last executing test programs: 38.15864379s ago: executing program 1 (id=839): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xfffffffffffffe18, 0x0, &(0x7f0000000200)="ccda4e417b2a0a489adee4fe650efe54d5"}, 0x4c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffc4b703080008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) fsmount(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x7, 0x1}, {0x1, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_io_uring_setup(0x16f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 36.9155831s ago: executing program 1 (id=832): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x230400, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a080340110800470000380000000000019078ac1e0001ac1414aa860800000003000203009078120000ac14140000000000"], 0x0) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x120000, &(0x7f0000000840)=ANY=[]) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0xc403, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x40000000}, {0x0, 0xffffffff, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x2, 0x86ca6) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000000)) open(&(0x7f0000000080)='./bus\x00', 0x4001414c2, 0x98) mount(&(0x7f00000002c0)=@md0, &(0x7f0000000440)='./bus\x00', 0x0, 0x1040, 0x0) 35.808104511s ago: executing program 1 (id=834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 30.344556369s ago: executing program 1 (id=853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x24c, 0x0, 0x0, 0x148, 0xb8, 0x148, 0x1dc, 0x240, 0x240, 0x1dc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00'}, 0x0, 0x94, 0x100, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "43eafe71b6e8d605b78eae2cb0e19e53623ad688325c19e04394835068342e515a3887213acfc682933c806aeac5b7ba6e06cda58b02f7d5428bb55553c4b0b6"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045520, &(0x7f0000000640)) capset(0x0, &(0x7f0000000040)={0xffffffff, 0x10, 0x4df8, 0x200, 0x1}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x880) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$KDSIGACCEPT(r4, 0x4b45, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e00fdab1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341517c1b7df60"], 0x0) ioctl$HIDIOCGNAME(r7, 0x80404806, &(0x7f0000000080)) 26.423529903s ago: executing program 1 (id=850): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x40000000) sendmsg$NFT_BATCH(r0, 0x0, 0x24000800) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c53119"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 23.325098921s ago: executing program 2 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x0, 0xa, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0xffffffff, 0x6, 0x1250, r4, 0x2c9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0xa}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000000000000000011010000000000000000011e00"], 0x0, 0x2c, 0x0, 0x3}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @random="dac6219edc16"}) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00') r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0xffffffff) sendfile(r7, r6, 0x0, 0x3) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0xfce) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r8) 22.034742358s ago: executing program 2 (id=858): prlimit64(0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3d, 0x3, @tid=r0}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002380)=ANY=[@ANYBLOB="aaaaaaaaaaaa365c4cfb3e2908004500002c000000000011907800000000000000000000000000186f780400"/58], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000400000000000000004890780300000000000000955aec9ef39911c4e608778212119fd3c62597a2d165de62580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232fca57c3e5e901d3efdf51d2a782793acc6cdfb08a659e9a751691f57cfc6753131ecd5274e65fc540ec03a65050620f2feba9bf46822f49a3a772a3520d57aa03fc10127695035a"], 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) truncate(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 20.890809392s ago: executing program 2 (id=860): r0 = syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7abba0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x4872, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000090) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x400) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0xaea3, 0x0) gettid() socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x0) fcntl$notify(r5, 0x402, 0x8000001c) readv(r0, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000ac0)='\x00\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0xdcdfeeb0) read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) 20.176173408s ago: executing program 0 (id=862): setns(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x100300) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0xfd}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="84010000000000009c110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) syz_io_uring_setup(0x48be, &(0x7f0000000000), &(0x7f0000019e40), &(0x7f0000ff4000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x3) r5 = syz_open_dev$usbmon(&(0x7f0000001180), 0x3, 0x20200) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) close_range(r4, 0xffffffffffffffff, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000000)={0x1, 0xfffffffffffffffe}, 0x0) 19.153277952s ago: executing program 3 (id=863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000019680)=ANY=[@ANYBLOB="1800000000a3f20000000000000000000000000000000000b3efcd20f2269d9a0771d770c00fc430bb213244425684aade837f5c84601aa557404492939af811e93fdffff7e5b3f0b8b086d69585d2c5389309a4b9f38c82f2a6ed008c0590cb0fb7f95e0bf70ffdc52fa2f2234a56194d1e30a29b0a992e0190426c104203583ec110fd73155fea5a6ae30ae5c9bf5e96bc53c5068a0b8ade98e8"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff061}], 0x286, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0x2}, 0xfffffffffffffca7) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x0, 0x0, 0x32) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, {0xfffffff9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRES8=r2], 0x0, 0xfffffffa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r9, &(0x7f0000000580)=ANY=[], 0x78) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) recvmmsg(r8, &(0x7f0000000940)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000040)=[{&(0x7f0000002e00)=""/4102, 0x1000}, {&(0x7f0000000980)=""/107, 0xffb2}, {&(0x7f00000004c0)=""/96, 0x60}], 0x3, &(0x7f0000001e00)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/20}, {&(0x7f00000006c0)=""/82}, {&(0x7f0000000c00)=""/243}, {&(0x7f0000000b00)=""/200}], 0x0, &(0x7f0000000900)}, 0x2f49d0b}], 0x2, 0x0, 0x0) tkill(r6, 0x7) 18.065369837s ago: executing program 3 (id=864): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000725000/0x1000)=nil, 0x1000, 0x200000a, 0x30, 0xffffffffffffffff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) io_uring_setup(0x47a, &(0x7f0000000080)) io_setup(0x8, &(0x7f0000000600)=<r1=>0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x0, &(0x7f0000000180)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000400000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='ext4_sync_fs\x00', r5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffa9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0x80dc5521, &(0x7f0000000140)=0x7fff) fdatasync(r5) fcntl$setown(r0, 0x8, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) 16.876741245s ago: executing program 3 (id=865): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x69a7, &(0x7f0000000200)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), &(0x7f0000000180)) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x3400, 0x822a28cc43044cf8, 0x2, 0x0, 0x0, r2}, 0x0, 0x0) r3 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x5392, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire={0x40046304}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='mm_page_free\x00', r5}, 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 15.783682315s ago: executing program 3 (id=867): remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x30a046b097be67a0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r3, 0x0, 0x1, 0x4}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x8}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.495034168s ago: executing program 0 (id=868): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = io_uring_setup(0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2c, 0x2, 0x0, "ffffffffffffffff7ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac1b5"}) r4 = dup(r2) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x58, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x6, @inherit={0x78, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000600000000000000060000000000000001000000000000001800000002000000070000000000000003000000000000006c00000000000000080000000000001075000000000000000100000001000000050027cb365b57b473c2b500000000000000000000000000802855a61a000000"]}, @subvolid=0x3}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xfffffff7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000023c0)={0x2020, 0x0, <r7=>0x0}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) write$FUSE_IOCTL(r0, &(0x7f0000000180)={0x20, 0x0, r7, {0x2, 0x0, 0x69, 0xfff}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r10, &(0x7f0000000d80)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757365722c756e616d653d232d232cb52746272c667363616368652c616669643d3078376666666666666666666666666666662c76657273696f6e3d3970323030302e752c706f73697861636c2c6673757569643d610031dc393537002d663239372d306235622d663361312d64363030303164662c736d61636b6673666c6f6f723d5d282c2c6f626a5f757365723d7461726765742064656661756c74002c6d61736b3d4d41595f415050454e442c61756469742c636f6e746578743d73797361646d5f752c008e1cb3950e7209fd50d42e19e32de8de6e748fb7a18ab30b6650551ae05a8fa2c22a2a3f2b257da75a20104f45f565c590f7ca9bc09077094298dd3a8eb5581187ab654c5d738d1dacb504b3bfcdd6820703f0824dc8ace3b4222aee3970"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 15.223557762s ago: executing program 2 (id=869): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newtaction={0x1f0, 0x30, 0x0, 0x0, 0x0, {}, [{0x1dc, 0x1, [@m_ipt={0x17c, 0x0, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x57, 0x6, {0x0, 'security\x00', 0x0, 0x0, "44488e520249a50d9a7ffbbaf6952efa45301224e53e20eb564ffaae9c7bddb7ba73219451fa601ca6d65484f6"}}]}, {0xf9, 0x6, "c271c9e396665976bad5a7a76a1647b850aa2ef4f249e3d70cb8bb4747a96919ffaf866c021350f223ba568a3c994356612869cec1a9215c9c1c99fe7a2c7635c10c472f06c7a5cb0df158096d1d793a2fd381de07ed1afc21f4f7a5affc2aef4a56798bf48055f1539cbcebe30d20e80af034b4454b2b7678f9466cb5055d7206b4bd7b53e8755c612436ae17deb9ec89e1de7bb618b8fe228dcba26b683953d049c769754624f492bae615238e775ffba458df558f8c0e1a1f96d1d18c1b656ea2044b7a8640dc61eb34eb8e20aee7b391c839c68123dea4a7b767230cc25a2b8411e405f0ea72cbe6f34e323f082818a2ef9550"}, {0xc}, {0xc}}}, @m_ipt={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "98d0a97ce1b5aea9e5b85077a96dcd469d1abef39a7ded151d3b28f768feee810d3f37ddee045992917da2c49c"}, {0xc}, {0xc}}}]}]}, 0x1f0}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000240), &(0x7f00000002c0)=0xc) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x9, 0x0, 0x0, 0x13, 0x0, 0xfffffffe}]}}, 0x0, 0x26}, 0x20) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) mkdir(0x0, 0x0) getpgid(r3) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000001001000001000000e4000000f014fed8d6b5818dc61211311c7d22259a61191bb40b48703f01886e5f"], 0x10, 0xe000}, 0x5}], 0x1, 0x8000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 15.113646502s ago: executing program 0 (id=870): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgrp(r0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3f, 0x2, 0x0, "8baadc68379dd10000419d6bc2cb00"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 13.870666452s ago: executing program 2 (id=871): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000e0087000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x4a8200, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) connect$packet(r4, &(0x7f0000000240)={0x11, 0x6}, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 12.289944213s ago: executing program 3 (id=872): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @timestamp={0x8, 0xa, 0x1}, @sack={0x5, 0x6, [0x0]}, @md5sig={0x13, 0x12, "9b113ff4c4385514c5bc5149cf7f48c8"}]}}}}}}}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, 0x0, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@enum={0xa, 0x9, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x9, 0x5}, {0x8, 0x2}, {0xc, 0x4}, {0xc, 0xfff}, {0x0, 0x8}, {0x7, 0x2}]}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0xe, 0x2e]}}, &(0x7f0000000400)=""/62, 0x8d, 0x3e}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x2, 0x6, 0x2402, 0xffffffffffffffff, 0x14f, '\x00', r7, r8, 0x3, 0x5, 0x5}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002040)={0x0, 0x989680}) setsockopt$sock_int(r6, 0x1, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x90) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}) 11.572628035s ago: executing program 0 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ppoll(&(0x7f0000000b80)=[{r1}], 0x1, &(0x7f0000000bc0), 0x0, 0x0) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f00000002c0)=@raw=[@generic={0x0, 0x4, 0x4, 0x3, 0x3}], &(0x7f0000000380)='GPL\x00', 0x0, 0x70, &(0x7f0000000400)=""/112, 0x41000, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xe, 0x49413e07, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000500)=[{0x2, 0x2, 0x3, 0x1}, {0x2, 0x2, 0x10}, {0x2, 0x1, 0x4, 0x3}, {0x0, 0x3, 0x8, 0x9}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='afs_reload_dir\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet6(0xa, 0x1, 0x5) sendfile(r5, r3, 0x0, 0x80009) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.689225063s ago: executing program 3 (id=874): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x40000000) sendmsg$NFT_BATCH(r0, 0x0, 0x24000800) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c53119"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.265166715s ago: executing program 0 (id=875): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40)) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000040)={0xffffffff, 0x10, 0x4df8, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', 0x0}) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000d08000240000000030c00048005000100690000000c00038005000100430000000900f28996e77a30000000000900020073797a320000000014007e317dc9a914760d0000000000000000000a"], 0x94}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.208255971s ago: executing program 1 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket(0x2b, 0x3, 0x3a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={<r3=>0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x3, 0x22, 0x13, 0x6e6, 0xc}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.794506ms ago: executing program 0 (id=877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @val=@tcx}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000025"], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}]}, 