0x2, 0x6) 1.070375481s ago: executing program 2 (id=835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CDROM_GET_CAPABILITY(r6, 0x5331) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r8, 0x0) setreuid(0x0, 0x0) waitid(0x1, r5, 0x0, 0x4, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000180)={0x7c, "0f9607fda5cbde5493dcb7472f3235140563c27653e6ec89a81a12a27fa9fd00e996a06ff35fb92731035d261f7142fea7c8e55658e5b54820c84defdc7056c82b884cf7d5405a0f10ea232a5b6a0bdca0f1aad123cbd58a833ba563aa6328b91d64755cfa0fae615960466da4429600a1e4a68b1e37666ab4b5e1c37c6d3863"}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unshare(0x20020000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r10, &(0x7f00000003c0)='./file0\x00', 0x200) 1.007579229s ago: executing program 1 (id=836): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004e4000/0x4000)=nil, 0x4000, 0x0) munlockall() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) unshare(0x0) r1 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000280)={0x20000008}) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d2863834609532bbc93ed76339d8271ec66ea9500"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r5}, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_pidfd_open(r1, 0x0) unshare(0x800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 931.622411ms ago: executing program 3 (id=837): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) ioperm(0x0, 0x44, 0x7) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000080)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r7, &(0x7f0000000500)=[{0xe, 0xbe, 0xfb, 0xe, @tick=0x1000, {0x4, 0x5}, {0x4, 0x2c}, @note={0x2, 0x2, 0x3, 0xb9}}], 0x1c) splice(r4, 0x0, r3, 0x0, 0x2007, 0x8) splice(r6, 0x0, r5, 0x0, 0x1c, 0xe) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r1, r8, 0xfffffffffffffc01, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 860.358204ms ago: executing program 1 (id=838): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc04c5349, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x20000092}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0xbf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1d, 0x4007, @fd, 0x51de, 0x0, 0x0, 0x6, 0x0, {0x3}}) io_uring_enter(r5, 0x62a, 0x4c1, 0x43, 0x0, 0x5e) write$nbd(r2, &(0x7f0000000180)={0x67446698, 0x1, 0x2, 0x2, 0x1, "2871ea426fe84b008aa16b1a38fc4d039e87c97c5dfe5eaa24ad05b9d547a47470a78e31b7ff93be03b985a8c81999e512d94e3ae14d43"}, 0x47) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x54, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 723.499239ms ago: executing program 1 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff010000000000000000000000000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000014000400020000000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400"], 0x174}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 429.371511ms ago: executing program 0 (id=840): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x35315241}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001d00)={0x0, 0xc8, 0x0, [0x7702, 0xfffffffffffffff8, 0x78da4ab9, 0x1, 0x1], [0x83d, 0x6, 0x2, 0x8, 0x9, 0x2, 0x1000, 0x3, 0xf4, 0x2, 0x1, 0x2, 0x8000000000000001, 0x5, 0x0, 0x2, 0x7fff, 0x9, 0x7f, 0x8, 0xfffffffffffffff0, 0x1ffe00000, 0x9, 0x1, 0x7fff, 0x9, 0x4, 0x7000000000000, 0x9, 0x7, 0x0, 0x1, 0x7, 0x8, 0xd, 0x7fff, 0x2, 0xac, 0x400, 0x4, 0x4, 0x80, 0x874, 0xf2b, 0x0, 0x100, 0x3, 0x8000000000000000, 0x8, 0xef06, 0x0, 0x1, 0x1, 0x2, 0xfffffffffffffffb, 0x7, 0x5, 0x101, 0x4, 0x9, 0xff, 0x9950, 0xffff, 0x8000000000000000, 0x4, 0x3, 0x4, 0x88, 0x7d, 0x8, 0x1, 0x9, 0xd, 0x7, 0x8, 0x8, 0x3, 0x10001, 0x6, 0x7, 0x3, 0x6, 0x5, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x0, 0x9, 0x40, 0x101, 0x9, 0x100000001, 0xb, 0x9, 0x7, 0x100000000, 0x1000, 0x80, 0x38e, 0x6, 0x1, 0x7, 0x0, 0x5, 0x1, 0x5, 0x2, 0x0, 0x8, 0xffff, 0xfffffffffffffff0, 0xd5, 0x9, 0x5, 0x10df]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002140)={r1, "8ba65962b19acb382925498a60c70b78"}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000001c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) rt_sigsuspend(0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x1000, 0x20000814, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$BTRFS_IOC_SCRUB(r4, 0x4004480d, &(0x7f0000000900)={0x0, 0xffffffffffffff45, 0x100}) 179.599775ms ago: executing program 2 (id=841): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0xc83, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x427}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040894) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x3d0, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x5c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2f, 0x0, "499f2292ad8b7cff75436f66c4156c692afd353840ccaf3f7813bee25feb8879ad68a2d6271865099b3fae"}, @NL80211_BAND_60GHZ={0x26, 0x2, "34afbdf9c9bf7e30c525feb2dbb4ee82fca571d9af402e99c11b56d42b09fb24d77a"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="83265ca0b1c1"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x9}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x318, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6b}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x44e}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="57dfcc55c8df18f73c0d84de14d3f67186cc"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1c}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x32731b8c}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="5082d6defcbd70afeaba249a2e27aff1be43bb6983bd"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xa27cab3f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="a678de94973ddfe4f1fb4d65510b8179323183ca9956e812"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xffff31b4}, @NL80211_BAND_LC={0x8, 0x5, 0xa6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10000}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x695be4d9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40000000}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x30000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) (async) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000700), 0x200882, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1, 0x80000) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, &(0x7f0000000780)={0x1, 0x1, 0x3, 0x8, 0xf59, 0xc9}) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) (async) r7 = signalfd(r4, &(0x7f00000007c0)={[0x800, 0x8]}, 0x8) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000800)={{0xa, 0x6, 0x88c5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, {0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0xffffffffffffffff, {[0x6, 0x7, 0x7, 0xff, 0xc0, 0x7, 0x7f, 0x3085af26]}}, 0x5c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f00000008c0)="090922ed3b4e8b9b91a3a045e83bf3dfdaf354dcb66f26b88579bce6567b5129eb2076520cc2b70f7ad9071be5b8abec5ef2e6be58583e630878bd1a785b06edf77467ddad8c681c7eacedd5b34deb1e82fe484355981394671f8a12e5ff506d0a0dfd7349bb5cc0d6f74f67a3f340d3ab42af3ce76253416346821d06c3389f4bbf8350cffdc46dae4a658cf1a4a7885c3a4dd87ed2662e58d838c2b41510") (async) io_setup(0x7fff, &(0x7f0000000980)) (async) r9 = openat$nullb(0xffffff9c, &(0x7f00000009c0), 0x40400, 0x0) write(r9, &(0x7f0000000a00)="c41b314829f97c18efcaf80906f694c6c482cb3f96bcccd62cbdb6077da2c0754f3f6aeb6806732af57e48d596729393ea1a22accd66d00d88eb0d4785b9ced3f76a7ae9e3bc8b2b691b77ba1c1dea123a990b6ed2aeadf78e588a7a351dd7b654511778e60abcd8e14f4a0c2634ea8eb4abe97b74cf54f69522d47b691643d76391317e8759403347b65d40b31f7e3f4dc78f2a60605ccce7d623d2", 0x9c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) r11 = openat$hwrng(0xffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, 0x3, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf6d}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6}}]}, 0x54}}, 0x40800) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000c40)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000cc0)={0x401, 0x10, 0x5, 0x0, 0x0, [{{r11}, 0xffffffff}, {{r12}, 0x28e6}, {{r0}, 0x7}, {{r10}, 0x100000001}, {{r5}, 0x8}]}) bind$vsock_stream(r9, &(0x7f0000000d80)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000dc0)='subflow_check_data_avail\x00', r11, 0x0, 0x5}, 0x18) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r7) sendmsg$NL80211_CMD_SET_STATION(r13, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r14, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048094}, 0x8800) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44811}, 0x101) 179.252518ms ago: executing program 0 (id=842): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000008efd4febb85631571d6bca99dbe69f57afdd346a0cdde5a8ddbf100dbdab7de93c9f61bd97f01670aff7d79fe4644f8937d84e6936eabe9ad5394b6036dce6dd1ef83fe0aa401b658950bf4557e1132a7bc5383d4e0fee7b234cb031ad82a1b75c24f4523737edb5b9bf0d7f7b4f8dec99c418a96b78a25615b41fee3607127ce345255e93e9f6d8338c2fdd4209bc82d667bbf46c2f347c0e2aee1d957160ec2b1abae8a50e49259455dd91ab0cb16f01609a5718575a9b80034876e156bbcb2be5f84afabc6a457fd2be2285abee4b3d30335bb7e147595fdd089b57084643ad87e02ea9bc9ffea51c97645fcbc", @ANYRES16=r3, @ANYBLOB="010080000000fddbdf256600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70087000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) 59.091069ms ago: executing program 3 (id=843): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800a823083f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="00000000000000153ac6390eaad802e4169adac7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x8, 0x10}, 0xc) r4 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x121540, 0x44}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}}, 0x20000010) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount_setattr(r4, &(0x7f0000000380)='./file0\x00', 0x100, &(0x7f0000001600)={0x100000, 0x70, 0x80000, {r7}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000001640)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r3], &(0x7f0000000580)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x8, 0x80000, 0x7) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="9383ed07ab71214da5cb1da1a493312b556857745cfd43656c6ad2befbbfa4167f4c8fc1e0392a321061b0ca0537e2e070fd5f1b8a2535346d56ddf7d4d269f58ccee0d18f83ad8a89daa954bbaac8c33dd9c9852e6738e17ee7c3bc30b5ec3513652b212cf83ac270c5d2dc1dcec1cc18cddd4a0381984b763cb4627bb08f684c7b54dd0927702bd60785ab237dc078d0713afd8bfe9456328a8f", @ANYRES64=0x0], 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=844): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket(0x28, 0x5, 0x10000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x5a7e7000) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r2, @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030"], 0xb8) sched_getparam(r3, &(0x7f0000000540)) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10087' (ED25519) to the list of known hosts. [ 47.594627][ T5929] cgroup: Unknown subsys name 'net' [ 47.717946][ T5929] cgroup: Unknown subsys name 'cpuset' [ 47.724453][ T5929] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.654890][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.679377][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.681008][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.682565][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.686890][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.690130][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.691910][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.694565][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.697843][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.700365][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.702564][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.702877][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.706175][ T5304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.710389][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.717420][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.720070][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.720201][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.722840][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.726129][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.734649][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.739277][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.074710][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 53.176375][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 53.210248][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 53.287640][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.291271][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.294837][ T5956] bridge_slave_0: entered allmulticast mode [ 53.298570][ T5956] bridge_slave_0: entered promiscuous mode [ 53.311626][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.314668][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.317662][ T5956] bridge_slave_1: entered allmulticast mode [ 53.321512][ T5956] bridge_slave_1: entered promiscuous mode [ 53.348793][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 53.548411][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.647026][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.677047][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.680136][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.683534][ T5953] bridge_slave_0: entered allmulticast mode [ 53.687210][ T5953] bridge_slave_0: entered promiscuous mode [ 53.739334][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.742754][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.746856][ T5945] bridge_slave_0: entered allmulticast mode [ 53.751506][ T5945] bridge_slave_0: entered promiscuous mode [ 53.778477][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.781798][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.786470][ T5953] bridge_slave_1: entered allmulticast mode [ 53.790631][ T5953] bridge_slave_1: entered promiscuous mode [ 53.819100][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.822563][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.825604][ T5944] bridge_slave_0: entered allmulticast mode [ 53.829547][ T5944] bridge_slave_0: entered promiscuous mode [ 53.833527][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.836567][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.839754][ T5945] bridge_slave_1: entered allmulticast mode [ 53.844377][ T5945] bridge_slave_1: entered promiscuous mode [ 53.850752][ T5956] team0: Port device team_slave_0 added [ 53.880274][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.883871][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.887532][ T5944] bridge_slave_1: entered allmulticast mode [ 53.891769][ T5944] bridge_slave_1: entered promiscuous mode [ 53.953823][ T5956] team0: Port device team_slave_1 added [ 