last executing test programs: 7.820163772s ago: executing program 2 (id=1457): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x8000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) write(r5, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x5f) 6.342411887s ago: executing program 1 (id=1467): socket(0x2, 0x5, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x81, 0xfff, 0x9, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x12, r6, 0x200, &(0x7f0000000480)={0x0}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001040000000000000000002fee6e000000a3b2774947f7cbd91f5a7fa57bdaf4c107ccf0ecadd4daa45940a96be81792ea954f42e4c9cf3e4fe6c28a374d1cff45981ca987d2583b65c527ef248f76fd7a02dbf6f0decf01d92019d5c273b04245b45703a8b5d4c8", @ANYRES32=r8, @ANYBLOB="80480000000000001400140074756e6c3000"/28], 0x34}}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@deltfilter={0x44, 0x2d, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xffe0}, {0x8, 0xd}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2a, 0x6}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x77}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 5.985623746s ago: executing program 2 (id=1468): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="01000000", @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x7c, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000001900)={{r1}, "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"}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @local}, 0x10) 5.75566917s ago: executing program 2 (id=1469): syz_emit_vhci(0x0, 0x22) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201885496d59d8d3692555eb1d760a2048d6477942bf58cc712"], 0xe3) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x1a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x0, 0x10}}}}, 0x11) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 5.343809029s ago: executing program 1 (id=1471): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5.204467397s ago: executing program 1 (id=1472): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xb68, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="b86cc4702bb7465f21c7ea9c5fa71228bc3bceae3a07fe14d98cea84cd619561ec979149a83db886adffc73440db5b1c12eebf171c530a626305eda1eae858a808fcb60a29db0c7d9fe6126dce99b6caf70bc6f554385aa9e371fa33d0b4f1377063e214b05d437ee4a61426692d859bdf49f1b518b0d66b75e1751602a84f04a4b2a4bdbf3122070031c445e58830e290e46aa8050d35963cd25c28a8be4a43a9a4e66acad20a58321f61b5ca5e7c8c5c780ead8f96382318e1849da85e77bacacf73422a600e8be6e226471ac34e5be3498d9216003ea59b61dd3fa95e907930e6762654d2e891fc0468175b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 4.792708618s ago: executing program 1 (id=1473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x6, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/220) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000300)={0xff, [0x7, 0x5, 0xcd600000], [{0xb8f6, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8001, 0x4a8817c2, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xa, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0xb49, 0x0, 0x0, 0x1}, {0x80000000, 0x89, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xffff7fff, 0x1, 0x0, 0x0, 0x1}, {0x10, 0x401, 0x1, 0x1}, {0x200, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x1, 0x1}], 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000011c0)="a8478d3d42ab01d3d427e0866cf20770", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local}, {@in=@rand_addr=0x4, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1002", @ANYRES16=0x0, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x20040050}, 0x4008080) recvmmsg(r4, &(0x7f0000000040), 0x0, 0x60, 0x0) 4.792389913s ago: executing program 3 (id=1474): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x165900, 0x42) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRESHEX=r2], 0xa0}}, 0x20000000) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6587, 0x4000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000100)=0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 4.7350301s ago: executing program 2 (id=1475): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000300)=0x8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x20000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000341bb1806c208bcb00000000850000002ef98a00bcc636036f000000b0807fe20114db0d4385109801ef55b0950f48e67578f000abd33511fc7dda14b858b1b29493dffbccb1534739"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) 4.374113307s ago: executing program 0 (id=1476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x7, 0x12, &(0x7f0000004680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r3) mknodat$loop(r3, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa77b6d4f11b3286dd60100000004c2b00fe8000000000000000000200000000bbfe8000000000000000000000000000aa6700000000d4212821"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a6) 4.373616432s ago: executing program 2 (id=1477): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[]) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x8000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) write(r5, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x5f) 3.449165734s ago: executing program 0 (id=1478): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) sched_setscheduler(r0, 0x0, &(0x7f0000000040)) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x16, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x5, 0x9, 0x4, 0x4}, {0x1, 0x5}], 0x10, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000300)=""/159) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000029c0)="4c37bfc48b1b876028ac95ea475f54d3a01403f95458a1cbb3722984a54031fcdf811e04a04133a0f5237c3b5364da5ec590d7cd55b6ee37a2563e1a65ff737cca649221ad79576b3bdd602abfd658eeeac2b347eadd5f4aa5632f5613", 0x5d}], 0x1}}], 0x1, 0x0) getuid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2.485590126s ago: executing program 2 (id=1479): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000280)="6b5706f02a937cc8bbfe5523b28b1f0c3c36d730448a826b4e42584c0b8ba0589d3f91303818d2fb710a9dab434f80b5dc25412dd763ccefe3e12928c112921916623ccdb702514f2ad6095cf469e49eb12b5df093738951c00b5bf3c895e3f5b9919cd30c80db046d486ba6e66dbfb9c4", 0x71) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x2}}, 0x18) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) listen(0xffffffffffffffff, 0x101) bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_open(&(0x7f0000000580)='ip6gre\x00', 0x1, 0x65, &(0x7f00000005c0)={0x4, 0x2, 0x800}) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) 2.341081361s ago: executing program 3 (id=1480): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="01000000", @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x7c, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000001900)={{r1}, "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"}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @local}, 0x10) 2.235587517s ago: executing program 1 (id=1481): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x810001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5ad8d27b}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x56) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_emit_ethernet(0x5c, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa00cce39067774286dd602cd5ed00262c00fc010000000000000000000000000000ff02000000000000005824310000000000000106000000040190780088263300d5bbb2aac83c591ae86e4cd5b9624a44fa907a86528e0485b51cc36dfc9787876bd26f"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01001400000000000000"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xff, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) lseek(0xffffffffffffffff, 0xfffffd, 0x4) 2.169517755s ago: executing program 0 (id=1482): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xb68, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="b86cc4702bb7465f21c7ea9c5fa71228bc3bceae3a07fe14d98cea84cd619561ec979149a83db886adffc73440db5b1c12eebf171c530a626305eda1eae858a808fcb60a29db0c7d9fe6126dce99b6caf70bc6f554385aa9e371fa33d0b4f1377063e214b05d437ee4a61426692d859bdf49f1b518b0d66b75e1751602a84f04a4b2a4bdbf3122070031c445e58830e290e46aa8050d35963cd25c28a8be4a43a9a4e66acad20a58321f61b5ca5e7c8c5c780ead8f96382318e1849da85e77bacacf73422a600e8be6e226471ac34e5be3498d9216003ea59b61dd3fa95e907930e6762654d2e891fc0468175b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2.0848542s ago: executing program 3 (id=1483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffd, 0x4, 0xfff, 0x2003, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xe, @void, @value, @void, @value}, 0x48) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x30a046b097be67a0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r3, 0x0, 0x1, 0x4}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.874800142s ago: executing program 0 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delnexthop={0x40, 0x69, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0xedbe285f9b904783, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x4, 0x82011, r5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x228, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x228}, 0x1, 0x0, 0x0, 0x8024}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x1, 0xffffffff, {{0x10, 0x4, 0x0, 0x3c, 0x40, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, {[@rr={0x7, 0x7, 0xad, [@multicast1]}, @timestamp={0x44, 0x24, 0xe, 0x0, 0x0, [0xff8, 0xfffffe51, 0x2, 0x8, 0x3, 0x9, 0xf5e2, 0xfff]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x28, 0x4) socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1b) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r13, @ANYBLOB="01000000f70000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.786570154s ago: executing program 0 (id=1485): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random=0xd, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 0s ago: executing program 0 (id=1490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000440), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) syz_io_uring_setup(0x1ea8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x3a19, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0xffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)) sendto$inet(r6, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x1, @dev}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="337dea3a", 0x4}], 0x1}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) kernel console output (not intermixed with test programs): 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.638620][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.642152][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.644394][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 139.646789][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.648976][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.652806][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.655052][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.658816][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.660932][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.663123][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.665262][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.668047][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.670128][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.672263][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.674491][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.676472][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.678570][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.680803][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.683006][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.685168][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.687554][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.690641][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.693166][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.695315][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.697478][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.701193][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.703131][ T6793] block nbd0: shutting down sockets [ 139.714243][ T1291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.730214][ T1291] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 140.893593][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 140.939319][ T5356] Bluetooth: hci0: command 0x0406 tx timeout [ 141.362056][ T6815] syz.0.364 (6815) used greatest stack depth: 20864 bytes left [ 141.420498][ T6822] lo: entered promiscuous mode [ 141.489431][ T5356] Bluetooth: hci2: command 0x0405 tx timeout [ 141.509087][ T6820] lo: left promiscuous mode [ 141.737976][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 141.874416][ T6829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.569356][ T5356] Bluetooth: hci2: command 0x0405 tx timeout [ 143.824857][ T6848] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.828424][ T6848] UDF-fs: Scanning with blocksize 512 failed [ 143.835272][ T6848] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.842537][ T6848] UDF-fs: Scanning with blocksize 1024 failed [ 143.845061][ T6848] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.847119][ T6848] UDF-fs: Scanning with blocksize 2048 failed [ 143.850288][ T6848] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.852681][ T6848] UDF-fs: Scanning with blocksize 4096 failed [ 143.942681][ T6854] lo: entered promiscuous mode [ 144.016796][ T6849] lo: left promiscuous mode [ 146.058167][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 146.468510][ T6883] syzkaller0: entered promiscuous mode [ 146.495386][ T6883] syzkaller0: entered allmulticast mode [ 146.739464][ T1291] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.893519][ T1291] usb 5-1: Using ep0 maxpacket: 32 [ 146.908075][ T1291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 146.914840][ T1291] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.918877][ T1291] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.922366][ T1291] usb 5-1: Product: syz [ 146.923995][ T1291] usb 5-1: Manufacturer: syz [ 146.925831][ T1291] usb 5-1: SerialNumber: syz [ 146.943126][ T1291] usb 5-1: config 0 descriptor?? [ 146.946276][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.156167][ T5395] usb 5-1: USB disconnect, device number 8 [ 149.975630][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 150.189976][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 150.331223][ T6953] netlink: 256 bytes leftover after parsing attributes in process `syz.2.395'. [ 151.460262][ T6971] lo: entered promiscuous mode [ 151.550723][ T6962] lo: left promiscuous mode [ 153.283073][ T6992] lo: entered promiscuous mode [ 153.356918][ T6987] lo: left promiscuous mode [ 154.281711][ T7004] pim6reg: entered allmulticast mode [ 154.539524][ T1291] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 154.564084][ T7011] lo: entered promiscuous mode [ 154.645592][ T7009] lo: left promiscuous mode [ 154.699396][ T1291] usb 8-1: Using ep0 maxpacket: 8 [ 154.704457][ T1291] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.707371][ T1291] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.710492][ T1291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 154.714237][ T1291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 154.717734][ T1291] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 154.723328][ T1291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.733694][ T1291] hub 8-1:1.0: bad descriptor, ignoring hub [ 154.735636][ T1291] hub 8-1:1.0: probe with driver hub failed with error -5 [ 154.740404][ T1291] cdc_wdm 8-1:1.0: skipping garbage [ 154.741990][ T1291] cdc_wdm 8-1:1.0: skipping garbage [ 154.747306][ T1291] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 154.749061][ T1291] cdc_wdm 8-1:1.0: Unknown control protocol [ 156.360072][ T7031] lo: entered promiscuous mode [ 156.465041][ T7029] lo: left promiscuous mode [ 156.799419][ T1291] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.950708][ T1291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 156.953808][ T1291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 156.956686][ T1291] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.961194][ T1291] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.966257][ T1291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.976248][ T1291] usb 6-1: config 0 descriptor?? [ 156.980319][ T7036] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.191953][ T35] usb 8-1: USB disconnect, device number 5 [ 157.361578][ T7046] syzkaller0: entered promiscuous mode [ 157.385559][ T7046] syzkaller0 (unregistering): left promiscuous mode [ 157.410440][ T1291] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 157.414966][ T1291] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 157.438283][ T1291] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.488145][ T7053] lo: entered promiscuous mode [ 157.556269][ T7047] lo: left promiscuous mode [ 158.772636][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 158.774708][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.776744][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.779121][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.782232][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.784235][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.786230][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 158.788303][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.790661][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 158.793418][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.796045][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.798779][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.801689][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.804573][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 158.807395][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.810416][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.813278][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.819399][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.822612][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.825348][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.828116][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.831094][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.833165][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.835115][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.837055][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.839008][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.841247][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.843779][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.846449][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.849379][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.852206][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.854309][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.856219][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.858165][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.860256][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.862807][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.865522][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.868259][ T5353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.872769][ T5353] hid-generic 0000:0000:0000.0004: hidraw2: HID v0.00 Device [syz0] on syz0 [ 158.903761][ T7069] lo: entered promiscuous mode [ 158.983913][ T7065] lo: left promiscuous mode [ 159.367295][ T39] audit: type=1326 audit(1728161839.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.1.427" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 159.416668][ T1428] usb 6-1: USB disconnect, device number 4 [ 160.186980][ T7092] libceph: resolve '. [ 160.186980][ T7092] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 160.186980][ T7092] ' (ret=-3): failed [ 160.227019][ T7092] No control pipe specified [ 160.455072][ T5356] Bluetooth: hci2: command 0x0405 tx timeout [ 161.102880][ T7102] lo: entered promiscuous mode [ 161.213488][ T7099] lo: left promiscuous mode [ 162.187720][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 162.492265][ T7119] lo: entered promiscuous mode [ 162.573911][ T7116] lo: left promiscuous mode [ 163.483882][ T7133] lo: entered promiscuous mode [ 163.568655][ T7131] lo: left promiscuous mode [ 163.723476][ T7138] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.446' sets config #1 [ 165.773108][ T7157] Process accounting resumed [ 165.779587][ T7157] kernel write not supported for file /asound/timers (pid: 7157 comm: syz.1.448) [ 166.518613][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 166.598163][ T7183] veth1_macvtap: left promiscuous mode [ 166.603567][ T7183] macsec0: entered allmulticast mode [ 166.631913][ T7183] veth1_macvtap: entered promiscuous mode [ 166.634091][ T7183] veth1_macvtap: entered allmulticast mode [ 166.665504][ T7186] tmpfs: Unknown parameter ' ' [ 167.833214][ T7198] can0: slcan on ptm0. [ 167.990142][ T7197] can0 (unregistered): slcan off ptm0. [ 168.550620][ T7216] netlink: 256 bytes leftover after parsing attributes in process `syz.0.462'. [ 170.546244][ T7245] can0: slcan on ptm0. [ 170.719567][ T7244] can0 (unregistered): slcan off ptm0. [ 172.194981][ T7285] netlink: 'syz.2.478': attribute type 21 has an invalid length. [ 173.430512][ T7300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.485'. [ 173.433766][ T7300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.485'. [ 173.663160][ T7302] syzkaller0: entered promiscuous mode [ 173.667462][ T7303] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 173.670097][ T7304] syzkaller0 (unregistering): left promiscuous mode [ 173.672122][ T7303] netlink: 512 bytes leftover after parsing attributes in process `syz.3.485'. [ 173.744858][ T7309] netlink: 72 bytes leftover after parsing attributes in process `syz.1.486'. [ 173.748489][ T7300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 173.750602][ T7300] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.753851][ T7300] vhci_hcd vhci_hcd.0: Device attached [ 173.958076][ T7310] vhci_hcd: connection closed [ 173.959886][ T93] vhci_hcd: stop threads [ 173.962907][ T93] vhci_hcd: release socket [ 173.965668][ T93] vhci_hcd: disconnect device [ 174.019439][ T25] usb 20-1: enqueue for inactive port 0 [ 174.387544][ T7322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'. [ 174.415507][ T7322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.514207][ T25] usb usb20-port1: attempt power cycle [ 175.080211][ T25] usb usb20-port1: unable to enumerate USB device [ 176.264819][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.495'. [ 176.650021][ T7345] lo: entered promiscuous mode [ 176.708753][ T7340] lo: left promiscuous mode [ 178.512102][ T7380] syzkaller0: entered promiscuous mode [ 178.513698][ T7380] syzkaller0: entered allmulticast mode [ 178.729416][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.889499][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 178.896077][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 178.900243][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.903005][ T25] usb 6-1: Product: syz [ 178.906747][ T25] usb 6-1: Manufacturer: syz [ 178.908449][ T25] usb 6-1: SerialNumber: syz [ 178.914775][ T25] usb 6-1: config 0 descriptor?? [ 178.930535][ T25] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 179.802996][ T7385] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.512'. [ 179.806236][ T7379] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.512'. [ 179.892564][ T25] pwc: Failed to set LED on/off time (-71) [ 179.894682][ T25] pwc: send_video_command error -71 [ 179.894765][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 179.894937][ T25] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 179.898543][ T25] usb 6-1: USB disconnect, device number 5 [ 180.138696][ T7398] lo: entered promiscuous mode [ 180.226827][ T7392] lo: left promiscuous mode [ 181.761513][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.764260][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.815751][ T7415] warning: `syz.0.521' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.834538][ T7415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 181.844868][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.847612][ T7415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.851614][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.854180][ T7415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.857405][ T7415] bridge0: entered promiscuous mode [ 181.864990][ T7415] bridge0: entered allmulticast mode [ 182.183000][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 182.769542][ T7437] lo: entered promiscuous mode [ 182.825168][ T7433] lo: left promiscuous mode [ 183.149389][ T1283] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.299333][ T1283] usb 7-1: Using ep0 maxpacket: 8 [ 183.304890][ T1283] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 183.309519][ T1283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.312127][ T1283] usb 7-1: Product: syz [ 183.314989][ T1283] usb 7-1: Manufacturer: syz [ 183.321850][ T1283] usb 7-1: SerialNumber: syz [ 183.326268][ T1283] usb 7-1: config 0 descriptor?? [ 183.335432][ T1283] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 183.642175][ T7449] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.519'. [ 183.645239][ T7441] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.519'. [ 183.725070][ T1283] pwc: Failed to set LED on/off time (-71) [ 183.727801][ T1283] pwc: send_video_command error -71 [ 183.729735][ T1283] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 183.731972][ T1283] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 183.773625][ T1283] usb 7-1: USB disconnect, device number 4 [ 186.324728][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 186.416156][ T7481] lo: entered promiscuous mode [ 186.498989][ T7478] lo: left promiscuous mode [ 186.639411][ T7489] mkiss: ax0: crc mode is auto. [ 187.523704][ T1283] IPVS: starting estimator thread 0... [ 187.526878][ T7499] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 187.609604][ T7500] IPVS: using max 35 ests per chain, 84000 per kthread [ 188.369365][ T5369] Bluetooth: hci4: command 0x1003 tx timeout [ 188.369424][ T5356] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.914357][ T7518] lo: entered promiscuous mode [ 189.002992][ T7516] lo: left promiscuous mode [ 189.065932][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 189.072660][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 189.084135][ T7520] syzkaller0: entered allmulticast mode [ 189.333425][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 190.367247][ T7535] lo: entered promiscuous mode [ 190.448682][ T7531] lo: left promiscuous mode [ 190.745159][ T7543] ======================================================= [ 190.745159][ T7543] WARNING: The mand mount option has been deprecated and [ 190.745159][ T7543] and is ignored by this kernel. Remove the mand [ 190.745159][ T7543] option from the mount to silence this warning. [ 190.745159][ T7543] ======================================================= [ 191.119590][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.293799][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 191.333617][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.340104][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 191.349457][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.352835][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.422407][ T25] usb 6-1: config 0 descriptor?? [ 191.459482][ T25] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 191.744072][ T7552] lo: entered promiscuous mode [ 191.826345][ T7550] lo: left promiscuous mode [ 192.867791][ T7568] lo: entered promiscuous mode [ 192.938905][ T7566] lo: left promiscuous mode [ 193.702570][ T25] usb 6-1: USB disconnect, device number 6 [ 193.731478][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.610538][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 195.516857][ T7598] Process accounting resumed [ 195.518730][ T7598] kernel write not supported for file /asound/timers (pid: 7598 comm: syz.2.558) [ 196.137224][ T7607] lo: entered promiscuous mode [ 196.222364][ T7603] lo: left promiscuous mode [ 196.917971][ T7616] tmpfs: Unknown parameter ' ' [ 196.958492][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 197.050382][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 197.765536][ T7629] cgroup: No subsys list or none specified [ 197.769899][ T7629] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 197.772399][ T7629] hsr0: entered promiscuous mode [ 197.775201][ T7629] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.778499][ T7629] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 197.781667][ T7629] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 197.784875][ T7629] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 198.127344][ T7638] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 199.082401][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 199.365368][ T7657] 9pnet_fd: Insufficient options for proto=fd [ 199.786692][ T7660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.634326][ T7673] dns_resolver: Unsupported content type (37) [ 201.924645][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 201.966937][ T7692] lo: entered promiscuous mode [ 202.045881][ T7688] lo: left promiscuous mode [ 203.178306][ T7709] tmpfs: Unknown parameter ' ' [ 204.120029][ T7729] lo: entered promiscuous mode [ 204.199202][ T7727] lo: left promiscuous mode [ 205.610288][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 206.528020][ T7763] lo: entered promiscuous mode [ 206.607083][ T7761] lo: left promiscuous mode [ 206.864009][ T7769] lo: entered promiscuous mode [ 206.949557][ T7767] lo: left promiscuous mode [ 208.673259][ T7778] tipc: Started in network mode [ 208.674600][ T7778] tipc: Node identity 7f000001, cluster identity 4711 [ 208.678464][ T7778] tipc: Enabled bearer , priority 10 [ 208.894245][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.907318][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.976358][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.978585][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.983510][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.986041][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.035112][ T7801] lo: entered promiscuous mode [ 209.084723][ T7799] lo: left promiscuous mode [ 209.117006][ T7803] ubi: mtd0 is already attached to ubi0 [ 209.296344][ T7808] lo: entered promiscuous mode [ 209.303602][ T7804] lo: left promiscuous mode [ 209.445817][ T7813] netlink: 'syz.3.615': attribute type 2 has an invalid length. [ 209.681361][ T35] tipc: Node number set to 2130706433 [ 209.683630][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 209.951152][ T7810] syzkaller0: entered promiscuous mode [ 209.960033][ T7810] syzkaller0: entered allmulticast mode [ 209.994216][ T7813] : entered promiscuous mode [ 210.565300][ T7825] x_tables: ip_tables: ah match: only valid for protocol 51 [ 211.825762][ T7833] overlayfs: failed to resolve './file1': -2 [ 212.621240][ T7842] lo: entered promiscuous mode [ 212.695952][ T7840] lo: left promiscuous mode [ 212.792856][ T7847] lo: entered promiscuous mode [ 212.794288][ T7848] sctp: [Deprecated]: syz.0.625 (pid 7848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.794288][ T7848] Use struct sctp_sack_info instead [ 212.865733][ T7843] lo: left promiscuous mode [ 214.050422][ T39] audit: type=1326 audit(1728161894.375:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.1.630" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 214.216389][ T5356] Bluetooth: hci0: unexpected event 0x34 length: 10 > 6 [ 214.239661][ T7866] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.630'. [ 214.423841][ T7869] libceph: resolve '. [ 214.423841][ T7869] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 214.423841][ T7869] ' (ret=-3): failed [ 214.437106][ T7869] No control pipe specified [ 215.012568][ T7878] lo: entered promiscuous mode [ 215.103152][ T7876] lo: left promiscuous mode [ 216.459345][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 216.609488][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 216.621624][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 216.625707][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.628102][ T25] usb 5-1: Product: syz [ 216.629927][ T25] usb 5-1: Manufacturer: syz [ 216.631514][ T25] usb 5-1: SerialNumber: syz [ 216.637451][ T25] usb 5-1: config 0 descriptor?? [ 216.646625][ T25] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 216.984011][ T7908] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.640'. [ 216.999861][ T7907] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.640'. [ 217.181478][ T25] pwc: Failed to set LED on/off time (-71) [ 217.187252][ T25] pwc: send_video_command error -71 [ 217.193361][ T7911] lo: entered promiscuous mode [ 217.193892][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 217.197458][ T25] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 217.207426][ T25] usb 5-1: USB disconnect, device number 9 [ 217.286765][ T7909] lo: left promiscuous mode [ 217.467533][ T7915] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.642'. [ 219.749854][ T7948] lo: entered promiscuous mode [ 219.836944][ T7946] lo: left promiscuous mode [ 219.970146][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 220.029436][ T1428] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.048213][ T7956] usb usb8: usbfs: process 7956 (syz.2.653) did not claim interface 0 before use [ 220.179437][ T1428] usb 5-1: Using ep0 maxpacket: 8 [ 220.192655][ T1428] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 220.195058][ T1428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.197157][ T1428] usb 5-1: Product: syz [ 220.198250][ T1428] usb 5-1: Manufacturer: syz [ 220.199859][ T1428] usb 5-1: SerialNumber: syz [ 220.210624][ T1428] usb 5-1: config 0 descriptor?? [ 220.217054][ T1428] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 220.379365][ T5356] Bluetooth: hci2: command 0x0405 tx timeout [ 220.512031][ T7969] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.651'. [ 220.514829][ T7950] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.651'. [ 220.589121][ T1428] pwc: Failed to set LED on/off time (-71) [ 220.591489][ T1428] pwc: send_video_command error -71 [ 220.592976][ T1428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 220.595094][ T1428] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 220.598298][ T1428] usb 5-1: USB disconnect, device number 10 [ 220.881509][ T7976] usb 2-1: USB disconnect, device number 2 [ 220.985997][ T7977] hub 2-0:1.0: USB hub found [ 220.987477][ T7977] hub 2-0:1.0: 6 ports detected [ 221.189356][ T30] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 221.384413][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 221.388120][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 221.392189][ T30] usb 2-1: Product: QEMU USB Tablet [ 221.394297][ T30] usb 2-1: Manufacturer: QEMU [ 221.400776][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 221.436399][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input8 [ 221.519244][ T30] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 221.908386][ T7992] lo: entered promiscuous mode [ 221.988386][ T7989] lo: left promiscuous mode [ 222.190238][ T39] audit: type=1326 audit(1728161902.515:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.663" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 222.388356][ T39] audit: type=1804 audit(1728161902.705:10): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.665" name="/newroot/158/file0" dev="fuse" ino=1 res=1 errno=0 [ 224.976006][ T8025] netlink: 112 bytes leftover after parsing attributes in process `syz.2.672'. [ 225.073944][ T8028] lo: entered promiscuous mode [ 225.156639][ T8026] lo: left promiscuous mode [ 228.396295][ T8061] lo: entered promiscuous mode [ 228.482420][ T8059] lo: left promiscuous mode [ 228.706972][ T8064] input: syz1 as /devices/virtual/input/input10 [ 228.782653][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 228.986208][ T8073] ubi0: detaching mtd0 [ 228.994065][ T8073] ubi0: mtd0 is detached [ 229.994434][ T8087] netlink: 188 bytes leftover after parsing attributes in process `syz.1.689'. [ 230.620459][ T5369] Bluetooth: hci2: command 0x0405 tx timeout [ 230.966963][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'. [ 231.701384][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 232.216619][ T8106] serio: Serial port pts0 [ 232.297094][ T8113] lo: entered promiscuous mode [ 232.388037][ T8110] lo: left promiscuous mode [ 232.529698][ T1291] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 232.683460][ T1291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 232.686510][ T1291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 232.691646][ T1291] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.697931][ T1291] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.703492][ T1291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.717114][ T1291] usb 7-1: config 0 descriptor?? [ 232.724032][ T8106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.467717][ T1291] usbhid 7-1:0.0: can't add hid device: -71 [ 233.476865][ T1291] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 233.508735][ T1291] usb 7-1: USB disconnect, device number 5 [ 234.329327][ T1283] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.481992][ T1283] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.485018][ T1283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.487818][ T1283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.492916][ T1283] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.497223][ T1283] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.500163][ T1283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.506479][ T1283] usb 6-1: config 0 descriptor?? [ 234.527455][ T8140] lo: entered promiscuous mode [ 234.620382][ T8138] lo: left promiscuous mode [ 234.961567][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.707'. [ 234.968086][ T1283] usbhid 6-1:0.0: can't add hid device: -71 [ 234.969928][ T1283] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.980523][ T1283] usb 6-1: USB disconnect, device number 7 [ 236.808673][ T8176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.079595][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 237.249411][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 237.264816][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.267139][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 237.269073][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 237.271672][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 237.274727][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 237.277709][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 237.281840][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.284118][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 237.286088][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 237.288482][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 237.292743][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 237.295683][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 237.299279][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.301616][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 237.303680][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 237.306233][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 237.311478][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 237.315284][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 237.323092][ T25] usb 5-1: string descriptor 0 read error: -22 [ 237.324845][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.327184][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.336967][ T25] adutux 5-1:246.0: interrupt endpoints not found [ 237.524348][ T8180] lo: entered promiscuous mode [ 237.546376][ T8182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.715'. [ 237.596378][ T8178] lo: left promiscuous mode [ 238.287122][ T25] usb 5-1: USB disconnect, device number 11 [ 238.592328][ T8199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 240.150674][ T8217] lo: entered promiscuous mode [ 240.237335][ T8214] lo: left promiscuous mode [ 243.096887][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 243.829365][ T979] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 243.989384][ T979] usb 8-1: Using ep0 maxpacket: 32 [ 243.992587][ T979] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.994759][ T979] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.997114][ T979] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.000407][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.003747][ T979] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.007365][ T979] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.012845][ T979] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.015188][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.018094][ T979] usb 8-1: config 0 descriptor?? [ 244.253053][ T979] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.262325][ T979] usb 8-1: USB disconnect, device number 6 [ 244.272455][ T979] usblp0: removed [ 244.370616][ T8291] netlink: 'syz.0.745': attribute type 21 has an invalid length. [ 244.719884][ T979] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.869367][ T979] usb 8-1: Using ep0 maxpacket: 32 [ 244.873596][ T979] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.879328][ T979] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.882186][ T979] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.885334][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.888667][ T979] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.909317][ T979] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.912816][ T979] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.915158][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.933682][ T979] usb 8-1: config 0 descriptor?? [ 245.234939][ T979] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.597988][ T8301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.741'. [ 245.826935][ T1291] usb 8-1: USB disconnect, device number 7 [ 245.832220][ T1291] usblp0: removed [ 246.453025][ T8313] fuse: Unknown parameter 'user_id00000000000000000000' [ 247.531672][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 248.904141][ T5356] Bluetooth: hci0: unexpected event for opcode 0x080c [ 248.926226][ T5356] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 248.947461][ T8346] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 249.588365][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 249.703498][ T8357] snd_dummy snd_dummy.0: control 0:0:0:syz1:4 is already present [ 249.875701][ T8361] IPVS: stopping master sync thread 5862 ... [ 249.882421][ T8361] ./file0: Can't lookup blockdev [ 250.210948][ T8368] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 250.824691][ T8371] lo: entered promiscuous mode [ 250.923294][ T8369] lo: left promiscuous mode [ 252.940351][ T5356] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 252.943065][ T5356] Bluetooth: hci0: Injecting HCI hardware error event [ 252.947272][ T5369] Bluetooth: hci0: hardware error 0x00 [ 253.730286][ T8406] 9pnet_fd: Insufficient options for proto=fd [ 253.905469][ T8410] lo: entered promiscuous mode [ 254.012320][ T8407] lo: left promiscuous mode [ 254.845255][ T39] audit: type=1326 audit(1728161935.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.856889][ T39] audit: type=1326 audit(1728161935.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.870984][ T39] audit: type=1326 audit(1728161935.185:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.879545][ T39] audit: type=1326 audit(1728161935.185:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.889410][ T39] audit: type=1326 audit(1728161935.185:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.900700][ T39] audit: type=1326 audit(1728161935.225:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.909488][ T39] audit: type=1326 audit(1728161935.235:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.916451][ T39] audit: type=1326 audit(1728161935.235:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.923539][ T39] audit: type=1326 audit(1728161935.245:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 254.935300][ T39] audit: type=1326 audit(1728161935.255:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 255.020323][ T5369] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 255.170627][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.286985][ T93] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.403009][ T93] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.534254][ T93] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.542276][ T5356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.547106][ T5356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.550043][ T5356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.553601][ T5356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.559663][ T5356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.561718][ T5356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.668009][ T93] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.774421][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 255.790754][ T93] bridge_slave_1: left allmulticast mode [ 255.793302][ T93] bridge_slave_1: left promiscuous mode [ 255.797195][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.805443][ T93] bridge_slave_0: left allmulticast mode [ 255.807432][ T93] bridge_slave_0: left promiscuous mode [ 255.808995][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.263324][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.268809][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.275040][ T93] bond0 (unregistering): Released all slaves [ 256.424124][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.425931][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.427794][ T8425] bridge_slave_0: entered allmulticast mode [ 256.435608][ T8425] bridge_slave_0: entered promiscuous mode [ 256.457176][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.464469][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.476397][ T8425] bridge_slave_1: entered allmulticast mode [ 256.478496][ T8425] bridge_slave_1: entered promiscuous mode [ 256.563943][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.571467][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.664561][ T8425] team0: Port device team_slave_0 added [ 256.700806][ T8425] team0: Port device team_slave_1 added [ 256.810129][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.812199][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.818889][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.907469][ T93] hsr_slave_0: left promiscuous mode [ 256.912614][ T93] hsr_slave_1: left promiscuous mode [ 256.916751][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.933337][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.935807][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.967476][ T93] veth1_macvtap: left promiscuous mode [ 256.970104][ T93] veth0_macvtap: left promiscuous mode [ 257.654374][ T5356] Bluetooth: hci3: command tx timeout [ 257.858957][ T93] team0 (unregistering): Port device team_slave_1 removed [ 257.967732][ T93] team0 (unregistering): Port device team_slave_0 removed [ 258.625081][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.626835][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.633353][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.700673][ T8425] hsr_slave_0: entered promiscuous mode [ 258.703954][ T8425] hsr_slave_1: entered promiscuous mode [ 258.705867][ T8425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.707719][ T8425] Cannot create hsr debugfs directory [ 259.377687][ T8425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.382933][ T8425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.386035][ T8425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.391334][ T8425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.449134][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.458036][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.467891][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.471368][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.474570][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.476422][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.607929][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.671206][ T8425] veth0_vlan: entered promiscuous mode [ 259.681545][ T8425] veth1_vlan: entered promiscuous mode [ 259.729400][ T5356] Bluetooth: hci3: command tx timeout [ 259.762447][ T8425] veth0_macvtap: entered promiscuous mode [ 259.769473][ T8425] veth1_macvtap: entered promiscuous mode [ 259.782261][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.784986][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.787563][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.790898][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.798808][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.808369][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.813996][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.816363][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.818960][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.822073][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.824960][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.828298][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.840712][ T8425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.842946][ T8425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.845229][ T8425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.847511][ T8425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.910132][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.913024][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.916861][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.919963][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.023904][ T8519] pim6reg: entered allmulticast mode [ 260.067773][ T8525] libceph: resolve '. [ 260.067773][ T8525] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 260.067773][ T8525] ' (ret=-3): failed [ 260.093516][ T8525] No control pipe specified [ 260.269667][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 260.419420][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 260.427314][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.430165][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.432701][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 260.436073][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 260.443031][ T25] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 260.445997][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.452777][ T25] hub 6-1:1.0: bad descriptor, ignoring hub [ 260.455477][ T25] hub 6-1:1.0: probe with driver hub failed with error -5 [ 260.458156][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 260.463702][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 260.468283][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 260.472965][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 261.819473][ T5356] Bluetooth: hci3: command tx timeout [ 262.508505][ T8542] tipc: Started in network mode [ 262.510200][ T8542] tipc: Node identity 225ebe7d928a, cluster identity 4711 [ 262.512444][ T8542] tipc: Enabled bearer , priority 0 [ 262.920273][ T7067] usb 6-1: USB disconnect, device number 8 [ 263.238972][ T39] kauditd_printk_skb: 848 callbacks suppressed [ 263.239130][ T39] audit: type=1326 audit(1728161943.555:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.3.801" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0 [ 263.262384][ T8540] tipc: Disabling bearer [ 263.899393][ T5356] Bluetooth: hci3: command tx timeout [ 264.371132][ T8565] lo: entered promiscuous mode [ 264.470420][ T8563] lo: left promiscuous mode [ 264.891801][ T8576] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.809'. [ 264.895674][ T8572] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.809'. [ 265.687388][ T8586] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.908073][ T8588] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 266.306413][ T8599] vlan0: entered promiscuous mode [ 266.316711][ T8599] team0: Port device vlan0 added [ 267.045694][ T8610] overlay: ./bus is not a directory [ 267.082877][ T8610] overlay: ./bus is not a directory [ 267.264344][ T8614] netlink: 'syz.0.821': attribute type 4 has an invalid length. [ 267.276352][ T8614] netlink: 'syz.0.821': attribute type 4 has an invalid length. [ 267.707315][ T8622] veth1_macvtap: entered allmulticast mode [ 269.339576][ T8629] input: syz1 as /devices/virtual/input/input11 [ 270.010992][ T8648] fuse: Unknown parameter '0x0000000000000003' [ 270.125380][ T8649] program syz.0.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.572420][ T8656] lo: entered promiscuous mode [ 270.644919][ T8653] lo: left promiscuous mode [ 270.825605][ T8665] IPVS: stopping master sync thread 5638 ... [ 270.831245][ T8665] ./file0: Can't lookup blockdev [ 271.309346][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 271.471267][ C3] ata1: illegal qc_active transition (00000000->00004000) [ 271.799000][ T1067] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 271.825393][ T1067] ata1.00: configured for UDMA/100 [ 272.684952][ T8] IPVS: starting estimator thread 0... [ 272.687573][ T8683] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 272.779511][ T8684] IPVS: using max 35 ests per chain, 84000 per kthread [ 274.503264][ T1100] Bluetooth: hci4: Frame reassembly failed (-84) [ 274.637578][ T8715] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(261608975196948) <= P.seqno(0) <= S.SWH(261608975197022)) and (P.ackno exists or LAWL(56393167308146) <= P.ackno(56393167308147) <= S.AWH(56393167308147), sending SYNC... [ 275.339056][ T8718] loop7: detected capacity change from 0 to 16384 [ 275.410569][ T8718] blk_print_req_error: 41 callbacks suppressed [ 275.410629][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.417515][ T8718] buffer_io_error: 41 callbacks suppressed [ 275.417530][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.424223][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.427632][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.431573][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.435217][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.438072][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.441974][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.445626][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.449578][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.454874][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.459905][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.469886][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.473832][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.484921][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.493861][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.497727][ T8718] ldm_validate_partition_table(): Disk read failed. [ 275.502007][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.505495][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.508904][ T8718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.513531][ T8718] Buffer I/O error on dev loop7, logical block 0, async page read [ 275.517950][ T8718] Dev loop7: unable to read RDB block 0 [ 275.524074][ T8718] loop7: unable to read partition table [ 275.526513][ T8718] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 276.529392][ T5369] Bluetooth: hci4: command 0x1003 tx timeout [ 276.530934][ T5356] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 277.970801][ T8749] trusted_key: syz.0.858 sent an empty control message without MSG_MORE. [ 278.776009][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.049822][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 279.199649][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 279.227939][ T9] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 279.236020][ T9] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 279.255556][ T9] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 279.275180][ T9] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 279.294546][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 279.299211][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 279.308845][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.317324][ T9] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 279.322168][ T9] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 279.325540][ T9] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 279.328996][ T9] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 279.336239][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 279.341291][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 279.345989][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.357103][ T9] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 279.361913][ T9] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 279.365104][ T9] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 279.371436][ T9] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 279.376433][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 279.381087][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 279.385697][ T9] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.395505][ T9] usb 6-1: string descriptor 0 read error: -22 [ 279.397942][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 279.403430][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.447251][ T9] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 279.598799][ T8769] lo: entered promiscuous mode [ 279.688494][ T8767] lo: left promiscuous mode [ 279.901567][ T9] usb 6-1: USB disconnect, device number 9 [ 282.020791][ T8808] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 286.164669][ T8860] lo: entered promiscuous mode [ 286.256002][ T8858] lo: left promiscuous mode [ 292.158405][ T8933] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 292.162336][ T8933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.906'. [ 292.439417][ T8936] mkiss: ax0: crc mode is auto. [ 292.657807][ T8938] mkiss: ax0: crc mode is auto. [ 292.658615][ T8936] overlayfs: unescaped trailing colons in lowerdir mount option. [ 295.812489][ T8975] lo: entered promiscuous mode [ 295.893819][ T8973] lo: left promiscuous mode [ 296.092830][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 298.086807][ T9008] tipc: Enabled bearer , priority 10 [ 299.013811][ T9019] dns_resolver: Unsupported content type (37) [ 299.089755][ T1428] tipc: Node number set to 2966732413 [ 299.175491][ T9024] lo: entered promiscuous mode [ 299.266312][ T9020] lo: left promiscuous mode [ 300.659100][ T9040] syz.3.936 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 300.867342][ T9048] snd_dummy snd_dummy.0: control 2:16:11:syz0:32769 is already present [ 300.895987][ T9049] lo: entered promiscuous mode [ 301.026774][ T9046] lo: left promiscuous mode [ 303.213849][ T9057] fuse: Bad value for 'fd' [ 305.390330][ T9084] binder: BINDER_SET_CONTEXT_MGR already set [ 305.392446][ T9084] binder: 9083:9084 ioctl 4018620d 200001c0 returned -16 [ 305.477003][ T9081] ptrace attach of ""[9090] was attempted by "/syz-executor exec"[9081] [ 307.237944][ T9117] netlink: 'syz.0.953': attribute type 2 has an invalid length. [ 307.301560][ T9117] : entered promiscuous mode [ 307.972315][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 307.995479][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.997973][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.189113][ T9137] netlink: 256 bytes leftover after parsing attributes in process `syz.3.961'. [ 310.721155][ T9159] tmpfs: Unknown parameter ' ' [ 311.045967][ T9162] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.064823][ T9164] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 311.067375][ T9164] UDF-fs: Scanning with blocksize 512 failed [ 311.073159][ T9164] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 311.075221][ T9164] UDF-fs: Scanning with blocksize 1024 failed [ 311.077466][ T9164] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 311.081381][ T9164] UDF-fs: Scanning with blocksize 2048 failed [ 311.083491][ T9164] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 311.085634][ T9164] UDF-fs: Scanning with blocksize 4096 failed [ 311.221856][ T9171] netlink: 112 bytes leftover after parsing attributes in process `syz.3.972'. [ 311.692494][ T9182] lo: entered promiscuous mode [ 311.778409][ T9180] lo: left promiscuous mode [ 312.426183][ T9191] netlink: 9 bytes leftover after parsing attributes in process `syz.3.979'. [ 312.939821][ T9196] xt_HMARK: spi-set and port-set can't be combined [ 313.117446][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 314.487242][ T9214] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 314.491059][ T9214] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 314.494145][ T9214] netlink: 126012 bytes leftover after parsing attributes in process `syz.2.985'. [ 314.534263][ T9214] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 314.537286][ T9214] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 314.540273][ T9214] netlink: 127216 bytes leftover after parsing attributes in process `syz.2.985'. [ 314.715775][ T9217] lo: entered promiscuous mode [ 314.767190][ T9215] lo: left promiscuous mode [ 315.989495][ T5414] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 316.165293][ T9237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.991'. [ 316.253274][ T5414] usb 7-1: Using ep0 maxpacket: 8 [ 316.283731][ T5414] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 316.285862][ T5414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.287751][ T5414] usb 7-1: Product: syz [ 316.288750][ T5414] usb 7-1: Manufacturer: syz [ 316.289980][ T5414] usb 7-1: SerialNumber: syz [ 316.292156][ T5414] usb 7-1: config 0 descriptor?? [ 316.299434][ T5414] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 316.613025][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.676482][ T9242] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.989'. [ 316.680945][ T9227] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.989'. [ 316.867563][ T5414] pwc: Failed to set LED on/off time (-71) [ 316.870695][ T5414] pwc: send_video_command error -71 [ 316.873480][ T5414] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 316.881033][ T5414] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 316.892751][ T5414] usb 7-1: USB disconnect, device number 6 [ 317.720536][ T9255] lo: entered promiscuous mode [ 317.814046][ T9253] lo: left promiscuous mode [ 318.209543][ T5414] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 318.371260][ T5414] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.375276][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.379165][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.382470][ T9269] libceph: resolve '. [ 318.382470][ T9269] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 318.382470][ T9269] ' (ret=-3): failed [ 318.382940][ T5414] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.393460][ T5414] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.396497][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.405440][ T5414] usb 5-1: config 0 descriptor?? [ 318.427943][ T9269] No control pipe specified [ 319.114828][ T5414] usbhid 5-1:0.0: can't add hid device: -71 [ 319.116474][ T5414] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.122664][ T5414] usb 5-1: USB disconnect, device number 12 [ 321.078545][ T9295] lo: entered promiscuous mode [ 321.129422][ T1428] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 321.170256][ T9293] lo: left promiscuous mode [ 321.279370][ T1428] usb 6-1: Using ep0 maxpacket: 8 [ 321.292126][ T1428] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 321.294477][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.296552][ T1428] usb 6-1: Product: syz [ 321.297643][ T1428] usb 6-1: Manufacturer: syz [ 321.298887][ T1428] usb 6-1: SerialNumber: syz [ 321.302797][ T1428] usb 6-1: config 0 descriptor?? [ 321.305561][ T1428] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 321.433324][ T9302] lo: entered promiscuous mode [ 321.504015][ T9299] lo: left promiscuous mode [ 321.675275][ T9310] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1003'. [ 321.679021][ T9292] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1003'. [ 321.707192][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1009'. [ 321.790788][ T1428] pwc: Failed to set LED on/off time (-71) [ 321.793368][ T1428] pwc: send_video_command error -71 [ 321.794914][ T1428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 321.798296][ T1428] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 321.803836][ T1428] usb 6-1: USB disconnect, device number 10 [ 322.343773][ T9313] netlink: 'syz.1.1011': attribute type 4 has an invalid length. [ 323.251439][ T9326] lo: entered promiscuous mode [ 323.319917][ T9324] lo: left promiscuous mode [ 323.741926][ T9334] mkiss: ax0: crc mode is auto. [ 323.743933][ T9333] lo: entered promiscuous mode [ 323.826253][ T9329] lo: left promiscuous mode [ 324.469118][ T9346] input: syz1 as /devices/virtual/input/input12 [ 325.070427][ T39] audit: type=1326 audit(1728162005.395:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.089857][ T39] audit: type=1326 audit(1728162005.405:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.097371][ T39] audit: type=1326 audit(1728162005.405:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.106126][ T39] audit: type=1326 audit(1728162005.405:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.112649][ T39] audit: type=1326 audit(1728162005.405:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=299 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.118430][ T39] audit: type=1326 audit(1728162005.405:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.121812][ T9356] snd_dummy snd_dummy.0: control 2:16:11:syz0:32769 is already present [ 325.125495][ T39] audit: type=1326 audit(1728162005.405:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.132281][ T39] audit: type=1326 audit(1728162005.405:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.137905][ T39] audit: type=1326 audit(1728162005.405:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 325.144911][ T39] audit: type=1326 audit(1728162005.405:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 326.150465][ T9379] mkiss: ax0: crc mode is auto. [ 326.369322][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 326.734203][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 326.814350][ T9385] veth1_macvtap: entered allmulticast mode [ 326.883228][ T9386] syz.1.1032: attempt to access beyond end of device [ 326.883228][ T9386] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 326.889094][ T9386] syz.1.1032: attempt to access beyond end of device [ 326.889094][ T9386] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 326.894183][ T9386] Mount JFS Failure: -5 [ 326.895836][ T9386] jfs_mount failed w/return code = -5 [ 327.791790][ T9396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1035'. [ 328.130613][ T9398] netlink: 'syz.3.1036': attribute type 4 has an invalid length. [ 328.141811][ T9398] netlink: 'syz.3.1036': attribute type 4 has an invalid length. [ 329.339551][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 329.489647][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 329.501878][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 329.505135][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.507965][ T8] usb 5-1: Product: syz [ 329.515778][ T8] usb 5-1: Manufacturer: syz [ 329.517491][ T8] usb 5-1: SerialNumber: syz [ 329.536986][ T8] usb 5-1: config 0 descriptor?? [ 329.553880][ T8] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 329.874739][ T9423] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1042'. [ 329.894936][ T9413] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1042'. [ 330.083354][ T8] pwc: Failed to set LED on/off time (-71) [ 330.086162][ T8] pwc: send_video_command error -71 [ 330.087851][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 330.090720][ T8] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 330.097816][ T8] usb 5-1: USB disconnect, device number 13 [ 331.087363][ T9437] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.119577][ T1428] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 331.269327][ T1428] usb 5-1: Using ep0 maxpacket: 8 [ 331.275915][ T1428] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 331.284274][ T1428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.287416][ T1428] usb 5-1: Product: syz [ 331.288966][ T1428] usb 5-1: Manufacturer: syz [ 331.291211][ T1428] usb 5-1: SerialNumber: syz [ 331.298363][ T1428] usb 5-1: config 0 descriptor?? [ 331.313401][ T1428] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 331.663427][ T9436] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1055'. [ 331.670039][ T9439] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1055'. [ 331.771251][ T1428] pwc: Failed to set LED on/off time (-71) [ 331.773762][ T1428] pwc: send_video_command error -71 [ 331.775863][ T1428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 331.779991][ T1428] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 331.787106][ T1428] usb 5-1: USB disconnect, device number 14 [ 331.898915][ T9446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1048'. [ 332.211456][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 332.292802][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.002980][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 334.680940][ T9484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 334.683457][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.688570][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 334.705113][ T9484] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 334.707514][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.712252][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 334.723244][ T9484] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 334.725704][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.729222][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 334.742058][ T9484] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 334.744503][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.747475][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 334.859412][ T5395] vhci_hcd: vhci_device speed not set [ 334.919377][ T5395] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 335.421057][ T9492] vhci_hcd: connection closed [ 335.421855][ T9489] vhci_hcd: connection closed [ 335.422053][ T9487] vhci_hcd: connection closed [ 335.422137][ T11] vhci_hcd: stop threads [ 335.422171][ T11] vhci_hcd: release socket [ 335.422252][ T11] vhci_hcd: disconnect device [ 335.423360][ T9485] vhci_hcd: connection reset by peer [ 335.429392][ T11] vhci_hcd: stop threads [ 335.432979][ T11] vhci_hcd: release socket [ 335.436249][ T11] vhci_hcd: disconnect device [ 335.439638][ T11] vhci_hcd: stop threads [ 335.440888][ T11] vhci_hcd: release socket [ 335.442215][ T11] vhci_hcd: disconnect device [ 335.444242][ T11] vhci_hcd: stop threads [ 335.445424][ T11] vhci_hcd: release socket [ 335.446701][ T11] vhci_hcd: disconnect device [ 335.519517][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 335.609811][ T9499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1061'. [ 335.669464][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 335.675779][ T35] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 335.678228][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.680537][ T35] usb 5-1: Product: syz [ 335.681909][ T35] usb 5-1: Manufacturer: syz [ 335.683231][ T35] usb 5-1: SerialNumber: syz [ 335.686885][ T35] usb 5-1: config 0 descriptor?? [ 335.693352][ T35] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 335.970800][ T9503] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1060'. [ 335.975334][ T9495] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1060'. [ 336.089880][ T35] pwc: Failed to set LED on/off time (-71) [ 336.091793][ T35] pwc: send_video_command error -71 [ 336.093207][ T35] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 336.095244][ T35] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 336.102869][ T35] usb 5-1: USB disconnect, device number 15 [ 336.486941][ T5356] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 337.039016][ T9521] xt_hashlimit: max too large, truncated to 1048576 [ 337.056892][ T9521] xt_hashlimit: overflow, try lower: 0/0 [ 337.173541][ T9523] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1068'. [ 338.213163][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1072'. [ 338.562680][ T9538] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 338.579824][ T9538] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 338.884496][ T9545] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 338.889405][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 338.904543][ T9545] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 339.039346][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 339.049805][ T30] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 339.059849][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.064372][ T30] usb 5-1: Product: syz [ 339.065705][ T30] usb 5-1: Manufacturer: syz [ 339.067035][ T30] usb 5-1: SerialNumber: syz [ 339.071317][ T30] usb 5-1: config 0 descriptor?? [ 339.087418][ T30] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 339.394306][ T9554] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1074'. [ 339.394670][ T9540] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1074'. [ 339.461489][ T30] pwc: Failed to set LED on/off time (-71) [ 339.463499][ T30] pwc: send_video_command error -71 [ 339.464919][ T30] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 339.467049][ T30] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 339.485941][ T30] usb 5-1: USB disconnect, device number 16 [ 340.529360][ T5395] vhci_hcd: vhci_device speed not set [ 340.577330][ T9567] fuse: Unknown parameter '0xffffffffffffffff' [ 340.793935][ T9573] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 340.823743][ T9573] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 340.998508][ T9582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'. [ 342.059444][ T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 342.184285][ T9601] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 342.209555][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 342.228571][ T57] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 342.231797][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.235469][ T57] usb 7-1: Product: syz [ 342.237597][ T57] usb 7-1: Manufacturer: syz [ 342.239695][ T57] usb 7-1: SerialNumber: syz [ 342.246136][ T57] usb 7-1: config 0 descriptor?? [ 342.254210][ T57] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 342.572415][ T9608] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1089'. [ 342.583211][ T9598] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1089'. [ 342.690584][ T57] pwc: Failed to set LED on/off time (-71) [ 342.693349][ T57] pwc: send_video_command error -71 [ 342.698443][ T57] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 342.703068][ T57] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 342.710602][ T57] usb 7-1: USB disconnect, device number 7 [ 342.754222][ T9612] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 342.757583][ T9612] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 342.819504][ T9614] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 343.092467][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'. [ 344.075231][ T9642] validate_nla: 1 callbacks suppressed [ 344.075242][ T9642] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 344.087074][ T9640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1099'. [ 344.092228][ T9642] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 344.161185][ T9644] netlink: 'syz.0.1102': attribute type 4 has an invalid length. [ 344.210865][ T9644] netlink: 'syz.0.1102': attribute type 4 has an invalid length. [ 344.755682][ T9647] input: syz1 as /devices/virtual/input/input13 [ 346.529384][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 346.643642][ T9670] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 346.759360][ T9674] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 346.763116][ T9676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1110'. [ 347.641626][ T9691] netlink: 'syz.3.1115': attribute type 9 has an invalid length. [ 347.643748][ T9691] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1115'. [ 349.959355][ T1428] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 350.129464][ T1428] usb 6-1: Using ep0 maxpacket: 8 [ 350.146149][ T1428] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 350.148796][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.152198][ T1428] usb 6-1: Product: syz [ 350.157143][ T1428] usb 6-1: Manufacturer: syz [ 350.160064][ T1428] usb 6-1: SerialNumber: syz [ 350.173166][ T1428] usb 6-1: config 0 descriptor?? [ 350.181875][ T1428] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 350.358467][ T9731] lo: entered promiscuous mode [ 350.417143][ T9729] lo: left promiscuous mode [ 350.512412][ T9720] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1123'. [ 350.519506][ T9733] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1123'. [ 350.639317][ T1428] pwc: Failed to set LED on/off time (-71) [ 350.641574][ T1428] pwc: send_video_command error -71 [ 350.642955][ T1428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 350.644944][ T1428] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 350.648833][ T1428] usb 6-1: USB disconnect, device number 11 [ 352.307405][ T9759] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 352.319769][ T9759] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 353.032286][ T9771] input: syz1 as /devices/virtual/input/input14 [ 353.665525][ T9778] lo: entered promiscuous mode [ 353.713943][ T5413] libceph: connect (1)[c::]:6789 error -101 [ 353.715726][ T5413] libceph: mon0 (1)[c::]:6789 connect error [ 353.727756][ T9774] lo: left promiscuous mode [ 353.990726][ T8] libceph: connect (1)[c::]:6789 error -101 [ 353.992431][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 354.519894][ T9780] ceph: No mds server is up or the cluster is laggy [ 354.596656][ T8] libceph: connect (1)[c::]:6789 error -101 [ 354.598785][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 354.929508][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 355.312979][ T9821] lo: entered promiscuous mode [ 355.396741][ T9817] lo: left promiscuous mode [ 355.582957][ T9824] netlink: 'syz.2.1150': attribute type 3 has an invalid length. [ 355.585129][ T9824] netlink: 'syz.2.1150': attribute type 3 has an invalid length. [ 356.095922][ T9835] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 356.323389][ T9836] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 358.472159][ T9887] netlink: 'syz.3.1165': attribute type 4 has an invalid length. [ 358.495573][ T9887] netlink: 'syz.3.1165': attribute type 4 has an invalid length. [ 359.734028][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 359.811171][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 360.185866][ T9912] input: syz1 as /devices/virtual/input/input15 [ 360.590641][ T9919] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 360.604361][ T9919] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 360.860319][ T9926] lo: entered promiscuous mode [ 360.917331][ T9922] lo: left promiscuous mode [ 361.100896][ T1428] IPVS: starting estimator thread 0... [ 361.199340][ T9935] IPVS: using max 35 ests per chain, 84000 per kthread [ 361.889314][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 362.786626][ T9957] input: syz1 as /devices/virtual/input/input16 [ 363.082581][ T9970] loop7: detected capacity change from 0 to 16384 [ 363.153543][ T9970] blk_print_req_error: 7 callbacks suppressed [ 363.153560][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.169947][ T9970] buffer_io_error: 7 callbacks suppressed [ 363.171609][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.183753][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.186906][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.192490][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.195157][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.200671][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.204321][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.208101][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.215163][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.220781][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.224295][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.247669][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.253594][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.257712][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.262872][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.271162][ T9970] ldm_validate_partition_table(): Disk read failed. [ 363.273382][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.283075][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.286807][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 363.295518][ T9970] Buffer I/O error on dev loop7, logical block 0, async page read [ 363.299145][ T9970] Dev loop7: unable to read RDB block 0 [ 363.303191][ T9970] loop7: unable to read partition table [ 363.307169][ T9980] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 363.309789][ T9970] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 363.318176][ T9980] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 363.338537][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 363.338733][ T39] audit: type=1326 audit(1728162043.655:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.380079][ T39] audit: type=1326 audit(1728162043.655:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.396665][ T39] audit: type=1326 audit(1728162043.665:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.405176][ T39] audit: type=1326 audit(1728162043.665:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.414374][ T39] audit: type=1326 audit(1728162043.665:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.423645][ T39] audit: type=1326 audit(1728162043.665:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.431018][ T39] audit: type=1326 audit(1728162043.665:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.438512][ T39] audit: type=1326 audit(1728162043.665:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.446899][ T39] audit: type=1326 audit(1728162043.665:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.455653][ T39] audit: type=1326 audit(1728162043.665:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 363.517750][ T9986] lo: entered promiscuous mode [ 363.587431][ T9983] lo: left promiscuous mode [ 363.710611][ T9988] netlink: 'syz.0.1192': attribute type 4 has an invalid length. [ 363.733107][ T9988] netlink: 'syz.0.1192': attribute type 4 has an invalid length. [ 363.969441][ T5369] Bluetooth: hci3: command 0x0405 tx timeout [ 366.325207][T10022] netlink: 'syz.0.1199': attribute type 4 has an invalid length. [ 366.353549][T10022] netlink: 'syz.0.1199': attribute type 4 has an invalid length. [ 366.446431][T10027] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 366.455843][T10027] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 366.504662][T10030] lo: entered promiscuous mode [ 366.586019][T10023] lo: left promiscuous mode [ 366.867297][T10039] 9pnet_virtio: no channels available for device syz [ 367.582016][T10061] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.824808][ T5356] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 368.829210][ T5356] CPU: 2 UID: 0 PID: 5356 Comm: kworker/u33:3 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 368.833301][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 368.836767][ T5356] Workqueue: hci3 hci_rx_work [ 368.838146][ T5356] Call Trace: [ 368.839073][ T5356] [ 368.839995][ T5356] dump_stack_lvl+0x16c/0x1f0 [ 368.841730][ T5356] sysfs_warn_dup+0x7f/0xa0 [ 368.843518][ T5356] sysfs_create_dir_ns+0x24d/0x2b0 [ 368.845436][ T5356] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 368.847544][ T5356] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.849540][ T5356] ? kobject_add_internal+0x12d/0x990 [ 368.851512][ T5356] ? do_raw_spin_unlock+0x172/0x230 [ 368.853437][ T5356] kobject_add_internal+0x2c8/0x990 [ 368.854933][ T5356] kobject_add+0x16f/0x240 [ 368.856565][ T5356] ? __pfx_kobject_add+0x10/0x10 [ 368.858518][ T5356] ? class_to_subsys+0x3e/0x160 [ 368.860486][ T5356] ? do_raw_spin_unlock+0x172/0x230 [ 368.862458][ T5356] ? kobject_put+0xab/0x5a0 [ 368.864213][ T5356] device_add+0x289/0x1a70 [ 368.865900][ T5356] ? __pfx_dev_set_name+0x10/0x10 [ 368.867828][ T5356] ? __pfx_device_add+0x10/0x10 [ 368.869685][ T5356] ? mgmt_send_event_skb+0x2f2/0x460 [ 368.871714][ T5356] hci_conn_add_sysfs+0x17e/0x230 [ 368.873644][ T5356] le_conn_complete_evt+0xfc7/0x1cf0 [ 368.875631][ T5356] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 368.877645][ T5356] ? trace_contention_end+0xea/0x140 [ 368.879585][ T5356] ? __mutex_lock+0x1a6/0x9c0 [ 368.880945][ T5356] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 368.883019][ T5356] ? skb_pull_data+0x166/0x210 [ 368.884706][ T5356] hci_le_meta_evt+0x2e2/0x5d0 [ 368.886188][ T5356] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 368.887978][ T5356] hci_event_packet+0x666/0x1190 [ 368.889368][ T5356] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 368.890774][ T5356] ? __pfx_hci_event_packet+0x10/0x10 [ 368.892228][ T5356] ? mark_held_locks+0x9f/0xe0 [ 368.893662][ T5356] ? kcov_remote_start+0x3cf/0x6e0 [ 368.895241][ T5356] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.897239][ T5356] hci_rx_work+0x2c6/0x16c0 [ 368.898968][ T5356] ? lock_acquire+0x2f/0xb0 [ 368.900668][ T5356] ? process_one_work+0x8bb/0x1b30 [ 368.902626][ T5356] process_one_work+0x958/0x1b30 [ 368.904516][ T5356] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 368.906683][ T5356] ? __pfx_process_one_work+0x10/0x10 [ 368.908997][ T5356] ? assign_work+0x1a0/0x250 [ 368.910911][ T5356] worker_thread+0x6c8/0xf00 [ 368.912759][ T5356] ? __pfx_worker_thread+0x10/0x10 [ 368.914658][ T5356] kthread+0x2c1/0x3a0 [ 368.916196][ T5356] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.918170][ T5356] ? __pfx_kthread+0x10/0x10 [ 368.919952][ T5356] ret_from_fork+0x45/0x80 [ 368.921656][ T5356] ? __pfx_kthread+0x10/0x10 [ 368.923434][ T5356] ret_from_fork_asm+0x1a/0x30 [ 368.925286][ T5356] [ 368.931447][ T5356] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 368.936503][ T5356] Bluetooth: hci3: failed to register connection device [ 369.313528][T10081] netlink: 'syz.2.1214': attribute type 4 has an invalid length. [ 369.324990][T10081] netlink: 'syz.2.1214': attribute type 4 has an invalid length. [ 369.664579][T10091] lo: entered promiscuous mode [ 369.700068][T10088] lo: left promiscuous mode [ 370.567409][T10109] lo: entered promiscuous mode [ 370.637347][T10107] lo: left promiscuous mode [ 370.760806][T10112] lo: entered promiscuous mode [ 370.835831][T10110] lo: left promiscuous mode [ 371.009467][ T5356] Bluetooth: hci3: command 0x0405 tx timeout [ 371.154914][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.159930][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.193830][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.196231][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.222888][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.225341][T10123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.212123][T10142] lo: entered promiscuous mode [ 372.306738][T10140] lo: left promiscuous mode [ 372.662962][T10167] usb 2-1: USB disconnect, device number 3 [ 372.675816][T10162] lo: entered promiscuous mode [ 372.696790][T10144] lo: left promiscuous mode [ 372.791186][T10164] /dev/sr0: Can't open blockdev [ 372.849130][T10168] hub 2-0:1.0: USB hub found [ 372.863978][T10168] hub 2-0:1.0: 6 ports detected [ 372.928452][T10164] binder: 10154:10164 unknown command 0 [ 372.939441][T10164] binder: 10154:10164 ioctl c0306201 20000180 returned -22 [ 373.049704][ T5413] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 373.236865][ T5413] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 373.243119][ T5413] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 373.246669][ T5413] usb 2-1: Product: QEMU USB Tablet [ 373.249025][ T5413] usb 2-1: Manufacturer: QEMU [ 373.251204][ T5413] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 373.299013][ T5413] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input17 [ 373.388845][ T5413] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 373.987465][T10191] lo: entered promiscuous mode [ 374.057354][T10189] lo: left promiscuous mode [ 375.213876][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 375.576098][T10206] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1249'. [ 376.867276][T10226] lo: entered promiscuous mode [ 376.944891][T10224] lo: left promiscuous mode [ 377.259034][T10242] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 377.265317][T10242] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 378.060219][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.509732][T10255] ptrace attach of ""[10263] was attempted by "/syz-executor exec"[10255] [ 380.129636][ T5356] Bluetooth: hci3: command 0x0405 tx timeout [ 380.165339][T10278] libceph: resolve '. [ 380.165339][T10278] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 380.165339][T10278] ' (ret=-3): failed [ 380.218366][T10278] No control pipe specified [ 380.744930][T10283] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 380.751657][T10283] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 380.802051][T10286] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 380.857226][T10287] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 380.988189][T10295] overlayfs: cannot append lower layer [ 381.206528][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 381.213053][T10305] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1274'. [ 382.596777][T10316] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 382.692866][T10318] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 382.888598][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 382.915522][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.918193][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.249429][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 383.429571][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 383.444023][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 383.446632][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.449649][ T8] usb 5-1: Product: syz [ 383.450849][ T8] usb 5-1: Manufacturer: syz [ 383.452626][ T8] usb 5-1: SerialNumber: syz [ 383.457405][ T8] usb 5-1: config 0 descriptor?? [ 383.471223][ T8] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 383.887191][T10322] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1280'. [ 383.890325][T10331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1280'. [ 383.994091][ T8] pwc: Failed to set LED on/off time (-71) [ 383.996606][ T8] pwc: send_video_command error -71 [ 383.998486][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 384.001835][ T8] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 384.005974][ T8] usb 5-1: USB disconnect, device number 17 [ 384.435755][T10337] overlayfs: failed to resolve './file0': -2 [ 384.514441][T10337] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 384.523538][T10337] CIFS: Unable to determine destination address [ 384.663265][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 384.741650][T10345] lo: entered promiscuous mode [ 384.772842][T10346] syz.3.1287: attempt to access beyond end of device [ 384.772842][T10346] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 384.778360][T10346] syz.3.1287: attempt to access beyond end of device [ 384.778360][T10346] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 384.791416][T10346] Mount JFS Failure: -5 [ 384.793006][T10346] jfs_mount failed w/return code = -5 [ 384.807087][T10340] lo: left promiscuous mode [ 385.645033][T10354] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 385.941723][T10360] netlink: 'syz.2.1289': attribute type 4 has an invalid length. [ 385.952956][T10360] netlink: 'syz.2.1289': attribute type 4 has an invalid length. [ 386.118914][T10364] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 386.194761][T10364] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 386.196110][T10365] libceph: resolve '. [ 386.196110][T10365] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 386.196110][T10365] ' (ret=-3): failed [ 386.198538][T10365] No control pipe specified [ 387.169835][T10382] netlink: 'syz.0.1293': attribute type 4 has an invalid length. [ 387.182482][T10382] netlink: 'syz.0.1293': attribute type 4 has an invalid length. [ 389.167408][T10394] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 389.180555][T10394] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 389.259425][T10398] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 389.281609][T10398] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 389.705372][T10406] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 389.723345][T10406] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 389.933354][T10409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1305'. [ 389.971007][T10409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 391.147567][T10419] netlink: 'syz.2.1309': attribute type 4 has an invalid length. [ 391.173613][T10419] netlink: 'syz.2.1309': attribute type 4 has an invalid length. [ 391.352427][T10426] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1310'. [ 392.110024][T10429] netlink: 'syz.1.1311': attribute type 4 has an invalid length. [ 392.125830][T10429] netlink: 'syz.1.1311': attribute type 4 has an invalid length. [ 392.841872][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1314'. [ 393.375991][ T5369] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 393.471340][T10442] dccp_invalid_packet: P.Data Offset(0) too small [ 394.229422][ T1428] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 394.389505][ T1428] usb 6-1: Using ep0 maxpacket: 8 [ 394.395699][ T1428] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 394.398975][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.403713][ T1428] usb 6-1: Product: syz [ 394.405319][ T1428] usb 6-1: Manufacturer: syz [ 394.406980][ T1428] usb 6-1: SerialNumber: syz [ 394.412336][ T1428] usb 6-1: config 0 descriptor?? [ 394.416502][ T1428] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 394.719095][T10465] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1320'. [ 394.735070][T10459] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1320'. [ 394.830868][ T1428] pwc: Failed to set LED on/off time (-71) [ 394.840332][ T1428] pwc: send_video_command error -71 [ 394.841842][ T1428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 394.843853][ T1428] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 394.847886][ T1428] usb 6-1: USB disconnect, device number 12 [ 