0x40}}, 0x4002) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x1d, 0x0, 0x4) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='ext2\x00', 0x3, &(0x7f00000005c0)='/dev/cpu/#/msr\x00') ppoll(&(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000140)={r9, 0x0, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000100)=0x1) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d667363616368"]) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008000400", @ANYRES8], 0x2c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000500000000000800060073"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$vim2m(&(0x7f0000000100), 0xffff67d7, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000380), 0x40841, 0x0) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x4}, 0x5, 0x40, 0x1, 0x0, 0xfffffffffffffe43, 0x4, 'syz0\x00', 0x0, 0xfffffffffffffef5}) umount2(&(0x7f0000000040)='./file0\x00', 0xb) kernel console output (not intermixed with test programs): 6-1: config 0 descriptor?? [ 163.868306][ T35] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 164.078203][ T30] usb 6-1: USB disconnect, device number 16 [ 164.082287][ T30] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 164.277660][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 164.402616][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 164.621782][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.627201][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.648444][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.652244][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.659560][ T6955] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.667776][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.996488][ T35] usb 7-1: USB disconnect, device number 15 [ 165.294783][ T6963] bridge0: port 3(gretap1) entered blocking state [ 165.298606][ T6963] bridge0: port 3(gretap1) entered disabled state [ 165.301331][ T6963] gretap1: entered allmulticast mode [ 165.304991][ T6963] gretap1: entered promiscuous mode [ 165.316477][ T6963] bridge0: port 3(gretap1) entered blocking state [ 165.319553][ T6963] bridge0: port 3(gretap1) entered forwarding state [ 165.520165][ T6969] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 166.209304][ T6977] Process accounting resumed [ 166.211474][ T6977] kernel write not supported for file /asound/timers (pid: 6977 comm: syz.2.483) [ 166.613649][ T35] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 166.808474][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 166.813794][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.830727][ T35] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.837999][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.865643][ T35] usb 8-1: config 0 descriptor?? [ 167.340003][ T6997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.488'. [ 167.499630][ T35] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.700704][ T35] usb 8-1: USB disconnect, device number 19 [ 167.706581][ T35] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 167.816833][ T7004] random: crng reseeded on system resumption [ 167.926760][ T7006] netlink: 'syz.0.491': attribute type 27 has an invalid length. [ 168.456195][ T7008] : renamed from bond0 (while UP) [ 168.941200][ T7019] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 169.173932][ T7022] sctp: [Deprecated]: syz.3.495 (pid 7022) Use of int in max_burst socket option deprecated. [ 169.173932][ T7022] Use struct sctp_assoc_value instead [ 170.198557][ T56] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 170.428503][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 170.433131][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 170.443009][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 170.453919][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.468671][ T56] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.501134][ T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.505233][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.780789][ T56] usb 6-1: usb_control_msg returned -32 [ 170.783318][ T56] usbtmc 6-1:16.0: can't read capabilities [ 171.515127][ T7044] Process accounting resumed [ 171.517026][ T7044] kernel write not supported for file /asound/timers (pid: 7044 comm: syz.0.501) [ 172.749499][ T5408] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 172.866222][ T7061] Process accounting resumed [ 172.868806][ T7061] kernel write not supported for file /asound/timers (pid: 7061 comm: syz.3.504) [ 172.940300][ T35] usb 6-1: USB disconnect, device number 17 [ 172.961731][ T5408] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.966356][ T5408] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.989813][ T5408] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.003075][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.032446][ T7060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.040683][ T5408] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.479970][ T35] usb 7-1: USB disconnect, device number 16 [ 176.301698][ T7099] batman_adv: batadv0: Adding interface: ipvlan0 [ 176.304524][ T7099] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 178.645986][ T7117] kvm: kvm [7115]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 178.683525][ T7117] kvm: kvm [7115]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 178.712079][ T5348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.716533][ T7108] Process accounting resumed [ 178.718345][ T7108] kernel write not supported for file /asound/timers (pid: 7108 comm: syz.2.519) [ 178.725672][ T5348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.735391][ T5348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.744413][ T5348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.751596][ T5348] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.759972][ T5348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.019517][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 179.198887][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 179.276488][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.289029][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.292036][ T7123] bridge_slave_0: entered allmulticast mode [ 179.304652][ T7123] bridge_slave_0: entered promiscuous mode [ 179.311543][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.316348][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.324115][ T7123] bridge_slave_1: entered allmulticast mode [ 179.335173][ T7123] bridge_slave_1: entered promiscuous mode [ 179.440403][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.446929][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.599275][ T7123] team0: Port device team_slave_0 added [ 179.643871][ T7123] team0: Port device team_slave_1 added [ 179.728191][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.738814][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.758871][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.771381][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.774513][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.785506][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.907176][ T7123] hsr_slave_0: entered promiscuous mode [ 179.917766][ T7123] hsr_slave_1: entered promiscuous mode [ 179.925237][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.931713][ T7123] Cannot create hsr debugfs directory [ 180.363349][ T7123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.453851][ T7123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.585316][ T7123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.704638][ T7123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.808550][ T5348] Bluetooth: hci2: command tx timeout [ 180.882537][ T7123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.899275][ T7123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.937621][ T7123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.951628][ T7123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.111538][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.143097][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.153671][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.156808][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.200816][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.203546][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.561072][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.614824][ T7123] veth0_vlan: entered promiscuous mode [ 181.624656][ T7123] veth1_vlan: entered promiscuous mode [ 181.663432][ T7123] veth0_macvtap: entered promiscuous mode [ 181.676605][ T7123] veth1_macvtap: entered promiscuous mode [ 181.739064][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.745889][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.770727][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.774881][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.791953][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.850889][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.859345][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.873830][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.883966][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.889668][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.894326][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.898732][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.902740][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.919201][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.943205][ T7123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.946932][ T7123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.968417][ T7123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.975852][ T7123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.340485][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.343754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.477029][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.505952][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.888664][ T5348] Bluetooth: hci2: command tx timeout [ 183.346448][ T7154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.585904][ T7155] Process accounting resumed [ 183.588618][ T7155] kernel write not supported for file /asound/timers (pid: 7155 comm: syz.0.523) [ 183.742164][ T7154] overlay: filesystem on ./bus not supported as upperdir [ 184.268857][ T7164] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 184.924371][ T7168] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 184.979107][ T5348] Bluetooth: hci2: command tx timeout [ 185.012379][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 185.438473][ T35] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 185.638659][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 185.646286][ T35] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 185.650867][ T35] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 185.655240][ T35] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 185.660950][ T35] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 185.667254][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.680450][ T35] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 185.684479][ T35] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 185.688164][ T35] usb 8-1: Product: syz [ 185.698455][ T35] usb 8-1: Manufacturer: syz [ 185.700722][ T35] usb 8-1: SerialNumber: syz [ 185.707974][ T35] usb 8-1: config 0 descriptor?? [ 185.720200][ T35] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 185.726716][ T35] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.285171][ T35] usb 8-1: USB disconnect, device number 20 [ 186.294994][ T35] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 187.048634][ T5348] Bluetooth: hci2: command tx timeout [ 187.214340][ T7186] batman_adv: batadv0: Adding interface: ipvlan0 [ 187.236949][ T7186] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.295464][ T7186] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 187.323448][ T30] IPVS: starting estimator thread 0... [ 187.347435][ T7188] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 187.641812][ T7189] IPVS: using max 19 ests per chain, 45600 per kthread [ 188.622145][ T7198] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 190.668696][ T57] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 190.888927][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.898666][ T57] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.902839][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.917760][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.925866][ T7223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.951584][ T57] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.448521][ T5408] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.558684][ T57] usb 6-1: USB disconnect, device number 18 [ 191.680440][ T5408] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.683966][ T5408] usb 5-1: config 0 has no interface number 0 [ 191.710133][ T5408] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a26, bcdDevice=bb.83 [ 191.711598][ T7231] Process accounting resumed [ 191.713989][ T5408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.714011][ T5408] usb 5-1: Product: syz [ 191.714024][ T5408] usb 5-1: Manufacturer: syz [ 191.714038][ T5408] usb 5-1: SerialNumber: syz [ 191.727578][ T5408] usb 5-1: config 0 descriptor?? [ 191.727721][ T7231] kernel write not supported for file /asound/timers (pid: 7231 comm: syz.2.545) [ 191.842909][ T7240] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 191.925321][ T7240] team0: Device wlan1 failed to register rx_handler [ 192.312007][ T5408] hub 5-1:0.1: bad descriptor, ignoring hub [ 192.314576][ T5408] hub 5-1:0.1: probe with driver hub failed with error -5 [ 192.369768][ T5408] usb 5-1: USB disconnect, device number 14 [ 193.138548][ T5454] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 193.347701][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.352960][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.357463][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 193.362544][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.366678][ T5454] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 193.373003][ T5454] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 193.377639][ T5454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.399249][ T5454] usb 6-1: config 0 descriptor?? [ 193.732301][ T7250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.856341][ T5454] ntrig 0003:1B96:000A.000A: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 193.923310][ T7250] overlay: filesystem on ./bus not supported as upperdir [ 194.111417][ T5454] ntrig 0003:1B96:000A.000A: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 194.863260][ T8] usb 6-1: USB disconnect, device number 19 [ 194.957820][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.555'. [ 196.477874][ T7288] random: crng reseeded on system resumption [ 197.908499][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 