last executing test programs: 5.578887813s ago: executing program 3 (id=1085): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000080)) 5.511085564s ago: executing program 3 (id=1086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 4.399305279s ago: executing program 1 (id=1091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 4.243910219s ago: executing program 3 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x161500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0xffff0000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0xffffffff, 0x4, 0x8, 0x7, 0xa, 0x101, 0x6, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x2, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x0, 0xfffffff6]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffd, 0x1]}, 0x8) read(r5, &(0x7f0000000cc0)=""/384, 0x180) 4.077309312s ago: executing program 0 (id=1093): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fb"], 0x830200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r2, 0x3, 0x4, 0xfffffffb) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/162, 0x1e, 0xa2, 0x1, 0x0, 0x10000, @value=r1}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)=@delqdisc={0xac, 0x25, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x10, 0xf}, {0xc, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0xac, 0x200, 0x5, 0x2, 0x10000005, 0x14000, 0x3}}, {0xa, 0x2, [0x1ff, 0xe, 0x48]}}, {{0x1c, 0x1, {0x1, 0xf, 0x3, 0x4, 0x1, 0x80, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0xf1d2]}}, {{0x1c, 0x1, {0x1f, 0x4, 0x8001, 0xb9, 0x2, 0x405a, 0x6, 0x8}}, {0x14, 0x2, [0x6e, 0x0, 0x0, 0x10, 0x7, 0x0, 0x3, 0x2]}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) ppoll(&(0x7f0000000400)=[{r3, 0x1}, {r1, 0x48}, {0xffffffffffffffff, 0x484}, {0xffffffffffffffff, 0xc040}, {r1, 0x401}, {r1, 0x2100}], 0x6, 0x0, &(0x7f00000004c0)={[0x1]}, 0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffd, 0x12) 4.021448096s ago: executing program 0 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x161500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0xffff0000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0xffffffff, 0x4, 0x8, 0x7, 0xa, 0x101, 0x6, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x2, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x0, 0xfffffff6]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffd, 0x1]}, 0x8) read(r5, &(0x7f0000000cc0)=""/384, 0x180) 3.759435879s ago: executing program 2 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x161500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0xffff0000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0xffffffff, 0x4, 0x8, 0x7, 0xa, 0x101, 0x6, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x2, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x0, 0xfffffff6]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffd, 0x1]}, 0x8) read(r5, &(0x7f0000000cc0)=""/384, 0x180) 3.553197999s ago: executing program 0 (id=1097): socket(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r1, 0x3, 0x0, 0x200000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/115, 0x73}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc41744800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.460694306s ago: executing program 1 (id=1098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 3.321269265s ago: executing program 3 (id=1099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 3.236141843s ago: executing program 2 (id=1100): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r1, 0x3, 0x0, 0x200000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 2.811838486s ago: executing program 0 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xf337ef5e5ef6a030}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd090000841a000005010000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000004000200000008000600e0000001000000000000000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.794264203s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x161500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0xffff0000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0xffffffff, 0x4, 0x8, 0x7, 0xa, 0x101, 0x6, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x2, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x0, 0xfffffff6]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r5, &(0x7f0000000cc0)=""/384, 0x180) 2.544080858s ago: executing program 0 (id=1103): socket(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r1, 0x3, 0x0, 0x200000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000014c0)=""/115, 0x73}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc41744800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.492264851s ago: executing program 1 (id=1104): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000080)) 2.420003544s ago: executing program 1 (id=1105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 2.306208815s ago: executing program 3 (id=1106): socket(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r1, 0x3, 0x0, 0x200000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc41744800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.993526066s ago: executing program 2 (id=1107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000080)) 1.293092732s ago: executing program 1 (id=1108): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc41744800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.188208257s ago: executing program 0 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x3, 0x0, 0x0, 0xee01, r5, 0x84}, 0x3, 0x9, 0x2, 0x7, r0, r0, 0x6}) 1.17402533s ago: executing program 3 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x161500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0xffff0000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0xffffffff, 0x4, 0x8, 0x7, 0xa, 0x101, 0x6, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x2, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x0, 0xfffffff6]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffd, 0x1]}, 0x8) read(r5, &(0x7f0000000cc0)=""/384, 0x180) 1.07044133s ago: executing program 2 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xf337ef5e5ef6a030}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd090000841a000005010000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000004000200000008000600e0000001000000000000000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) 610.082179ms ago: executing program 2 (id=1112): socket(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r1, 0x3, 0x0, 0x200000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc41744800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 1 (id=1113): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) splice(r1, &(0x7f0000000300)=0x3, 0xffffffffffffffff, 0x0, 0x7, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0dd2cf6c632b85cd07bc00000400000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/18, @ANYRES32=r0], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x2) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x33) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0005010000", @ANYRES32=0x0, @ANYBLOB="0315000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2404d808}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46268' (ED25519) to the list of known hosts. [ 48.454415][ T5924] cgroup: Unknown subsys name 