395.057757][T10471] validate_nla: 4 callbacks suppressed [ 395.057769][T10471] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 395.090475][T10471] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 395.224076][T10474] lo: entered promiscuous mode [ 395.312077][T10472] lo: left promiscuous mode [ 395.568794][T10481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1326'. [ 396.130892][T10484] libceph: resolve '. [ 396.130892][T10484] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 396.130892][T10484] ' (ret=-3): failed [ 396.179769][T10484] No control pipe specified [ 396.339578][T10486] netlink: 'syz.1.1329': attribute type 4 has an invalid length. [ 396.343902][T10486] netlink: 'syz.1.1329': attribute type 4 has an invalid length. [ 397.318223][T10502] netlink: 'syz.2.1332': attribute type 4 has an invalid length. [ 397.338224][T10502] netlink: 'syz.2.1332': attribute type 4 has an invalid length. [ 397.388575][T10503] lo: entered promiscuous mode [ 397.467902][T10499] lo: left promiscuous mode [ 398.584950][T10516] ptrace attach of "/syz-executor exec"[5351] was attempted by "/syz-executor exec"[10516] [ 399.114501][T10524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1338'. [ 399.327381][T10527] lo: entered promiscuous mode [ 399.377232][T10525] lo: left promiscuous mode [ 399.652081][T10536] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 399.672723][T10536] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 402.289804][T10567] lo: entered promiscuous mode [ 402.360276][T10565] lo: left promiscuous mode [ 402.455599][T10571] nbd: must specify at least one socket [ 402.465287][T10572] lo: entered promiscuous mode [ 402.551127][T10568] lo: left promiscuous mode [ 404.317304][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1352'. [ 404.398915][T10589] block nbd0: shutting down sockets [ 406.016519][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 406.414647][T10608] lo: entered promiscuous mode [ 406.496033][T10606] lo: left promiscuous mode [ 407.888943][T10623] netlink: 'syz.2.1365': attribute type 4 has an invalid length. [ 407.904321][T10623] netlink: 'syz.2.1365': attribute type 4 has an invalid length. [ 408.982382][T10630] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 409.063854][T10632] fuse: Unknown parameter '0xffffffffffffffff' [ 409.279019][T10642] lo: entered promiscuous mode [ 409.365814][T10637] lo: left promiscuous mode [ 409.502215][ T5369] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 409.506252][ T5369] CPU: 2 UID: 0 PID: 5369 Comm: kworker/u33:8 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 409.510092][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 409.514081][ T5369] Workqueue: hci2 hci_rx_work [ 409.515971][ T5369] Call Trace: [ 409.517346][ T5369] [ 409.518604][ T5369] dump_stack_lvl+0x16c/0x1f0 [ 409.520362][ T5369] sysfs_warn_dup+0x7f/0xa0 [ 409.521963][ T5369] sysfs_create_dir_ns+0x24d/0x2b0 [ 409.523768][ T5369] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.525845][ T5369] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.527729][ T5369] ? kobject_add_internal+0x12d/0x990 [ 409.529621][ T5369] ? do_raw_spin_unlock+0x172/0x230 [ 409.531441][ T5369] kobject_add_internal+0x2c8/0x990 [ 409.533258][ T5369] kobject_add+0x16f/0x240 [ 409.534840][ T5369] ? __pfx_kobject_add+0x10/0x10 [ 409.536582][ T5369] ? class_to_subsys+0x3e/0x160 [ 409.538293][ T5369] ? do_raw_spin_unlock+0x172/0x230 [ 409.540137][ T5369] ? kobject_put+0xab/0x5a0 [ 409.541744][ T5369] device_add+0x289/0x1a70 [ 409.543342][ T5369] ? __pfx_dev_set_name+0x10/0x10 [ 409.545104][ T5369] ? __pfx_device_add+0x10/0x10 [ 409.546816][ T5369] ? mgmt_send_event_skb+0x2f2/0x460 [ 409.548698][ T5369] hci_conn_add_sysfs+0x17e/0x230 [ 409.550471][ T5369] le_conn_complete_evt+0xfc7/0x1cf0 [ 409.552310][ T5369] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.554284][ T5369] ? trace_contention_end+0xea/0x140 [ 409.556135][ T5369] ? __mutex_lock+0x1a6/0x9c0 [ 409.557783][ T5369] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 409.559883][ T5369] ? skb_pull_data+0x166/0x210 [ 409.561534][ T5369] hci_le_meta_evt+0x2e2/0x5d0 [ 409.563239][ T5369] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.565544][ T5369] hci_event_packet+0x666/0x1190 [ 409.567248][ T5369] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.569136][ T5369] ? __pfx_hci_event_packet+0x10/0x10 [ 409.571098][ T5369] ? mark_held_locks+0x9f/0xe0 [ 409.572862][ T5369] ? kcov_remote_start+0x3cf/0x6e0 [ 409.574740][ T5369] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.576673][ T5369] hci_rx_work+0x2c6/0x16c0 [ 409.578352][ T5369] ? lock_acquire+0x2f/0xb0 [ 409.580038][ T5369] ? process_one_work+0x8bb/0x1b30 [ 409.581907][ T5369] process_one_work+0x958/0x1b30 [ 409.583760][ T5369] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 409.585812][ T5369] ? __pfx_process_one_work+0x10/0x10 [ 409.587793][ T5369] ? assign_work+0x1a0/0x250 [ 409.589497][ T5369] worker_thread+0x6c8/0xf00 [ 409.591212][ T5369] ? __kthread_parkme+0x148/0x220 [ 409.593058][ T5369] ? __pfx_worker_thread+0x10/0x10 [ 409.594949][ T5369] kthread+0x2c1/0x3a0 [ 409.596466][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.598374][ T5369] ? __pfx_kthread+0x10/0x10 [ 409.600087][ T5369] ret_from_fork+0x45/0x80 [ 409.601725][ T5369] ? __pfx_kthread+0x10/0x10 [ 409.603436][ T5369] ret_from_fork_asm+0x1a/0x30 [ 409.605210][ T5369] [ 409.607023][ T5369] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.612069][ T5369] Bluetooth: hci2: failed to register connection device [ 411.151330][T10654] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 411.216729][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'. [ 411.649435][ T5369] Bluetooth: hci2: command 0x0405 tx timeout [ 411.697540][T10668] lo: entered promiscuous mode [ 411.776847][T10667] lo: left promiscuous mode [ 412.782712][T10681] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 412.837693][T10681] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 413.728297][T10696] dccp_invalid_packet: P.Data Offset(0) too small [ 414.060457][T10704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1388'. [ 414.113446][T10705] lo: entered promiscuous mode [ 414.224238][T10702] lo: left promiscuous mode [ 414.566666][T10714] lo: entered promiscuous mode [ 414.647245][T10712] lo: left promiscuous mode [ 414.870474][T10719] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 414.880097][T10719] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 415.563597][T10725] lo: entered promiscuous mode [ 415.570221][T10724] lo: left promiscuous mode [ 415.708606][T10732] xt_hashlimit: max too large, truncated to 1048576 [ 415.711098][T10732] xt_hashlimit: overflow, try lower: 0/0 [ 415.766979][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 415.775898][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.781810][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.790759][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.801348][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.812692][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.822365][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 415.831991][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.842895][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 415.854619][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.864979][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.871313][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.878393][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.887296][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 415.895828][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.904474][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.916762][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.926978][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.936589][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.940408][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.943724][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.946412][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.949008][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.955667][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.958243][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.961648][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.964115][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.966541][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.968812][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.971800][T10735] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1398'. [ 415.971961][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.977220][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.980275][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.982888][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.985441][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.987892][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 415.999953][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 416.002222][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 416.005636][ T1428] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 416.015823][ T1428] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 416.157114][T10742] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.409397][ T5414] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 416.559352][ T5414] usb 7-1: Using ep0 maxpacket: 32 [ 416.563788][ T5414] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.567620][ T5414] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.571462][ T5414] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 416.575768][ T5414] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 416.580778][ T5414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.588270][ T5414] usb 7-1: config 0 descriptor?? [ 416.611810][ T5414] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 416.768849][T10747] lo: entered promiscuous mode [ 416.858305][T10745] lo: left promiscuous mode [ 417.414835][T10752] netlink: 'syz.3.1403': attribute type 4 has an invalid length. [ 417.427563][T10752] netlink: 'syz.3.1403': attribute type 4 has an invalid length. [ 417.983229][T10764] lo: entered promiscuous mode [ 418.078049][T10762] lo: left promiscuous mode [ 418.135313][ T1103] Bluetooth: hci4: Frame reassembly failed (-84) [ 418.216827][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1408'. [ 419.051161][ T30] usb 7-1: USB disconnect, device number 8 [ 419.156235][T10781] lo: entered promiscuous mode [ 419.247019][T10777] lo: left promiscuous mode [ 419.284256][T10787] netlink: 'syz.3.1412': attribute type 4 has an invalid length. [ 419.297027][T10787] netlink: 'syz.3.1412': attribute type 4 has an invalid length. [ 419.387744][ T5356] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 419.815315][T10803] lo: entered promiscuous mode [ 419.905114][T10800] lo: left promiscuous mode [ 420.047681][T10807] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 420.056436][T10807] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 420.129362][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 420.229222][T10813] lo: entered promiscuous mode [ 420.296216][T10811] lo: left promiscuous mode [ 420.364988][T10818] lo: entered promiscuous mode [ 420.454953][T10814] lo: left promiscuous mode [ 420.542437][T10822] tmpfs: Bad value for 'mpol' [ 421.201342][T10832] lo: entered promiscuous mode [ 421.277404][T10830] lo: left promiscuous mode [ 421.347817][T10834] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 421.373970][T10834] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 422.353830][T10847] lo: entered promiscuous mode [ 422.448779][T10845] lo: left promiscuous mode [ 422.919552][T10858] ieee802154 phy1 wpan1: encryption failed: -22 [ 423.478437][T10863] netlink: 'syz.2.1436': attribute type 4 has an invalid length. [ 423.514389][T10864] lo: entered promiscuous mode [ 423.533158][T10863] netlink: 'syz.2.1436': attribute type 4 has an invalid length. [ 423.596446][T10860] lo: left promiscuous mode [ 423.679772][T10877] lo: entered promiscuous mode [ 423.765931][T10871] lo: left promiscuous mode [ 424.568727][ T35] IPVS: starting estimator thread 0... [ 424.659476][T10891] IPVS: using max 35 ests per chain, 84000 per kthread [ 425.390193][T10902] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 425.397577][T10902] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 425.663825][T10908] lo: entered promiscuous mode [ 425.745628][T10906] lo: left promiscuous mode [ 425.781482][T10911] lo: entered promiscuous mode [ 425.850585][T10909] lo: left promiscuous mode [ 425.965691][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 425.968110][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 426.093425][T10918] binder: 10915:10918 ioctl c0306201 0 returned -14 [ 426.411179][T10927] dccp_close: ABORT with 32 bytes unread [ 426.644506][T10929] 9pnet_fd: Insufficient options for proto=fd [ 426.647004][T10932] netlink: 'syz.0.1456': attribute type 4 has an invalid length. [ 426.667945][T10932] netlink: 'syz.0.1456': attribute type 4 has an invalid length. [ 426.864392][T10942] lo: entered promiscuous mode [ 426.954643][T10938] lo: left promiscuous mode [ 427.055285][T10947] netlink: 'syz.1.1461': attribute type 4 has an invalid length. [ 427.070672][T10947] netlink: 'syz.1.1461': attribute type 4 has an invalid length. [ 427.085021][T10948] lo: entered promiscuous mode [ 427.168429][T10944] lo: left promiscuous mode [ 428.063879][T10965] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 428.078271][T10965] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 428.421049][T10968] wg2: entered allmulticast mode [ 428.453804][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1467'. [ 428.574370][T10973] lo: entered promiscuous mode [ 428.660786][T10971] lo: left promiscuous mode [ 428.808380][ T5369] Bluetooth: hci2: unexpected event 0x31 length: 23 > 6 [ 428.808412][ T5369] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 428.853879][T10977] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 428.856960][T10977] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 429.218997][T10987] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 429.813054][T10997] netlink: 'syz.2.1475': attribute type 4 has an invalid length. [ 430.182389][ T30] libceph: connect (1)[c::]:6789 error -101 [ 430.184571][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 430.449683][ T30] libceph: connect (1)[c::]:6789 error -101 [ 430.452317][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 430.779360][ T5369] Bluetooth: hci2: command 0x0405 tx timeout [ 430.961060][ T30] libceph: connect (1)[c::]:6789 error -101 [ 430.962745][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 430.964456][T11009] ceph: No mds server is up or the cluster is laggy [ 431.149742][ T39] kauditd_printk_skb: 877 callbacks suppressed [ 431.149754][ T39] audit: type=1326 audit(1728162111.465:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.0.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.189347][ T39] audit: type=1326 audit(1728162111.475:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.0.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.195807][ T39] audit: type=1326 audit(1728162111.485:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.0.