last executing test programs: 7.791871418s ago: executing program 2 (id=520): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) mq_open(&(0x7f0000000000)='GPL\x00', 0x40, 0x40, &(0x7f0000000100)={0x3, 0x9, 0xffffffff}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04120804ffffffffffff8926727c886716fa9e83b13ddeff04337e"], 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (rerun: 32) io_uring_enter(r2, 0x7323, 0x10, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, 0x0, 0x0) (async) read$FUSE(r9, &(0x7f0000000700)={0x2020}, 0xeffd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x3}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7.653983432s ago: executing program 2 (id=521): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="7df300000000000000000307a200080004", @ANYRES32=r0], 0x1c}}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xe93c8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x40012020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0xd) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$alg(0x26, 0x5, 0x0) dup(r10) 5.922359905s ago: executing program 1 (id=531): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d1747a644f820000100000000000000200009500b55e7a6979cf585ffbe7f018732e9aa576f087d2e66564dd953aac72ee7aa7c60b8a807146b21efd93e2f07983bb0d1205281550503bbf3762c724cc1f5a683af39fdb517e9a4357afec38ea0ed403ae0a671fd12e67c6cd4847911513226026bc53455c85b370db457a0f26c041ffdf3e01e733ba70881746ab570e94"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x165f0a01, 'system_u:object_r:tetex_data_t:s0\x00'}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xffffffff, 0xffffff00, 0x80000000], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'bridge_slave_0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x73, 0xd, 0x4, 0xe101753b3a1d0f45}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@ipv6header={{0x24}, {0x21, 0x20, 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3fc) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000310000200000a10debdedfcf700489a064d2295ba40cedccceebe2d28a147a2d636d68d2e19898b3dac0e4cbbfdbfcc8c2229a1124b09891135977e1b1682d74acb370c66fe0010efead8cfba559dcd48ed9ccae3a6f4a1ca51d39ca00b3dc5ad5aa414d1bd117524af3ce", @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d616373656300000c00028005000b000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 4.968528292s ago: executing program 1 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r1, 0x5, 0x2046, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 4.892100784s ago: executing program 1 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000540)="3857ab7dd1c9a160312b26a5885189c605498122ab091d3b14dc9c0582943b5c8a1087cbf4587906fc0217b2148e0608d696a58078296a842cb6cee37301f8e3828a7aa1741d7938b3faa4e33812d1f3fdc4e6000769b1604ac66154727fef609e268cc5bf8f1a925b0c3cb6091bdd568b0aaa28b84aca1c31e2abd417805076dc9236819a3c63561dc405c5d775f154f23e64fadf13073c6e638a6c8003e865fbc995bce33219be39db4da689c853283b96e2a93f4b8b9f54fa3b68e44c50232194d73b30922e0789ad556b1849", 0xce}, {&(0x7f0000000640)="6c326dda98620a0b33fc22eaa96c9a8cd4460f2ca49ed87fd6ba107aaaef1274e96fb5fbae1afc607801eafbb038579be8bc30904660736c5f5277adbf10313a98a7fe5988d976e97477ab501e22c493659a1fff404d99ee75bd33c54b874277f509b58d5d833fdd4254109835352282850d13c928d945c6d7887025f90b762d938f9b433c63494c14a118f5611bdc", 0x8f}, {&(0x7f0000000700)="c60a776d1ee1e0eac6ea6660f3eaf67d293ace54e5e2187bb77e8d6c01839fbc117c5cba6dc3664c1bbde9340efb354b038bc936eaaddd9f67fe1780fa072291269ed22d7316cea4acabbdd9d780a4cd3023bd0ea65f65278f5c5e89b6b801aa83b202d4f60f464fd960415e6ef056349b3ca108d78751049deb9fde96f62ccad83c075ab1c4af0d4ee44dcd6dfb50f753a7e090da4e148b9f2b16679a08e39cdc3588d3e0", 0xa5}, {&(0x7f00000007c0)="9afc31d43ab27872b0f734d61de5bcb8801c1524494f703c7c069ef3ede919c12686b0462263bab9346c226c81da6da9e0a2e218bfc061772c02265ac2b57a218e588501b001f7963bc2", 0x4a}, {&(0x7f0000000840)="66f7573ed077c843cdd8116064e59d957572ba296a7e2821262d0650cf27b282fb7ee66c5a26c2ea0472c27182b4d550e8f9cb8f4584964297291f353be7e1e6239249c01cb6cdb69876d7c0210501e9e551c0d879d00a7ebfee2298905032783a7822172b9a1e77fe0c698dc03e506ab29c1c31ab39b415c0622a63ce7d1e05d9ba1a675ab1b73b0026d8cfd79ff8259b8d17dc13ddf3d1d55b27aaec4443c8154f1c8e52cdb2c937910ddb85c19ecab69cbb14687e3ea330eb8cdc27c02827dabcd02fe64c54f6cf89", 0xca}, {&(0x7f0000000940)="263c60ca3b27d1c96144b4b582de171568a9fe21e53bacd0f24bd2f6aac9e6d80bfaeb58957e238a92f58ca8301673da1d22ba3bb7641c3e91dd9d982b2727822276c3", 0x43}, {&(0x7f00000009c0)="04fee0a803dc74d76ae83d5b860aec1e0a488c42bb86c14d05911dc1a1f8b8b1acb7e2683ae00e2850cf05f3b2923d0a63c47ba718c8a43ce95e142ca7beac026fba272cfa4a27111afc844f4efd866ab53a95adb66165b42d0ffe6f1459243e0d7d8c8e096d7b35a35b142332832d", 0x6f}, {&(0x7f0000000a40)="183a37b47d74a6bf88eae26c25d5d8518ebfb3714c2964980e8aa5033bf416f393d8fbf36682c57c1ab75a97bafbc84c2ba5336d04c130999467fe30de2c1772f134f6a4da6f3edffcb6376d2996317045ba444d0425f0444bfdc4b2cfd91370a8f73be0805b1b1e6f1a6ead2f3420f99d604722eefd71c669e54900e334a939f22cfe70450c4cfbadfda3228551604d13cc8f160bdc1f5c593f5c7fe2398b1a2329f77319f1dd09dc2b44a0cb13a5bb8eaea67640f6b927fd9f9b0ea19954", 0xbf}, {&(0x7f0000000b00)="299c583a2b7629c8a92cb4cb62e9c62b17105fe0ffecb5de939e15ead2e6826bfad25b8875ff991ac5c0b8b0d43462b6d3e367b68454c1806a923f9099333f77937c2fedb75830650c2c4ebd9a1f565bd261d4b2af8da06f0e74b6e6f28f1e455829480c4b6a9af86ff7c3136ee6fd1197e916fe1215ae92f1d3b9d127626ba3a340d691816eeaff1a9b4c0fd7512707f559cf3d3dbcfe0190f18890f0e22880bb", 0xa1}], 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="eb1512c74eb4f174101c8247efe7cef08c5ebb72cd75fdc6a6e06eb5c761e17fa2dbf207948b6c0b19e274d446e09e80c85f6d3318cda76216bccfeab9920ab292dfd49c9a6063179964637a12d36b8f5c6f3a37583c0130c35b4201", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x58, 0x44}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffff92}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffa, 0x9, 0xfffffffffffffffb, 0xc, 0x9, 0x0, 0x5}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702001008000000b70300000c000000850000000400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x18340, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0xffffffff) connect$pppl2tp(r9, 0x0, 0x0) ioctl$BLKGETSIZE64(r8, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x240448e6}, 0x8094) 4.891648739s ago: executing program 0 (id=538): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 4.66666631s ago: executing program 2 (id=539): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x48, &(0x7f0000000240)=0xf2a6) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="182000000000000000000000000000001801000020603bcba5b1b6b9e9e2fb1a7e702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 4.049433811s ago: executing program 3 (id=540): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42002, 0x1e1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@dfltuid}, {@dfltgid}]}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x12, 0x7, 0x1, {{0x5, 'wfdno'}, 0x7fffffff}}, 0x12) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r5, r4, 0x0, 0x80000000) 4.048115159s ago: executing program 3 (id=541): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000100)=0x78, 0x4) connect$caif(r3, &(0x7f0000000140)=@rfm={0x25, 0x6f9, "40fb70d7d74702f97aba3d574422aa2b"}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_delroute={0x38, 0x19, 0x1, 0x800, 0x25dfdbfd, {0xa, 0x0, 0x1c, 0x0, 0xff, 0x1, 0x0, 0xb, 0x2a00}, [@RTA_OIF={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) 4.04303985s ago: executing program 1 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$int_in(r2, 0x40000000af01, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1) (rerun: 32) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1c203, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 4.037754262s ago: executing program 0 (id=543): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000064d564b"]) (async) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.972195176s ago: executing program 1 (id=544): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket(0x11, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) 3.971870998s ago: executing program 3 (id=545): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fadvise64(r1, 0x9, 0x1, 0x4) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x4f27, 0x9, 0x2, 0x5, 0x5, 0x1100cc4, 0xf, 0x6, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x6, 0x5, 0x42, 0xa, 0x1a448, 0x3ff, 0x1, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0xd0, 0xffffffff, 0x1, 0xfce]}) 3.872390953s ago: executing program 3 (id=546): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.811428578s ago: executing program 0 (id=547): r0 = syz_open_dev$sg(0x0, 0x400009, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) read$snapshot(r1, 0x0, 0xffffffbf) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x24, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000040000008520000003e9e2d029598b8815000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000098630000110000000000000001000100b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00004e330b84db00385e000000000000b7050000080000008500000085100000030000001803600000060000000000000003000000cc67300008000000181200b792decf4bbdb4cee39748ce9569cd34a6c173b8f152e3b6fcef8d57ca78fdf242283eb93e17eae295677c62a8bf8a7bd83eded0321a6a2a50f97701ea9760f396f7c504657d16e76b92bd6265f02dfbf3fa2c80869aab9db57835c7a51dfae59cd8522eb76b555db31be16857e39c60c0bf48769919afd4062a5ec7fdbe2bd9ddeb49cad10f5eb7a31a2e458b0ccd00b1095c0ea75e4bef0c1b9accc512995c44790a01155cc577feba4921ac57e8525f73a000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$FUSE(r4, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000001200), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2002) 3.772790986s ago: executing program 2 (id=548): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00094000010009040002010035040009058dff86"], 0x0) r0 = syz_usb_connect(0x2, 0x5f3, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0x20, 0xba, 0x64, 0x20, 0x403, 0x6040, 0x7e3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e1, 0x2, 0x5, 0x8, 0x20, 0xf6, [{{0x9, 0x4, 0x86, 0x1, 0x6, 0x6b, 0x1d, 0x5c, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x4, 0x3, 0xc7}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x10}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0xce, "1113271ea4a7"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x6, 0x0, "a8"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x3, 0x4, [0x7, 0x3, 0x1, 0x7], 0x8}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x4, 0x3, [0x2, 0x7, 0x1], 0x3}]}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x994}, @generic={0xc0, 0x9, "dfd82800c80c2727ef421b03604c715ead0cb989a9eea6d9720c8dfb0b5e381862fc84200ae40562b2c60eec0b78dc5c4e86d74fd28db8fbf53fa113f29a2455c31b7bf768566027576314b9a482ab2bd6af909e5dbe50521bf4b37a5f77442200dc97deae995108e30dd70ad2feb40e539b2137930ed503a4e48e0afd80bb657ee56c2c58c3eeb4452f8a643f3c3e36a2383578e130e444a2c0e0352ccefdfc268d1f1b8cf6dd6b64cbf9fde2a88b5cfe31512f4984db65af95450c3a58"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x5, 0x45, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3, 0xb, 0x38, [@generic={0x97, 0x10, "6922fde96fce2d75de0d37670a249830d47e2108db43dc3d33c7d47f6751f319d6983f1f435e528ad7049559fd420db695723413c4f7d9f43185935d14533d33988efe4090248b913b3f6c84644034e45837aa12cd7d49f49126d42968feb44f268e213f6bc211ff4798555010e06f2b79c51b0e1ce96ae6d2df7fa1d84d8037d87e9b98e3ca11ca50f2dc33980a800b8ae4a59209"}]}}, {{0x9, 0x5, 0x7, 0x5, 0x8, 0x0, 0xb, 0xfb, [@generic={0x31, 0x22, "496eb30eea999fca2c17ae472df6997e3b4cdd719136ccc9a8c7c67116d660d471a7eaf62af6b97cd034855aa29a1c"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x40, 0x1, 0x8, [@generic={0x30, 0x4, "5667f8ede187fcf35591ae95c9a6c4dfa7ba582de8657520f4acb54763a455371842fcbc3e3ddc1a36b65e7f5c3a"}]}}, {{0x9, 0x5, 0xfa94983a8d98628c, 0x11, 0x400, 0x4, 0x8, 0x9, [@generic={0x21, 0x31, "b7848b9ff81cd93a6001b2133a327aa5d3fbea22e11b7b36734c7fa076622a"}, @generic={0xce, 0x1, "eaffbfc444af6a215598e718e9387ef79aecf714fa932de52fa894ae48d88723f1d08dbf409d4539af4908d3a2c11044d5d684bb57947c9119e93b392cfc99770e870a4ee83bb8979bf1ba36cad323d405e30646db5439c129c8d919f5bb9ab1c58407ecf6318359f16b5021a341269707ec603f3ff530d7f8724de253a6bca469815067800b96065c5e2bb2d811c99e2e9704f3e5cf508929d5cd5cd6851660a705a4f4e2ecf9b237be7c7671738286342e54f1be48543cf3a9f731ebdaab45683134fd7a6020180fd58ec9"}]}}]}}, {{0x9, 0x4, 0xce, 0x9, 0x5, 0xff, 0xff, 0xff, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "bd771fb4"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0xfe3, 0x3, 0x0, 0xa2, 0xfff, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x1f, 0x2, 0xff81}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x23}, @ncm={0x6, 0x24, 0x1a, 0xe06}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x5, [0x1]}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0xe, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3ff}, @generic={0x9c, 0x22, "89dfc1e32951fb5e0175bafbab1c3b1402f3d0989f54dde8b5e7aeb29edf0814a535a4bc8b8abfcdf012bbd2f978d04c9d817b236d7c0f6b42bcb56fa62dd574e7d00dd7e940efdcb22f93ad046110d7388f38de019fd81b7990cf418f1e41a056d1969d4282a36b43c0ccb93bc026d980424d686e97b358435254e7b5e20f8a10932915099764b43806a07abf5dcdfd010204dcaaf749f4b380"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0xf7}, @generic={0xb2, 0x6, "251d9b0ab04752edabd74603a4b02be0c04fcabdddc6e20b0a91fb0d5eab6ed93be6cca23298e1d28de7183fa397114f444c24698a82510fc57cf8b8036af60b622b28d21a5f52fc4a7866a787e37eb3a584ae589dcf0b7119620fd52e971760c6db65c9fed540f799dff092f177ea096064762ab0db790408d51a9a211b61c8ab7fc130f04864c7a71a590308edd74851b5e3ef481f078eae79a9106336128a305a7542df83bc1ec29276cbb87ce03f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x4, 0x7f, 0x1, [@generic={0xb4, 0x21, "474d67c9857ac8e5dce4f93e919d1938d5872e0aa28a0e0d4c9d66bc0d91334ec8490b08c5404bab6d784ac8900d7e51028b8328ee1af9639f9d7b5267e30a5b52634f32c646ac3062f2ffa9355c3f4c987cba299dd5a4d4b9a22981ee5b48f0aff1c28bfce27bf690d1f104c4defde1647e77761163675af1422c6bb445d3334ed35f6f2a4811ef615df32929a04b72cec1a6b18d0ff5c000e607fce5b40b40804184cfb2eb80b6e07cf8389a16ff0a72be"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x10, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x6, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xb}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x9, 0x4, 0xff, 0x7}, 