'net' [ 48.594770][ T5924] cgroup: Unknown subsys name 'cpuset' [ 48.598784][ T5924] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.570661][ T5924] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.103769][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.106900][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.109726][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.110838][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.113255][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.115315][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.117037][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.119073][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.119864][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.120473][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.120698][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.121083][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.129741][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.132782][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.135808][ T5300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.137708][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.145491][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.148830][ T5300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.152160][ T5300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.155012][ T5300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.385571][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 53.445030][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.484156][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 53.548188][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 53.593264][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.595533][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.598000][ T5935] bridge_slave_0: entered allmulticast mode [ 53.601107][ T5935] bridge_slave_0: entered promiscuous mode [ 53.663258][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.665517][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.668781][ T5935] bridge_slave_1: entered allmulticast mode [ 53.671492][ T5935] bridge_slave_1: entered promiscuous mode [ 53.705918][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.708272][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.710557][ T5939] bridge_slave_0: entered allmulticast mode [ 53.714152][ T5939] bridge_slave_0: entered promiscuous mode [ 53.737480][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.745757][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.748602][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.751317][ T5939] bridge_slave_1: entered allmulticast mode [ 53.756009][ T5939] bridge_slave_1: entered promiscuous mode [ 53.814061][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.871232][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.875683][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.878694][ T5948] bridge_slave_0: entered allmulticast mode [ 53.881809][ T5948] bridge_slave_0: entered promiscuous mode [ 53.892895][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.898414][ T5935] team0: Port device team_slave_0 added [ 53.903712][ T5935] team0: Port device team_slave_1 added [ 53.906456][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.909507][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.918844][ T5948] bridge_slave_1: entered allmulticast mode [ 53.921853][ T5948] bridge_slave_1: entered promiscuous mode [ 53.951399][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.028536][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.056989][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.059203][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.068190][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.074994][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.078748][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.080974][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.083422][ T5944] bridge_slave_0: entered allmulticast mode [ 54.086229][ T5944] bridge_slave_0: entered promiscuous mode [ 54.090582][ T5939] team0: Port device team_slave_0 added [ 54.094321][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.096541][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.104657][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.122614][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.124894][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.127314][ T5944] bridge_slave_1: entered allmulticast mode [ 54.129944][ T5944] bridge_slave_1: entered promiscuous mode [ 54.145373][ T5939] team0: Port device team_slave_1 added [ 54.204626][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.228830][ T5948] team0: Port device team_slave_0 added [ 54.235109][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.238942][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.241779][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.252329][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.271322][ T5948] team0: Port device team_slave_1 added [ 54.286921][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.289149][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.297632][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.347558][ T5944] team0: Port device team_slave_0 added [ 54.353202][ T5935] hsr_slave_0: entered promiscuous mode [ 54.355564][ T5935] hsr_slave_1: entered promiscuous mode [ 54.377756][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.380680][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.390886][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.395834][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.398159][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.408192][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.414649][ T5944] team0: Port device team_slave_1 added [ 54.537102][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.539311][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.547604][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.557968][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.560194][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.569043][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.591061][ T5939] hsr_slave_0: entered promiscuous mode [ 54.593478][ T5939] hsr_slave_1: entered promiscuous mode [ 54.595645][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.597613][ T5939] Cannot create hsr debugfs directory [ 54.634126][ T5948] hsr_slave_0: entered promiscuous mode [ 54.636371][ T5948] hsr_slave_1: entered promiscuous mode [ 54.638468][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 54.640302][ T5948] Cannot create hsr debugfs directory [ 54.769912][ T5944] hsr_slave_0: entered promiscuous mode [ 54.773338][ T5944] hsr_slave_1: entered promiscuous mode [ 54.775410][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 54.777260][ T5944] Cannot create hsr debugfs directory [ 