53.958176][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.991458][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.028234][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.034760][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.048000][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.127448][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.146425][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.149490][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.160266][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.170383][ T5953] team0: Port device team_slave_0 added [ 54.219489][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.222455][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.233678][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.240155][ T5953] team0: Port device team_slave_1 added [ 54.269198][ T5945] team0: Port device team_slave_0 added [ 54.281109][ T5945] team0: Port device team_slave_1 added [ 54.331544][ T5944] team0: Port device team_slave_0 added [ 54.337975][ T5944] team0: Port device team_slave_1 added [ 54.386122][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.388550][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.396910][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.402262][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.404548][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.412376][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.434535][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.437017][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.446006][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.499762][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.503136][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.512493][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.524129][ T5956] hsr_slave_0: entered promiscuous mode [ 54.526445][ T5956] hsr_slave_1: entered promiscuous mode [ 54.529161][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.531416][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.541992][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.546873][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.549050][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.558243][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.598916][ T5953] hsr_slave_0: entered promiscuous mode [ 54.601180][ T5953] hsr_slave_1: entered promiscuous mode [ 54.603531][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.606268][ T5953] Cannot create hsr debugfs directory [ 54.685357][ T5945] hsr_slave_0: entered promiscuous mode [ 54.688289][ T5945] hsr_slave_1: entered promiscuous mode [ 54.690896][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.694722][ T5945] Cannot create hsr debugfs directory [ 54.723738][ T5951] Bluetooth: hci1: command tx timeout [ 54.723747][ T5948] Bluetooth: hci3: command tx timeout [ 54.790062][ T5944] hsr_slave_0: entered promiscuous mode [ 54.793313][ T5944] hsr_slave_1: entered promiscuous mode [ 54.796032][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.799057][ T5944] Cannot create hsr debugfs directory [ 54.813233][ T5948] Bluetooth: hci0: command tx timeout [ 54.813259][ T5951] Bluetooth: hci2: command tx timeout [ 55.199900][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.206319][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.210748][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.222079][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.258978][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.266161][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.276526][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.280650][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.356976][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.370420][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.375517][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.390124][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.438588][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.462186][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.469260][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.473621][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.504723][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.520510][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.542265][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.555139][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.557565][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.566131][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.578474][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.580991][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.585691][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.587951][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.591215][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.593752][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.598734][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.621373][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.638678][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.641200][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.665770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.668115][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.719338][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.752215][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.758471][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.761401][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.776705][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.779078][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.857926][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.879140][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.885111][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.939231][ T5953] veth0_vlan: entered promiscuous mode [ 55.942893][ T5944] veth0_vlan: entered promiscuous mode [ 55.961157][ T5953] veth1_vlan: entered promiscuous mode [ 55.967779][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.972623][ T5944] veth1_vlan: entered promiscuous mode [ 55.985011][ T5945] veth0_vlan: entered promiscuous mode [ 55.998188][ T5945] veth1_vlan: entered promiscuous mode [ 56.029618][ T5953] veth0_macvtap: entered promiscuous mode [ 56.034698][ T5944] veth0_macvtap: entered promiscuous mode [ 56.040546][ T5953] veth1_macvtap: entered promiscuous mode [ 56.050717][ T5944] veth1_macvtap: entered promiscuous mode [ 56.080320][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.087271][ T5956] veth0_vlan: entered promiscuous mode [ 56.089765][ T5945] veth0_macvtap: entered promiscuous mode [ 56.096475][ T5945] veth1_macvtap: entered promiscuous mode [ 56.108302][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.113359][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.124851][ T5956] veth1_vlan: entered promiscuous mode [ 56.130416][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.135569][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.139373][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.142509][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.146683][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.169837][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.172729][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.177557][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.181574][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.188976][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.206039][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.221920][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.225365][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.228993][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.232584][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.292785][ T5956] veth0_macvtap: entered promiscuous mode [ 56.301606][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.301815][ T5956] veth1_macvtap: entered promiscuous mode [ 56.305557][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.337270][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.341485][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.349989][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.350790][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.352694][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.360341][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.382598][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.385966][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.388891][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.392022][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.416161][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.416960][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.419535][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.422549][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.424995][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.477227][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.479743][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.502655][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.505343][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.549190][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.551727][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.600765][ T6045] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 56.604853][ T6045] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.803751][ T5951] Bluetooth: hci3: command tx timeout [ 56.803822][ T5948] Bluetooth: hci1: command tx timeout [ 56.893435][ T5948] Bluetooth: hci2: command tx timeout [ 56.895298][ T5948] Bluetooth: hci0: command tx timeout [ 57.603617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.780816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.883150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.923259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.927866][ T6066] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 57.930218][ T6066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.935017][ T6066] vhci_hcd vhci_hcd.0: Device attached [ 57.941745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.950718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.967117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.970603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.973816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.976868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.085034][ T6073] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11'. [ 58.124913][ T6075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.130489][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 58.236095][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 58.258248][ T6013] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 58.380051][ T6070] vhci_hcd: connection reset by peer [ 58.398800][ T1143] vhci_hcd: stop threads [ 58.623641][ T6022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 58.667889][ T1143] vhci_hcd: release socket [ 58.670162][ T1143] vhci_hcd: disconnect device [ 58.893952][ T5951] Bluetooth: hci3: command tx timeout [ 58.893959][ T5948] Bluetooth: hci1: command tx timeout [ 58.973226][ T5951] Bluetooth: hci0: command tx timeout [ 58.973240][ T5948] Bluetooth: hci2: command tx timeout [ 59.307281][ T6093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 59.458620][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.463569][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.537672][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 59.605529][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.613695][ T6111] xt_SECMARK: invalid mode: 0 [ 59.638771][ T6111] can0: slcan on pty26. [ 59.660577][ T40] audit: type=1804 audit(1750916797.260:2): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.20" name="/newroot/4/bus" dev="tmpfs" ino=40 res=1 errno=0 [ 59.993151][ T6032] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 60.166133][ T6032] usb 6-1: config 0 has no interfaces? [ 60.171785][ T6032] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 60.179736][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.197514][ T6032] usb 6-1: config 0 descriptor?? [ 60.392713][ T6118] fuse: Unknown parameter '0000000000000000000400000000000000000004' [ 60.433294][ T6032] usb 6-1: USB disconnect, device number 2 [ 60.963910][ T5951] Bluetooth: hci3: command tx timeout [ 60.973156][ T5951] Bluetooth: hci1: command tx timeout [ 61.043118][ T5951] Bluetooth: hci2: command tx timeout [ 61.053583][ T5951] Bluetooth: hci0: command tx timeout [ 61.374405][ T6099] can0 (unregistered): slcan off pty26. [ 61.546204][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.616760][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 61.713222][ T61] usb 6-1: device descriptor read/64, error -71 [ 61.963117][ T61] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.104445][ T61] usb 6-1: device descriptor read/64, error -71 [ 62.111014][ T6032] IPVS: starting estimator thread 0... [ 62.213280][ T6186] IPVS: using max 44 ests per chain, 105600 per kthread [ 62.273625][ T61] usb usb6-port1: attempt power cycle [ 62.387471][ T40] audit: type=1800 audit(1750916799.990:3): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 62.397411][ T6191] loop6: detected capacity change from 0 to 524287999 [ 62.789630][ T6195] mkiss: ax0: crc mode is auto. [ 62.918548][ T61] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.932872][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 62.962936][ T61] usb 6-1: device descriptor read/8, error -71 [ 62.984261][ T60] IPVS: starting estimator thread 0... [ 63.073284][ T6207] IPVS: using max 24 ests per chain, 57600 per kthread [ 63.274830][ T6214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.284685][ T40] audit: type=1800 audit(1750916800.870:4): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 63.298785][ T6215] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 63.426109][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.441754][ T6013] vhci_hcd: vhci_device speed not set [ 63.472135][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.474808][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.500497][ T61] usb 6-1: device descriptor read/8, error -71 [ 63.527147][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.533999][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.570957][ T6208] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.576961][ T6208] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.580165][ T6208] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.583424][ T6208] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.613278][ T61] usb usb6-port1: unable to enumerate USB device [ 63.889966][ T6222] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 64.076717][ T6226] syz.2.