198.118762][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 198.139759][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 198.143316][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.188423][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.192908][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.218714][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.236778][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.241307][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.257676][ T7291] Process accounting resumed [ 198.260678][ T7291] kernel write not supported for file /asound/timers (pid: 7291 comm: syz.2.561) [ 198.514200][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 198.516914][ T8] usbtmc 5-1:16.0: can't read capabilities [ 198.720596][ T7293] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 199.542015][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.544745][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.614568][ T57] usb 5-1: USB disconnect, device number 15 [ 201.078518][ T57] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 201.280946][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.286641][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.291457][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.295515][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.302589][ T7325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.309038][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.754401][ T8] usb 5-1: USB disconnect, device number 16 [ 202.462105][ T7330] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.483440][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 202.617786][ T7330] overlay: filesystem on ./bus not supported as upperdir [ 202.988872][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 203.194578][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.207542][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.216881][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.243763][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.250336][ T8] usb 6-1: config 0 descriptor?? [ 203.951394][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.954666][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.962057][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.682993][ T5454] usb 6-1: USB disconnect, device number 20 [ 205.824254][ T7350] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 205.887929][ T7350] team0: Port device wlan1 added [ 206.235708][ T7355] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 208.856323][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 208.992881][ T7368] cdrom: dropping to single frame dma [ 209.719926][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 211.182759][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 211.680794][ T7386] kvm: pic: non byte read [ 211.695639][ T7386] kvm: pic: level sensitive irq not supported [ 211.696334][ T7386] kvm: pic: non byte read [ 211.707248][ T7386] pic_ioport_write: 32 callbacks suppressed [ 211.707262][ T7386] kvm: pic: single mode not supported [ 211.713080][ T7386] kvm: pic: level sensitive irq not supported [ 211.721892][ T7386] kvm: pic: non byte read [ 211.727106][ T7386] kvm: pic: level sensitive irq not supported [ 211.727459][ T7386] kvm: pic: non byte read [ 211.756386][ T7386] kvm: pic: non byte read [ 211.760478][ T7386] kvm: pic: non byte read [ 211.776819][ T7386] kvm: pic: non byte read [ 211.789523][ T7386] kvm: pic: level sensitive irq not supported [ 211.790609][ T7386] kvm: pic: non byte read [ 211.806221][ T7386] kvm: pic: non byte read [ 211.812483][ T7386] kvm: pic: non byte read [ 211.815810][ T7386] kvm: pic: level sensitive irq not supported [ 211.819797][ T7386] kvm: pic: level sensitive irq not supported [ 211.830223][ T7386] kvm: pic: level sensitive irq not supported [ 211.841291][ T7386] kvm: pic: level sensitive irq not supported [ 211.847816][ T7386] kvm: pic: level sensitive irq not supported [ 211.877632][ T7386] kvm: pic: level sensitive irq not supported [ 212.860268][ T7409] netlink: 180 bytes leftover after parsing attributes in process `syz.1.591'. [ 212.863812][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 214.278622][ T982] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 214.478485][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 214.495452][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.503635][ T982] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.523419][ T7418] netlink: 'syz.3.594': attribute type 11 has an invalid length. [ 214.524842][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.546865][ T982] usb 6-1: config 0 descriptor?? [ 215.109022][ T982] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 215.567447][ T56] usb 6-1: USB disconnect, device number 21 [ 215.572351][ T56] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 215.614497][ T7435] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 215.832851][ T7439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.598'. [ 216.342676][ T7447] UBIFS error (pid: 7447): cannot open "./file0", error -22 [ 216.551335][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 216.648726][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 217.494608][ T39] audit: type=1326 audit(1724804026.819:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.606" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 217.689096][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 219.989671][ T7488] Process accounting resumed [ 219.991871][ T7488] kernel write not supported for file /asound/timers (pid: 7488 comm: syz.0.617) [ 221.776059][ T7513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.079733][ T7513] overlay: filesystem on ./bus not supported as upperdir [ 222.737875][ T7518] picdev_read: 55 callbacks suppressed [ 222.737890][ T7518] kvm: pic: non byte read [ 222.744419][ T7518] pic_ioport_write: 13 callbacks suppressed [ 222.744433][ T7518] kvm: pic: level sensitive irq not supported [ 222.794680][ T7518] kvm: pic: non byte read [ 222.801713][ T7518] kvm: pic: single mode not supported [ 222.801727][ T7518] kvm: pic: level sensitive irq not supported [ 222.804591][ T7518] kvm: pic: non byte read [ 222.810008][ T7518] kvm: pic: level sensitive irq not supported [ 222.810360][ T7518] kvm: pic: non byte read [ 222.831440][ T7518] kvm: pic: non byte read [ 222.834879][ T7518] kvm: pic: non byte read [ 222.842590][ T7518] kvm: pic: non byte read [ 222.850728][ T7518] kvm: pic: level sensitive irq not supported [ 222.861525][ T7518] kvm: pic: non byte read [ 222.870662][ T7518] kvm: pic: non byte read [ 222.874804][ T7518] kvm: pic: non byte read [ 222.877839][ T7518] kvm: pic: level sensitive irq not supported [ 222.881432][ T7518] kvm: pic: level sensitive irq not supported [ 222.888900][ T7518] kvm: pic: level sensitive irq not supported [ 222.894715][ T7518] kvm: pic: level sensitive irq not supported [ 222.908722][ T7518] kvm: pic: level sensitive irq not supported [ 222.916006][ T7518] kvm: pic: level sensitive irq not supported [ 223.653224][ T7535] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 227.206316][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 229.369579][ T7600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.634'. [ 230.861296][ T7605] all: renamed from bridge_slave_0 (while UP) [ 230.871406][ T7607] block nbd1: shutting down sockets [ 231.732634][ T7613] netlink: 180 bytes leftover after parsing attributes in process `syz.0.638'. [ 231.737768][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 232.631730][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 233.721909][ T7634] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.869306][ T7634] overlay: filesystem on ./bus not supported as upperdir [ 236.319776][ T5349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.326353][ T5349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.331482][ T5349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.336612][ T5349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.344901][ T5349] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.349030][ T5349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.559454][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 236.659808][ T7662] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.650'. [ 236.664145][ T7662] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.650'. [ 236.910471][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.914362][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.918435][ T7654] bridge_slave_0: entered allmulticast mode [ 236.923873][ T7654] bridge_slave_0: entered promiscuous mode [ 236.930359][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.936889][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.940316][ T7654] bridge_slave_1: entered allmulticast mode [ 236.947499][ T7654] bridge_slave_1: entered promiscuous mode [ 237.068672][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.076236][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.186561][ T7654] team0: Port device team_slave_0 added [ 237.196524][ T7654] team0: Port device team_slave_1 added [ 237.359591][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.364675][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.376719][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.399503][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.402771][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.419930][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.490757][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 237.640227][ T7654] hsr_slave_0: entered promiscuous mode [ 237.660732][ T7654] hsr_slave_1: entered promiscuous mode [ 237.673523][ T7654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.676512][ T7654] Cannot create hsr debugfs directory [ 237.762562][ T7671] hub 9-0:1.0: USB hub found [ 237.765097][ T7671] hub 9-0:1.0: 1 port detected [ 238.035598][ T7654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.042042][ T7654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.285207][ T7654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.291692][ T7654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.336605][ T7678] tmpfs: Bad value for 'mpol' [ 238.407286][ T7678] overlay: ./file0 is not a directory [ 238.412859][ T5348] Bluetooth: hci4: command tx timeout [ 238.457317][ T7654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.461879][ T7654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.523898][ T7654] bond0: (slave netdevsim0): Releasing backup interface [ 238.530827][ T7654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.535925][ T7654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.622101][ T7681] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 238.634624][ T7681] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 238.832765][ T7654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.839834][ T7654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.850709][ T7654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.873347][ T7654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.993487][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.076366][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.103198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.106463][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.135553][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.139183][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.602626][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.765615][ T7654] veth0_vlan: entered promiscuous mode [ 239.814044][ T7654] veth1_vlan: entered promiscuous mode [ 239.864513][ T7654] veth0_macvtap: entered promiscuous mode [ 239.878944][ T7654] veth1_macvtap: entered promiscuous mode [ 239.900217][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.905621][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.913941][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.918751][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.923529][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.928196][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.938867][ T7696] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.942581][ T7696] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.955682][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.982903][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.987876][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.992601][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.997440][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.001826][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.008946][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.013339][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.018150][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.023482][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.029140][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.039207][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.057019][ T7654] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.061126][ T7654] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.065115][ T7654] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.070152][ T7654] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.260194][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.272718][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.303734][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.313823][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.491136][ T5348] Bluetooth: hci4: command tx timeout [ 241.160439][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 242.583813][ T5348] Bluetooth: hci4: command tx timeout [ 243.101780][ T7718] kernel profiling enabled (shift: 17) [ 244.259964][ T5349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.269254][ T5349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.276426][ T5349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.295941][ T5349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.325719][ T5349] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.330121][ T5349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.608874][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 244.648640][ T5349] Bluetooth: hci4: command tx timeout [ 244.900470][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.903543][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.907122][ T7731] bridge_slave_0: entered allmulticast mode [ 244.914017][ T7731] bridge_slave_0: entered promiscuous mode [ 244.919512][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.923924][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.927145][ T7731] bridge_slave_1: entered allmulticast mode [ 244.932736][ T7731] bridge_slave_1: entered promiscuous mode [ 245.027195][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.034501][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.132890][ T7731] team0: Port device team_slave_0 added [ 245.148841][ T7731] team0: Port device team_slave_1 added [ 