54.981798][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.988084][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.992291][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.999978][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.027820][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.032351][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.036579][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.043972][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.080952][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.085313][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.089741][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.097362][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.140450][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.145599][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.150186][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.154375][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.190707][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.202727][ T5940] Bluetooth: hci2: command tx timeout [ 55.202943][ T5300] Bluetooth: hci0: command tx timeout [ 55.205016][ T5941] Bluetooth: hci1: command tx timeout [ 55.212753][ T5941] Bluetooth: hci3: command tx timeout [ 55.219087][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.241214][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.245109][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.247530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.257149][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.263782][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.266071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.282694][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.287957][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.293271][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.295511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.306802][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.314148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.316456][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.319817][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.322529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.338647][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.340992][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.348230][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.358799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.361126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.375899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.379016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.417852][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.500500][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.533909][ T5935] veth0_vlan: entered promiscuous mode [ 55.538706][ T5935] veth1_vlan: entered promiscuous mode [ 55.553108][ T5935] veth0_macvtap: entered promiscuous mode [ 55.559567][ T5935] veth1_macvtap: entered promiscuous mode [ 55.585077][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.593770][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.597869][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.603579][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.613788][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.617067][ T103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.621962][ T103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.644495][ T103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.649002][ T103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.679424][ T5944] veth0_vlan: entered promiscuous mode [ 55.689733][ T5944] veth1_vlan: entered promiscuous mode [ 55.700417][ T5939] veth0_vlan: entered promiscuous mode [ 55.708767][ T5948] veth0_vlan: entered promiscuous mode [ 55.716229][ T5939] veth1_vlan: entered promiscuous mode [ 55.730613][ T5948] veth1_vlan: entered promiscuous mode [ 55.740667][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.744107][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.769397][ T5939] veth0_macvtap: entered promiscuous mode [ 55.773089][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.775609][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.779130][ T5948] veth0_macvtap: entered promiscuous mode [ 55.782727][ T5939] veth1_macvtap: entered promiscuous mode [ 55.785235][ T5944] veth0_macvtap: entered promiscuous mode [ 55.788903][ T5944] veth1_macvtap: entered promiscuous mode [ 55.793194][ T5948] veth1_macvtap: entered promiscuous mode [ 55.806198][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.814978][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.818749][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.826897][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.834584][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.842220][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.845976][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.848769][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.856246][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.860103][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862962][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874903][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.877705][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.886066][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.888813][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.905077][ T6021] vxcan0: tx address claim with different name [ 55.921877][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.925854][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.944123][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.951955][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959551][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.963093][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.982864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.986499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.989814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.004130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.006731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.023409][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.026052][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.084748][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.085467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.087275][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.090144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.103524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.129492][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.153313][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.367398][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.374140][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.384671][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.423150][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.587628][ T6042] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 56.642723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.689198][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 56.763708][ T6045] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.852402][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 56.854718][ T1113] ata1.00: irq_stat 0x40000000 [ 56.856243][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 56.858159][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 28 [ 56.858159][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 56.987554][ T1113] ata1.00: status: { DRDY ERR } [ 56.989772][ T1113] ata1.00: error: { ABRT } [ 