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.246742][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.43'. [ 64.350926][ T6236] nbd: must specify a device to reconfigure [ 64.613168][ T1469] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.653191][ T6013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.773211][ T1469] usb 8-1: Using ep0 maxpacket: 16 [ 64.777506][ T1469] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 64.780948][ T1469] usb 8-1: config 0 has no interface number 0 [ 64.788352][ T1469] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 64.792234][ T1469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.795825][ T1469] usb 8-1: Product: syz [ 64.797708][ T1469] usb 8-1: Manufacturer: syz [ 64.799753][ T1469] usb 8-1: SerialNumber: syz [ 64.804807][ T1469] usb 8-1: config 0 descriptor?? [ 64.813847][ T1469] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.69/input/input5 [ 64.855250][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 64.859151][ T6013] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 64.861683][ T6013] usb 6-1: config 0 has no interface number 0 [ 64.863925][ T6013] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.867425][ T6013] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.872208][ T6013] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 64.875314][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 64.877841][ T6013] usb 6-1: Product: syz [ 64.879223][ T6013] usb 6-1: SerialNumber: syz [ 64.882228][ T6013] usb 6-1: config 0 descriptor?? [ 64.888394][ T6013] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 64.896576][ T6013] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input6 [ 64.921696][ T6241] netlink: 19 bytes leftover after parsing attributes in process `syz.2.47'. [ 65.017979][ T5339] bcm5974 8-1:0.69: could not read from device [ 65.022720][ T5339] bcm5974 8-1:0.69: could not read from device [ 65.026071][ T1469] usb 8-1: USB disconnect, device number 2 [ 65.030307][ T5339] bcm5974 8-1:0.69: could not read from device [ 65.261650][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.262735][ T5992] usb 6-1: USB disconnect, device number 7 [ 65.264025][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 65.278379][ T5992] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 65.564264][ T40] audit: type=1326 audit(1750916803.170:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.52" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 65.806702][ T40] audit: type=1800 audit(1750916803.410:6): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.52" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 65.883157][ T5992] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 66.036173][ T5992] usb 6-1: config 0 has no interfaces? [ 66.041116][ T5992] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 66.045129][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.048722][ T5992] usb 6-1: Product: syz [ 66.050348][ T5992] usb 6-1: Manufacturer: syz [ 66.052093][ T5992] usb 6-1: SerialNumber: syz [ 66.055429][ T5992] usb 6-1: config 0 descriptor?? [ 66.284466][ T6256] [U]  [ 66.479867][ T6268] random: crng reseeded on system resumption [ 66.486541][ T6268] bpf: Bad value for 'gid' [ 68.337222][ T6314] ======================================================= [ 68.337222][ T6314] WARNING: The mand mount option has been deprecated and [ 68.337222][ T6314] and is ignored by this kernel. Remove the mand [ 68.337222][ T6314] option from the mount to silence this warning. [ 68.337222][ T6314] ======================================================= [ 68.357448][ T6313] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 68.416830][ T6315] netfs: Couldn't get user pages (rc=-14) [ 68.437285][ T6313] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 68.550305][ T6013] usb 6-1: USB disconnect, device number 8 [ 68.597757][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.656227][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.72'. [ 68.659364][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 68.663728][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 68.748357][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 69.142627][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 69.475352][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.478354][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.593723][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.599526][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.665621][ T6345] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.669245][ T6345] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.678935][ T6345] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.678974][ T6345] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.957449][ T6360] fuse: Unknown parameter 'rootmo0000004o}T0000' [ 70.143783][ T6362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.562595][ T6402] netlink: 92 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.577925][ T6398] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 70.635319][ T6407] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 70.762458][ T6411] bridge_slave_0: left allmulticast mode [ 70.770953][ T6411] bridge_slave_0: left promiscuous mode [ 70.773189][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.778975][ T6411] bridge_slave_1: left allmulticast mode [ 70.780865][ T6411] bridge_slave_1: left promiscuous mode [ 70.782995][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.785607][ T837] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 70.793290][ T6411] bond0: (slave bond_slave_0): Releasing backup interface [ 70.798260][ T6411] bond0: (slave bond_slave_1): Releasing backup interface [ 70.814132][ T6411] team0: Port device team_slave_0 removed [ 70.818388][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.820576][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.822458][ T6411] team0: Port device team_slave_1 removed [ 70.826788][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.830034][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.835094][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.837545][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.923089][ T837] usb 7-1: device descriptor read/64, error -71 [ 71.116480][ T6427] warning: `syz.3.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.125973][ T6427] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.128258][ T6427] overlayfs: failed to set xattr on upper [ 71.130072][ T6427] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.132235][ T6427] overlayfs: ...falling back to uuid=null. [ 71.193328][ T837] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 71.265159][ T6406] syz.1.93 (6406): drop_caches: 2 [ 71.343274][ T837] usb 7-1: device descriptor read/64, error -71 [ 71.464469][ T837] usb usb7-port1: attempt power cycle [ 71.568240][ T6031] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 71.735476][ T6031] usb 8-1: not running at top speed; connect to a high speed hub [ 71.739117][ T6031] usb 8-1: config 1 interface 0 has no altsetting 0 [ 71.742898][ T6031] usb 8-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 71.745985][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.748571][ T6031] usb 8-1: Product: Љ [ 71.750024][ T6031] usb 8-1: Manufacturer: Ⰱ [ 71.751579][ T6031] usb 8-1: SerialNumber: ӿ [ 71.813147][ T837] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 71.833612][ T837] usb 7-1: device descriptor read/8, error -71 [ 71.969895][ T6450] nbd: must specify a device to reconfigure [ 71.986332][ T6031] usbhid 8-1:1.0: can't add hid device: -71 [ 71.988374][ T6031] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 71.995360][ T6031] usb 8-1: USB disconnect, device number 3 [ 72.073322][ T837] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 72.104359][ T837] usb 7-1: device descriptor read/8, error -71 [ 72.208674][ T6462] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.219811][ T6462] CIFS mount error: No usable UNC path provided in device string! [ 72.219811][ T6462] [ 72.223353][ T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.224471][ T837] usb usb7-port1: unable to enumerate USB device [ 72.226123][ T6462] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.383148][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 72.386078][ T60] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 72.388684][ T60] usb 6-1: config 0 has no interface number 0 [ 72.393584][ T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 72.397216][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.400144][ T60] usb 6-1: Product: syz [ 72.401521][ T60] usb 6-1: Manufacturer: syz [ 72.403084][ T60] usb 6-1: SerialNumber: syz [ 72.406028][ T60] usb 6-1: config 0 descriptor?? [ 72.412681][ T60] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.69/input/input8 [ 72.617137][ T10] usb 6-1: USB disconnect, device number 9 [ 72.617173][ T5339] bcm5974 6-1:0.69: could not read from device [ 72.622769][ T5339] bcm5974 6-1:0.69: could not read from device [ 72.625495][ T5946] bcm5974 6-1:0.69: could not read from device [ 73.095124][ T6031] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 73.245662][ T6031] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.249285][ T6031] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.253609][ T6031] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.257187][ T6031] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.263491][ T6031] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.266345][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.268902][ T6031] usb 8-1: Product: syz [ 73.270220][ T6031] usb 8-1: Manufacturer: syz [ 73.275444][ T6031] cdc_wdm 8-1:1.0: skipping garbage [ 73.277165][ T6031] cdc_wdm 8-1:1.0: skipping garbage [ 73.278832][ T6031] cdc_wdm 8-1:1.0: skipping garbage [ 73.281010][ T6031] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 73.393184][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 73.478016][ T5992] usb 8-1: USB disconnect, device number 4 [ 73.490059][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 73.543131][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 73.547058][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.551497][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.560444][ T60] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 73.564403][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.575834][ T60] usb 6-1: config 0 descriptor?? [ 73.613702][ T6494] 9pnet_fd: Insufficient options for proto=fd [ 73.617460][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 73.617936][ T6494] process 'syz.0.120' launched './file0' with NULL argv: empty string added [ 73.684866][ T6482] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 73.725439][ T6504] ip_vti0: entered promiscuous mode [ 73.730532][ T6504] Zero length message leads to an empty skb [ 74.038205][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 74.044772][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.048607][ T60] usb 6-1: USB disconnect, device number 10 [ 74.113557][ T6519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 74.115658][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.118631][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 74.184237][ T6521] vhci_hcd: connection closed [ 74.184952][ T46] vhci_hcd: stop threads [ 74.187858][ T46] vhci_hcd: release socket [ 74.187873][ T46] vhci_hcd: disconnect device [ 74.249934][ T6526] loop6: detected capacity change from 0 to 524287999 [ 75.008609][ T6544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.093497][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 75.099634][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.108883][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 75.130707][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.150102][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 75.419395][ T6573] netlink: 84 bytes leftover after parsing attributes in process `syz.3.144'. [ 76.064075][ T6013] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.097044][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 76.224427][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.227982][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.230907][ T6013] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.235137][ T6013] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.237903][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.242176][ T6013] usb 8-1: config 0 descriptor?? [ 76.481283][ T6013] usbhid 8-1:0.0: can't add hid device: -71 [ 76.483591][ T6013] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 76.489076][ T6013] usb 8-1: USB disconnect, device number 5 [ 77.039298][ T6594] program syz.3.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.079789][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 78.176287][ T6616] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 78.178435][ T6616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.181975][ T6616] vhci_hcd vhci_hcd.0: Device attached [ 78.206444][ T6616] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure [ 78.413629][ T6013] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 79.157286][ T6617] vhci_hcd: connection reset by peer [ 79.160594][ T46] vhci_hcd: stop threads [ 79.162640][ T46] vhci_hcd: release socket [ 79.165229][ T46] vhci_hcd: disconnect device [ 79.427671][ T6662] block device autoloading is deprecated and will be removed. [ 79.551312][ T40] audit: type=1326 audit(1750916817.