0x13, &(0x7f00000002c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0x88, 0x2, 0xb, 0x4}, @ptm_cap={0x3}]}, 0x4, [{0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "21b28401c6274cc101ef437ab5cadaf6c0e584e9684a06bef61a853b7e36b62decc21b421d43f4e77d1154dacb38ac9a6ea12fda21edc887e6a32153cf6ce7f28e17c830c1455c04a1825b8184204ebd368706e679380db9ae2377bd2b7d822c89f26a6b44fad6b26658305ef6f4284376313a7fcfe667caa4e9055240098b64ee3073774ceae3c1924dedccad050d3163bdeaef05992b3a8d1295740528df4f6d3127da573b0f2dd0bd15a09309937d54f59a3cc67a30a74aa018a400883c89b34a41a0f4c0d46f526f0d2985b992c60d256854e1fc3937038d8e3c517e4531a5936fee9d685a998f101baca61db177458b914355"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0x37, &(0x7f00000004c0)=@string={0x37, 0x3, "662fc488dcd05d66b6fb35d2bd933de28551278f2bcfca5735cb13037ac6a2a3e5d4595f82003ccf2d1119497ed56e457d635e4fb5"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001700)={0xc, &(0x7f0000000580)={0x40, 0x4, 0x88, {0x88, 0x24, "94e3decb4e62e91ee9b934852359e60500d3f89583b61828c932512e7de0ecfdf6d62d55c5941cea4f5d946e9a21243519d71083041d037718427cb49a730a252a8921f2f40b1bcfad6bb0e601e3cb040c9023b23929403ed4f6d4ed2def5f4ef29a908a2bee3a24d19d01b0059852bc9aa8b901502ea073fea63ec721446ba5474240d286f5"}}, &(0x7f0000001680)={0x0, 0x3, 0x59, @string={0x59, 0x3, "8ba247e21a143e1c1bfb3450347f83beeb990367afeb9dc29de38a803798f51bdbf0f8a7a1f6aa96140f6f00f721b2feba46877b97616175b07f349025bc2f1929fe59c2acb01036aa5cfea37377637760e6434d69e2b0"}}}, &(0x7f0000001980)={0x1c, &(0x7f0000001740)={0x40, 0x3, 0xf9, "5e25160b1da52b10a767fee7f12aee16b6fe70ea24204a8fd9c79c7d24f65385fecbb228e54770156d20afe1814624492a7fb69ed38c449c9c11317c58ec73fb7238750ce483b256372d6da1885517337910e510bc1e72be32513a2f453c81172c78f9f609e58323e3ff6eb00deaa365268590b171706fb047254d2ee1a6dc12d60c1d1712b6b4e0a48f1598d7626cf1831b909de145c760dbf3cd8ca692c62d71f7874bcb377426859982b3f04c3494cfe7c243294c5ef13a24841ce9262615fd24f0c5a1ec51bca711ef312b08c1b6bd418ab32a9163659a34e72c2e619028933c61eab13a337fd2c5b0efee9850c8d0d635c9c97169230b"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0xda}, &(0x7f00000018c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000001900)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000001940)={0xc0, 0xa2, 0x2f, "b6a2ebbdd951103b118166f0f55153e4d26baa2502341f2b2542920995ad376f00403deb07164d5928c4f0225984a7"}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) waitid(0x3, 0x0, 0x0, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x3}, 0xe) write$char_usb(r1, &(0x7f0000000300)='L6', 0x2) 3.650085796s ago: executing program 3 (id=549): syz_open_dev$vim2m(&(0x7f0000000240), 0x43d3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002780)) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x406, r7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x60000006}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r9}, 0x10) 2.852196905s ago: executing program 1 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24054810}, 0x74c920689c38ea7e) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x40000, 0x2, 0x1947, 0xf}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x2, 0x5, 0x84) syz_io_uring_setup(0x238, &(0x7f0000000080)={0x0, 0x8419, 0x2000, 0x3, 0x1bf, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) read(r5, &(0x7f0000000200)=""/94, 0x5e) r9 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc044565d, &(0x7f0000000280)=@mmap={0x6d0, 0x1, 0xfffffffffffffd4a, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "01003c66"}}) openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x2000000) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000380)={0xc, &(0x7f0000000580)={0x40, 0xa, 0xf8, {0xf8, 0x5, "beb55ef58909880e47687426921683aa621d0b8977cfd19dfe4e66ea90e7dc34698a42719cfcaf6abcd2e2e7606a42e928c059356325199b591190cadca556b7446ac55db0f02e1890f43f4fdc1bfd86f276f08cbb623aea9da80816e3598ef23939a85d05dcde974c13c30a1e80872d547bcbc1437d37b18d8b806dbd31dbd5589709cda377e4b67bc0930d7b0df4d94202c99e4ac58e96b5879033d801530bcdd10aaa00e91ebf71fd49f21a72bc73723b29e0f461bd35dfbdd65613f1e59bd48b03639b80b241dacfad649691053cc47ee912bcbb35ec4425040b3392f3074f246b028290f0b61414b11a6719a79a21317f78e591"}}, &(0x7f0000000680)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "939f1a33b55352af2b92cf00ce438575dd55987febeca5f51e21dd2bc0c17112163f06a61baf25fb884fa45cad9dfc9dfbc18bd8d13f1d3e1b21257f948aae6eb45fc34be6a67436774007ce71131e7fdcd772067efcc9afc2cd257330bc06c17465bf7a2ac24f9a5ba6a71553d76ceb051851880f608c414332c726b3d1f79619f50365f8c3537414231cb5664b52b2b704c1aa3e31d783dc2d7cf5969ba0f98b8254fac28c2ed131333a569fac332300f59117cb056f6d37d5a7e577a433e38556707986c28e481e1171fbae656145dc768013d783680556f439176ee7c1ef99ce2fb9"}}}, &(0x7f0000000940)={0x18, &(0x7f0000000780)={0x10, 0x10, 0xe3, "4ad5a6459e2562cbc6344ce1c1964ae0c73b76de66fecc820c8a97f54006dfc416e192162892190c593b94777647cd0da52893e22240ecdcc3f2c99918df8645b0d5b439323beb0db7aa868679b76b106667f8acc3240660578111217be502c7f2b7434033704c15af13128de2d661c5345abf38cb5533ba98302d548be869dd47cdd8122a784513a13e577becf585f19aa2fedd40e232e286b4dff68438ec8eb91d89d8393cb80f77db1c8f5c5b79eea8f73533cc5b95868bdbefd5a77fdaed397cba8d946d24f348b44a075a83845005aecd7314b43e328a683e0105dd9dce028e50"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x76}, &(0x7f00000008c0), &(0x7f0000000900)}) socket$kcm(0x10, 0x2, 0x4) mq_open(0x0, 0x40, 0x12c, &(0x7f0000000180)={0x8001, 0xfffffffffffffffd, 0x1ff}) 2.722354003s ago: executing program 3 (id=551): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "055e112beb9c8e13", "5bbf8ec70343197d966f522c18914647", "1891e913", "3f77a52264d249f4"}, 0x28) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) futex(&(0x7f0000000140), 0x1, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23c99a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 478.127435ms ago: executing program 0 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r2, @local}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="09797fcd6cd9d4ffb903c6e2abf3629ff875285e37d6e7d6850c127a4533000000", 0x21) r5 = openat$nvram(0xffffff9c, &(0x7f0000000140), 0x80c00, 0x0) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000180)=0xaf2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ed44d0823bc31a173e038b41141af86e1c89d8f38aa25cebc8673a2f03e33221e6f997f6c9f418287b65e1e0d56dd907ca80695bf37c55c0913a58f4989ca5442ddb3f5f72a3d2c7b65065cfbde262caefb6bc5e2e08c566ba04652edc127337d09b4e10fdc88cd7689308ebb830f4588e7048c7fdd8530ca80826536014f1aae7c4e2090b41bb1c3fb9c5cbdd40d28d5fa823fc05f4391d215462dccb90b4dc", 0xa0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x214, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x202, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="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", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669"]}]}, 0x214}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2, @ANYBLOB="0000611d65b9"], 0x20}}, 0x0) 182.364408ms ago: executing program 2 (id=553): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000040"], 0x54}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 181.61216ms ago: executing program 0 (id=554): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004ac0)={0x2020}, 0x2020) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x81, 0x8, 0x8000000, 0x3, 0x9, 0xf, 0x5, r2}, &(0x7f0000000080)=0x20) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r2, 0x7f}, 0x8) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x5921000) (rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x5}, @host, 0x0, 0x9, 0x8000, 0x5, 0x8, 0x1, 0xd}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x80}, 0x810) (async) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e24, 0x7fff, @mcast1, 0x4}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r9, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) syz_io_uring_setup(0xa17, &(0x7f0000000200)={0x0, 0xcc75, 0x400, 0x3, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) 81.298387ms ago: executing program 2 (id=555): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000140)={'\x00', 0x2, 0x6f11, 0x5, 0x0, 0x3002}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x201, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0x4, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x12, 0xffffffffffffffff, 0x1024e000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) (async) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) (async) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async) fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x3, {0x6, 0x1000, 0x6, 0x86c}}) 0s ago: executing program 0 (id=556): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCGETS2(r0, 0x8910, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x1f, 0x11, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x1, 0xef, 0x10, 0x1a, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xd9, 0x2, 0x8, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5824, 0xc52, 0x3, 0x40, 0x7, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x21}, @mdlm_detail={0x4a, 0x24, 0x13, 0x7, "8904964770e1c03208a9a0b65a40866ea66ed0aa60d694afea45803f9a8fa4b2052907f41ff281473ef36b0a46843b50ab6d0920714f9dee09f04e484d6f0f2fbcf86b675565"}, @country_functional={0x10, 0x24, 0x7, 0x0, 0x4, [0x1ff, 0xfc, 0x3, 0x6e, 0x5]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x9, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xe, 0xc8, 0x4, 0x40, 0x6}, 0x64, &(0x7f00000001c0)={0x5, 0xf, 0x64, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x2, 0xff00, 0x71fe, [0x30, 0xc000, 0xff0000, 0x3fc0, 0x30, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x5, 0x11007, 0x8, [0xc000]}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x7ffffff, 0xf, 0x3, [0xf0, 0x3fc0, 0x0, 0x3f0f, 0xc030, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0xb, 0x5}]}, 0x1, [{0x101, &(0x7f0000000240)=@string={0x101, 0x3, "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"}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31924' (ED25519) to the list of known hosts. [ 41.078129][ T5895] cgroup: Unknown subsys name 'net' [ 41.238226][ T5895] cgroup: Unknown subsys name 'cpuset' [ 41.242298][ T5895] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.056350][ T5895] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.411556][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.414422][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.417251][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.419827][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.422617][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.425076][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.427887][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.430647][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.433178][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.440535][ T5986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.444101][ T5986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.444530][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.445320][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.446172][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.447111][ T5986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.447331][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.447853][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.448114][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.451013][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.465423][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.749364][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 45.758659][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 45.774712][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 45.839686][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 45.940293][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.942553][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.944865][ T5983] bridge_slave_0: entered allmulticast mode [ 45.947639][ T5983] bridge_slave_0: entered promiscuous mode [ 45.970084][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.972431][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.975286][ T5979] bridge_slave_0: entered allmulticast mode [ 45.978242][ T5979] bridge_slave_0: entered promiscuous mode [ 45.989548][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.991890][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.994152][ T5983] bridge_slave_1: entered allmulticast mode [ 45.996899][ T5983] bridge_slave_1: entered promiscuous mode [ 46.003427][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.005764][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.008084][ T5979] bridge_slave_1: entered allmulticast mode [ 46.010636][ T5979] bridge_slave_1: entered promiscuous mode [ 46.118584][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.122223][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.124843][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.127958][ T5975] bridge_slave_0: entered allmulticast mode [ 46.130603][ T5975] bridge_slave_0: entered promiscuous mode [ 46.135239][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.153018][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.170856][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.173191][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.175449][ T5975] bridge_slave_1: entered allmulticast mode [ 46.178141][ T5975] bridge_slave_1: entered promiscuous mode [ 46.181595][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.251682][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.254513][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.257457][ T5987] bridge_slave_0: entered allmulticast mode [ 46.260079][ T5987] bridge_slave_0: entered promiscuous mode [ 46.264504][ T5979] team0: Port device team_slave_0 added [ 46.271524][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.287241][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.289579][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.291842][ T5987] bridge_slave_1: entered allmulticast mode [ 46.294831][ T5987] bridge_slave_1: entered promiscuous mode [ 46.299073][ T5979] team0: Port device team_slave_1 added [ 46.302817][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.321334][ T5983] team0: Port device team_slave_0 added [ 46.371330][ T5983] team0: Port device team_slave_1 added [ 46.401964][ T5975] team0: Port device team_slave_0 added [ 