245.252203][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.255542][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.266664][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.274395][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.277232][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.288248][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.433149][ T7731] hsr_slave_0: entered promiscuous mode [ 245.441337][ T7731] hsr_slave_1: entered promiscuous mode [ 245.450590][ T7731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.453949][ T7731] Cannot create hsr debugfs directory [ 245.788491][ T7731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.909130][ T7731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.125440][ T7731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.290241][ T7731] bond0: (slave netdevsim0): Releasing backup interface [ 246.348897][ T7731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.408767][ T5349] Bluetooth: hci5: command tx timeout [ 246.589297][ T7731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.614621][ T7731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.641628][ T7731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.696490][ T7731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.841086][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.882796][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.897115][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.900189][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.942024][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.946549][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.252351][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.330204][ T7731] veth0_vlan: entered promiscuous mode [ 247.371254][ T7731] veth1_vlan: entered promiscuous mode [ 247.443300][ T7731] veth0_macvtap: entered promiscuous mode [ 247.462294][ T7731] veth1_macvtap: entered promiscuous mode [ 247.502932][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.507398][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.511559][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.515762][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.539362][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.544298][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.548796][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.560048][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.566742][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.577079][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.596642][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.601598][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.607095][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.610908][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.624144][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.639592][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.643983][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.647721][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.675500][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.680894][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.687580][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.697635][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.716050][ T7731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.720916][ T7731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.732129][ T7731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.736301][ T7731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.868049][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.877729][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.913668][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.922739][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.274630][ T7755] netlink: 180 bytes leftover after parsing attributes in process `syz.2.664'. [ 248.315888][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 248.488879][ T5349] Bluetooth: hci5: command tx timeout [ 250.087205][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 250.128742][ T7764] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 250.132656][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 250.143428][ T7762] overlayfs: conflicting lowerdir path [ 250.149464][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 250.222987][ T7765] vhci_hcd: connection closed [ 250.227286][ T393] vhci_hcd: stop threads [ 250.232517][ T393] vhci_hcd: release socket [ 250.234328][ T393] vhci_hcd: disconnect device [ 250.488598][ T5349] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 250.492680][ T5349] Bluetooth: hci2: Injecting HCI hardware error event [ 250.497702][ T5349] Bluetooth: hci2: hardware error 0x00 [ 250.589501][ T5348] Bluetooth: hci5: command tx timeout [ 251.057054][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 252.571797][ T5349] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 252.649963][ T5349] Bluetooth: hci5: command tx timeout [ 258.063136][ T7795] Process accounting resumed [ 260.318302][ T7806] Process accounting resumed [ 260.321256][ T7806] kernel write not supported for file /asound/timers (pid: 7806 comm: syz.3.682) [ 260.973212][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.987037][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.419595][ T5348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.427189][ T5348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.436466][ T5348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.446635][ T5348] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.458318][ T5348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 261.461914][ T5348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.726427][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 262.034487][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.073612][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.076284][ T7809] bridge_slave_0: entered allmulticast mode [ 262.089673][ T7809] bridge_slave_0: entered promiscuous mode [ 262.120292][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.130321][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.134185][ T7809] bridge_slave_1: entered allmulticast mode [ 262.177146][ T7809] bridge_slave_1: entered promiscuous mode [ 262.479366][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.519365][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.744304][ T7809] team0: Port device team_slave_0 added [ 262.771435][ T7809] team0: Port device team_slave_1 added [ 262.951913][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.955084][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.967777][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.974563][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.977987][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.992055][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.414589][ T7809] hsr_slave_0: entered promiscuous mode [ 263.489964][ T7809] hsr_slave_1: entered promiscuous mode [ 263.524538][ T7809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.527597][ T7809] Cannot create hsr debugfs directory [ 263.528865][ T5348] Bluetooth: hci6: command tx timeout [ 264.271560][ T7809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.405078][ T7809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.481197][ T7809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.650826][ T7809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.738839][ T40] bridge_slave_1: left allmulticast mode [ 264.743188][ T40] bridge_slave_1: left promiscuous mode [ 264.753715][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.776995][ T40] bridge_slave_0: left allmulticast mode [ 264.779668][ T40] bridge_slave_0: left promiscuous mode [ 264.783043][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.437323][ T7826] netlink: 180 bytes leftover after parsing attributes in process `syz.3.684'. [ 265.447121][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 265.507433][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.530186][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.541997][ T40] bond0 (unregistering): Released all slaves [ 265.577875][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 265.585929][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 265.608589][ T5349] Bluetooth: hci6: command tx timeout [ 265.693631][ T7809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.716233][ T7809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.739689][ T7809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.747671][ T7809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.492916][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.637011][ T5348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.661207][ T5348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.687500][ T5348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.704362][ T5348] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.759690][ T5348] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 266.764756][ T5348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.827382][ T40] hsr_slave_0: left promiscuous mode [ 266.847525][ T40] hsr_slave_1: left promiscuous mode [ 266.908853][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.912419][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.940768][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.944170][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.054927][ T40] veth1_macvtap: left promiscuous mode [ 267.058101][ T40] veth0_macvtap: left promiscuous mode [ 267.075293][ T40] veth1_vlan: left promiscuous mode [ 267.086169][ T40] veth0_vlan: left promiscuous mode [ 267.688620][ T5349] Bluetooth: hci6: command tx timeout [ 268.677332][ T40] team0 (unregistering): Port device team_slave_1 removed [ 268.786906][ T40] team0 (unregistering): Port device team_slave_0 removed [ 268.891411][ T5349] Bluetooth: hci5: command tx timeout [ 269.775331][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.778987][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 269.788433][ T5349] Bluetooth: hci6: command tx timeout [ 269.859538][ T7845] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 269.864026][ T7845] bond0: (slave netdevsim0): Releasing backup interface [ 269.891034][ T7845] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 269.897090][ T7845] team0: Port device netdevsim0 added [ 269.987012][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.990357][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.014154][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.018045][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.272320][ T7851] : entered promiscuous mode [ 270.512775][ T7837] chnl_net:caif_netlink_parms(): no params data found [ 270.790786][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.794546][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.797767][ T7837] bridge_slave_0: entered allmulticast mode [ 270.804969][ T7837] bridge_slave_0: entered promiscuous mode [ 270.816844][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.824108][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.827375][ T7837] bridge_slave_1: entered allmulticast mode [ 270.832111][ T7837] bridge_slave_1: entered promiscuous mode [ 270.847268][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.942335][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.960788][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.968786][ T5349] Bluetooth: hci5: command tx timeout [ 271.072034][ T7837] team0: Port device team_slave_0 added [ 271.094938][ T7837] team0: Port device team_slave_1 added [ 271.166904][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.173373][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.185068][ T7837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.194421][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.208294][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.233654][ T7837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.424442][ T7837] hsr_slave_0: entered promiscuous mode [ 271.436411][ T7837] hsr_slave_1: entered promiscuous mode [ 271.457547][ T7837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.461790][ T7837] Cannot create hsr debugfs directory [ 271.468228][ T7809] veth0_vlan: entered promiscuous mode [ 271.494859][ T7809] veth1_vlan: entered promiscuous mode [ 271.773002][ T7837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.803173][ T7809] veth0_macvtap: entered promiscuous mode [ 271.824906][ T7809] veth1_macvtap: entered promiscuous mode [ 271.842225][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.846887][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.852809][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.858116][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.863577][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.869524][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.874264][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.879643][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.885924][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.945125][ T7837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.971234][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.975502][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.981787][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.987080][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.992205][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.996517][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.002616][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.006233][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.011391][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.016188][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.020506][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.025425][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.033995][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.066659][ T7837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.088262][ T7809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.098806][ T7809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.119430][ T7809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.130014][ T7809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.211572][ T7837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.325353][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.333522][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.397934][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.405292][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.492830][ T7837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.509922][ T7837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.526066][ T7837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.543293][ T7837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.693637][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.735217][ T7837] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.754764][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.758338][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.787832][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.791377][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.068516][ T5349] Bluetooth: hci5: command tx timeout [ 273.172674][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.275288][ T7837] veth0_vlan: entered promiscuous mode [ 273.323903][ T7837] veth1_vlan: entered promiscuous mode [ 273.380866][ T7837] veth0_macvtap: entered promiscuous mode [ 273.393966][ T7837] veth1_macvtap: entered promiscuous mode [ 273.414523][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.419999][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.424272][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.429821][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.434720][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.440355][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.445238][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.449932][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.453995][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.458885][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.470736][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.502619][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.510354][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.515924][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.522295][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.527259][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.533011][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.537658][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.543768][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.549995][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.554971][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.560193][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.566464][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.571487][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.576221][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.586948][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.606674][ T7837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.619351][ T7837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.623204][ T7837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.627022][ T7837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.724354][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.728157][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.802148][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.806381][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.227804][ T39] audit: type=1326 audit(1724804083.539:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.693" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 274.238491][ T982] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 274.451331][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.455971][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.488685][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 274.494656][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.509240][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 274.516676][ T982] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 274.529822][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.538027][ T982] usb 5-1: config 0 descriptor?? [ 274.758721][ C2] hrtimer: interrupt took 692136 ns [ 274.992103][ T982] ntrig 0003:1B96:000A.000B: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 275.129106][ T5349] Bluetooth: hci5: command tx timeout [ 275.258813][ T982] ntrig 0003:1B96:000A.000B: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 275.372946][ T7898] overlayfs: failed to resolve './file0': -2 [ 275.610491][ T5356] usb 5-1: USB disconnect, device number 17 [ 275.625363][ T35] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 275.829673][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.840167][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.848840][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.854121][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.874556][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.886436][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.891479][ T35] usb 6-1: config 0 descriptor?? [ 276.401585][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 276.480997][ T39] audit: type=1326 audit(1724804085.789:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.701" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 276.655810][ T7916] netlink: 'syz.3.701': attribute type 8 has an invalid length. [ 276.668515][ T7916] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.701'. [ 277.317377][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 277.328773][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 277.356155][ T35] usb 6-1: USB disconnect, device number 22 [ 278.767437][ T7936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.487420][ T39] audit: type=1326 audit(1724804090.789:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.0.710" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 285.909733][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 286.118857][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 286.142953][ T7999] block nbd2: shutting down sockets [ 286.148109][ T7999] ptrace attach of "/syz-executor exec"[7809] was attempted by "/syz-executor exec"[7999] [ 286.166619][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.175205][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.180462][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.186647][ T10] usb 8-1: config 0 descriptor?? [ 286.199325][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 287.010944][ T10] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 287.252780][ T10] usb 8-1: USB disconnect, device number 21 [ 287.257194][ T10] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 288.678592][ T58] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 288.906675][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.918471][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.938418][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 288.944751][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.959905][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 288.965861][ T58] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 288.977191][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.983184][ T58] usb 7-1: config 0 descriptor?? [ 289.107102][ T8016] syz_tun: entered allmulticast mode [ 289.425660][ T58] ntrig 0003:1B96:000A.000C: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 289.685380][ T58] ntrig 0003:1B96:000A.000C: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 289.957719][ T8015] syz_tun: left allmulticast mode [ 289.999464][ T5349] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 290.002440][ T5349] Bluetooth: Wrong link type (-22) [ 290.005082][ T5349] Bluetooth: hci4: link tx timeout [ 290.007825][ T5349] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.029309][ T58] usb 7-1: USB disconnect, device number 17 [ 290.281353][ T8034] overlayfs: missing 'lowerdir' [ 292.102621][ T5349] Bluetooth: hci4: command 0x0406 tx timeout [ 292.908716][ T8057] Process accounting resumed [ 292.911323][ T8057] kernel write not supported for file /asound/timers (pid: 8057 comm: syz.3.733) [ 295.870573][ T8096] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 295.880772][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 296.309721][ T8103] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.089096][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 297.093366][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 300.265679][ T8147] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 300.326549][ T8147] team0: Failed to send options change via netlink (err -105) [ 300.330905][ T8147] team0: Port device netdevsim0 added [ 300.334736][ T1213] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 301.243218][ T8155] binder: BINDER_SET_CONTEXT_MGR already set [ 301.246799][ T8155] binder: 8154:8155 ioctl 4018620d 200001c0 returned -16 [ 301.533362][ T39] audit: type=1326 audit(1724804110.839:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.757" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 302.328776][ T5349] Bluetooth: hci5: command tx timeout [ 302.411141][ T39] audit: type=1326 audit(1724804111.719:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.1.766" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 302.842469][ T8168] : entered promiscuous mode [ 304.232575][ T39] audit: type=1804 audit(1724804113.549:31): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.762" name="/newroot/17/bus/file0" dev="overlay" ino=118 res=1 errno=0 [ 305.580776][ T8184] ALSA: seq fatal error: cannot create timer (-22) [ 305.735572][ T8189] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 305.764442][ T8189] team0: Failed to send options change via netlink (err -105) [ 305.778409][ T8189] team0: Port device netdevsim0 added [ 305.835217][ T393] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 305.923480][ T8190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.898871][ T5356] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 307.078458][ T5356] usb 6-1: Using ep0 maxpacket: 8 [ 307.086949][ T5356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.096030][ T5356] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.099509][ T5356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.110852][ T5356] usb 6-1: config 0 descriptor?? [ 307.528546][ T39] audit: type=1326 audit(1724804116.839:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.2.769" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 307.848543][ T5349] Bluetooth: hci6: command tx timeout [ 308.087369][ T5349] Bluetooth: hci6: unexpected cc 0x1407 length: 100 > 9 [ 308.112494][ T5356] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 308.330329][ T5391] usb 6-1: USB disconnect, device number 23 [ 308.335860][ T5391] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 309.337704][ T5348] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.344170][ T5348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.358311][ T5348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.376355][ T5348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.405824][ T5348] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 309.410130][ T5348] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.679622][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 309.992167][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.004328][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.012131][ T8218] bridge_slave_0: entered allmulticast mode [ 310.020212][ T8218] bridge_slave_0: entered promiscuous mode [ 310.025135][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.107735][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.110768][ T8218] bridge_slave_1: entered allmulticast mode [ 310.134234][ T8218] bridge_slave_1: entered promiscuous mode [ 310.323228][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.340957][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.585983][ T8218] team0: Port device team_slave_0 added [ 310.592485][ T8218] team0: Port device team_slave_1 added [ 310.736025][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.740000][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.774412][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.784789][ T8240] Process accounting resumed [ 310.786984][ T8240] kernel write not supported for file /asound/timers (pid: 8240 comm: syz.0.776) [ 310.794073][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.797142][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.818631][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.013607][ T8218] hsr_slave_0: entered promiscuous mode [ 311.026039][ T8218] hsr_slave_1: entered promiscuous mode [ 311.034608][ T8218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.044813][ T8218] Cannot create hsr debugfs directory [ 311.446889][ T8218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.448968][ T5349] Bluetooth: hci7: command tx timeout [ 311.612868][ T8218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.740574][ T8218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.042447][ T8218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.089273][ T8218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.096338][ T8218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.117041][ T8218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.172469][ T5349] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 312.176224][ T5349] Bluetooth: hci6: Injecting HCI hardware error event [ 312.180855][ T5348] Bluetooth: hci6: hardware error 0x00 [ 312.248065][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.303832][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.331407][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.334482][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.344300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.347630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.617792][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.683305][ T8218] veth0_vlan: entered promiscuous mode [ 312.694315][ T8218] veth1_vlan: entered promiscuous mode [ 312.725397][ T8218] veth0_macvtap: entered promiscuous mode [ 312.728709][ T5349] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 312.732924][ T5349] Bluetooth: hci5: Injecting HCI hardware error event [ 312.737827][ T5349] Bluetooth: hci5: hardware error 0x00 [ 312.752821][ T8218] veth1_macvtap: entered promiscuous mode [ 312.795048][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.800410][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.806073][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.812440][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.816818][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.823464][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.827619][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.832677][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.836847][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.841176][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.845003][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.849586][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.856026][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.871758][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.876369][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.882148][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.891593][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.896373][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.902344][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.907858][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.912877][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.917123][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.921767][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.926459][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.935487][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.940867][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.945362][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.949863][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.955769][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.963251][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.976026][ T8218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.980615][ T8218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.983974][ T8218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.990723][ T8218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.132831][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.136395][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.165374][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.170079][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.520711][ T5356] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 313.529034][ T66] Bluetooth: hci7: command tx timeout [ 313.709836][ T5356] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.714752][ T5356] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 313.728078][ T5356] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.733885][ T5356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.739835][ T5356] usb 8-1: config 0 descriptor?? [ 313.744769][ T5356] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 314.258730][ T5348] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 314.818589][ T5349] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 315.616600][ T5349] Bluetooth: hci7: command tx timeout [ 316.388286][ T5408] usb 8-1: USB disconnect, device number 22 [ 316.960229][ T5408] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 317.545825][ T5408] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.550555][ T5408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.555350][ T5408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.560236][ T5408] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.565945][ T5408] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.569683][ T5408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.578963][ T5408] usb 8-1: config 0 descriptor?? [ 317.688736][ T5349] Bluetooth: hci7: command tx timeout [ 317.724266][ T30] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 317.804020][ T8283] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 317.807281][ T8283] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 317.812060][ T8283] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 317.829406][ T8283] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 317.948709][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 317.953065][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.958711][ T30] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 317.962489][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.967807][ T30] usb 6-1: config 0 descriptor?? [ 318.625681][ T30] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 318.827605][ T10] usb 6-1: USB disconnect, device number 24 [ 318.828607][ T5408] usbhid 8-1:0.0: can't add hid device: -71 [ 318.833587][ T5408] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 318.833836][ T10] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 318.839545][ T5408] usb 8-1: USB disconnect, device number 23 [ 319.743030][ T8290] Process accounting resumed [ 319.758555][ T8290] kernel write not supported for file /asound/timers (pid: 8290 comm: syz.0.784) [ 320.076212][ T5348] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 320.090787][ T5348] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 320.095499][ T5348] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 320.104997][ T5348] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 320.109643][ T5348] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 320.114186][ T5348] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 320.307555][ T8310] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.420253][ T8308] chnl_net:caif_netlink_parms(): no params data found [ 320.702848][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.708308][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.717999][ T8308] bridge_slave_0: entered allmulticast mode [ 320.724795][ T8308] bridge_slave_0: entered promiscuous mode [ 320.733055][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.737242][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.743182][ T8308] bridge_slave_1: entered allmulticast mode [ 320.752135][ T8308] bridge_slave_1: entered promiscuous mode [ 320.932988][ T8308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.962625][ T8308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.197231][ T8308] team0: Port device team_slave_0 added [ 321.203903][ T8308] team0: Port device team_slave_1 added [ 321.341224][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.348723][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.378555][ T8308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.470325][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.475593][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.504874][ T8308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.797490][ T8308] hsr_slave_0: entered promiscuous mode [ 321.811949][ T8308] hsr_slave_1: entered promiscuous mode [ 321.821423][ T8308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.828448][ T8308] Cannot create hsr debugfs directory [ 322.178866][ T5348] Bluetooth: hci8: command tx timeout [ 322.463982][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.466845][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.522277][ T8308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.541666][ T8325] random: crng reseeded on system resumption [ 322.818440][ T8308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.023797][ T8308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.090579][ T982] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 323.141781][ T8308] team0: Port device netdevsim0 removed [ 323.151007][ T8308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.282853][ T982] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 323.287504][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.316387][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.322503][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.327043][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.336660][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.346765][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.352123][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.371500][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.375954][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.393287][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.397040][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.403952][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.410747][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.415302][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.437040][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.473726][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.494929][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.510344][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.515588][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.519743][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.524867][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.537664][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.541731][ T982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.548226][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.553348][ T982] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 323.557294][ T8308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.564061][ T982] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 323.578470][ T982] usb 6-1: Product: syz [ 323.580804][ T982] usb 6-1: Manufacturer: syz [ 323.584793][ T982] usb 6-1: SerialNumber: syz [ 323.588287][ T8308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.590727][ T982] usb 6-1: config 0 descriptor?? [ 323.604382][ T982] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 323.720468][ T8331] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 323.783959][ T8308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.855634][ T8327] overlayfs: missing 'workdir' [ 323.894721][ T8308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.894958][ T8327] overlayfs: missing 'lowerdir' [ 324.150836][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.172589][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.254277][ T5348] Bluetooth: hci8: command tx timeout [ 324.297703][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.348034][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.416729][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.420241][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.433422][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.436634][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.805501][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.883890][ T8308] veth0_vlan: entered promiscuous mode [ 324.901229][ T8308] veth1_vlan: entered promiscuous mode [ 324.930805][ T8308] veth0_macvtap: entered promiscuous mode [ 324.937967][ T8308] veth1_macvtap: entered promiscuous mode [ 324.952509][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.956960][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.961906][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.966321][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.974368][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.980252][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.984457][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.988818][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.994813][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.001876][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.006318][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.011059][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.015147][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.020300][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.026796][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.034136][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.039810][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.044518][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.049124][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.053374][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.057602][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.062283][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.067051][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.073106][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.077883][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.082453][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.087669][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.093521][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.099164][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.104020][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.119818][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.124902][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.130901][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.137453][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.192469][ T8308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.196239][ T8308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.199869][ T8308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.203917][ T8308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.291411][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.295120][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.330002][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.338505][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.703625][ T8346] ALSA: seq fatal error: cannot create timer (-22) [ 325.810212][ C2] usb 6-1: yurex_control_callback - control failed: -2 [ 325.852066][ T5408] usb 6-1: USB disconnect, device number 25 [ 325.884175][ T5408] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 326.290329][ T8350] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 326.329365][ T5348] Bluetooth: hci8: command tx timeout [ 326.813130][ T8356] overlayfs: failed to resolve './file0': -2 [ 327.259892][ T5391] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 327.456184][ T5391] usb 7-1: Using ep0 maxpacket: 8 [ 327.460511][ T5391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.465185][ T5391] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 327.474999][ T5391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.499028][ T5391] usb 7-1: config 0 descriptor?? [ 328.408463][ T5348] Bluetooth: hci8: command tx timeout [ 328.455553][ T5391] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 328.660051][ T5391] usb 7-1: USB disconnect, device number 18 [ 328.666061][ T5391] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 328.928575][ T8365] Process accounting resumed [ 328.930800][ T8365] kernel write not supported for file /asound/timers (pid: 8365 comm: syz.0.797) [ 331.764920][ T8399] IPv6: Can't replace route, no match found [ 331.787322][ T8399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.807'. [ 331.810727][ T8399] netlink: 2 bytes leftover after parsing attributes in process `syz.0.807'. [ 333.010091][ T1213] bridge_slave_1: left allmulticast mode [ 333.028931][ T1213] bridge_slave_1: left promiscuous mode [ 333.031554][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.062915][ T1213] bridge_slave_0: left allmulticast mode [ 333.065365][ T1213] bridge_slave_0: left promiscuous mode [ 333.068150][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.099307][ T1213] (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.112085][ T1213] (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.120776][ T1213] (unregistering): Released all slaves [ 334.134544][ T1213] bond1 (unregistering): Released all slaves [ 334.695978][ T1213] hsr_slave_0: left promiscuous mode [ 334.699876][ T1213] hsr_slave_1: left promiscuous mode [ 334.710740][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.715447][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.722583][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.726350][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.793317][ T1213] veth1_macvtap: left promiscuous mode [ 334.796073][ T1213] veth0_macvtap: left promiscuous mode [ 334.802308][ T1213] veth1_vlan: left promiscuous mode [ 334.804737][ T1213] veth0_vlan: left promiscuous mode [ 335.577520][ T39] audit: type=1400 audit(1724804144.889:33): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=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 [ 335.692483][ T8418] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.528861][ T5410] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 336.693020][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 336.743529][ T5410] usb 7-1: Using ep0 maxpacket: 8 [ 336.749003][ T5410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.753467][ T5410] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.769623][ T5410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.779852][ T5410] usb 7-1: config 0 descriptor?? [ 336.822936][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 337.508886][ T5410] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 337.741589][ T5356] usb 7-1: USB disconnect, device number 19 [ 337.751369][ T5356] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 339.244940][ T8443] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 339.496920][ T8446] netlink: 17 bytes leftover after parsing attributes in process `syz.2.816'. [ 339.710540][ T8449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.749575][ T8461] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 341.131512][ T8473] ptrace attach of "/syz-executor exec"[7837] was attempted by "/syz-executor exec"[8473] [ 341.164775][ T8466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.479619][ T5389] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 341.679780][ T5389] usb 6-1: Using ep0 maxpacket: 8 [ 341.742450][ T5389] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 341.759754][ T5389] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 341.768459][ T5389] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 341.793821][ T5389] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 341.831981][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 341.858571][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 341.882035][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 341.928964][ T5389] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 341.933032][ T5389] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 341.936174][ T5389] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 341.948612][ T5389] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 341.969412][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 341.974911][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 342.008700][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.041025][ T5389] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 342.044845][ T5389] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 342.048069][ T5389] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 342.069523][ T5389] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 342.074849][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 342.091117][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 342.099037][ T5389] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.211526][ T5389] usb 6-1: string descriptor 0 read error: -22 [ 342.214530][ T5389] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 342.228708][ T5389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.265783][ T5389] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 343.947029][ T8498] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 344.239636][ T7145] usb 6-1: USB disconnect, device number 26 [ 348.485860][ T8532] overlayfs: failed to resolve './file1': -2 [ 349.748508][ T5410] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 349.940922][ T5410] usb 7-1: Using ep0 maxpacket: 16 [ 349.949098][ T5410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.957662][ T5410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.965917][ T5410] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.985120][ T5410] usb 7-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 349.990217][ T5410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.006134][ T5410] usb 7-1: config 0 descriptor?? [ 350.443985][ T5410] hid-generic 0003:1E7D:71CE.000D: collection stack underflow [ 350.447821][ T5410] hid-generic 0003:1E7D:71CE.000D: item 0 2 0 12 parsing failed [ 350.452481][ T5410] hid-generic 0003:1E7D:71CE.000D: probe with driver hid-generic failed with error -22 [ 352.403091][ T5349] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 352.429396][ T5349] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 352.435230][ T5349] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 352.450911][ T5349] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 352.467398][ T5349] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 352.471151][ T5349] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 352.987839][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 353.109590][ T5410] usb 7-1: USB disconnect, device number 20 [ 353.335886][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.339588][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.349605][ T8560] bridge_slave_0: entered allmulticast mode [ 353.353732][ T8560] bridge_slave_0: entered promiscuous mode [ 353.358326][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.363813][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.367430][ T8560] bridge_slave_1: entered allmulticast mode [ 353.371605][ T8560] bridge_slave_1: entered promiscuous mode [ 353.440493][ T8571] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 353.513485][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.533584][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 353.543993][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.845'. [ 353.572412][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.737093][ T8560] team0: Port device team_slave_0 added [ 353.745425][ T8560] team0: Port device team_slave_1 added [ 353.855474][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.858734][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.876404][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.889960][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.893026][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.903721][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.001314][ T8560] hsr_slave_0: entered promiscuous mode [ 354.004678][ T8560] hsr_slave_1: entered promiscuous mode [ 354.007776][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.011553][ T8560] Cannot create hsr debugfs directory [ 354.058463][ T58] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 354.239969][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.244349][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 354.270103][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.273610][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.290272][ T58] usb 6-1: config 0 descriptor?? [ 354.294802][ T58] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 354.578485][ T5348] Bluetooth: hci9: command tx timeout [ 354.584963][ T8560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.842118][ T8560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.014375][ T8560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.121636][ T8560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.515856][ T8560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.570048][ T8560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.597137][ T8560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.622700][ T8560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.849069][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.870373][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.932468][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.935744][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.048062][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.051093][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.540731][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.631062][ T8560] veth0_vlan: entered promiscuous mode [ 356.641075][ T8560] veth1_vlan: entered promiscuous mode [ 356.648558][ T5348] Bluetooth: hci9: command tx timeout [ 356.687024][ T8560] veth0_macvtap: entered promiscuous mode [ 356.691542][ T8560] veth1_macvtap: entered promiscuous mode [ 356.716404][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.728852][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.733887][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.751385][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.756249][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.768234][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.783185][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.789036][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.793138][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.799421][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.799470][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.799483][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.799497][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.799509][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.801449][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.813425][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813442][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813451][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813462][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813469][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813479][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813488][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813498][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813507][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813518][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813527][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813538][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813547][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813558][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813568][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813579][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.813589][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.813600][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.825421][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.833741][ T8560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.833814][ T8560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.833840][ T8560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.833865][ T8560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.029069][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.032620][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.111880][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.115343][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.603280][ T57] usb 6-1: USB disconnect, device number 27 [ 358.738684][ T5349] Bluetooth: hci9: command tx timeout [ 358.788715][ T58] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 358.979162][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 358.986954][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 358.998445][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.002444][ T58] usb 5-1: Product: syz [ 359.004883][ T58] usb 5-1: Manufacturer: syz [ 359.007161][ T58] usb 5-1: SerialNumber: syz [ 359.267654][ T58] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 359.527655][ T5389] usb 5-1: USB disconnect, device number 18 [ 359.532903][ T5389] usblp0: removed [ 360.228194][ T8627] overlayfs: failed to resolve './file1': -2 [ 360.328678][ T5349] Bluetooth: hci4: command 0x0406 tx timeout [ 360.648565][ T8626] team_slave_1: entered allmulticast mode [ 360.810601][ T5348] Bluetooth: hci9: command tx timeout [ 361.097488][ T8636] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.020214][ T56] IPVS: starting estimator thread 0... [ 362.128004][ T8643] IPVS: using max 21 ests per chain, 50400 per kthread [ 362.229644][ T8645] ptrace attach of "/syz-executor exec"[8308] was attempted by "/syz-executor exec"[8645] [ 364.114110][ T39] audit: type=1326 audit(1724804173.429:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.862" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 368.319549][ T5349] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 368.368606][ T5349] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.375598][ T5349] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.381141][ T5349] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 368.387154][ T5349] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 368.390866][ T5349] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 368.634922][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 368.983073][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.987210][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.996134][ T8678] bridge_slave_0: entered allmulticast mode [ 369.012514][ T8678] bridge_slave_0: entered promiscuous mode [ 369.061291][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.064725][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.079452][ T8678] bridge_slave_1: entered allmulticast mode [ 369.099717][ T8678] bridge_slave_1: entered promiscuous mode [ 369.423681][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.434940][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.575008][ T8678] team0: Port device team_slave_0 added [ 369.586769][ T8678] team0: Port device team_slave_1 added [ 369.793108][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.796168][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.868454][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.880213][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.883126][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.910306][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.146260][ T8678] hsr_slave_0: entered promiscuous mode [ 370.161796][ T8678] hsr_slave_1: entered promiscuous mode [ 370.198636][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.201823][ T8678] Cannot create hsr debugfs directory [ 370.426490][ T8678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.489136][ T5348] Bluetooth: hci10: command tx timeout [ 370.594210][ T8678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.782782][ T8678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.949466][ T8678] team0: Port device netdevsim0 removed [ 370.954429][ T8678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.295109][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 372.579071][ T5348] Bluetooth: hci10: command tx timeout [ 372.720115][ T8713] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 372.739530][ T8713] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 372.742649][ T8678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.743403][ T8713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 372.799659][ T8678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.823872][ T8678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.871286][ T8678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.198267][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.271215][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.283856][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.287062][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.297876][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.300748][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.441861][ T8678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.842935][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.893149][ T8678] veth0_vlan: entered promiscuous mode [ 373.910005][ T8678] veth1_vlan: entered promiscuous mode [ 374.006941][ T8678] veth0_macvtap: entered promiscuous mode [ 374.025306][ T8678] veth1_macvtap: entered promiscuous mode [ 374.062287][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.079257][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.089087][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.095775][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.117462][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.127329][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.131001][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.136353][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.143406][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.149449][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.153383][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.157252][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.161743][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.166616][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.174051][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.179527][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.185466][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.209195][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.214334][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.218577][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.224789][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.238544][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.243858][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.247512][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.254765][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.259256][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.263950][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.269442][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.273595][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.277289][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.288213][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.292880][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.297570][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.302079][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.306491][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.310642][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.314919][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.333848][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.340393][ T8678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.365029][ T8678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.382939][ T8678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.386780][ T8678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.668583][ T5348] Bluetooth: hci10: command tx timeout [ 374.730161][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.744903][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.809886][ T8415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.812894][ T8415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.738592][ T5348] Bluetooth: hci10: command tx timeout [ 383.827783][ T5349] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 383.847219][ T5349] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 383.868863][ T5349] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 383.880032][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.891556][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.896082][ T5349] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 383.902037][ T5349] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 383.906336][ T5349] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 384.128084][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 384.177267][ T8751] 9p: Unknown Cache mode or invalid value fscach [ 384.180298][ T8751] 9pnet: Tag 65535 still in use [ 384.195160][ C0] ------------[ cut here ]------------ [ 384.198662][ C0] refcount_t: underflow; use-after-free. [ 384.201305][ C0] WARNING: CPU: 0 PID: 112 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 384.205161][ C0] Modules linked in: [ 384.206804][ C0] CPU: 0 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 384.228735][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.232739][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 384.235078][ C0] Code: ff 89 de e8 18 17 0c fd 84 db 0f 85 66 ff ff ff e8 2b 15 0c fd c6 05 5f 16 7b 0b 01 90 48 c7 c7 60 ff af 8b e8 d7 cd ce fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 08 15 0c fd 0f b6 1d 3a 16 7b 0b 31 [ 384.245258][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010082 [ 384.247904][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dd3f9 [ 384.250955][ C0] RDX: ffff88801ba68000 RSI: ffffffff814dd406 RDI: 0000000000000001 [ 384.254827][ C0] RBP: ffff88805700ccc8 R08: 0000000000000001 R09: 0000000000000000 [ 384.260116][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805700ccc8 [ 384.264037][ C0] R13: ffff88805a6d3000 R14: 0000000000000015 R15: 0000000000000000 [ 384.267430][ C0] FS: 0000000000000000(0000) GS:ffff88802c000000(0000) knlGS:0000000000000000 [ 384.271428][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.274114][ C0] CR2: 00000000f0e92bb4 CR3: 000000007601e000 CR4: 0000000000350ef0 [ 384.277920][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.280979][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 384.283965][ C0] Call Trace: [ 384.285251][ C0] <IRQ> [ 384.286360][ C0] ? show_regs+0x8c/0xa0 [ 384.288352][ C0] ? __warn+0xe5/0x3c0 [ 384.290202][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 384.292466][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 384.299987][ C0] ? report_bug+0x3c0/0x580 [ 384.302167][ C0] ? handle_bug+0x3d/0x70 [ 384.304306][ C0] ? exc_invalid_op+0x17/0x50 [ 384.306580][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 384.309497][ C0] ? __warn_printk+0x199/0x350 [ 384.311596][ C0] ? __warn_printk+0x1a6/0x350 [ 384.313664][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 384.316059][ C0] p9_req_put+0x1ec/0x250 [ 384.318093][ C0] req_done+0x1e7/0x2f0 [ 384.320373][ C0] ? __pfx_req_done+0x10/0x10 [ 384.322414][ C0] ? __pfx_req_done+0x10/0x10 [ 384.324459][ C0] vring_interrupt+0x31b/0x400 [ 384.326989][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 384.329363][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 384.331999][ C0] handle_irq_event+0xab/0x1e0 [ 384.334343][ C0] handle_edge_irq+0x263/0xd10 [ 384.336555][ C0] __common_interrupt+0xdf/0x250 [ 384.338262][ C0] common_interrupt+0xab/0xd0 [ 384.340058][ C0] </IRQ> [ 384.341208][ C0] <TASK> [ 384.342426][ C0] asm_common_interrupt+0x26/0x40 [ 384.344421][ C0] RIP: 0010:rcu_is_watching+0x5/0xc0 [ 384.346754][ C0] Code: e8 d0 e6 93 09 65 8a 05 35 5d 92 7e 0f b6 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <53> 65 ff 05 ab 39 92 7e e8 6e e6 93 09 48 c7 c3 c8 7e 03 00 83 f8 [ 384.355184][ C0] RSP: 0018:ffffc9000111f9c8 EFLAGS: 00000293 [ 384.357905][ C0] RAX: 0000000000000000 RBX: ffff888012562000 RCX: ffffffff81c75b6b [ 384.361695][ C0] RDX: ffff88801ba68000 RSI: ffffffff81c75d8d RDI: 0000000000000005 [ 384.365036][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 384.368649][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 384.372585][ C0] R13: 0000000000000000 R14: ffff88802a70f040 R15: ffff888028ebb630 [ 384.376031][ C0] ? lru_gen_shrink_node+0x92b/0x1510 [ 384.378392][ C0] ? lru_gen_shrink_node+0xb4d/0x1510 [ 384.380758][ C0] lru_gen_shrink_node+0xb52/0x1510 [ 384.383207][ C0] ? lru_gen_shrink_node+0x418/0x1510 [ 384.385572][ C0] ? __pfx_lru_gen_shrink_node+0x10/0x10 [ 384.388025][ C0] ? mem_cgroup_iter+0x2f2/0x760 [ 384.390223][ C0] balance_pgdat+0x110f/0x1950 [ 384.392358][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 384.394614][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x420 [ 384.397306][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 384.399604][ C0] ? find_held_lock+0x2d/0x110 [ 384.401843][ C0] ? cgroup_freezing+0x155/0x3d0 [ 384.404460][ C0] kswapd+0x5ea/0xbf0 [ 384.406318][ C0] ? __pfx_kswapd+0x10/0x10 [ 384.408369][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 384.411024][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.413364][ C0] ? __kthread_parkme+0x148/0x220 [ 384.415568][ C0] ? __pfx_kswapd+0x10/0x10 [ 384.417735][ C0] kthread+0x2c1/0x3a0 [ 384.419687][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.422092][ C0] ? __pfx_kthread+0x10/0x10 [ 384.424353][ C0] ret_from_fork+0x45/0x80 [ 384.426644][ C0] ? __pfx_kthread+0x10/0x10 [ 384.428906][ C0] ret_from_fork_asm+0x1a/0x30 [ 384.431046][ C0] </TASK> [ 384.432684][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.436281][ C0] CPU: 0 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 384.441874][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.446421][ C0] Call Trace: [ 384.447917][ C0] <IRQ> [ 384.449181][ C0] dump_stack_lvl+0x3d/0x1f0 [ 384.451725][ C0] panic+0x6dc/0x7c0 [ 384.453757][ C0] ? __pfx_panic+0x10/0x10 [ 384.455906][ C0] ? show_trace_log_lvl+0x363/0x500 [ 384.458594][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 384.461203][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 384.464064][ C0] check_panic_on_warn+0xab/0xb0 [ 384.466889][ C0] __warn+0xf1/0x3c0 [ 384.468831][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 384.475097][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 384.477519][ C0] report_bug+0x3c0/0x580 [ 384.479385][ C0] handle_bug+0x3d/0x70 [ 384.481252][ C0] exc_invalid_op+0x17/0x50 [ 384.483283][ C0] asm_exc_invalid_op+0x1a/0x20 [ 384.485526][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 384.488399][ C0] Code: ff 89 de e8 18 17 0c fd 84 db 0f 85 66 ff ff ff e8 2b 15 0c fd c6 05 5f 16 7b 0b 01 90 48 c7 c7 60 ff af 8b e8 d7 cd ce fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 08 15 0c fd 0f b6 1d 3a 16 7b 0b 31 [ 384.498182][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010082 [ 384.501156][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dd3f9 [ 384.504329][ C0] RDX: ffff88801ba68000 RSI: ffffffff814dd406 RDI: 0000000000000001 [ 384.507728][ C0] RBP: ffff88805700ccc8 R08: 0000000000000001 R09: 0000000000000000 [ 384.511181][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805700ccc8 [ 384.514689][ C0] R13: ffff88805a6d3000 R14: 0000000000000015 R15: 0000000000000000 [ 384.518196][ C0] ? __warn_printk+0x199/0x350 [ 384.520179][ C0] ? __warn_printk+0x1a6/0x350 [ 384.521953][ C0] p9_req_put+0x1ec/0x250 [ 384.523873][ C0] req_done+0x1e7/0x2f0 [ 384.525715][ C0] ? __pfx_req_done+0x10/0x10 [ 384.527799][ C0] ? __pfx_req_done+0x10/0x10 [ 384.529918][ C0] vring_interrupt+0x31b/0x400 [ 384.532005][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 384.534207][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 384.536327][ C0] handle_irq_event+0xab/0x1e0 [ 384.538217][ C0] handle_edge_irq+0x263/0xd10 [ 384.540135][ C0] __common_interrupt+0xdf/0x250 [ 384.542093][ C0] common_interrupt+0xab/0xd0 [ 384.544530][ C0] </IRQ> [ 384.546038][ C0] <TASK> [ 384.547485][ C0] asm_common_interrupt+0x26/0x40 [ 384.549599][ C0] RIP: 0010:rcu_is_watching+0x5/0xc0 [ 384.551596][ C0] Code: e8 d0 e6 93 09 65 8a 05 35 5d 92 7e 0f b6 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <53> 65 ff 05 ab 39 92 7e e8 6e e6 93 09 48 c7 c3 c8 7e 03 00 83 f8 [ 384.560835][ C0] RSP: 0018:ffffc9000111f9c8 EFLAGS: 00000293 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.563607][ C0] RAX: 0000000000000000 RBX: ffff888012562000 RCX: ffffffff81c75b6b [ 384.567597][ C0] RDX: ffff88801ba68000 RSI: ffffffff81c75d8d RDI: 0000000000000005 [ 384.570934][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 384.573991][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 384.577643][ C0] R13: 0000000000000000 R14: ffff88802a70f040 R15: ffff888028ebb630 [ 384.582065][ C0] ? lru_gen_shrink_node+0x92b/0x1510 [ 384.584432][ C0] ? lru_gen_shrink_node+0xb4d/0x1510 [ 384.586861][ C0] lru_gen_shrink_node+0xb52/0x1510 [ 384.589176][ C0] ? lru_gen_shrink_node+0x418/0x1510 [ 384.591282][ C0] ? __pfx_lru_gen_shrink_node+0x10/0x10 [ 384.593452][ C0] ? mem_cgroup_iter+0x2f2/0x760 [ 384.595560][ C0] balance_pgdat+0x110f/0x1950 [ 384.597804][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 384.599843][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x420 [ 384.602541][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 384.605137][ C0] ? find_held_lock+0x2d/0x110 [ 384.607353][ C0] ? cgroup_freezing+0x155/0x3d0 [ 384.609847][ C0] kswapd+0x5ea/0xbf0 [ 384.611873][ C0] ? __pfx_kswapd+0x10/0x10 [ 384.614529][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 384.617071][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.619381][ C0] ? __kthread_parkme+0x148/0x220 [ 384.621538][ C0] ? __pfx_kswapd+0x10/0x10 [ 384.623566][ C0] kthread+0x2c1/0x3a0 [ 384.625466][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.627807][ C0] ? __pfx_kthread+0x10/0x10 [ 384.629860][ C0] ret_from_fork+0x45/0x80 [ 384.631836][ C0] ? __pfx_kthread+0x10/0x10 [ 384.633883][ C0] ret_from_fork_asm+0x1a/0x30 [ 384.636039][ C0] </TASK> [ 384.638097][ C0] Kernel Offset: disabled [ 384.640866][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:16:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa7725 RDI=ffffffff9511c240 RBP=ffffffff9511c200 RSP=ffffc90000007770 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fa76c0 R15=0000000000000000 RIP=ffffffff84fa774f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f0e92bb4 CR3=000000007601e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 0000000000ff0000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006d497f RBX=0000000000000001 RCX=ffffffff8b057f59 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb059e0 RBP=ffffed1002cf8910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000000 R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff901147d8 R15=0000000000000000 RIP=ffffffff8b05934f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7425008 CR3=000000006d64c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802c23ff40 RCX=ffffffff817f1068 RDX=ffff8880167c0000 RSI=ffffffff817f1043 RDI=0000000000000005 RBP=ffffc90000457d60 RSP=ffffc90000457c40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8ddc4570 R12=1ffff9200008af8c R13=0000000000000001 R14=0000000000000003 R15=ffffed1005847fe9 RIP=ffffffff817f1045 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f16e40 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000344f DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 0000000000ff0000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802c046580 RCX=ffffc90034cd4000 RDX=0000000000040000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc900278ffa88 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005808cb1 R13=0000000000000001 R14=ffff88802c046588 R15=ffff88802c33ffc0 RIP=ffffffff818b1be0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c295d1d CR3=000000007481e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000