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.163" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffe0000 [ 80.133606][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 80.645123][ T5951] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.649367][ T5951] Bluetooth: hci0: Injecting HCI hardware error event [ 80.655356][ T5948] Bluetooth: hci0: hardware error 0x00 [ 80.766290][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 80.776863][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 80.782665][ T6702] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.166' sets config #2147483646 [ 80.845909][ T6704] Can't find ip_set type nl802154 [ 80.932326][ T6714] netlink: 18 bytes leftover after parsing attributes in process `syz.0.178'. [ 81.046253][ T1881] cfg80211: failed to load regulatory.db [ 81.240314][ T6730] netlink: 236 bytes leftover after parsing attributes in process `syz.3.185'. [ 81.281938][ T6733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.403234][ T837] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 81.554731][ T837] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 81.557411][ T837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.560724][ T837] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.563829][ T837] usb 6-1: config 1 has no interface number 1 [ 81.565955][ T837] usb 6-1: too many endpoints for config 1 interface 4 altsetting 0: 255, using maximum allowed: 30 [ 81.569834][ T837] usb 6-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 81.575370][ T837] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.578178][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.580815][ T837] usb 6-1: SerialNumber: syz [ 81.826769][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.290068][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.0.190'. [ 82.295065][ T6748] 0XD: renamed from macvtap0 (while UP) [ 82.298882][ T6748] 0XD: entered allmulticast mode [ 82.300688][ T6748] veth0_macvtap: entered allmulticast mode [ 82.302830][ T6748] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 82.733165][ T5948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 83.006291][ T6760] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.513805][ T6013] vhci_hcd: vhci_device speed not set [ 83.660542][ T6785] netlink: 'syz.2.200': attribute type 4 has an invalid length. [ 83.666590][ T6785] netlink: 'syz.2.200': attribute type 29 has an invalid length. [ 83.843110][ T5948] Bluetooth: hci4: command 0xfc11 tx timeout [ 83.844754][ T5951] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 83.867758][ T837] usb 6-1: 0:2 : does not exist [ 83.882228][ T837] usb 6-1: USB disconnect, device number 11 [ 83.945158][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.148546][ T6789] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 84.633289][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.803069][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 84.806703][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.810348][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.818475][ T53] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 84.826544][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.837402][ T53] usb 8-1: config 0 descriptor?? [ 85.052109][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 85.057242][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.065935][ T53] usb 8-1: USB disconnect, device number 6 [ 86.723256][ T1469] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 86.853312][ T1469] usb 7-1: device descriptor read/64, error -71 [ 87.093235][ T1469] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 87.121954][ T6848] XFS (nbd3): no-recovery mounts must be read-only. [ 87.233936][ T1469] usb 7-1: device descriptor read/64, error -71 [ 87.353445][ T1469] usb usb7-port1: attempt power cycle [ 87.723186][ T1469] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 87.753917][ T1469] usb 7-1: device descriptor read/8, error -71 [ 87.978887][ T6880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.013179][ T1469] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 88.044409][ T1469] usb 7-1: device descriptor read/8, error -71 [ 88.104303][ T6886] netlink: 232 bytes leftover after parsing attributes in process `syz.1.229'. [ 88.107276][ T6886] netlink: 232 bytes leftover after parsing attributes in process `syz.1.229'. [ 88.111779][ T6887] netlink: 232 bytes leftover after parsing attributes in process `syz.1.229'. [ 88.116707][ T6887] netlink: 232 bytes leftover after parsing attributes in process `syz.1.229'. [ 88.184724][ T1469] usb usb7-port1: unable to enumerate USB device [ 88.185074][ T6889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.280655][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 89.285953][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 89.390462][ T6913] syz.1.237: attempt to access beyond end of device [ 89.390462][ T6913] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 89.395466][ T6913] (syz.1.237,6913,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 89.397893][ T6913] (syz.1.237,6913,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 89.400120][ T6913] (syz.1.237,6913,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 89.402791][ T6913] (syz.1.237,6913,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 89.505602][ T6913] /dev/sr0: Can't open blockdev [ 89.562259][ T6924] macvlan2: entered promiscuous mode [ 89.564840][ T6924] macvlan2: entered allmulticast mode [ 89.567068][ T6924] bond0: entered promiscuous mode [ 89.568768][ T6924] bond_slave_0: entered promiscuous mode [ 89.570664][ T6924] bond_slave_1: entered promiscuous mode [ 89.573238][ T6924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.576665][ T6924] bond0: left promiscuous mode [ 89.578224][ T6924] bond_slave_0: left promiscuous mode [ 89.580064][ T6924] bond_slave_1: left promiscuous mode [ 89.610606][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 89.659679][ T6927] binder: 6921:6927 unknown command 0 [ 89.661638][ T6927] binder: 6921:6927 ioctl c0306201 80000480 returned -22 [ 89.932147][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 90.140808][ T6941] nbd: must specify a device to reconfigure [ 90.406751][ T1469] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.553160][ T1469] usb 8-1: Using ep0 maxpacket: 16 [ 90.557862][ T1469] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 90.560831][ T1469] usb 8-1: config 0 has no interface number 0 [ 90.565553][ T1469] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 90.569376][ T1469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.577406][ T1469] usb 8-1: Product: syz [ 90.578881][ T1469] usb 8-1: Manufacturer: syz [ 90.580456][ T1469] usb 8-1: SerialNumber: syz [ 90.585306][ T1469] usb 8-1: config 0 descriptor?? [ 90.590177][ T1469] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.69/input/input9 [ 90.795712][ T5339] bcm5974 8-1:0.69: could not read from device [ 90.798556][ T5339] bcm5974 8-1:0.69: could not read from device [ 90.849797][ T5339] bcm5974 8-1:0.69: could not read from device [ 90.850326][ T1469] usb 8-1: USB disconnect, device number 7 [ 91.456261][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.585881][ T6950] syz.2.250 (6950) used greatest stack depth: 17272 bytes left [ 91.653786][ T6977] [U]  [ 91.654817][ T6977] [U] K{ [ 91.655829][ T6977] [U] t 1ŠFfˊ`GJgo/mC [ 91.658236][ T6977] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 91.663898][ T6977] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 91.667372][ T6977] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 91.680699][ T6977] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 91.689155][ T6977] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 91.692776][ T6977] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 91.696811][ T6977] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 91.725760][ T6977] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 91.728620][ T6977] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 91.734207][ T6977] [U] 22Ʃx?0;3u [ 91.735770][ T6977] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 91.744490][ T6977] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 91.747460][ T6977] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 91.750122][ T6977] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 91.752010][ T6977] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 91.756084][ T6977] [U] ec [ 91.757272][ T6977] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 91.767484][ T6976] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 91.826211][ T6982] binder: 6981:6982 ioctl c0306201 80000380 returned -14 [ 91.884158][ T6983] binder: 6981:6983 ioctl 8400941f 80000500 returned -22 [ 92.804187][ T1469] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 93.133132][ T1469] usb 8-1: Using ep0 maxpacket: 32 [ 93.140513][ T1469] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 93.144055][ T1469] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.149387][ T1469] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.155071][ T1469] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.160972][ T1469] usb 8-1: config 0 interface 0 has no altsetting 0 [ 93.168039][ T1469] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.172179][ T1469] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.176399][ T1469] usb 8-1: Product: syz [ 93.178318][ T1469] usb 8-1: Manufacturer: syz [ 93.180629][ T1469] usb 8-1: SerialNumber: syz [ 93.185193][ T1469] usb 8-1: config 0 descriptor?? [ 93.190117][ T1469] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.198170][ T1469] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.299539][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 93.340954][ T7029] nbd: must specify a device to reconfigure [ 93.389887][ T60] usb 8-1: USB disconnect, device number 8 [ 93.396524][ T60] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 93.583157][ T5999] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 93.589809][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'. [ 93.681181][ T7034] FAULT_INJECTION: forcing a failure. [ 93.681181][ T7034] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.686815][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.1.277 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 93.686842][ T7034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.686850][ T7034] Call Trace: [ 93.686855][ T7034] [ 93.686860][ T7034] dump_stack_lvl+0x16c/0x1f0 [ 93.686881][ T7034] should_fail_ex+0x512/0x640 [ 93.686900][ T7034] _copy_from_user+0x2e/0xd0 [ 93.686918][ T7034] io_submit_one+0xbb/0x1df0 [ 93.686935][ T7034] ? __lock_acquire+0xb8a/0x1c90 [ 93.686952][ T7034] ? __pfx_io_submit_one+0x10/0x10 [ 93.686971][ T7034] ? __might_fault+0xe3/0x190 [ 93.686986][ T7034] ? __might_fault+0x13b/0x190 [ 93.687004][ T7034] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 93.687023][ T7034] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 93.687042][ T7034] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 93.687061][ T7034] ? rcu_is_watching+0x12/0xc0 [ 93.687072][ T7034] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 93.687091][ T7034] __do_fast_syscall_32+0x7c/0x3a0 [ 93.687109][ T7034] do_fast_syscall_32+0x32/0x80 [ 93.687126][ T7034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.687140][ T7034] RIP: 0023:0xf70ae579 [ 93.687149][ T7034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.687159][ T7034] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 93.687170][ T7034] RAX: ffffffffffffffda RBX: 00000000f5054000 RCX: 0000000000000001 [ 93.687176][ T7034] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.687182][ T7034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.687188][ T7034] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.687194][ T7034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.687207][ T7034] [ 93.733130][ T5999] usb 7-1: Using ep0 maxpacket: 16 [ 93.762122][ T5999] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 93.764861][ T5999] usb 7-1: config 0 has no interface number 0 [ 93.768366][ T5999] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 93.771169][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.774245][ T5999] usb 7-1: Product: syz [ 93.775552][ T5999] usb 7-1: Manufacturer: syz [ 93.777023][ T5999] usb 7-1: SerialNumber: syz [ 93.780208][ T5999] usb 7-1: config 0 descriptor?? [ 93.785105][ T5999] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.69/input/input10 [ 93.934537][ T7046] syz_tun: entered promiscuous mode [ 93.972338][ T7050] option changes via remount are deprecated (pid=7049 comm=syz.3.282) [ 93.998441][ T5999] usb 7-1: USB disconnect, device number 10 [ 93.998462][ T5339] bcm5974 7-1:0.69: could not read from device [ 94.005714][ T5946] bcm5974 7-1:0.69: could not read from device [ 94.014320][ T7053] netlink: 52 bytes leftover after parsing attributes in process `syz.0.284'. [ 95.307179][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 95.329181][ T7081] netlink: 'syz.0.288': attribute type 11 has an invalid length. [ 95.332010][ T7081] netlink: 448 bytes leftover after parsing attributes in process `syz.0.288'. [ 95.359059][ T7083] nbd: must specify a device to reconfigure [ 95.603283][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.773130][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 95.776155][ T60] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 95.778688][ T60] usb 8-1: config 0 has no interface number 0 [ 95.783766][ T60] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 95.786660][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.789410][ T60] usb 8-1: Product: syz [ 95.791032][ T60] usb 8-1: Manufacturer: syz [ 95.792888][ T60] usb 8-1: SerialNumber: syz [ 95.796523][ T60] usb 8-1: config 0 descriptor?? [ 95.806665][ T60] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.69/input/input11 [ 95.838024][ T7089] block device autoloading is deprecated and will be removed. [ 96.011842][ T5339] bcm5974 8-1:0.69: could not read from device [ 96.014875][ T6013] usb 8-1: USB disconnect, device number 9 [ 96.021943][ T5946] bcm5974 8-1:0.69: could not read from device [ 96.733730][ T7093] netlink: 768 bytes leftover after parsing attributes in process `syz.0.296'. [ 96.743756][ T7097] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.297'. [ 96.754437][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 96.758160][ T7099] netlink: 'syz.3.298': attribute type 30 has an invalid length. [ 96.766800][ T7099] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.770056][ T7099] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.774149][ T7099] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.777866][ T7099] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.788147][ T7099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.298'. [ 96.792241][ T7100] Cannot find map_set index 0 as target [ 96.899137][ T7107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.925901][ T7109] trusted_key: encrypted_key: insufficient parameters specified [ 96.929858][ T7109] trusted_key: encrypted_key: insufficient parameters specified [ 97.384396][ T7130] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 97.710577][ T40] audit: type=1326 audit(2000000004.