46.422095][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.425782][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.427956][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.436348][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.441714][ T5975] team0: Port device team_slave_1 added [ 46.459191][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.462344][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.464509][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.473509][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.490414][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.492676][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.501509][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.549031][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.551322][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.559333][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.569020][ T5987] team0: Port device team_slave_0 added [ 46.571286][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.573499][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.582574][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.587149][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.589328][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.598740][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.606933][ T5987] team0: Port device team_slave_1 added [ 46.678429][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.680622][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.688889][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.694229][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.696490][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.704357][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.713534][ T5979] hsr_slave_0: entered promiscuous mode [ 46.717599][ T5979] hsr_slave_1: entered promiscuous mode [ 46.765910][ T5983] hsr_slave_0: entered promiscuous mode [ 46.769115][ T5983] hsr_slave_1: entered promiscuous mode [ 46.772032][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 46.774502][ T5983] Cannot create hsr debugfs directory [ 46.808960][ T5975] hsr_slave_0: entered promiscuous mode [ 46.811795][ T5975] hsr_slave_1: entered promiscuous mode [ 46.814529][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 46.816835][ T5975] Cannot create hsr debugfs directory [ 46.985453][ T5987] hsr_slave_0: entered promiscuous mode [ 46.989040][ T5987] hsr_slave_1: entered promiscuous mode [ 46.991117][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 46.992973][ T5987] Cannot create hsr debugfs directory [ 47.221870][ T5979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.227917][ T5979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.233018][ T5979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.239129][ T5979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.272606][ T5975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.292298][ T5975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.302560][ T5975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.313520][ T5975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.330602][ T5983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.341918][ T5983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.346978][ T5983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.351051][ T5983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.401167][ T5987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.406458][ T5987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.412139][ T5987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.416617][ T5987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.489119][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.494541][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.516983][ T5989] Bluetooth: hci1: command tx timeout [ 47.517706][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.526165][ T5989] Bluetooth: hci2: command tx timeout [ 47.526592][ T5982] Bluetooth: hci0: command tx timeout [ 47.527443][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.528755][ T5989] Bluetooth: hci3: command tx timeout [ 47.532499][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.544537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.546960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.552549][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.561519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.563764][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.581593][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.583765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.588094][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.590312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.603825][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.631256][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.637186][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.640167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.650669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.652943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.657719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.660666][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.672023][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.674279][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.758064][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.782606][ T5979] veth0_vlan: entered promiscuous mode [ 47.790765][ T5979] veth1_vlan: entered promiscuous mode [ 47.808949][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.818705][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.826015][ T5979] veth0_macvtap: entered promiscuous mode [ 47.839666][ T5979] veth1_macvtap: entered promiscuous mode [ 47.848581][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.860010][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.864865][ T5987] veth0_vlan: entered promiscuous mode [ 47.871001][ T5987] veth1_vlan: entered promiscuous mode [ 47.879401][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.893691][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.897578][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.904628][ T5975] veth0_vlan: entered promiscuous mode [ 47.910383][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.918391][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.929717][ T5975] veth1_vlan: entered promiscuous mode [ 47.934722][ T5983] veth0_vlan: entered promiscuous mode [ 47.947285][ T5987] veth0_macvtap: entered promiscuous mode [ 47.951471][ T5983] veth1_vlan: entered promiscuous mode [ 47.959751][ T5987] veth1_macvtap: entered promiscuous mode [ 47.976606][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.980652][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.992369][ T5975] veth0_macvtap: entered promiscuous mode [ 47.996492][ T5975] veth1_macvtap: entered promiscuous mode [ 48.012425][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.017645][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.020935][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.022277][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.028573][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.036743][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.039908][ T5983] veth0_macvtap: entered promiscuous mode [ 48.049203][ T5983] veth1_macvtap: entered promiscuous mode [ 48.059276][ T5979] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.061922][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.066989][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.075221][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.079631][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.082540][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.089094][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.094365][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.097429][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.107423][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.110272][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.121565][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.126141][ T81] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.128875][ T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.141375][ T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.155192][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.158072][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.170466][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.172928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.198348][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.200900][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.213372][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.216396][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.216400][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.218863][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.229057][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.231449][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.237169][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.240547][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.317216][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.331155][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.586187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.590196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.653354][ T6087] bridge_slave_0: left allmulticast mode [ 48.655340][ T6087] bridge_slave_0: left promiscuous mode [ 48.658289][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.666643][ T6087] bridge_slave_1: left allmulticast mode [ 48.668536][ T6087] bridge_slave_1: left promiscuous mode [ 48.670492][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.678812][ T6087] bond0: (slave bond_slave_0): Releasing backup interface [ 48.687487][ T6087] bond0: (slave bond_slave_1): Releasing backup interface [ 48.704323][ T6087] team0: Port device team_slave_0 removed [ 48.711663][ T6087] team0: Port device team_slave_1 removed [ 48.714367][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.717091][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.721747][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.724269][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.749203][ T6088] team0: Mode changed to "loadbalance" [ 48.780994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.783955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.906173][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.029972][ T40] audit: type=1804 audit(1756810807.946:2): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 49.076942][ T6089] /dev/sr0: Can't open blockdev [ 49.152285][ T6087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.286003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.440247][ T6087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.485853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.488599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.595722][ T5989] Bluetooth: hci0: command tx timeout [ 49.597710][ T5989] Bluetooth: hci2: command tx timeout [ 49.597937][ T63] Bluetooth: hci1: command tx timeout [ 49.599263][ T5989] Bluetooth: hci3: command tx timeout [ 50.121905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.131816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.136505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.664139][ T6087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.386528][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 51.675974][ T63] Bluetooth: hci1: command tx timeout [ 51.676045][ T5982] Bluetooth: hci3: command tx timeout [ 51.677102][ T5339] Bluetooth: hci0: command tx timeout [ 51.677151][ T5989] Bluetooth: hci2: command tx timeout [ 51.712624][ T6087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.865436][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.874146][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.883205][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.894497][ T1148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.930675][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 52.182044][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.197101][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.209165][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.213565][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.216894][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.222981][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.226708][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.230667][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.234064][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.237402][ T6145] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 52.598374][ T6174] netlink: 'syz.3.24': attribute type 7 has an invalid length. [ 52.903496][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'. [ 52.916041][ T6142] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 53.430952][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 53.458224][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 53.475057][ T6188] geneve2: entered promiscuous mode [ 53.476956][ T6188] geneve2: entered allmulticast mode [ 53.755650][ T5982] Bluetooth: hci1: command tx timeout [ 53.756071][ T63] Bluetooth: hci3: command tx timeout [ 53.765661][ T63] Bluetooth: hci2: command tx timeout [ 53.765671][ T5982] Bluetooth: hci0: command tx timeout [ 53.830882][ T6211] netlink: 96 bytes leftover after parsing attributes in process `syz.3.35'. [ 54.773358][ T6230] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.776450][ T6230] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 54.779248][ T6230] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.781777][ T6230] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 55.303022][ T6241] ======================================================= [ 55.303022][ T6241] WARNING: The mand mount option has been deprecated and [ 55.303022][ T6241] and is ignored by this kernel. Remove the mand [ 55.303022][ T6241] option from the mount to silence this warning. [ 55.303022][ T6241] ======================================================= [ 55.459170][ T6243] Zero length message leads to an empty skb [ 55.579332][ T6256] overlayfs: overlapping lowerdir path [ 55.674139][ T6273] block nbd0: Attempted send on invalid socket [ 55.676646][ T6273] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 