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.206954][ T39] audit: type=1326 audit(1728162111.485:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.215990][ T39] audit: type=1326 audit(1728162111.485:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.224712][ T39] audit: type=1326 audit(1728162111.505:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.233239][ T39] audit: type=1326 audit(1728162111.515:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.242015][ T39] audit: type=1326 audit(1728162111.515:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.251618][ T39] audit: type=1326 audit(1728162111.515:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 431.259774][ T39] audit: type=1326 audit(1728162111.515:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 432.250214][T11030] lo: entered promiscuous mode [ 432.322934][T11027] lo: left promiscuous mode [ 432.768170][T11045] loop7: detected capacity change from 0 to 16384 [ 432.830538][T11045] blk_print_req_error: 7 callbacks suppressed [ 432.830556][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.834880][T11045] buffer_io_error: 7 callbacks suppressed [ 432.834887][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.838435][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.856137][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.893563][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.897247][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.905332][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.909654][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.914757][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.918592][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.922031][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.924573][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.927069][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.933324][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.936290][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.939676][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.943667][T11045] ldm_validate_partition_table(): Disk read failed. [ 432.947441][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.951633][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.956655][T11045] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.961574][T11045] Buffer I/O error on dev loop7, logical block 0, async page read [ 432.966625][T11045] Dev loop7: unable to read RDB block 0 [ 432.973162][T11045] loop7: unable to read partition table [ 432.977585][T11045] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 434.191680][T11052] validate_nla: 1 callbacks suppressed [ 434.191692][T11052] netlink: 'syz.3.1487': attribute type 4 has an invalid length. [ 434.261885][T11054] netlink: 'syz.3.1488': attribute type 4 has an invalid length. [ 434.280197][T11054] netlink: 'syz.3.1488': attribute type 4 has an invalid length. [ 434.512065][T11057] ------------[ cut here ]------------ [ 434.514135][T11057] no supported rates for sta 08:02:11:00:00:01 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10 [ 434.517289][T11057] WARNING: CPU: 3 PID: 11057 at net/mac80211/rate.c:380 __rate_control_send_low+0x6d9/0x800 [ 434.520026][T11057] Modules linked in: [ 434.521220][T11057] CPU: 3 UID: 0 PID: 11057 Comm: syz.3.1489 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 434.525525][T11057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.529085][T11057] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 434.530823][T11057] Code: a4 a0 d4 00 00 00 e8 26 0a 09 f7 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 e0 89 9d 8c e8 68 89 ca f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 94 52 6a f7 e9 e1 fb [ 434.535852][T11057] RSP: 0018:ffffc900032eed10 EFLAGS: 00010286 [ 434.537572][T11057] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90004d1a000 [ 434.539715][T11057] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 434.542052][T11057] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 434.544101][T11057] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000f [ 434.546134][T11057] R13: 0000000000000010 R14: 000000000000000c R15: dffffc0000000000 [ 434.548175][T11057] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56a5b40 [ 434.550535][T11057] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 434.552262][T11057] CR2: 00000000f739f158 CR3: 000000005d84e000 CR4: 0000000000352ef0 [ 434.554312][T11057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.556391][T11057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.559063][T11057] Call Trace: [ 434.560157][T11057] [ 434.560931][T11057] ? __warn+0xea/0x3d0 [ 434.562034][T11057] ? __rate_control_send_low+0x6d9/0x800 [ 434.563546][T11057] ? report_bug+0x3c0/0x580 [ 434.564738][T11057] ? handle_bug+0x54/0xa0 [ 434.565837][T11057] ? exc_invalid_op+0x17/0x50 [ 434.567306][T11057] ? asm_exc_invalid_op+0x1a/0x20 [ 434.569063][T11057] ? __warn_printk+0x1a6/0x350 [ 434.570862][T11057] ? __rate_control_send_low+0x6d9/0x800 [ 434.572808][T11057] rate_control_send_low+0x116/0x820 [ 434.574229][T11057] ? hlock_class+0x4e/0x130 [ 434.575457][T11057] rate_control_get_rate+0x1be/0x590 [ 434.576845][T11057] ieee80211_tx_h_rate_ctrl+0xa9c/0x1a20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.578313][T11057] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 434.580472][T11057] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 434.582583][T11057] ? sta_info_get+0x12d/0x340 [ 434.583928][T11057] ? __pfx_lock_release+0x10/0x10 [ 434.585249][T11057] ? trace_lock_acquire+0x14a/0x1d0 [ 434.586606][T11057] invoke_tx_handlers_late+0xd19/0x2b80 [ 434.588069][T11057] ? invoke_tx_handlers_early+0x663/0x2700 [ 434.589785][T11057] ieee80211_tx+0x306/0x420 [ 434.591386][T11057] ? __pfx_ieee80211_tx+0x10/0x10 [ 434.593012][T11057] ? ieee80211_skb_resize+0x22a/0x630 [ 434.594895][T11057] ? ieee80211_set_qos_hdr+0xba/0x3e0 [ 434.596716][T11057] ieee80211_xmit+0x30e/0x3e0 [ 434.598353][T11057] __ieee80211_tx_skb_tid_band+0x29b/0x700 [ 434.600423][T11057] ieee80211_tx_skb_tid+0x176/0x4f0 [ 434.602220][T11057] ieee80211_mgmt_tx+0x10e7/0x2290 [ 434.603779][T11057] cfg80211_mlme_mgmt_tx+0x7d0/0x1660 [ 434.605566][T11057] nl80211_tx_mgmt+0x7f9/0xd40 [ 434.607212][T11057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 434.609024][T11057] ? __pfx___mutex_lock+0x10/0x10 [ 434.610765][T11057] ? nl80211_pre_doit+0x1b0/0xb10 [ 434.612426][T11057] genl_family_rcv_msg_doit+0x202/0x2f0 [ 434.614300][T11057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.616411][T11057] ? bpf_lsm_capable+0x9/0x10 [ 434.618251][T11057] ? security_capable+0x7e/0x260 [ 434.620077][T11057] ? ns_capable+0xd7/0x110 [ 434.621435][T11057] genl_rcv_msg+0x565/0x800 [ 434.622626][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.623956][T11057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 434.625351][T11057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 434.626723][T11057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 434.628157][T11057] netlink_rcv_skb+0x165/0x410 [ 434.629469][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.630920][T11057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.632751][T11057] ? down_read+0xc9/0x330 [ 434.634131][T11057] ? __pfx_down_read+0x10/0x10 [ 434.635398][T11057] ? netlink_deliver_tap+0x1ae/0xcf0 [ 434.636771][T11057] genl_rcv+0x28/0x40 [ 434.638060][T11057] netlink_unicast+0x53c/0x7f0 [ 434.639777][T11057] ? __pfx_netlink_unicast+0x10/0x10 [ 434.641332][T11057] ? __phys_addr_symbol+0x30/0x80 [ 434.642654][T11057] ? __check_object_size+0x488/0x710 [ 434.644021][T11057] netlink_sendmsg+0x8b8/0xd70 [ 434.645411][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.647028][T11057] ? lock_acquire+0x2f/0xb0 [ 434.648432][T11057] ____sys_sendmsg+0x9ae/0xb40 [ 434.649940][T11057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.651667][T11057] ? get_compat_msghdr+0x11b/0x170 [ 434.653235][T11057] ? __pfx___lock_acquire+0x10/0x10 [ 434.655055][T11057] ___sys_sendmsg+0x135/0x1e0 [ 434.656998][T11057] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.658764][T11057] ? lock_acquire+0x2f/0xb0 [ 434.660361][T11057] ? __fget_files+0x40/0x3f0 [ 434.661919][T11057] ? fdget+0x176/0x210 [ 434.663306][T11057] __sys_sendmsg+0x117/0x1f0 [ 434.664867][T11057] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.666584][T11057] ? __ia32_sys_futex_time32+0x1da/0x460 [ 434.668478][T11057] __do_fast_syscall_32+0x73/0x120 [ 434.670253][T11057] do_fast_syscall_32+0x32/0x80 [ 434.671900][T11057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.674031][T11057] RIP: 0023:0xf73de579 [ 434.675420][T11057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.681857][T11057] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 434.684631][T11057] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000040 [ 434.687297][T11057] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.690166][T11057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.692813][T11057] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 434.695471][T11057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.698095][T11057] [ 434.699134][T11057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.701560][T11057] CPU: 3 UID: 0 PID: 11057 Comm: syz.3.1489 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 434.705112][T11057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.708676][T11057] Call Trace: [ 434.709792][T11057] [ 434.710795][T11057] dump_stack_lvl+0x3d/0x1f0 [ 434.712366][T11057] panic+0x71d/0x800 [ 434.713698][T11057] ? __pfx_panic+0x10/0x10 [ 434.715216][T11057] ? show_trace_log_lvl+0x29d/0x3d0 [ 434.716978][T11057] ? __rate_control_send_low+0x6d9/0x800 [ 434.718866][T11057] check_panic_on_warn+0xab/0xb0 [ 434.720538][T11057] __warn+0xf6/0x3d0 [ 434.721853][T11057] ? __rate_control_send_low+0x6d9/0x800 [ 434.723742][T11057] report_bug+0x3c0/0x580 [ 434.725197][T11057] handle_bug+0x54/0xa0 [ 434.726603][T11057] exc_invalid_op+0x17/0x50 [ 434.728140][T11057] asm_exc_invalid_op+0x1a/0x20 [ 434.729775][T11057] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 434.731860][T11057] Code: a4 a0 d4 00 00 00 e8 26 0a 09 f7 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 e0 89 9d 8c e8 68 89 ca f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 94 52 6a f7 e9 e1 fb [ 434.738256][T11057] RSP: 0018:ffffc900032eed10 EFLAGS: 00010286 [ 434.740284][T11057] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90004d1a000 [ 434.742952][T11057] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 434.745579][T11057] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 434.748225][T11057] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000f [ 434.750855][T11057] R13: 0000000000000010 R14: 000000000000000c R15: dffffc0000000000 [ 434.753491][T11057] ? __warn_printk+0x1a6/0x350 [ 434.755123][T11057] rate_control_send_low+0x116/0x820 [ 434.756890][T11057] ? hlock_class+0x4e/0x130 [ 434.758410][T11057] rate_control_get_rate+0x1be/0x590 [ 434.760203][T11057] ieee80211_tx_h_rate_ctrl+0xa9c/0x1a20 [ 434.762080][T11057] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 434.764345][T11057] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 434.766379][T11057] ? sta_info_get+0x12d/0x340 [ 434.767974][T11057] ? __pfx_lock_release+0x10/0x10 [ 434.769667][T11057] ? trace_lock_acquire+0x14a/0x1d0 [ 434.771418][T11057] invoke_tx_handlers_late+0xd19/0x2b80 [ 434.773282][T11057] ? invoke_tx_handlers_early+0x663/0x2700 [ 434.775256][T11057] ieee80211_tx+0x306/0x420 [ 434.776787][T11057] ? __pfx_ieee80211_tx+0x10/0x10 [ 434.778496][T11057] ? ieee80211_skb_resize+0x22a/0x630 [ 434.780328][T11057] ? ieee80211_set_qos_hdr+0xba/0x3e0 [ 434.782133][T11057] ieee80211_xmit+0x30e/0x3e0 [ 434.783736][T11057] __ieee80211_tx_skb_tid_band+0x29b/0x700 [ 434.785699][T11057] ieee80211_tx_skb_tid+0x176/0x4f0 [ 434.787456][T11057] ieee80211_mgmt_tx+0x10e7/0x2290 [ 434.789193][T11057] cfg80211_mlme_mgmt_tx+0x7d0/0x1660 [ 434.791016][T11057] nl80211_tx_mgmt+0x7f9/0xd40 [ 434.792640][T11057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 434.794411][T11057] ? __pfx___mutex_lock+0x10/0x10 [ 434.796130][T11057] ? nl80211_pre_doit+0x1b0/0xb10 [ 434.797817][T11057] genl_family_rcv_msg_doit+0x202/0x2f0 [ 434.799689][T11057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.801718][T11057] ? bpf_lsm_capable+0x9/0x10 [ 434.803320][T11057] ? security_capable+0x7e/0x260 [ 434.804979][T11057] ? ns_capable+0xd7/0x110 [ 434.806481][T11057] genl_rcv_msg+0x565/0x800 [ 434.808020][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.809718][T11057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 434.811519][T11057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 434.813294][T11057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 434.815137][T11057] netlink_rcv_skb+0x165/0x410 [ 434.816747][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.818432][T11057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.820214][T11057] ? down_read+0xc9/0x330 [ 434.821668][T11057] ? __pfx_down_read+0x10/0x10 [ 434.823294][T11057] ? netlink_deliver_tap+0x1ae/0xcf0 [ 434.825061][T11057] genl_rcv+0x28/0x40 [ 434.826409][T11057] netlink_unicast+0x53c/0x7f0 [ 434.828025][T11057] ? __pfx_netlink_unicast+0x10/0x10 [ 434.829806][T11057] ? __phys_addr_symbol+0x30/0x80 [ 434.831498][T11057] ? __check_object_size+0x488/0x710 [ 434.833283][T11057] netlink_sendmsg+0x8b8/0xd70 [ 434.834908][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.836682][T11057] ? lock_acquire+0x2f/0xb0 [ 434.838218][T11057] ____sys_sendmsg+0x9ae/0xb40 [ 434.839837][T11057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.841597][T11057] ? get_compat_msghdr+0x11b/0x170 [ 434.843331][T11057] ? __pfx___lock_acquire+0x10/0x10 [ 434.845078][T11057] ___sys_sendmsg+0x135/0x1e0 [ 434.846670][T11057] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.848418][T11057] ? lock_acquire+0x2f/0xb0 [ 434.849661][T11057] ? __fget_files+0x40/0x3f0 [ 434.850914][T11057] ? fdget+0x176/0x210 [ 434.852148][T11057] __sys_sendmsg+0x117/0x1f0 [ 434.853392][T11057] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.854772][T11057] ? __ia32_sys_futex_time32+0x1da/0x460 [ 434.856250][T11057] __do_fast_syscall_32+0x73/0x120 [ 434.857599][T11057] do_fast_syscall_32+0x32/0x80 [ 434.858905][T11057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.860558][T11057] RIP: 0023:0xf73de579 [ 434.861629][T11057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.866731][T11057] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 434.869283][T11057] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000040 [ 434.871341][T11057] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.873396][T11057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.875320][T11057] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 434.877523][T11057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.880185][T11057] [ 434.881799][T11057] Kernel Offset: disabled [ 434.883333][T11057] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:01:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000001720419 RBX=0000000000000000 RCX=ffffffff8b12f709 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12120 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cce88 R15=0000000000000000 RIP=ffffffff8b130aef RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d5008 CR3=00000000226a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000040 Opmask01=0000000000402000 Opmask02=0000000020000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe536df6e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b5e6c5f646e6573 5f000a30316e3020 5f65000a30303820 302f333a362e302b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000321fa78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc9000321fca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813ba068 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d18e0 CR3=0000000000934000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000dc3355 RBX=0000000000000002 RCX=ffffffff8b12f709 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12120 RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901cce88 R15=0000000000000000 RIP=ffffffff8b130aef RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7384f64 CR3=00000000548dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85034e45 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc900032ee678 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000037 R14=ffffffff85034de0 R15=0000000000000000 RIP=ffffffff85034e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f739f158 CR3=000000005d84e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000