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.310" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 97.827296][ T7145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 97.829344][ T7145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.832518][ T7145] vhci_hcd vhci_hcd.0: Device attached [ 97.981420][ T7146] vhci_hcd: connection closed [ 97.983603][ T1137] vhci_hcd: stop threads [ 97.987600][ T1137] vhci_hcd: release socket [ 97.989261][ T1137] vhci_hcd: disconnect device [ 98.033170][ T1469] vhci_hcd: vhci_device speed not set [ 99.307674][ T7169] usb 2-1: USB disconnect, device number 2 [ 99.392918][ T7172] 9pnet_fd: Insufficient options for proto=fd [ 99.412663][ T7172] netlink: 14 bytes leftover after parsing attributes in process `syz.2.320'. [ 99.471939][ T7172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.476622][ T7172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.480022][ T7172] bond0 (unregistering): Released all slaves [ 99.851563][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 99.854784][ T7180] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 99.858298][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 99.861703][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 99.865355][ T7179] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 99.867764][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 100.051669][ T7190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 100.054421][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.057865][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 100.062628][ T7190] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 100.064761][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.068361][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 100.071460][ T7190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.076215][ T7190] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 100.078330][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.080841][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 100.084199][ T7190] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 100.086451][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.089368][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 100.098013][ T7190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 100.100078][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.103202][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 100.109499][ T7190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.113689][ T7190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.117639][ T7190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.124929][ T7190] vhci_hcd vhci_hcd.0: port 0 already used [ 100.146032][ T7199] vhci_hcd: connection closed [ 100.146175][ T7197] vhci_hcd: connection closed [ 100.146201][ T7195] vhci_hcd: connection closed [ 100.148303][ T7191] vhci_hcd: connection closed [ 100.149360][ T7193] vhci_hcd: connection closed [ 100.150852][ T75] vhci_hcd: stop threads [ 100.156615][ T75] vhci_hcd: release socket [ 100.158352][ T75] vhci_hcd: disconnect device [ 100.159940][ T75] vhci_hcd: stop threads [ 100.161380][ T75] vhci_hcd: release socket [ 100.162811][ T75] vhci_hcd: disconnect device [ 100.164485][ T75] vhci_hcd: stop threads [ 100.165779][ T75] vhci_hcd: release socket [ 100.167237][ T75] vhci_hcd: disconnect device [ 100.168778][ T75] vhci_hcd: stop threads [ 100.170063][ T75] vhci_hcd: release socket [ 100.171505][ T75] vhci_hcd: disconnect device [ 100.173086][ T75] vhci_hcd: stop threads [ 100.174438][ T75] vhci_hcd: release socket [ 100.175869][ T75] vhci_hcd: disconnect device [ 100.233230][ T60] vhci_hcd: vhci_device speed not set [ 100.574859][ T7211] sctp: failed to load transform for md5: -2 [ 101.018550][ T40] audit: type=1326 audit(2000000007.859:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.338" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 101.582851][ T7249] netlink: 112 bytes leftover after parsing attributes in process `syz.1.338'. [ 101.785597][ T7257] batman_adv: batadv0: Adding interface: ip6gretap1 [ 101.787827][ T7257] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.796008][ T7257] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 101.887910][ T7261] nbd: must specify a device to reconfigure [ 102.153333][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.603258][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 102.606436][ T61] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 102.608971][ T61] usb 6-1: config 0 has no interface number 0 [ 102.612638][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 102.616151][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.618784][ T61] usb 6-1: Product: syz [ 102.620105][ T61] usb 6-1: Manufacturer: syz [ 102.621646][ T61] usb 6-1: SerialNumber: syz [ 102.655292][ T7271] netlink: 'syz.0.347': attribute type 4 has an invalid length. [ 102.656547][ T61] usb 6-1: config 0 descriptor?? [ 102.667628][ T61] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.69/input/input13 [ 102.703492][ T7271] netlink: 'syz.0.347': attribute type 4 has an invalid length. [ 102.872504][ T5339] bcm5974 6-1:0.69: could not read from device [ 102.883136][ T5339] bcm5974 6-1:0.69: could not read from device [ 102.909782][ T5339] bcm5974 6-1:0.69: could not read from device [ 102.920283][ T61] usb 6-1: USB disconnect, device number 12 [ 102.982626][ T7278] syz_tun: entered promiscuous mode [ 102.985584][ T7278] batadv_slave_0: entered promiscuous mode [ 103.030439][ T7282] pim6reg: tun_chr_ioctl cmd 1074812117 [ 103.305249][ T7293] syzkaller1: entered promiscuous mode [ 103.307040][ T7293] syzkaller1: entered allmulticast mode [ 103.314829][ T7293] netlink: 76 bytes leftover after parsing attributes in process `syz.3.355'. [ 103.404092][ T7299] overlayfs: missing 'lowerdir' [ 104.113421][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 104.131473][ T7319] syz.1.365(7319): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 104.293147][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 104.299699][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.303482][ T7322] overlayfs: missing 'lowerdir' [ 104.304038][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.308895][ T53] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 104.311765][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.321616][ T53] usb 8-1: config 0 descriptor?? [ 104.486753][ T7329] nbd: must specify a device to reconfigure [ 104.500945][ T7331] overlayfs: failed to clone lowerpath [ 104.723406][ T61] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 104.751379][ T53] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 104.888309][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 104.894928][ T61] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 104.898392][ T61] usb 7-1: config 0 has no interface number 0 [ 104.902768][ T61] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 104.906817][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.910095][ T61] usb 7-1: Product: syz [ 104.911817][ T61] usb 7-1: Manufacturer: syz [ 104.914138][ T61] usb 7-1: SerialNumber: syz [ 104.925363][ T61] usb 7-1: config 0 descriptor?? [ 104.933116][ T61] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.69/input/input14 [ 104.937587][ T7317] bond0: entered promiscuous mode [ 104.939702][ T7317] bond_slave_0: entered promiscuous mode [ 104.941891][ T7317] bond_slave_1: entered promiscuous mode [ 105.008554][ T10] usb 8-1: USB disconnect, device number 10 [ 105.136029][ T5339] bcm5974 7-1:0.69: could not read from device [ 105.140372][ T61] bcm5974 7-1:0.69: could not read from device [ 105.150931][ T5339] bcm5974 7-1:0.69: could not read from device [ 105.165524][ T61] input: failed to attach handler mousedev to device input14, error: -5 [ 105.165701][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 105.172512][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 105.178390][ T5339] bcm5974 7-1:0.69: could not read from device [ 105.181120][ T61] usb 7-1: USB disconnect, device number 11 [ 105.181323][ T5339] bcm5974 7-1:0.69: could not read from device [ 105.402964][ T40] audit: type=1800 audit(2000000012.239:10): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="bus" dev="overlay" ino=405 res=0 errno=0 [ 105.415632][ T40] audit: type=1800 audit(2000000012.249:11): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="file1" dev="overlay" ino=406 res=0 errno=0 [ 105.604077][ T7383] random: crng reseeded on system resumption [ 106.196503][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 106.206851][ T7405] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 106.325980][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 106.594203][ T7431] overlayfs: failed to resolve './file0': -2 [ 106.647640][ T7435] nbd: must specify a device to reconfigure [ 106.893349][ T5999] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 107.053110][ T5999] usb 7-1: Using ep0 maxpacket: 16 [ 107.058390][ T5999] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 107.060979][ T5999] usb 7-1: config 0 has no interface number 0 [ 107.064885][ T5999] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 107.067999][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.070506][ T5999] usb 7-1: Product: syz [ 107.072125][ T5999] usb 7-1: Manufacturer: syz [ 107.073726][ T5999] usb 7-1: SerialNumber: syz [ 107.076681][ T5999] usb 7-1: config 0 descriptor?? [ 107.081047][ T5999] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.69/input/input15 [ 107.288294][ T5339] bcm5974 7-1:0.69: could not read from device [ 107.294615][ T5339] bcm5974 7-1:0.69: could not read from device [ 107.296465][ T5999] usb 7-1: USB disconnect, device number 12 [ 107.823390][ T5999] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 107.987051][ T5999] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.996817][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.001144][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.005789][ T5999] usb 6-1: Product: syz [ 108.007718][ T5999] usb 6-1: Manufacturer: syz [ 108.009746][ T5999] usb 6-1: SerialNumber: syz [ 108.244691][ T5999] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.452331][ T10] usb 6-1: USB disconnect, device number 13 [ 108.461195][ T10] usblp0: removed [ 108.528487][ T7443] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:21 [ 108.995596][ T7466] nbd: must specify a device to reconfigure [ 109.129262][ T7476] netlink: 'syz.1.412': attribute type 27 has an invalid length. [ 109.164151][ T40] audit: type=1326 audit(2000000016.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.0.410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.170754][ T40] audit: type=1326 audit(2000000016.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.0.410" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.173696][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.177498][ T40] audit: type=1326 audit(2000000016.009:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.0.410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.181054][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.187266][ T40] audit: type=1326 audit(2000000016.009:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.0.410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.243166][ T53] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 109.250980][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.306824][ T7476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.309980][ T7476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.312954][ T7476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.316075][ T7476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.354189][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.357239][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.365196][ T7481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.394736][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 109.397798][ T53] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 109.401078][ T53] usb 7-1: config 0 has no interface number 0 [ 109.405693][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 109.408488][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.410951][ T53] usb 7-1: Product: syz [ 109.412240][ T53] usb 7-1: Manufacturer: syz [ 109.414780][ T53] usb 7-1: SerialNumber: syz [ 109.418524][ T53] usb 7-1: config 0 descriptor?? [ 109.423285][ T53] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.69/input/input16 [ 109.632783][ T5339] bcm5974 7-1:0.69: could not read from device [ 109.636659][ T61] usb 7-1: USB disconnect, device number 13 [ 109.639891][ T5946] bcm5974 7-1:0.69: could not read from device [ 109.924750][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 110.160196][ T7512] capability: warning: `syz.2.425' uses 32-bit capabilities (legacy support in use) [ 111.022462][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 111.114370][ T7529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.236896][ T7533] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 111.584381][ T7546] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 111.589638][ T7546] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 112.030958][ T7553] afs: Unknown parameter 'dyn.Soլ94qBoDŽG{+GT#* CF;7*5 [ 112.030958][ T7553] 9qȰ4uSZTj|>' [ 112.246501][ T7567] 9pnet_fd: Insufficient options for proto=fd [ 112.617349][ T7582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.954775][ T7587] bridge2: entered promiscuous mode [ 113.063775][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 113.550645][ T7608] nbd: must specify a device to reconfigure [ 113.793132][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.943130][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 113.946962][ T53] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 113.949646][ T53] usb 6-1: config 0 has no interface number 0 [ 113.953744][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 113.956663][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.959611][ T53] usb 6-1: Product: syz [ 113.961527][ T53] usb 6-1: Manufacturer: syz [ 113.963216][ T53] usb 6-1: SerialNumber: syz [ 113.967133][ T53] usb 6-1: config 0 descriptor?? [ 113.972890][ T53] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.69/input/input17 [ 114.176087][ T5339] bcm5974 6-1:0.69: could not read from device [ 114.176280][ T10] usb 6-1: USB disconnect, device number 14 [ 114.180820][ T5946] bcm5974 6-1:0.69: could not read from device [ 114.343098][ T53] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 114.493199][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 114.496086][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.499495][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.502500][ T53] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 114.505530][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.509461][ T53] usb 7-1: config 0 descriptor?? [ 114.583222][ T5999] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 114.724027][ T7615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.461'. [ 114.731977][ T7615] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 114.735685][ T5999] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.739350][ T5999] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.742786][ T5999] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 114.747611][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.754293][ T5999] usb 8-1: config 0 descriptor?? [ 114.939033][ T53] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 114.981508][ T5999] usb 8-1: USB disconnect, device number 11 [ 115.195650][ T6013] usb 7-1: USB disconnect, device number 14 [ 115.534159][ T6013] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 115.684535][ T6013] usb 7-1: unable to get BOS descriptor set [ 115.687643][ T6013] usb 7-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 8 [ 115.690547][ T6013] usb 7-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.694786][ T6013] usb 7-1: config 1 interface 0 has no altsetting 0 [ 115.698398][ T6013] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.701222][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.703819][ T6013] usb 