55.679927][ T6273] SQUASHFS error: Failed to read block 0x0: -5 [ 55.682117][ T6273] unable to read squashfs_super_block [ 55.708044][ T6277] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 55.715393][ T6277] ip6erspan0: entered promiscuous mode [ 55.827463][ T6286] input: syz0 as /devices/virtual/input/input5 [ 56.717590][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.59'. [ 56.722885][ T6305] loop2: detected capacity change from 0 to 7 [ 56.731104][ T6106] Dev loop2: unable to read RDB block 7 [ 56.733360][ T6106] loop2: AHDI p1 p2 p3 [ 56.735002][ T6106] loop2: partition table partially beyond EOD, truncated [ 56.838277][ T6106] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.840624][ T6106] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.846220][ T6305] Dev loop2: unable to read RDB block 7 [ 56.851263][ T6305] loop2: AHDI p1 p2 p3 [ 56.855742][ T6305] loop2: partition table partially beyond EOD, truncated [ 56.863135][ T6305] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.873608][ T6305] loop2: p2 start 1702059890 is beyond EOD, truncated [ 57.263293][ T6317] syz.2.63 uses obsolete (PF_INET,SOCK_PACKET) [ 57.289687][ T6320] fuseblk: Bad value for 'max_read' [ 57.379040][ T6324] overlayfs: overlapping lowerdir path [ 57.901129][ T29] libceph: connect (1)[c::]:6789 error -101 [ 57.904184][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 57.977402][ T6342] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 57.980002][ T6342] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 57.985964][ T6342] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 58.093235][ T6357] sock: sock_set_timeout: `syz.3.74' (pid 6357) tries to set negative timeout [ 58.166300][ T29] libceph: connect (1)[c::]:6789 error -101 [ 58.168533][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 58.218063][ T6360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.228147][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 58.322732][ T6360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.344016][ T6367] overlayfs: missing 'workdir' [ 58.390856][ T6339] ceph: No mds server is up or the cluster is laggy [ 58.433814][ T6360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.535412][ T6360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.631791][ T1144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.648198][ T1144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.652147][ T1144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.664582][ T1144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911971][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 59.151399][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 59.155206][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 59.808276][ T6417] usb usb1: usbfs: process 6417 (syz.0.91) did not claim interface 42 before use [ 59.866748][ T40] audit: type=1326 audit(1756810818.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.91" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 59.930055][ T6406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.933585][ T6406] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.946016][ T6406] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.955094][ T6406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.957806][ T6406] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.962423][ T6406] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.966268][ T6406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.968850][ T6406] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.972660][ T6406] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.977221][ T6406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.980397][ T6406] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.983751][ T6406] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.257635][ T40] audit: type=1326 audit(1756810819.176:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.95" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 60.405018][ T6443] sp0: Synchronizing with TNC [ 61.036053][ T6449] wireguard0: entered promiscuous mode [ 61.041007][ T6449] wireguard0: entered allmulticast mode [ 61.180590][ T6441] [U] è` [ 61.278207][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.351874][ T6487] 9pnet: p9_errstr2errno: server reported unknown error  [ 61.384906][ T6492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.102'. [ 61.650608][ T6515] usb usb8: usbfs: process 6515 (syz.2.104) did not claim interface 0 before use [ 61.996890][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.998847][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.000813][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.295893][ T6541] comedi comedi3: comedi_config --init_data is deprecated [ 62.306386][ T6545] nfs: Deprecated parameter 'nointr' [ 62.331931][ T6551] tipc: Enabling of bearer rejected, failed to enable media [ 62.518261][ T6567] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 62.520415][ T6567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.524657][ T6567] vhci_hcd vhci_hcd.0: Device attached [ 62.602051][ T6573] syzkaller1: entered promiscuous mode [ 62.603823][ T6573] syzkaller1: entered allmulticast mode [ 62.607070][ T6573] program syz.3.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.610432][ T6573] nfs: Unknown parameter 'ntext' [ 62.775592][ T1022] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 62.816325][ T6575] /dev/sr0: Can't open blockdev [ 62.869421][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 62.878484][ T6581] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'. [ 62.939704][ T6585] fuse: Bad value for 'group_id' [ 62.941555][ T6585] fuse: Bad value for 'group_id' [ 63.060244][ T6593] netlink: 'syz.0.124': attribute type 2 has an invalid length. [ 63.119585][ T6597] smc: net device ip_vti0 applied user defined pnetid SYZ2 [ 63.211983][ T6600] netlink: 96 bytes leftover after parsing attributes in process `syz.0.125'. [ 63.271594][ T6571] vhci_hcd: connection reset by peer [ 63.295771][ T13] vhci_hcd: stop threads [ 63.297663][ T13] vhci_hcd: release socket [ 63.307578][ T13] vhci_hcd: disconnect device [ 63.365958][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.718740][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 63.742812][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 64.075761][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.077638][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.079487][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.381852][ T6656] Bluetooth: MGMT ver 1.23 [ 64.493478][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 65.164693][ T6705] sp0: Synchronizing with TNC [ 65.412028][ T6719] trusted_key: encrypted_key: keyword 'eul–' not recognized [ 65.435744][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.440625][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 65.448598][ T6721] macvtap1: entered promiscuous mode [ 65.450277][ T6721] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 65.454245][ T6721] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 65.836659][ T6735] overlayfs: failed to resolve './file7': -2 [ 65.840128][ T40] audit: type=1326 audit(1756810824.756:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.842800][ T6735] bond0: entered promiscuous mode [ 65.848474][ T40] audit: type=1326 audit(1756810824.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.850167][ T6735] bond_slave_0: entered promiscuous mode [ 65.856465][ T40] audit: type=1326 audit(1756810824.756:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.856487][ T40] audit: type=1326 audit(1756810824.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.858410][ T6735] bond_slave_1: entered promiscuous mode [ 65.864774][ T40] audit: type=1326 audit(1756810824.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.880431][ T40] audit: type=1326 audit(1756810824.756:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.887030][ T40] audit: type=1326 audit(1756810824.756:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.895354][ T40] audit: type=1326 audit(1756810824.756:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.904009][ T40] audit: type=1326 audit(1756810824.796:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.912323][ T40] audit: type=1326 audit(1756810824.796:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 65.959892][ T6739] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.031208][ T6739] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.090311][ T6739] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.149139][ T6739] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.155693][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.155757][ T5989] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.155952][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.239491][ T1144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.247970][ T1144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254901][ T1144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.262872][ T1144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.322450][ T6753] vivid-002: disconnect [ 66.328500][ T6753] netlink: 'syz.3.154': attribute type 39 has an invalid length. [ 66.686505][ T6743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.155695][ T6752] vivid-002: reconnect [ 67.605943][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.686189][ T6761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.817805][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.821532][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.830799][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 67.839682][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.843688][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.850901][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.856297][ T29] usb 7-1: config 0 descriptor?? [ 67.870785][ T6798] exFAT-fs (nullb0): invalid boot record signature [ 67.873275][ T6798] exFAT-fs (nullb0): failed to read boot sector [ 67.877282][ T6798] exFAT-fs (nullb0): failed to recognize exfat type [ 67.905701][ T1022] vhci_hcd: vhci_device speed not set [ 68.325031][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.815932][ T6805] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 70.032964][ T6829] bridge_slave_0: left allmulticast mode [ 70.034803][ T6829] bridge_slave_0: left promiscuous mode [ 70.040052][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.047326][ T6829] bridge_slave_1: left allmulticast mode [ 70.049159][ T6829] bridge_slave_1: left promiscuous mode [ 70.051082][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.059994][ T6829] bond0: (slave bond_slave_0): Releasing backup interface [ 70.067559][ T6829] bond0: (slave bond_slave_1): Releasing backup interface [ 70.082393][ T6829] team0: Port device team_slave_0 removed [ 70.095006][ T6829] team0: Port device team_slave_1 removed [ 70.098078][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.100383][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.104009][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.107903][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.135458][ T6831] team0: Mode changed to "loadbalance" [ 70.238373][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 70.356597][ T53] usb 7-1: USB disconnect, device number 2 [ 70.541319][ T6829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.638032][ T6829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.697915][ T6829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.746154][ T6842] /dev/sr0: Can't open blockdev [ 70.782926][ T6829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.878688][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.880881][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.905181][ T1234] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.917500][ T1234] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.929091][ T1234] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.938603][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075437][ T6845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.382358][ T6858] vivid-000: disconnect [ 71.464841][ T6857] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 71.472551][ T6856] vivid-000: reconnect [ 71.555254][ T6863] bridge0: port 3(syz_tun) entered blocking state [ 71.559337][ T6863] bridge0: port 3(syz_tun) entered disabled state [ 71.562016][ T6863] syz_tun: entered allmulticast mode [ 71.566745][ T6863] syz_tun: entered promiscuous mode [ 71.569670][ T6863] bridge0: port 3(syz_tun) entered blocking state [ 71.572197][ T6863] bridge0: port 3(syz_tun) entered forwarding state [ 71.590410][ T6863] hub 9-0:1.0: USB hub found [ 71.592972][ T6863] hub 9-0:1.0: 1 port detected [ 71.798420][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 71.801202][ T6874] netlink: 'syz.3.183': attribute type 7 has an invalid length. [ 71.803635][ T6874] netlink: 'syz.3.183': attribute type 8 has an invalid length. [ 71.806368][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 72.300916][ T6881] (syz.1.186,6881,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 72.303528][ T6881] (syz.1.186,6881,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 73.107359][ T6901] netlink: 'syz.2.191': attribute type 2 has an invalid length. [ 73.115914][ T6901] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.191'. [ 73.266700][ T6884] /dev/sr0: Can't open blockdev [ 73.325890][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 73.325902][ T40] audit: type=1804 audit(1756810832.236:16): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.187" name="/newroot/53/file0" dev="tmpfs" ino=295 res=1 errno=0 [ 73.601556][ T6918] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 73.604916][ T6919] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 73.608505][ T6918] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 73.611125][ T6919] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 73.625238][ T6918] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 73.719630][ T6919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.728422][ T6921] bond2: option mode: unable to set because the bond device is up [ 73.751103][ T6919] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.767612][ T6919] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 73.777494][ T6921] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 73.826772][ T1148] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 73.939720][ T13] bond2: (slave macvlan2): link status up again after 0 ms [ 73.947259][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 73.952039][ T6927] mkiss: ax0: crc mode is auto. [ 73.969391][ T13] bond2: (slave macvlan2): link status up again after 0 ms [ 73.973456][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 73.975647][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 74.095662][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 74.216203][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 74.311674][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 74.325869][ T1148] bond2: (slave macvlan2): failed to get link speed/duplex [ 74.394801][ T6940] warning: `syz.0.