56.991839][ T1113] ata1.00: device reported invalid CHS sector 0 [ 57.289765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.294076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.297891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.300764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.303776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.404530][ T6043] syzkaller1: entered promiscuous mode [ 57.406311][ T6043] syzkaller1: entered allmulticast mode [ 57.432144][ T5941] Bluetooth: hci2: command tx timeout [ 57.432192][ T5940] Bluetooth: hci3: command tx timeout [ 57.433913][ T5941] Bluetooth: hci1: command tx timeout [ 57.544748][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 57.546843][ T1113] ata1: failed to read log page 10h (errno=-5) [ 57.548901][ T1113] ata1.00: exception Emask 0x1 SAct 0x1 SErr 0x0 action 0x0 [ 57.551692][ T1113] ata1.00: irq_stat 0x40000000 [ 57.553426][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 57.555384][ T1113] ata1.00: cmd 61/08:00:06:09:00/00:00:00:00:00/40 tag 0 ncq dma 4096 out [ 57.555384][ T1113] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 57.560986][ T1113] ata1.00: status: { DRDY } [ 57.564538][ T1113] ata1.00: configured for UDMA/100 [ 57.566442][ T1113] ata1: EH complete [ 57.941437][ T6062] ======================================================= [ 57.941437][ T6062] WARNING: The mand mount option has been deprecated and [ 57.941437][ T6062] and is ignored by this kernel. Remove the mand [ 57.941437][ T6062] option from the mount to silence this warning. [ 57.941437][ T6062] ======================================================= [ 58.272225][ T6051] bridge0: port 3(erspan0) entered blocking state [ 58.274434][ T6051] bridge0: port 3(erspan0) entered disabled state [ 58.276700][ T6051] erspan0: entered allmulticast mode [ 58.279241][ T6051] erspan0: entered promiscuous mode [ 58.281259][ T6051] bridge0: port 3(erspan0) entered blocking state [ 58.283459][ T6051] bridge0: port 3(erspan0) entered forwarding state [ 58.298804][ T6051] erspan0: left allmulticast mode [ 58.301034][ T6051] erspan0: left promiscuous mode [ 58.303399][ T6051] bridge0: port 3(erspan0) entered disabled state [ 58.503655][ T6064] comedi comedi3: multiq3: I/O port conflict (0x9,16) [ 58.905732][ T6080] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 58.945462][ T6085] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 58.947667][ T6085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.957313][ T6085] vhci_hcd vhci_hcd.0: Device attached [ 59.442168][ T5940] Bluetooth: hci2: command tx timeout [ 59.452262][ T5940] Bluetooth: hci1: command tx timeout [ 59.532502][ T5940] Bluetooth: hci3: command tx timeout [ 59.776253][ T844] usb 38-1: SetAddress Request (2) to port 0 [ 59.778388][ T844] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.919909][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.081396][ T29] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 60.081476][ T29] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 60.081676][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 60.081817][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.081889][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.320255][ T29] usb 6-1: config 0 descriptor?? [ 60.354959][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 61.076729][ T6103] input: syz0 as /devices/virtual/input/input5 [ 61.173707][ T6086] vhci_hcd: connection reset by peer [ 61.176664][ T62] vhci_hcd: stop threads [ 61.178313][ T62] vhci_hcd: release socket [ 61.180024][ T62] vhci_hcd: disconnect device [ 61.352202][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.502433][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 61.507928][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 61.510946][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.513745][ T53] usb 7-1: Product: syz [ 61.515197][ T53] usb 7-1: Manufacturer: syz [ 61.520169][ T53] usb 7-1: SerialNumber: syz [ 61.530562][ T53] usb 7-1: config 0 descriptor?? [ 61.533043][ T5940] Bluetooth: hci1: command tx timeout [ 61.533086][ T5940] Bluetooth: hci2: command tx timeout [ 61.538436][ T53] hub 7-1:0.0: bad descriptor, ignoring hub [ 61.540479][ T53] hub 7-1:0.0: probe with driver hub failed with error -5 [ 61.602898][ T5941] Bluetooth: hci3: command tx timeout [ 62.148217][ T40] audit: type=1326 audit(1762855187.959:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.242219][ T40] audit: type=1326 audit(1762855187.959:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.266364][ T40] audit: type=1326 audit(1762855187.959:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.279277][ T40] audit: type=1326 audit(1762855187.969:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.287492][ T40] audit: type=1326 audit(1762855187.969:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.295655][ T40] audit: type=1326 audit(1762855187.969:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.303770][ T40] audit: type=1326 audit(1762855187.969:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.330096][ T40] audit: type=1326 audit(1762855187.969:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.331658][ T60] usb 6-1: USB disconnect, device number 2 [ 62.339315][ T40] audit: type=1326 audit(1762855187.969:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.357283][ T40] audit: type=1326 audit(1762855187.969:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.25" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 62.762560][ T60] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 62.917809][ T60] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.920508][ T60] usb 6-1: config 0 has no interface number 0 [ 62.932096][ T60] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 62.935523][ T60] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 62.938869][ T60] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.941678][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.976598][ T60] usb 6-1: config 0 descriptor?? [ 62.979594][ T6127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.990525][ T60] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 63.193427][ T6022] usb 6-1: USB disconnect, device number 3 [ 63.302392][ T6136] ALSA: mixer_oss: invalid OSS volume '' [ 63.315142][ T6136] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 63.317243][ T6136] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.319858][ T6136] vhci_hcd vhci_hcd.0: Device attached [ 63.382240][ T54] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 63.533979][ T54] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 63.537352][ T54] usb 5-1: config 0 has no interface number 0 [ 63.539898][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.544643][ T54] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 63.548732][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 63.552480][ T54] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 63.555866][ T54] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 63.559224][ T54] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.563359][ T54] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 63.566169][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.569815][ T54] usb 5-1: config 0 descriptor?? [ 