7-1: Product: syz [ 115.705216][ T6013] usb 7-1: Manufacturer: 螫፛ή疭흡࡜⋨퍪ઍ∫篒㟣㐇岕숢믈뺈ᡰ뫻ㄠ쫿ᤖꙻ핗紞킹诇ى鳒ᵾ㜲㡑侳ẆН꺥ⰾ是丿뭛ࠦؕਦ஑ꔓꢭ﫯ⱺ뜉쨈ఎᙴ਺̽ꢕ艻潾蟎暨 [ 115.711850][ T6013] usb 7-1: SerialNumber: syz [ 115.715396][ T7611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.718006][ T7611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.934168][ T6013] usb 7-1: USB disconnect, device number 15 [ 116.251276][ T7638] nbd: must specify a device to reconfigure [ 116.297841][ T7639] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 116.312383][ T7639] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 116.493254][ T6013] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 116.643150][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 116.653274][ T6013] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 116.657783][ T6013] usb 6-1: config 0 has no interface number 0 [ 116.663978][ T6013] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 116.667066][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.669758][ T6013] usb 6-1: Product: syz [ 116.671198][ T6013] usb 6-1: Manufacturer: syz [ 116.672898][ T6013] usb 6-1: SerialNumber: syz [ 116.681736][ T6013] usb 6-1: config 0 descriptor?? [ 116.689587][ T6013] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.69/input/input18 [ 116.891995][ T5339] bcm5974 6-1:0.69: could not read from device [ 116.904966][ T5339] bcm5974 6-1:0.69: could not read from device [ 116.908121][ T6013] usb 6-1: USB disconnect, device number 15 [ 117.289607][ T7659] mmap: syz.3.474 (7659) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.999557][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 119.010012][ T7729] netlink: 348 bytes leftover after parsing attributes in process `syz.2.490'. [ 119.570501][ T7765] nbd: must specify a device to reconfigure [ 119.669894][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 119.793378][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.800677][ T7777] bond0: (slave rose0): Enslaving as an active interface with an up link [ 119.833106][ T5999] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 119.993173][ T5999] usb 7-1: Using ep0 maxpacket: 16 [ 119.997160][ T5999] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 120.000844][ T5999] usb 7-1: config 0 has no interface number 0 [ 120.007878][ T5999] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 120.012377][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.016020][ T5999] usb 7-1: Product: syz [ 120.018029][ T5999] usb 7-1: Manufacturer: syz [ 120.020019][ T5999] usb 7-1: SerialNumber: syz [ 120.026917][ T5999] usb 7-1: config 0 descriptor?? [ 120.037911][ T5999] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.69/input/input19 [ 120.238445][ T5339] bcm5974 7-1:0.69: could not read from device [ 120.249886][ T5339] bcm5974 7-1:0.69: could not read from device [ 120.250794][ T5999] usb 7-1: USB disconnect, device number 16 [ 120.255232][ T5339] bcm5974 7-1:0.69: could not read from device [ 120.257714][ T5339] bcm5974 7-1:0.69: could not read from device [ 120.867067][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 122.973427][ T838] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 123.147626][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.151493][ T838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.156803][ T838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.159720][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.370256][ T838] usb 8-1: usb_control_msg returned -32 [ 123.372548][ T838] usbtmc 8-1:16.0: can't read capabilities [ 123.502238][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 123.506994][ T7864] netlink: 'syz.1.519': attribute type 20 has an invalid length. [ 123.510582][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 123.578103][ T7878] binder: 7877:7878 ioctl c0306201 0 returned -14 [ 123.641645][ T7880] syz_tun: entered allmulticast mode [ 123.651883][ T7879] syz_tun: left allmulticast mode [ 124.177047][ T7887] devtmpfs: Cannot change global quota limit on remount [ 124.585322][ T7908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.768526][ T7919] : entered promiscuous mode [ 125.724882][ T838] usb 8-1: USB disconnect, device number 12 [ 126.747678][ T7967] netlink: 3 bytes leftover after parsing attributes in process `syz.2.551'. [ 126.767732][ T7967] batadv1: entered allmulticast mode [ 126.822132][ T7970] input: syz1 as /devices/virtual/input/input22 [ 127.970063][ T8003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.096276][ T8009] nbd: must specify a device to reconfigure [ 128.331446][ T40] audit: type=1326 audit(2000000291.165:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.343116][ T1469] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 128.378952][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 128.398219][ T40] audit: type=1326 audit(2000000291.165:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.447033][ T40] audit: type=1326 audit(2000000291.165:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.488204][ T40] audit: type=1326 audit(2000000291.165:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.528757][ T40] audit: type=1326 audit(2000000291.165:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.555071][ T40] audit: type=1326 audit(2000000291.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.564513][ T40] audit: type=1326 audit(2000000291.165:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.576015][ T40] audit: type=1326 audit(2000000291.165:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.586519][ T40] audit: type=1326 audit(2000000291.175:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.596437][ T40] audit: type=1326 audit(2000000291.175:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.2.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 128.713196][ T1469] usb 8-1: Using ep0 maxpacket: 16 [ 129.079762][ T1469] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 129.119689][ T1469] usb 8-1: config 0 has no interface number 0 [ 129.124906][ T1469] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 129.135449][ T1469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.138267][ T1469] usb 8-1: Product: syz [ 129.139655][ T1469] usb 8-1: Manufacturer: syz [ 129.141460][ T1469] usb 8-1: SerialNumber: syz [ 129.144468][ T1469] usb 8-1: config 0 descriptor?? [ 129.148752][ T1469] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.69/input/input23 [ 129.353931][ T5339] bcm5974 8-1:0.69: could not read from device [ 129.359107][ T5339] bcm5974 8-1:0.69: could not read from device [ 129.370577][ T5339] bcm5974 8-1:0.69: could not read from device [ 129.374032][ T1469] usb 8-1: USB disconnect, device number 13 [ 129.422056][ T8042] fuse: blksize only supported for fuseblk [ 129.602660][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 129.606103][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 129.989680][ T8062] veth1_macvtap: left promiscuous mode [ 130.208396][ T5951] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 130.208437][ T5951] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 130.221577][ T5951] Bluetooth: hci2: adv larger than maximum supported [ 130.998253][ T8087] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 131.017888][ T8087] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 131.185067][ T8090] evm: overlay not supported [ 131.275562][ T8092] netlink: 596 bytes leftover after parsing attributes in process `syz.3.589'. [ 131.468765][ T8100] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 131.646162][ T8105] fuse: Bad value for 'group_id' [ 131.648018][ T8105] fuse: Bad value for 'group_id' [ 132.195781][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 132.285288][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.379445][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.483278][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.860915][ T8132] overlay: Unknown parameter 'dont_hash' [ 133.177187][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 133.249473][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 133.561610][ T8155] syz_tun: left promiscuous mode [ 133.563839][ T8155] bond0: left promiscuous mode [ 133.565521][ T8155] bond_slave_0: left promiscuous mode [ 133.567710][ T8155] bond_slave_1: left promiscuous mode [ 133.574229][ T8155] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.577809][ T8155] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.580719][ T8155] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.583688][ T8155] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.245385][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.248148][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.263972][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.298088][ T8171] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.307122][ T8171] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.325830][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.331013][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.336212][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.354125][ T8171] wlan1 speed is unknown, defaulting to 1000 [ 134.430291][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 134.430302][ T40] audit: type=1800 audit(2000000297.265:76): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 134.631700][ T40] audit: type=1804 audit(2000000297.465:77): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.612" name="/newroot/136/bus/bus" dev="overlay" ino=746 res=1 errno=0 [ 134.904966][ T8180] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 135.103734][ T5948] Bluetooth: hci3: connection err: -111 [ 135.149436][ T8186] syz_tun: entered allmulticast mode [ 135.156537][ T8186] syz_tun: left allmulticast mode [ 135.553251][ T1881] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 135.710947][ T1881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.718345][ T1881] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 135.727106][ T1881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.764966][ T1881] usb 7-1: config 0 descriptor?? [ 135.866490][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 135.997717][ T8191] netlink: 312 bytes leftover after parsing attributes in process `syz.2.616'. [ 136.121743][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 136.171802][ T8211] input: syz0 as /devices/virtual/input/input24 [ 136.599937][ T8219] wlan1 speed is unknown, defaulting to 1000 [ 136.600929][ T1881] usbhid 7-1:0.0: can't add hid device: -71 [ 136.606379][ T1881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 136.612465][ T1881] usb 7-1: USB disconnect, device number 17 [ 136.848943][ T40] audit: type=1326 audit(2000000299.685:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.626" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x0 [ 136.923480][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.627'. [ 137.223891][ T8241] input: syz0 as /devices/virtual/input/input25 [ 137.456123][ T8250] O3c: renamed from bridge_slave_0 [ 137.916210][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'. [ 137.923719][ T8267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.926204][ T8267] IPv6: NLM_F_CREATE should be set when creating new route [ 138.372726][ T8285] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 138.390330][ T8285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.643181][ T838] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 138.793551][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 138.797064][ T838] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.801611][ T838] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.805908][ T838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.808816][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.811882][ T838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.815723][ T838] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.819947][ T838] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.824997][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.836524][ T838] usb 6-1: config 0 descriptor?? [ 139.046071][ T838] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.053325][ T838] usb 6-1: USB disconnect, device number 16 [ 139.057619][ T838] usblp0: removed [ 139.383193][ T6013] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 139.479189][ T8318] netlink: 256 bytes leftover after parsing attributes in process `syz.2.656'. [ 139.485393][ T838] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 139.545408][ T6013] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.549329][ T6013] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 139.554012][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.560258][ T6013] usb 8-1: config 0 descriptor?? [ 139.623798][ T8320] CIFS mount error: No usable UNC path provided in device string! [ 139.623798][ T8320] [ 139.628557][ T8320] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 139.634392][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 139.639728][ T838] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.643534][ T838] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.644632][ T8320] 9pnet_fd: Insufficient options for proto=fd [ 139.647358][ T838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.653756][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.657822][ T838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.661804][ T838] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.666111][ T838] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.669593][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.676008][ T838] usb 6-1: config 0 descriptor?? [ 140.235925][ T838] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.441990][ T8327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.444339][ T8327] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.448593][ T8327] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 140.637242][ T10] usb 6-1: USB disconnect, device number 17 [ 140.641961][ T10] usblp0: removed [ 141.215363][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 141.250656][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 141.256247][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 141.261951][ T8349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'. [ 141.282049][ T8346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.289400][ T8346] bond0: (slave bond1): Enslaving as an active interface with an up link [ 141.298358][ T8346] netlink: 4688 bytes leftover after parsing attributes in process `syz.2.666'. [ 141.305274][ T8346] bond0 (unregistering): (slave bond1): Releasing backup interface [ 141.313830][ T8346] bond0 (unregistering): Released all slaves [ 141.417092][ T40] audit: type=1326 audit(2000000304.255:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.670" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 141.629531][ T8361] FAULT_INJECTION: forcing a failure. [ 141.629531][ T8361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.633985][ T8361] CPU: 1 UID: 0 PID: 8361 Comm: syz.2.669 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 141.634001][ T8361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.634008][ T8361] Call Trace: [ 141.634012][ T8361] [ 141.634016][ T8361] dump_stack_lvl+0x16c/0x1f0 [ 141.634054][ T8361] should_fail_ex+0x512/0x640 [ 141.634078][ T8361] _copy_from_user+0x2e/0xd0 [ 141.634096][ T8361] __ia32_compat_sys_socketcall+0x187/0x770 [ 141.634109][ T8361] ? __fget_files+0x20e/0x3c0 [ 141.634124][ T8361] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 141.634138][ T8361] ? fput+0x70/0xf0 [ 141.634150][ T8361] ? ksys_write+0x1ac/0x250 [ 141.634166][ T8361] ? __pfx_ksys_write+0x10/0x10 [ 141.634183][ T8361] ? rcu_is_watching+0x12/0xc0 [ 141.634197][ T8361] __do_fast_syscall_32+0x7c/0x3a0 [ 141.634217][ T8361] do_fast_syscall_32+0x32/0x80 [ 141.634234][ T8361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.634249][ T8361] RIP: 0023:0xf704e579 [ 141.634258][ T8361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.634269][ T8361] RSP: 002b:00000000f4ffb430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 141.634280][ T8361] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f4ffb444 [ 141.634287][ T8361] RDX: 0000000000000000 RSI: 00000000f4ffb560 RDI: 00000000f73b3ff4 [ 141.634294][ T8361] RBP: 00000000f4ffb560 R08: 0000000000000000 R09: 0000000000000000 [ 141.634300][ T8361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.634307][ T8361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.634326][ T8361] [ 142.123495][ T8363] veth1_to_bond: entered allmulticast mode [ 142.125629][ T8363] veth1_to_bond: entered promiscuous mode [ 142.128388][ T8363] veth1_to_bond: left promiscuous mode [ 142.130424][ T8363] veth1_to_bond: left allmulticast mode [ 142.286608][ T1881] usb 8-1: USB disconnect, device number 14 [ 142.450809][ T8368] netlink: 'syz.3.673': attribute type 23 has an invalid length. [ 143.134099][ T8372] vxcan0: tx address claim with dlc 0 [ 143.423426][ T8394] fuse: Bad value for 'group_id' [ 143.425126][ T8394] fuse: Bad value for 'group_id' [ 143.469157][ T8396] tipc: Started in network mode [ 143.471234][ T8396] tipc: Node identity 7f000001, cluster identity 4711 [ 143.477626][ T8396] tipc: Enabled bearer , priority 10 [ 143.485108][ T8396] tipc: Enabled bearer , priority 0 [ 144.286776][ T8424] overlayfs: failed to clone upperpath [ 144.435941][ T8430] wlan1 speed is unknown, defaulting to 1000 [ 144.499507][ T1881] tipc: Node number set to 2130706433 [ 144.522699][ T8425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 144.750827][ T40] audit: type=1800 audit(2000000307.585:80): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="bus" dev="overlay" ino=752 res=0 errno=0 [ 144.801358][ T8444] nbd: must specify a device to reconfigure [ 145.053097][ T838] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 145.203181][ T838] usb 6-1: Using ep0 maxpacket: 16 [ 145.207104][ T838] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 145.209772][ T838] usb 6-1: config 0 has no interface number 0 [ 145.220561][ T838] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 145.223628][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.226228][ T838] usb 6-1: Product: syz [ 145.227562][ T838] usb 6-1: Manufacturer: syz [ 145.229052][ T838] usb 6-1: SerialNumber: syz [ 145.232605][ T838] usb 6-1: config 0 descriptor?? [ 145.238517][ T838] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.69/input/input26 [ 145.441158][ T5339] bcm5974 6-1:0.69: could not read from device [ 145.466044][ T838] usb 6-1: USB disconnect, device number 18 [ 145.657968][ T8454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.701'. [ 145.663407][ T8457] overlayfs: failed to clone upperpath [ 145.684930][ T8454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.701'. [ 146.409692][ T8473] overlayfs: failed to clone upperpath [ 146.874480][ T8478] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 146.982112][ T40] audit: type=1800 audit(2000000309.815:81): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="bus" dev="overlay" ino=790 res=0 errno=0 [ 147.039817][ T8486] binder_alloc: 8484: binder_alloc_buf size 8216 failed, no address space [ 147.045402][ T8486] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 148.021726][ T8508] binder_alloc: 8507: binder_alloc_buf size 8216 failed, no address space [ 148.026535][ T8508] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 148.074328][ T8511] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.718'. [ 148.077433][ T8511] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.718'. [ 148.518007][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 148.613935][ T8524] bridge_slave_1: left allmulticast mode [ 148.616365][ T8524] bridge_slave_1: left promiscuous mode [ 148.618295][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.622692][ T8524] O3c: left allmulticast mode [ 148.625747][ T8524] O3c: left promiscuous mode [ 148.628011][ T8524] bridge0: port 1(O3c) entered disabled state [ 148.743495][ T8526] wlan1 speed is unknown, defaulting to 1000 [ 148.927961][ T8539] 9pnet_virtio: no channels available for device syz [ 150.005324][ T8565] x_tables: duplicate underflow at hook 3 [ 150.008708][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.734'. [ 150.011773][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 150.061871][ T8571] random: crng reseeded on system resumption [ 150.582664][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 150.598088][ T8597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.613310][ T8597] vlan2: entered allmulticast mode [ 150.615068][ T8597] bond3: entered allmulticast mode [ 150.629607][ T8598] wlan1 speed is unknown, defaulting to 1000 [ 151.924763][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 151.987982][ T8626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.751'. [ 152.708377][ T40] audit: type=1326 audit(2000000315.545:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.0.755" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffe0000 [ 153.206003][ T5948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 153.208990][ T5948] Bluetooth: hci1: Injecting HCI hardware error event [ 153.212926][ T5948] Bluetooth: hci1: hardware error 0x00 [ 153.326274][ T8667] [U]  [ 153.327394][ T8667] [U] K{ [ 153.328672][ T8667] [U] t 1ŠFfˊ`GJgo/mC [ 153.331676][ T8667] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 153.332419][ T8668] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.762'. [ 153.337137][ T8667] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 153.343826][ T8667] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 153.363306][ T8667] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 153.394773][ T8667] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 153.396712][ T40] audit: type=1326 audit(2000000316.235:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.409548][ T40] audit: type=1326 audit(2000000316.235:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.416730][ T40] audit: type=1326 audit(2000000316.255:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.417159][ T8667] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 153.425644][ T40] audit: type=1326 audit(2000000316.255:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.431537][ T8667] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 153.480418][ T40] audit: type=1326 audit(2000000316.255:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.499141][ T40] audit: type=1326 audit(2000000316.255:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.503299][ T8667] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 153.506747][ T40] audit: type=1326 audit(2000000316.255:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.517769][ T40] audit: type=1326 audit(2000000316.255:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.761" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 153.523348][ T8667] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 153.531073][ T8667] [U] 22Ʃx?0;3u [ 153.532456][ T8667] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 153.562413][ T8667] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 153.566402][ T8667] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 153.569313][ T8667] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 153.571344][ T8667] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 153.578267][ T8667] [U] ec [ 153.578324][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 153.579434][ T8667] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 153.644605][ T8674] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 153.646830][ T8674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.649755][ T8674] vhci_hcd vhci_hcd.0: Device attached [ 153.671873][ T8674] binder: BINDER_SET_CONTEXT_MGR already set [ 153.674254][ T8674] binder: 8673:8674 ioctl 4018620d 80000040 returned -16 [ 153.725159][ T8675] vhci_hcd: connection closed [ 153.725452][ T1143] vhci_hcd: stop threads [ 153.728437][ T1143] vhci_hcd: release socket [ 153.729909][ T1143] vhci_hcd: disconnect device [ 153.934562][ T8663] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 154.144890][ T8692] No control pipe specified [ 155.157099][ T8707] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 155.157162][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 155.159959][ T8707] macvlan0: entered promiscuous mode [ 155.204793][ T8709] NILFS (nbd2): device size too small [ 155.250204][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 155.281009][ T8711] trusted_key: encrypted_key: master key parameter '' is invalid [ 155.284075][ T5948] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 155.294543][ T8716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.780'. [ 156.397512][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 156.401181][ T8740] netlink: 'syz.1.786': attribute type 3 has an invalid length. [ 156.459282][ T8744] syz.3.787: attempt to access beyond end of device [ 156.459282][ T8744] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 156.459403][ T8744] efs: cannot read volume header [ 156.886666][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 157.324541][ T1881] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 157.341817][ T1881] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 158.917537][ T8787] netlink: 504 bytes leftover after parsing attributes in process `syz.2.802'. [ 158.982158][ T8789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.205692][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'. [ 160.017346][ T8809] exFAT-fs (nullb0): invalid boot record signature [ 160.019886][ T8809] exFAT-fs (nullb0): failed to read boot sector [ 160.024073][ T8809] exFAT-fs (nullb0): failed to recognize exfat type [ 160.071054][ T8814] netlink: 'syz.0.809': attribute type 27 has an invalid length. [ 160.086455][ T8814] ip_vti0: left promiscuous mode [ 160.202715][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.819'. [ 160.231171][ T8814] veth0_macvtap: left allmulticast mode [ 160.234055][ T8814] 0XD: left allmulticast mode [ 160.245911][ T8814] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.248972][ T8814] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.252307][ T8814] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.255514][ T8814] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.286788][ T8815] syz_tun: entered allmulticast mode [ 160.871915][ T8828] syz_tun: left allmulticast mode [ 161.349958][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.352945][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.358257][ T8844] tipc: Started in network mode [ 161.360381][ T8844] tipc: Node identity 7f000001, cluster identity 4711 [ 161.364634][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.367363][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.370051][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.372964][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.373773][ T8844] tipc: Enabled bearer , priority 10 [ 161.377214][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.381035][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.384873][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.387222][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.389521][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.392604][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.394720][ T8844] tipc: Enabled bearer , priority 0 [ 161.395638][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.400298][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.404539][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.407433][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.410430][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.413742][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.416405][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.419402][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.422325][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.427661][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.430480][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.433091][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.435600][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.438272][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.441061][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.447583][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.450620][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.453801][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.456797][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.459922][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.462859][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.465561][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.468334][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.470816][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.473687][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.476634][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.479564][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.482297][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.486587][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.489424][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.492796][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 161.499684][ T6022] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 161.643200][ T6013] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 161.825015][ T6013] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.829251][ T6013] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.833715][ T6013] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.837072][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.861028][ T8848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.865096][ T6013] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.100439][ T6022] usb 6-1: USB