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.405222][ T6940] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 74.448049][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 75.864011][ T840] cfg80211: failed to load regulatory.db [ 76.136210][ T60] net_ratelimit: 13 callbacks suppressed [ 76.136224][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.245711][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.356937][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.394668][ T6970] kAFS: unparsable volume name [ 76.465653][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.481595][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 76.564073][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 76.576670][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.685876][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.796144][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 76.882053][ T6997] process 'syz.3.216' launched './file1' with NULL argv: empty string added [ 76.906103][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 77.016075][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 77.135823][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 77.184746][ T7012] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 77.189144][ T7012] netlink: 152 bytes leftover after parsing attributes in process `syz.1.221'. [ 77.194742][ T7012] Ã: renamed from bond0 (while UP) [ 77.394835][ T7024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.554136][ T7046] random: crng reseeded on system resumption [ 79.021048][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 79.127471][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 79.444853][ T7083] Bluetooth: MGMT ver 1.23 [ 79.474444][ T7087] bridge: RTM_NEWNEIGH with invalid ether address [ 79.910609][ T40] audit: type=1326 audit(1756810838.826:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 79.959647][ T40] audit: type=1326 audit(1756810838.836:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.238" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 79.980675][ T40] audit: type=1326 audit(1756810838.836:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 80.089513][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 80.149741][ T7124] netlink: 64 bytes leftover after parsing attributes in process `syz.2.253'. [ 80.355606][ T840] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 80.407767][ T7136] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.505590][ T840] usb 6-1: Using ep0 maxpacket: 16 [ 80.509457][ T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 225, changing to 11 [ 80.512806][ T840] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.519436][ T840] usb 6-1: language id specifier not provided by device, defaulting to English [ 80.523387][ T840] usb 6-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 80.526294][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.529006][ T840] usb 6-1: Product: syz [ 80.530275][ T840] usb 6-1: Manufacturer: syz [ 80.531735][ T840] usb 6-1: SerialNumber: syz [ 81.155728][ T1144] net_ratelimit: 33 callbacks suppressed [ 81.155745][ T1144] bond2: (slave macvlan2): failed to get link speed/duplex [ 81.179478][ T7118] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 81.184460][ T7118] cramfs: wrong magic [ 81.188961][ T840] usbhid 6-1:1.0: can't add hid device: -71 [ 81.190925][ T840] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 81.196029][ T840] usb 6-1: USB disconnect, device number 2 [ 81.273850][ T7158] block device autoloading is deprecated and will be removed. [ 81.295755][ T1148] bond2: (slave macvlan2): failed to get link speed/duplex [ 81.405852][ T1148] bond2: (slave macvlan2): failed to get link speed/duplex [ 81.493919][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 81.521180][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 81.598587][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 81.705695][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 81.791179][ T7167] bridge0: port 3(syz_tun) entered disabled state [ 81.799051][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.801632][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.880473][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.887863][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.017251][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 82.038150][ T1148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.042116][ T1148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.044864][ T1148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.048149][ T1148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.125746][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 82.235295][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 82.235665][ T1148] bond2: (slave macvlan2): failed to get link speed/duplex [ 82.346241][ T1148] bond2: (slave macvlan2): failed to get link speed/duplex [ 82.456166][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 83.325613][ T6041] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.455665][ T6041] usb 5-1: device descriptor read/64, error -71 [ 83.695682][ T6041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.825649][ T6041] usb 5-1: device descriptor read/64, error -71 [ 83.926770][ T7226] input: syz0 as /devices/virtual/input/input7 [ 84.000887][ T7226] input: syz0 as /devices/virtual/input/input8 [ 84.053516][ T6041] usb usb5-port1: attempt power cycle [ 84.616135][ T6041] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.636058][ T6041] usb 5-1: device descriptor read/8, error -71 [ 84.637821][ T7235] loop4: detected capacity change from 0 to 7 [ 84.642658][ T7235] loop4: [POWERTEC] p1 [ 84.644638][ T7235] loop4: p1 size 1895890944 extends beyond EOD, truncated [ 84.795138][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 84.795173][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 84.802533][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 84.802579][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 84.877734][ T7237] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 84.884922][ T6041] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.906022][ T6041] usb 5-1: device descriptor read/8, error -71 [ 85.018321][ T6041] usb usb5-port1: unable to enumerate USB device [ 85.235598][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 85.415629][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 85.420234][ T61] usb 8-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 85.423886][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.438479][ T61] usb 8-1: config 0 descriptor?? [ 86.166089][ T1141] net_ratelimit: 33 callbacks suppressed [ 86.166107][ T1141] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.228986][ T7289] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 86.232059][ T7289] netlink: 208 bytes leftover after parsing attributes in process `syz.2.290'. [ 86.237657][ T7289] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 86.240187][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 86.243310][ T7290] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 86.246759][ T7290] netlink: 208 bytes leftover after parsing attributes in process `syz.2.290'. [ 86.249578][ T7290] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 86.275651][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.385701][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.496221][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.609580][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.715792][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.743295][ T61] usbhid 8-1:0.0: can't add hid device: -71 [ 86.747502][ T61] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 86.755094][ T61] usb 8-1: USB disconnect, device number 2 [ 86.826094][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 86.935769][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 87.045846][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 87.054495][ T7307] ubi31: attaching mtd0 [ 87.058931][ T7307] ubi31: scanning is finished [ 87.061009][ T7307] ubi31: empty MTD device detected [ 87.094798][ T7310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.165803][ T1141] bond2: (slave macvlan2): failed to get link speed/duplex [ 87.178827][ T7307] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.181480][ T7307] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 87.183791][ T7307] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 87.186249][ T7307] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 87.189097][ T7307] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 87.191759][ T7307] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 87.194469][ T7307] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 918466609 [ 87.201573][ T7307] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 87.205953][ T7312] ubi31: background thread "ubi_bgt31d" started, PID 7312 [ 87.335774][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.514663][ T7321] 9pnet_fd: Insufficient options for proto=fd [ 87.528997][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 87.540977][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.544112][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.548875][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.558009][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.561252][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.594647][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.612853][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.616572][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.625660][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.629953][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.633564][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.638413][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.642712][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.646713][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.651763][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.662042][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.669317][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.676870][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.686175][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.689769][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.693335][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.722235][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.726181][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.734678][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.800531][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.804291][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.807789][ T24] usb 5-1: Product: syz [ 87.809614][ T24] usb 5-1: Manufacturer: syz [ 87.812874][ T24] usb 5-1: SerialNumber: syz [ 87.821749][ T24] usb 5-1: config 0 descriptor?? [ 87.843942][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 88.097557][ T7336] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 88.099942][ T7336] netlink: 'syz.3.300': attribute type 2 has an invalid length. [ 88.121692][ C2] usb 5-1: yurex_control_callback - control failed: -71 [ 88.122665][ T10] usb 5-1: USB disconnect, device number 6 [ 88.132517][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 88.534533][ T7342] binder: 7341:7342 ioctl c018620c 80000000 returned -1 [ 89.177812][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.217751][ T7377] veth0_to_hsr: entered promiscuous mode [ 89.343414][ T7376] veth0_to_hsr: left promiscuous mode [ 89.355612][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 89.364830][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 89.368654][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.372464][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.377313][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.381088][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.386366][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.390253][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.602658][ T29] usb 5-1: usb_control_msg returned -32 [ 89.605378][ T29] usbtmc 5-1:16.0: can't read capabilities [ 90.262661][ T7397] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 90.417705][ T61] usb 5-1: USB disconnect, device number 7 [ 91.278808][ T7258] net_ratelimit: 28 callbacks suppressed [ 91.278829][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 91.501418][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 91.655642][ T1141] bond2: (slave macvlan2): failed to get link speed/duplex [ 91.809389][ T1141] bond2: (slave macvlan2): failed to get link speed/duplex [ 92.034903][ T7415] io-wq is not configured for unbound workers [ 92.081035][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 92.239486][ T7401] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 92.598411][ T7401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.790782][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 92.913581][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 93.058351][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 93.200668][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 93.312762][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 95.055922][ T7460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 95.090262][ T7460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.122419][ T7460] vhci_hcd vhci_hcd.0: Device attached [ 95.266373][ T40] audit: type=1800 audit(1756810854.176:20): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.332" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 95.479195][ T7471] vhci_hcd: connection closed [ 95.487495][ T7261] vhci_hcd: stop threads [ 95.491873][ T7261] vhci_hcd: release socket [ 95.502715][ T7261] vhci_hcd: disconnect device [ 95.525927][ T29] usb 38-1: enqueue for inactive port 0 [ 96.265750][ T29] usb usb38-port1: attempt power cycle [ 96.292920][ T7261] net_ratelimit: 22 callbacks suppressed [ 96.292939][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 96.474970][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 96.629083][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 96.687626][ T7490] __nla_validate_parse: 1 callbacks suppressed [ 96.687642][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 96.752473][ T7494] netlink: 'syz.1.340': attribute type 11 has an invalid length. [ 96.769443][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 96.780823][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 96.795293][ T7491] bridge3: entered allmulticast mode [ 96.835971][ T7491] overlay: ./file0 is not a directory [ 96.901875][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 96.961090][ T29] usb usb38-port1: unable to enumerate USB device [ 97.036352][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 97.225088][ T1144] bond2: (slave macvlan2): failed to get link speed/duplex [ 97.329487][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 97.429060][ T7505] "syz.3.345" (7505) uses obsolete ecb(arc4) skcipher [ 97.464465][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 97.619412][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 99.051420][ T7542] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 99.075657][ T7542] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 99.079777][ T7542] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 99.160222][ T7547] gretap1: entered promiscuous mode [ 99.185987][ T7547] bond0: (slave gretap1): making interface the new active one [ 99.188488][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 99.204313][ T7547] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 99.212425][ T7542] macvlan2: entered promiscuous mode [ 99.214836][ T7542] macvlan2: entered allmulticast mode [ 99.441591][ T7561] ip6gre1: entered promiscuous mode [ 99.444557][ T7561] ip6gre1: entered allmulticast mode [ 99.513024][ T7556] tmpfs: Group quota inode hardlimit too large. [ 99.523773][ T7556] input: syz0 as /devices/virtual/input/input9 [ 99.591616][ T7568] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 99.621420][ T7561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.355'. [ 99.625844][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 100.260257][ T7579] overlay: Unknown parameter 'dont_hash' [ 100.295448][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 100.317262][ T7579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.360'. [ 100.321210][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 100.369448][ T7583] mmap: syz.1.362 (7583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.751203][ T7613] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 100.845262][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.910444][ T7615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.915241][ T7615] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.927127][ T7615] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 100.967681][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 100.993227][ T7613] veth3: entered promiscuous mode [ 101.027229][ T7623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.391014][ T1144] net_ratelimit: 26 callbacks suppressed [ 101.391033][ T1144] bond2: (slave macvlan2): failed to get link speed/duplex [ 101.543216][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 101.655770][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 101.756143][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 101.872364][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 101.987030][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 102.116499][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 102.235891][ T1144] bond2: (slave macvlan2): failed to get link speed/duplex [ 102.355775][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 102.466166][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 105.569325][ T7726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 105.582358][ T7726] cramfs: wrong magic [ 106.055663][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 106.205601][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 106.209090][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.212653][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.216503][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.220199][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.224697][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.233487][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.485643][ T7261] net_ratelimit: 34 callbacks suppressed [ 106.485655][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 106.522351][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 106.524650][ T10] usbtmc 7-1:16.0: can't read capabilities [ 106.596141][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 106.706154][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 106.825958][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 106.935683][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.045802][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.163551][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.275723][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.320153][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 107.385755][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.506273][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 107.565616][ T7173] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 107.747549][ T7173] usb 8-1: config 0 has no interfaces? [ 107.749305][ T7173] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 107.752204][ T7173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.758449][ T7173] usb 8-1: config 0 descriptor?? [ 107.974049][ T7173] usb 8-1: USB disconnect, device number 3 [ 108.308993][ T40] audit: type=1326 audit(1756810867.216:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.315958][ T40] audit: type=1326 audit(1756810867.216:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.322733][ T40] audit: type=1326 audit(1756810867.226:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.329747][ T40] audit: type=1326 audit(1756810867.226:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.337685][ T40] audit: type=1326 audit(1756810867.236:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.345830][ T40] audit: type=1326 audit(1756810867.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.354039][ T40] audit: type=1326 audit(1756810867.246:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.361107][ T40] audit: type=1326 audit(1756810867.246:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.368024][ T40] audit: type=1326 audit(1756810867.276:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.374972][ T40] audit: type=1326 audit(1756810867.276:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 108.527621][ T7793] bridge4: entered allmulticast mode [ 108.608975][ T7803] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 108.609563][ T7801] IPVS: stopping master sync thread 7803 ... [ 108.779757][ T61] usb 7-1: USB disconnect, device number 3 [ 109.383595][ T7827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 109.386420][ T7827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.390001][ T7827] vhci_hcd vhci_hcd.0: Device attached [ 109.401259][ T7827] xt_limit: Overflow, try lower: 271964/0 [ 109.460132][ T7832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 109.490619][ T7828] vhci_hcd: connection closed [ 109.495339][ T7834] ptrace attach of "/syz-executor exec"[5983] was attempted by ""[7834] [ 109.500079][ T12] vhci_hcd: stop threads [ 109.501617][ T12] vhci_hcd: release socket [ 109.503135][ T12] vhci_hcd: disconnect device [ 109.767072][ T7843] 9p: Unknown Cache mode or invalid value fscach [ 109.921048][ T5989] Bluetooth: hci2: unexpected event for opcode 0x202d [ 110.085710][ T7853] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 110.088184][ T7853] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.431'. [ 110.179413][ T7848] block device autoloading is deprecated and will be removed. [ 110.368319][ T7859] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 110.368319][ T7859] program syz.0.431 not setting count and/or reply_len properly [ 110.805594][ T7173] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.905682][ T53] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 110.975702][ T7173] usb 5-1: Using ep0 maxpacket: 8 [ 110.978961][ T7173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.978983][ T7173] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.978996][ T7173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.980741][ T7173] usb 5-1: config 0 descriptor?? [ 111.055659][ T53] usb 8-1: device descriptor read/64, error -71 [ 111.315714][ T53] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 111.386603][ T7173] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 111.445858][ T53] usb 8-1: device descriptor read/64, error -71 [ 111.511350][ T212] net_ratelimit: 33 callbacks suppressed [ 111.511368][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 111.518516][ T7884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.440'. [ 111.555866][ T53] usb usb8-port1: attempt power cycle [ 111.635662][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 111.751980][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 111.794283][ T7173] usb 5-1: USB disconnect, device number 8 [ 111.855745][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 111.895717][ T53] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 111.917322][ T53] usb 8-1: device descriptor read/8, error -71 [ 111.980201][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 112.086215][ T212] bond2: (slave macvlan2): failed to get link speed/duplex [ 112.173306][ T53] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 112.188581][ T53] usb 8-1: device descriptor read/8, error -71 [ 112.200738][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 112.306659][ T1141] bond2: (slave macvlan2): failed to get link speed/duplex [ 112.312625][ T53] usb usb8-port1: unable to enumerate USB device [ 112.419434][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 112.525965][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 113.634980][ T7913] netem: invalid attributes len -3 [ 113.636725][ T7913] netem: change failed [ 113.845670][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 113.848633][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 113.868739][ T7928] 9pnet_fd: p9_fd_create_tcp (7928): problem connecting socket to 127.0.0.1 [ 114.711204][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 114.711220][ T40] audit: type=1326 audit(1756810873.626:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.0.457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 114.723265][ T40] audit: type=1326 audit(1756810873.626:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.0.457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 114.737165][ T40] audit: type=1326 audit(1756810873.656:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.0.457" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 114.788799][ T40] audit: type=1326 audit(1756810873.706:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.0.457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 114.797151][ T40] audit: type=1326 audit(1756810873.706:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.0.457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 115.195581][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 115.847700][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 115.871165][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.889411][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.899285][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.910419][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.926622][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.942068][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.959422][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.969590][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.986137][ T53] usb 7-1: config 0 descriptor?? [ 116.238424][ T7987] blktrace: Concurrent blktraces are not allowed on nbd0 [ 116.489419][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.502632][ T53] usb 7-1: USB disconnect, device number 4 [ 116.515624][ T53] usblp0: removed [ 116.567310][ T12] net_ratelimit: 32 callbacks suppressed [ 116.567328][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 116.676396][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 116.739865][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.785906][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 116.825596][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 116.857992][ T7993] virtio-fs: tag not found [ 116.868411][ T5989] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 116.895651][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 116.905750][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 116.910360][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.914954][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.919292][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.923020][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.929662][ T10] usb 5-1: config 0 descriptor?? [ 116.997239][ T40] audit: type=1326 audit(1756810875.916:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.1.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 117.003917][ T40] audit: type=1326 audit(1756810875.916:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.1.467" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 117.011440][ T40] audit: type=1326 audit(1756810875.916:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.1.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 117.019340][ T40] audit: type=1326 audit(1756810875.916:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.1.