disconnect, device number 19 [ 162.120736][ T8871] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 162.129455][ T8871] team0: Port device dummy0 added [ 162.508984][ T8880] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.824'. [ 162.553182][ T6031] tipc: Node number set to 2130706433 [ 162.964435][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 162.964451][ T40] audit: type=1326 audit(2000000325.795:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 162.976325][ T40] audit: type=1326 audit(2000000325.795:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 162.984111][ T40] audit: type=1326 audit(2000000325.795:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.001295][ T8887] wlan1 speed is unknown, defaulting to 1000 [ 163.004473][ T40] audit: type=1326 audit(2000000325.795:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.021511][ T40] audit: type=1326 audit(2000000325.795:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.033088][ T40] audit: type=1326 audit(2000000325.795:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.043265][ T40] audit: type=1326 audit(2000000325.795:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.048706][ T8889] wlan1 speed is unknown, defaulting to 1000 [ 163.049528][ T40] audit: type=1326 audit(2000000325.795:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.059341][ T40] audit: type=1326 audit(2000000325.795:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.080308][ T40] audit: type=1326 audit(2000000325.845:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 163.129549][ T8897] batman_adv: batadv0: Adding interface: ipvlan2 [ 163.132159][ T8897] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.141913][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.145923][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.148883][ T8897] batman_adv: batadv0: Interface activated: ipvlan2 [ 163.232120][ T8906] openvswitch: netlink: Key type 257 is out of range max 32 [ 163.241911][ T8904] overlayfs: failed to clone upperpath [ 163.447212][ T8918] 9pnet: p9_errstr2errno: server reported unknown error (cF S+v3qf [ 163.899987][ T8935] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.839'. [ 164.335413][ T8924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 164.430207][ T8949] netlink: 14 bytes leftover after parsing attributes in process `syz.3.843'. [ 164.611637][ T8949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.616811][ T8949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.620130][ T8949] bond0 (unregistering): Released all slaves [ 164.633119][ T8948] [ 164.634021][ T8948] ====================================================== [ 164.636606][ T8948] WARNING: possible circular locking dependency detected [ 164.638880][ T8948] 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 Not tainted [ 164.642251][ T8948] ------------------------------------------------------ [ 164.645216][ T8948] syz.0.842/8948 is trying to acquire lock: [ 164.647353][ T8948] ffff88804e368e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x11d/0x770 [ 164.650596][ T8948] [ 164.650596][ T8948] but task is already holding lock: [ 164.653350][ T8948] ffff888068f3ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 164.657003][ T8948] [ 164.657003][ T8948] which lock already depends on the new lock. [ 164.657003][ T8948] [ 164.660138][ T8948] [ 164.660138][ T8948] the existing dependency chain (in reverse order) is: [ 164.662899][ T8948] [ 164.662899][ T8948] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 164.665512][ T8948] __mutex_lock+0x199/0xb90 [ 164.667056][ T8948] dev_set_mtu+0xa2/0x260 [ 164.668592][ T8948] team_add_slave+0x90f/0x21a0 [ 164.670231][ T8948] do_set_master+0x40c/0x730 [ 164.671827][ T8948] do_setlink.constprop.0+0xbd8/0x4380 [ 164.673738][ T8948] rtnl_newlink+0x1446/0x2000 [ 164.675375][ T8948] rtnetlink_rcv_msg+0x95b/0xe90 [ 164.677080][ T8948] netlink_rcv_skb+0x158/0x420 [ 164.678681][ T8948] netlink_unicast+0x53a/0x7f0 [ 164.680384][ T8948] netlink_sendmsg+0x8d1/0xdd0 [ 164.682077][ T8948] ____sys_sendmsg+0xa98/0xc70 [ 164.683730][ T8948] ___sys_sendmsg+0x134/0x1d0 [ 164.685592][ T8948] __sys_sendmsg+0x16d/0x220 [ 164.687150][ T8948] __do_fast_syscall_32+0x7c/0x3a0 [ 164.688882][ T8948] do_fast_syscall_32+0x32/0x80 [ 164.690597][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.692673][ T8948] [ 164.692673][ T8948] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 164.695174][ T8948] __lock_acquire+0x126f/0x1c90 [ 164.696874][ T8948] lock_acquire+0x179/0x350 [ 164.698447][ T8948] __mutex_lock+0x199/0xb90 [ 164.700038][ T8948] team_device_event+0x11d/0x770 [ 164.701709][ T8948] notifier_call_chain+0xb9/0x410 [ 164.703627][ T8948] call_netdevice_notifiers_info+0xbe/0x140 [ 164.705982][ T8948] __dev_notify_flags+0x1f7/0x2e0 [ 164.707940][ T8948] netif_change_flags+0x108/0x160 [ 164.709981][ T8948] do_setlink.constprop.0+0xb53/0x4380 [ 164.712267][ T8948] rtnl_newlink+0x18e0/0x2000 [ 164.714290][ T8948] rtnetlink_rcv_msg+0x95b/0xe90 [ 164.716025][ T8948] netlink_rcv_skb+0x158/0x420 [ 164.717826][ T8948] netlink_unicast+0x53a/0x7f0 [ 164.719696][ T8948] netlink_sendmsg+0x8d1/0xdd0 [ 164.721598][ T8948] ____sys_sendmsg+0xa98/0xc70 [ 164.723552][ T8948] ___sys_sendmsg+0x134/0x1d0 [ 164.725600][ T8948] __sys_sendmsg+0x16d/0x220 [ 164.727456][ T8948] __do_fast_syscall_32+0x7c/0x3a0 [ 164.729445][ T8948] do_fast_syscall_32+0x32/0x80 [ 164.731457][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.733643][ T8948] [ 164.733643][ T8948] other info that might help us debug this: [ 164.733643][ T8948] [ 164.736743][ T8948] Possible unsafe locking scenario: [ 164.736743][ T8948] [ 164.739090][ T8948] CPU0 CPU1 [ 164.740821][ T8948] ---- ---- [ 164.742551][ T8948] lock(&dev_instance_lock_key#3); [ 164.744474][ T8948] lock(team->team_lock_key); [ 164.746878][ T8948] lock(&dev_instance_lock_key#3); [ 164.749731][ T8948] lock(team->team_lock_key); [ 164.751389][ T8948] [ 164.751389][ T8948] *** DEADLOCK *** [ 164.751389][ T8948] [ 164.754088][ T8948] 2 locks held by syz.0.842/8948: [ 164.755699][ T8948] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 164.758491][ T8948] #1: ffff888068f3ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 164.761956][ T8948] [ 164.761956][ T8948] stack backtrace: [ 164.763809][ T8948] CPU: 0 UID: 0 PID: 8948 Comm: syz.0.842 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 164.763824][ T8948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.763831][ T8948] Call Trace: [ 164.763835][ T8948] [ 164.763840][ T8948] dump_stack_lvl+0x116/0x1f0 [ 164.763860][ T8948] print_circular_bug+0x275/0x350 [ 164.763875][ T8948] check_noncircular+0x14c/0x170 [ 164.763890][ T8948] __lock_acquire+0x126f/0x1c90 [ 164.763908][ T8948] lock_acquire+0x179/0x350 [ 164.763941][ T8948] ? team_device_event+0x11d/0x770 [ 164.763955][ T8948] ? __pfx___might_resched+0x10/0x10 [ 164.763968][ T8948] __mutex_lock+0x199/0xb90 [ 164.763985][ T8948] ? team_device_event+0x11d/0x770 [ 164.763996][ T8948] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 164.764011][ T8948] ? __try_to_del_timer_sync+0x115/0x170 [ 164.764025][ T8948] ? team_device_event+0x11d/0x770 [ 164.764036][ T8948] ? __pfx___mutex_lock+0x10/0x10 [ 164.764057][ T8948] ? team_device_event+0x11d/0x770 [ 164.764067][ T8948] team_device_event+0x11d/0x770 [ 164.764078][ T8948] notifier_call_chain+0xb9/0x410 [ 164.764090][ T8948] ? __pfx_team_device_event+0x10/0x10 [ 164.764102][ T8948] call_netdevice_notifiers_info+0xbe/0x140 [ 164.764115][ T8948] __dev_notify_flags+0x1f7/0x2e0 [ 164.764138][ T8948] ? __pfx___dev_notify_flags+0x10/0x10 [ 164.764153][ T8948] ? __dev_change_flags+0x3d5/0x720 [ 164.764170][ T8948] ? __pfx___dev_change_flags+0x10/0x10 [ 164.764187][ T8948] ? __pfx_validate_linkmsg+0x10/0x10 [ 164.764205][ T8948] netif_change_flags+0x108/0x160 [ 164.764224][ T8948] do_setlink.constprop.0+0xb53/0x4380 [ 164.764243][ T8948] ? trace_sched_exit_tp+0xde/0x130 [ 164.764258][ T8948] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 164.764277][ T8948] ? __lock_acquire+0xb8a/0x1c90 [ 164.764291][ T8948] ? __pfx___schedule+0x10/0x10 [ 164.764308][ T8948] ? mark_held_locks+0x49/0x80 [ 164.764321][ T8948] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 164.764336][ T8948] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.764351][ T8948] ? __mutex_lock+0x1ca/0xb90 [ 164.764367][ T8948] ? rtnl_newlink+0x600/0x2000 [ 164.764384][ T8948] ? __pfx___mutex_lock+0x10/0x10 [ 164.764399][ T8948] ? apparmor_capable+0x114/0x1d0 [ 164.764413][ T8948] ? netlink_ns_capable+0xfa/0x130 [ 164.764432][ T8948] rtnl_newlink+0x18e0/0x2000 [ 164.764450][ T8948] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.764466][ T8948] ? arch_stack_walk+0xa6/0x100 [ 164.764485][ T8948] ? __lock_acquire+0x622/0x1c90 [ 164.764500][ T8948] ? rcu_is_watching+0x12/0xc0 [ 164.764511][ T8948] ? trace_cap_capable+0x18d/0x200 [ 164.764524][ T8948] ? find_held_lock+0x2b/0x80 [ 164.764534][ T8948] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.764550][ T8948] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.764566][ T8948] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 164.764582][ T8948] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.764599][ T8948] rtnetlink_rcv_msg+0x95b/0xe90 [ 164.764616][ T8948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.764634][ T8948] ? __lock_acquire+0x622/0x1c90 [ 164.764649][ T8948] netlink_rcv_skb+0x158/0x420 [ 164.764660][ T8948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.764676][ T8948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.764690][ T8948] ? netlink_deliver_tap+0x1ae/0xd30 [ 164.764699][ T8948] ? is_vmalloc_addr+0x86/0xa0 [ 164.764716][ T8948] netlink_unicast+0x53a/0x7f0 [ 164.764728][ T8948] ? __pfx_netlink_unicast+0x10/0x10 [ 164.764740][ T8948] netlink_sendmsg+0x8d1/0xdd0 [ 164.764752][ T8948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.764764][ T8948] ? __import_iovec+0x1dd/0x650 [ 164.764782][ T8948] ____sys_sendmsg+0xa98/0xc70 [ 164.764794][ T8948] ? ath11k_peer_rx_tid_setup+0x7f0/0xbd0 [ 164.764808][ T8948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.764820][ T8948] ? get_compat_msghdr+0x11a/0x170 [ 164.764838][ T8948] ? __pfx_futex_wake_mark+0x10/0x10 [ 164.764854][ T8948] ___sys_sendmsg+0x134/0x1d0 [ 164.764870][ T8948] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.764889][ T8948] ? find_held_lock+0x2b/0x80 [ 164.764902][ T8948] __sys_sendmsg+0x16d/0x220 [ 164.764918][ T8948] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.764933][ T8948] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 164.764949][ T8948] ? rcu_is_watching+0x12/0xc0 [ 164.764961][ T8948] __do_fast_syscall_32+0x7c/0x3a0 [ 164.764978][ T8948] do_fast_syscall_32+0x32/0x80 [ 164.764994][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.765009][ T8948] RIP: 0023:0xf70fe579 [ 164.765017][ T8948] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.765028][ T8948] RSP: 002b:00000000f50cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 164.765040][ T8948] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 164.765047][ T8948] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.765053][ T8948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.765059][ T8948] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 164.765065][ T8948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.765075][ T8948] [ 164.931350][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 164.932566][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.935610][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 165.204791][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 165.206751][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 165.494116][ T8958] ceph: No mds server is up or the cluster is laggy VM DIAGNOSIS: 05:48:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855820d5 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc900067fe668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b06c9c0 R15=ffffffff85582070 RIP=ffffffff855820ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097560000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50cc528 CR3=0000000071ac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003f7dfc RBX=0000000000000001 RCX=ffffffff8b7cac29 RDX=ffffed1005666646 RSI=ffffffff8c156520 RDI=ffffffff81918571 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a82d50 R15=0000000000000000 RIP=ffffffff8b7c978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097660000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72ed210 CR3=0000000071ac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=f7f18a2fe27ec100 RBX=ffff88807ffd6c58 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff821449e1 RDI=ffff88807ffd6c58 RBP=ffffea00013a0180 RSP=ffffc900033d71c8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90a82d57 R11=dffffc0000000000 R12=ffffffff821449e1 R13=ffff88807ffd6c58 R14=ffffed100fffad8a R15=000000000004e806 RIP=ffffffff8197ff4f RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7f85d3e300 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055cca172a000 CR3=000000004be88000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ffffffff8208649e 0000000100000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000354 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0420900306 08002088030c0800 2080030c00000203 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080021b0030fff ffffff0421a00310 0800219803010800 2190034a08002188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080021800300 0000000000000000 0000000000000001 ffffffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df0820e003080800 20d80300080020d0 030fffffffff0420 c00300080020b803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080020b003004c 504701ffffffffff fffffff7080b8003 0b800420a0030fff ZMM24=208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd 208ac1bd208ac1bd ZMM25=8227552f8227552f 8227552f8227552f 8227552f8227552f 8227552f8227552f 8227552f8227552f 8227552f8227552f 8227552f8227552f 8227552f8227552f ZMM26=05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 05c25b4605c25b46 ZMM27=57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b 57edb33b57edb33b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5809000058090000 5809000058090000 5809000058090000 5809000058090000 5809000058090000 5809000058090000 5809000058090000 5809000058090000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900005e8840 RCX=ffffffff913b44f8 RDX=1ffff920000bd109 RSI=ffffc90002b37f08 RDI=ffffc900005e8840 RBP=ffffc90002b37f08 RSP=ffffc900005e8790 R8 =ffffffff913b44fc R9 =0000000000000000 R10=ffffc900005e8840 R11=0000000000005e84 R12=0000000000000008 R13=ffffc900005e8840 R14=ffffc900005e8848 R15=ffffc900005e8874 RIP=ffffffff816a8500 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097860000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f755c0 CR3=0000000064d0b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000