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 117.024534][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 117.026483][ T40] audit: type=1326 audit(1756810875.916:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.1.467" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 117.058406][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 117.066500][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.069361][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.072381][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.075218][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.078602][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.081719][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.085932][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.088761][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.094993][ T53] usb 7-1: config 0 descriptor?? [ 117.136784][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 117.138447][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 117.194101][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.198511][ T10] usb 5-1: USB disconnect, device number 9 [ 117.246387][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 117.307932][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.364219][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 117.478030][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 117.586038][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 118.101346][ T53] usb 7-1: USB disconnect, device number 5 [ 118.198000][ T53] usblp0: removed [ 119.014564][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 119.017907][ T8049] netlink: 'syz.3.480': attribute type 5 has an invalid length. [ 119.020673][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.480'. [ 119.029577][ T8049] geneve2: entered promiscuous mode [ 119.031322][ T8049] geneve2: entered allmulticast mode [ 119.033953][ T1234] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 119.036880][ T1234] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 119.039573][ T1234] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 119.042212][ T1234] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 119.132775][ T8056] netlink: 120 bytes leftover after parsing attributes in process `syz.2.482'. [ 119.138436][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 119.142210][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'. [ 119.152000][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 119.327435][ T8066] lo speed is unknown, defaulting to 1000 [ 119.327703][ T8066] lo speed is unknown, defaulting to 1000 [ 119.367036][ T8066] lo speed is unknown, defaulting to 1000 [ 119.406034][ T8066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.422063][ T8066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.466781][ T8066] lo speed is unknown, defaulting to 1000 [ 119.481106][ T8066] lo speed is unknown, defaulting to 1000 [ 119.492868][ T8066] lo speed is unknown, defaulting to 1000 [ 119.501316][ T8066] lo speed is unknown, defaulting to 1000 [ 120.099389][ T8080] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 120.392325][ T8089] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 120.394425][ T8089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.398578][ T8089] vhci_hcd vhci_hcd.0: Device attached [ 120.464587][ T8095] macsec1: entered allmulticast mode [ 120.662743][ T8090] vhci_hcd: connection closed [ 120.665630][ T7258] vhci_hcd: stop threads [ 120.665762][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 120.667347][ T7258] vhci_hcd: release socket [ 120.668749][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 120.671117][ T7258] vhci_hcd: disconnect device [ 120.696185][ T29] usb 44-1: enqueue for inactive port 0 [ 121.458192][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 121.458207][ T40] audit: type=1326 audit(1756810880.366:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.475946][ T40] audit: type=1326 audit(1756810880.366:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.485715][ T40] audit: type=1326 audit(1756810880.366:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.492792][ T40] audit: type=1326 audit(1756810880.366:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.501634][ T40] audit: type=1326 audit(1756810880.366:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.509808][ T40] audit: type=1326 audit(1756810880.366:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.518865][ T40] audit: type=1326 audit(1756810880.366:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.526901][ T40] audit: type=1326 audit(1756810880.366:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.535488][ T40] audit: type=1326 audit(1756810880.366:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.542420][ T40] audit: type=1326 audit(1756810880.366:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 121.605765][ T12] net_ratelimit: 34 callbacks suppressed [ 121.605777][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 121.644565][ T29] usb usb44-port1: attempt power cycle [ 121.725689][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 121.835822][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 121.945679][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.067860][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.186214][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.276351][ T29] usb usb44-port1: unable to enumerate USB device [ 122.307113][ T7258] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.415609][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.545867][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.635822][ T7173] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.655627][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 122.687719][ T8170] batman_adv: batadv0: Adding interface: dummy0 [ 122.691614][ T8170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 122.700836][ T8170] batman_adv: batadv0: Interface activated: dummy0 [ 122.797783][ T7173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.803010][ T7173] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.807512][ T7173] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.814998][ T7173] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 122.818089][ T7173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 122.820693][ T7173] usb 7-1: Product: syz [ 122.822162][ T7173] usb 7-1: Manufacturer: syz [ 122.824461][ T7173] usb 7-1: SerialNumber: syz [ 123.071218][ T7173] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.242375][ T8175] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 123.254066][ T8175] : entered promiscuous mode [ 123.300142][ T8175] syzkaller0: entered promiscuous mode [ 123.301957][ T8175] syzkaller0: entered allmulticast mode [ 123.948333][ T29] usb 7-1: USB disconnect, device number 6 [ 123.952260][ T29] usblp0: removed [ 124.517332][ T8201] tipc: Started in network mode [ 124.518935][ T8201] tipc: Node identity 080211000001, cluster identity 4711 [ 124.521344][ T8201] tipc: Enabled bearer , priority 0 [ 124.523783][ T8203] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 124.526308][ T8203] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 124.533889][ T8210] tipc: Resetting bearer [ 124.714355][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 124.720541][ T8232] tipc: Started in network mode [ 124.722154][ T8232] tipc: Node identity ac14140f, cluster identity 4711 [ 124.724712][ T8232] tipc: New replicast peer: 255.255.255.255 [ 124.728419][ T8232] tipc: Enabled bearer , priority 10 [ 124.731041][ T8232] tmpfs: Unknown parameter 'pcr' [ 124.934411][ T29] libceph: connect (1)[c::]:6789 error -101 [ 124.936813][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 124.986586][ T8241] ceph: No mds server is up or the cluster is laggy [ 125.054013][ T8247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 125.056760][ T8247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.060824][ T8247] vhci_hcd vhci_hcd.0: Device attached [ 125.325767][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 125.327954][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 125.546378][ T6837] tipc: Node number set to 134418688 [ 125.628450][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 125.662845][ T8248] vhci_hcd: connection reset by peer [ 125.664750][ T1144] vhci_hcd: stop threads [ 125.666153][ T1144] vhci_hcd: release socket [ 125.667826][ T1144] vhci_hcd: disconnect device [ 125.740254][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 125.855596][ T7173] tipc: Node number set to 2886997007 [ 126.528180][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.541682][ T8266] netlink: 173 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.554884][ T8266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.561913][ T8266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.625766][ T1144] net_ratelimit: 43 callbacks suppressed [ 126.625786][ T1144] bond2: (slave macvlan2): failed to get link speed/duplex [ 126.765006][ T1234] bond2: (slave macvlan2): failed to get link speed/duplex [ 126.875682][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 126.985649][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.095668][ T7261] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.205924][ T1234] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.315752][ T1234] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.375859][ T8284] binder: BINDER_SET_CONTEXT_MGR already set [ 127.379037][ T8284] binder: 8282:8284 ioctl 4018620d 80000540 returned -16 [ 127.435804][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.528282][ T8300] usb usb8: usbfs: process 8300 (syz.1.537) did not claim interface 0 before use [ 127.546034][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.640721][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 127.640733][ T40] audit: type=1326 audit(1756810886.556:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.651685][ T40] audit: type=1326 audit(1756810886.556:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.659757][ T40] audit: type=1326 audit(1756810886.566:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.669894][ T81] bond2: (slave macvlan2): failed to get link speed/duplex [ 127.674835][ T40] audit: type=1326 audit(1756810886.566:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.682623][ T40] audit: type=1326 audit(1756810886.566:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.691655][ T40] audit: type=1326 audit(1756810886.566:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.699169][ T40] audit: type=1326 audit(1756810886.566:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.707519][ T40] audit: type=1326 audit(1756810886.566:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.714648][ T40] audit: type=1326 audit(1756810886.576:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.723325][ T40] audit: type=1326 audit(1756810886.576:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 127.987963][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 127.990666][ T8308] netlink: 'syz.2.539': attribute type 5 has an invalid length. [ 127.993075][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'. [ 128.008692][ T8308] geneve2: entered promiscuous mode [ 128.010256][ T8308] geneve2: entered allmulticast mode [ 128.015405][ T1234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 128.018212][ T1234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 128.022293][ T1234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 128.025485][ T1234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 128.380966][ T8317] bond0: (slave syz_tun): Releasing backup interface [ 128.404121][ T8317] batman_adv: batadv0: Interface deactivated: dummy0 [ 128.409135][ T8317] batman_adv: batadv0: Removing interface: dummy0 [ 128.432529][ T8317] bond2: (slave macvlan2): Removing an active aggregator [ 128.435814][ T8317] bond2: (slave macvlan2): Releasing backup interface [ 128.937074][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 129.119463][ T53] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 129.124424][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.128650][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.133401][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.140975][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.144945][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.150024][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.154550][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.163211][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.168197][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.173702][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.180690][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.183812][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.188255][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.190809][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.193931][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.199878][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.202934][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.206767][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.210120][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.214013][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.226619][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.229727][ T53] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 129.232716][ T53] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.236623][ T53] usb 7-1: config 64 interface 0 has no altsetting 0 [ 129.240903][ T53] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.243892][ T53] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.246662][ T53] usb 7-1: Product: syz [ 129.248030][ T53] usb 7-1: Manufacturer: syz [ 129.249971][ T53] usb 7-1: SerialNumber: syz [ 129.261299][ T53] yurex 7-1:64.0: USB YUREX device now attached to Yurex #0 [ 129.473793][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.478807][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.745790][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.907235][ T53] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 129.910037][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.913646][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.917088][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.920673][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.924599][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.927585][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.931695][ T53] usb 6-1: config 0 descriptor?? [ 129.933918][ T8346] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.349017][ T53] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 130.359323][ T53] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 130.395730][ T29] usb 44-1: device descriptor read/8, error -110 [ 130.885720][ T29] usb usb44-port1: attempt power cycle [ 131.542734][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 131.551497][ T61] usb 7-1: USB disconnect, device number 7 [ 131.568125][ T61] yurex 7-1:64.0: USB YUREX #0 now disconnected [ 131.826709][ T8371] hsr0: entered allmulticast mode [ 131.828887][ T8371] hsr_slave_0: entered allmulticast mode [ 131.831069][ T8371] hsr_slave_1: entered allmulticast mode [ 131.917394][ T8374] netlink: 512 bytes leftover after parsing attributes in process `syz.0.552'. [ 131.920323][ T29] usb usb44-port1: unable to enumerate USB device [ 131.956784][ T8374] hsr_slave_0: left promiscuous mode [ 131.963250][ T8374] hsr_slave_1: left promiscuous mode [ 132.014022][ T8374] hsr0 (unregistering): left allmulticast mode [ 132.230684][ T8377] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 132.341561][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.345299][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.471752][ T8388] can0: slcan on pty20. [ 132.572902][ T1420] ================================================================== [ 132.581530][ T1420] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 132.591808][ T1420] Read of size 8 at addr ffff88806de3f020 by task aoe_tx0/1420 [ 132.596910][ T1420] [ 132.598466][ T1420] CPU: 1 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 132.598486][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.598496][ T1420] Call Trace: [ 132.598503][ T1420] [ 132.598509][ T1420] dump_stack_lvl+0x116/0x1f0 [ 132.598536][ T1420] print_report+0xcd/0x630 [ 132.598861][ T1420] ? __virt_addr_valid+0x81/0x610 [ 132.598979][ T1420] ? __phys_addr+0xe8/0x180 [ 132.599199][ T1420] ? handle_tx+0x5a5/0x630 [ 132.599217][ T1420] kasan_report+0xe0/0x110 [ 132.599237][ T1420] ? handle_tx+0x5a5/0x630 [ 132.599256][ T1420] handle_tx+0x5a5/0x630 [ 132.599274][ T1420] dev_hard_start_xmit+0x94/0x740 [ 132.599296][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 132.599315][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.599336][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 132.599353][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.599369][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.599384][ T1420] ? __schedule+0x11a3/0x5de0 [ 132.599403][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 132.599428][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.599456][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.599473][ T1420] tx+0xcc/0x190 [ 132.599494][ T1420] ? __pfx_tx+0x10/0x10 [ 132.599512][ T1420] kthread+0x1e1/0x3e0 [ 132.599530][ T1420] ? find_held_lock+0x2b/0x80 [ 132.599545][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.599562][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 132.599578][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.599599][ T1420] ? __kthread_parkme+0x19e/0x250 [ 132.599618][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.599635][ T1420] kthread+0x3c5/0x780 [ 132.599683][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.599706][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.599721][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.599742][ T1420] ret_from_fork+0x5d7/0x6f0 [ 132.599765][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.599787][ T1420] ret_from_fork_asm+0x1a/0x30 [ 132.599812][ T1420] [ 132.599817][ T1420] [ 132.601021][ T61] usb 6-1: USB disconnect, device number 3 [ 132.607536][ T1420] Allocated by task 8357: [ 132.607558][ T1420] kasan_save_stack+0x33/0x60 [ 132.607581][ T1420] kasan_save_track+0x14/0x30 [ 132.607596][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 132.607611][ T1420] alloc_tty_struct+0x96/0x8c0 [ 132.607638][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 132.607682][ T1420] tty_open+0xa50/0xf90 [ 132.607701][ T1420] chrdev_open+0x231/0x6a0 [ 132.786718][ T1420] do_dentry_open+0x97f/0x1530 [ 132.788854][ T1420] vfs_open+0x82/0x3f0 [ 132.790999][ T1420] path_openat+0x1de4/0x2cb0 [ 132.793372][ T1420] do_filp_open+0x20b/0x470 [ 132.795214][ T1420] do_sys_openat2+0x11b/0x1d0 [ 132.797028][ T1420] __ia32_compat_sys_openat+0x16d/0x210 [ 132.824763][ T1420] __do_fast_syscall_32+0x7c/0x3a0 [ 132.826889][ T1420] do_fast_syscall_32+0x32/0x80 [ 132.828271][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.830519][ T1420] [ 132.831447][ T1420] Freed by task 61: [ 132.832741][ T1420] kasan_save_stack+0x33/0x60 [ 132.834357][ T1420] kasan_save_track+0x14/0x30 [ 132.835776][ T1420] kasan_save_free_info+0x3b/0x60 [ 132.837610][ T1420] __kasan_slab_free+0x60/0x70 [ 132.843832][ T1420] kfree+0x2b4/0x4d0 [ 132.845479][ T1420] process_one_work+0x9cf/0x1b70 [ 132.847501][ T1420] worker_thread+0x6c8/0xf10 [ 132.870568][ T1420] kthread+0x3c5/0x780 [ 132.872449][ T1420] ret_from_fork+0x5d7/0x6f0 [ 132.874643][ T1420] ret_from_fork_asm+0x1a/0x30 [ 132.878760][ T1420] [ 132.881599][ T1420] Last potentially related work creation: [ 132.885451][ T1420] kasan_save_stack+0x33/0x60 [ 132.887230][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 132.889182][ T1420] insert_work+0x36/0x230 [ 132.890809][ T1420] __queue_work+0x97e/0x1160 [ 132.892568][ T1420] queue_work_on+0x1a4/0x1f0 [ 132.894340][ T1420] release_tty+0x4de/0x5d0 [ 132.896064][ T1420] tty_release_struct+0xb7/0xe0 [ 132.898173][ T1420] tty_release+0xe2d/0x1430 [ 132.900522][ T1420] __fput+0x3ff/0xb70 [ 132.902267][ T1420] task_work_run+0x14d/0x240 [ 132.904533][ T1420] do_exit+0x86f/0x2bf0 [ 132.906806][ T1420] do_group_exit+0xd3/0x2a0 [ 132.914224][ T1420] get_signal+0x2673/0x26d0 [ 132.916657][ T1420] arch_do_signal_or_restart+0x8f/0x790 [ 132.919475][ T1420] exit_to_user_mode_loop+0x84/0x110 [ 132.921520][ T1420] __do_fast_syscall_32+0x2ac/0x3a0 [ 132.923556][ T1420] do_fast_syscall_32+0x32/0x80 [ 132.926399][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.929402][ T1420] [ 132.930440][ T1420] The buggy address belongs to the object at ffff88806de3f000 [ 132.930440][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 132.937350][ T1420] The buggy address is located 32 bytes inside of [ 132.937350][ T1420] freed 2048-byte region [ffff88806de3f000, ffff88806de3f800) [ 132.944942][ T1420] [ 132.946108][ T1420] The buggy address belongs to the physical page: [ 132.949002][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6de38 [ 132.952935][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 132.956570][ T1420] memcg:ffff88806aefc101 [ 132.958513][ T1420] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 132.962151][ T1420] page_type: f5(slab) [ 132.963882][ T1420] raw: 04fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 132.967608][ T1420] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88806aefc101 [ 132.971851][ T1420] head: 04fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 132.975804][ T1420] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88806aefc101 [ 132.979528][ T1420] head: 04fff00000000003 ffffea0001b78e01 00000000ffffffff 00000000ffffffff [ 132.982744][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 132.986019][ T1420] page dumped because: kasan: bad access detected [ 132.988713][ T1420] page_owner tracks the page as allocated [ 132.991163][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7044, tgid 7036 (syz.1.228), ts 78613083216, free_ts 78535848818 [ 133.001088][ T1420] post_alloc_hook+0x1c0/0x230 [ 133.003708][ T1420] get_page_from_freelist+0x132b/0x38e0 [ 133.006869][ T1420] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.009374][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 133.011151][ T1420] new_slab+0x247/0x330 [ 133.013034][ T1420] ___slab_alloc+0xcf2/0x1740 [ 133.015289][ T1420] __slab_alloc.constprop.0+0x56/0xb0 [ 133.017982][ T1420] __kmalloc_cache_noprof+0xfb/0x3e0 [ 133.020540][ T1420] ipv6_add_dev+0x1c9/0x15f0 [ 133.022807][ T1420] addrconf_notify+0x53e/0x19e0 [ 133.025122][ T1420] notifier_call_chain+0xbc/0x410 [ 133.027358][ T1420] call_netdevice_notifiers_info+0xbe/0x140 [ 133.029865][ T1420] register_netdevice+0x182e/0x2270 [ 133.032030][ T1420] register_netdev+0x34/0x50 [ 133.034098][ T1420] vti6_init_net+0x28f/0x490 [ 133.036164][ T1420] ops_init+0x1e2/0x5f0 [ 133.038154][ T1420] page last free pid 5987 tgid 5987 stack trace: [ 133.041060][ T1420] __free_frozen_pages+0x7d5/0x10f0 [ 133.043412][ T1420] __put_partials+0x165/0x1c0 [ 133.045519][ T1420] qlist_free_all+0x4d/0x120 [ 133.047521][ T1420] kasan_quarantine_reduce+0x195/0x1e0 [ 133.049554][ T1420] __kasan_slab_alloc+0x69/0x90 [ 133.051408][ T1420] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 133.053526][ T1420] ptlock_alloc+0x1f/0x70 [ 133.055364][ T1420] pte_alloc_one+0x82/0x3a0 [ 133.057577][ T1420] __pte_alloc+0x6d/0x3c0 [ 133.059477][ T1420] copy_page_range+0x3b83/0x5c80 [ 133.061343][ T1420] dup_mmap+0xe88/0x21d0 [ 133.062952][ T1420] copy_process+0x4081/0x7690 [ 133.065340][ T1420] kernel_clone+0xfc/0x930 [ 133.067364][ T1420] __do_compat_sys_ia32_clone+0xcb/0x110 [ 133.069769][ T1420] __do_fast_syscall_32+0x7c/0x3a0 [ 133.072716][ T1420] do_fast_syscall_32+0x32/0x80 [ 133.075144][ T1420] [ 133.076483][ T1420] Memory state around the buggy address: [ 133.079135][ T1420] ffff88806de3ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.082560][ T1420] ffff88806de3ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.086403][ T1420] >ffff88806de3f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.089896][ T1420] ^ [ 133.092308][ T1420] ffff88806de3f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.096781][ T1420] ffff88806de3f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.100134][ T1420] ================================================================== [ 133.105633][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.108760][ T1420] CPU: 1 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 133.113803][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.119054][ T1420] Call Trace: [ 133.120490][ T1420] [ 133.121605][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 133.123360][ T1420] vpanic+0x6e8/0x7a0 [ 133.125071][ T1420] ? __pfx_vpanic+0x10/0x10 [ 133.127202][ T1420] ? handle_tx+0x5a5/0x630 [ 133.130090][ T1420] panic+0xca/0xd0 [ 133.131990][ T1420] ? __pfx_panic+0x10/0x10 [ 133.134796][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 133.136945][ T1420] check_panic_on_warn+0xab/0xb0 [ 133.139202][ T1420] end_report+0x107/0x170 [ 133.141550][ T1420] kasan_report+0xee/0x110 [ 133.143415][ T1420] ? handle_tx+0x5a5/0x630 [ 133.145554][ T1420] handle_tx+0x5a5/0x630 [ 133.147616][ T1420] dev_hard_start_xmit+0x94/0x740 [ 133.150200][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 133.152975][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.155845][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 133.158520][ T1420] ? rcu_is_watching+0x12/0xc0 [ 133.160536][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 133.162813][ T1420] ? __schedule+0x11a3/0x5de0 [ 133.165158][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 133.167984][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.170783][ T1420] ? rcu_is_watching+0x12/0xc0 [ 133.173488][ T1420] tx+0xcc/0x190 [ 133.175265][ T1420] ? __pfx_tx+0x10/0x10 [ 133.177411][ T1420] kthread+0x1e1/0x3e0 [ 133.179692][ T1420] ? find_held_lock+0x2b/0x80 [ 133.182177][ T1420] ? __pfx_kthread+0x10/0x10 [ 133.184323][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 133.186964][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.189482][ T1420] ? __kthread_parkme+0x19e/0x250 [ 133.191825][ T1420] ? __pfx_kthread+0x10/0x10 [ 133.194639][ T1420] kthread+0x3c5/0x780 [ 133.196771][ T1420] ? __pfx_kthread+0x10/0x10 [ 133.198956][ T1420] ? rcu_is_watching+0x12/0xc0 [ 133.201579][ T1420] ? __pfx_kthread+0x10/0x10 [ 133.203982][ T1420] ret_from_fork+0x5d7/0x6f0 [ 133.205993][ T1420] ? __pfx_kthread+0x10/0x10 [ 133.208142][ T1420] ret_from_fork_asm+0x1a/0x30 [ 133.210620][ T1420] [ 133.220079][ T1420] Kernel Offset: disabled [ 133.222124][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:01:31 Registers: info registers vcpu 0 CPU#0 RAX=ffff88804b06cf18 RBX=ffff88804b06cf00 RCX=0000000000000000 RDX=0000000000000008 RSI=ffff888050d563e0 RDI=ffff88804b06cf20 RBP=0000000008100073 RSP=ffffc9000f1af880 R8 =0000000000000001 R9 =ffffed100960d9e3 R10=ffff88804b06cf1f R11=0000000000000000 R12=0000000000000000 R13=ffff888050d563c0 R14=0000000000000000 R15=00007f554cd15000 RIP=ffffffff8b90ebce RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f554c9abc80 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f554cd13000 CR3=000000004c8a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f554cc58dd8 00007f554cd160c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f554cc58dd8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200020002000200 0300020000000035 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000035 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005000400020002 0002000200030002 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002538 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005268 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f554cd16b20 00007f554cd17050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85617170 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900072bf400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=53414b203a475542 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff361f932 R15=dffffc0000000000 RIP=ffffffff85617197 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ecda4 CR3=0000000068bbb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801c36a440 RSI=ffffffff816a0d21 RDI=ffffffff8c162e00 RBP=ffff888071179140 RSP=ffffc9000051f6a8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90ab8897 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b43b3c0 R15=ffffed100e22f228 RIP=ffffffff8b90c75f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f543be7c CR3=0000000068bbb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000003 RCX=ffffffff822a89ca RDX=0000000000000000 RSI=ffffffff8df40856 RDI=ffffffff8c162e00 RBP=0000000000000001 RSP=ffffc9000e97f6d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff822a8916 R13=0000000000000202 R14=ffff88804f22a440 R15=0000000000000000 RIP=ffffffff8b90e3ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056451b1ce830 CR3=0000000064d36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000