63.571923][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.574351][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.579383][ T54] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 63.582620][ T60] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 63.787406][ T10] usb 5-1: USB disconnect, device number 2 [ 63.798516][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 63.873150][ T6141] netlink: 'syz.1.30': attribute type 32 has an invalid length. [ 63.876466][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 63.880163][ T6141] netlink: 'syz.1.30': attribute type 32 has an invalid length. [ 63.942829][ T6137] vhci_hcd: connection reset by peer [ 63.946541][ T94] vhci_hcd: stop threads [ 63.948416][ T94] vhci_hcd: release socket [ 63.950583][ T94] vhci_hcd: disconnect device [ 64.252730][ T54] usb 7-1: USB disconnect, device number 2 [ 64.686542][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 64.802223][ T844] usb 38-1: device descriptor read/8, error -110 [ 65.295178][ T844] usb usb38-port1: attempt power cycle [ 65.472184][ T843] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.606718][ T6175] netlink: 72 bytes leftover after parsing attributes in process `syz.3.37'. [ 65.646821][ T843] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 65.649654][ T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.652345][ T843] usb 5-1: Product: syz [ 65.653672][ T843] usb 5-1: Manufacturer: syz [ 65.655219][ T843] usb 5-1: SerialNumber: syz [ 65.658206][ T843] usb 5-1: config 0 descriptor?? [ 65.858878][ T6181] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 65.861545][ T6181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 65.865476][ T6181] vhci_hcd vhci_hcd.0: Device attached [ 65.869955][ T843] usb 5-1: USB disconnect, device number 3 [ 65.926446][ T844] usb usb38-port1: unable to enumerate USB device [ 65.939858][ T6182] vhci_hcd: connection closed [ 65.940161][ T94] vhci_hcd: stop threads [ 65.944462][ T94] vhci_hcd: release socket [ 65.946454][ T94] vhci_hcd: disconnect device [ 66.218657][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 66.221593][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 66.317983][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 66.782230][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.892164][ T6098] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.942135][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 66.945314][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.949529][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.953741][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.957045][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.961351][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.965194][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.022992][ T844] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.042142][ T6098] usb 5-1: Using ep0 maxpacket: 16 [ 67.045591][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.048943][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.051999][ T6098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 67.056217][ T6098] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 67.059016][ T6098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.063375][ T6098] usb 5-1: config 0 descriptor?? [ 67.175549][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 67.177005][ T844] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.177414][ T10] usbtmc 8-1:16.0: can't read capabilities [ 67.180216][ T844] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 67.185474][ T844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.188386][ T844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 67.191885][ T844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 67.196755][ T844] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.199678][ T844] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.203139][ T844] usb 7-1: Product: syz [ 67.204675][ T844] usb 7-1: Manufacturer: syz [ 67.209979][ T844] cdc_wdm 7-1:1.0: skipping garbage [ 67.211702][ T844] cdc_wdm 7-1:1.0: skipping garbage [ 67.212443][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 67.213645][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.215425][ T844] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 67.215435][ T844] cdc_wdm 7-1:1.0: Unknown control protocol [ 67.380269][ T844] usb 8-1: USB disconnect, device number 2 [ 67.482908][ T6098] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 67.499700][ T6098] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 67.502788][ T6098] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 67.679798][ T844] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 67.684666][ T29] usb 5-1: USB disconnect, device number 4 [ 67.688354][ T844] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 67.693399][ T844] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 67.697780][ T844] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 68.102655][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 68.102671][ T40] audit: type=1326 audit(1762855193.909:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.1.49" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 68.234191][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.257487][ T6216] autofs: Unknown parameter './file0' [ 68.402228][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.406516][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.410010][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.413784][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.417809][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.420616][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.425498][ T34] usb 8-1: config 0 descriptor?? [ 68.551303][ T6223] overlayfs: missing 'lowerdir' [ 68.712206][ T60] vhci_hcd: vhci_device speed not set [ 68.838804][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.843223][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.845653][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.847945][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.850305][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.852717][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.855153][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.857572][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.859948][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.862370][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.871830][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.096144][ T6022] usb 8-1: USB disconnect, device number 3 [ 69.530278][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 69.533615][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 69.812551][ T843] usb 7-1: USB disconnect, device number 3 [ 70.165655][ T6239] lo speed is unknown, defaulting to 1000 [ 70.169121][ T6239] lo speed is unknown, defaulting to 1000 [ 70.177678][ T6239] lo speed is unknown, defaulting to 1000 [ 70.193968][ T6239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.215658][ T6239] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.379812][ T6239] lo speed is unknown, defaulting to 1000 [ 70.383473][ T6239] lo speed is unknown, defaulting to 1000 [ 70.386041][ T6239] lo speed is unknown, defaulting to 1000 [ 70.388651][ T6239] lo speed is unknown, defaulting to 1000 [ 70.391187][ T6239] lo speed is unknown, defaulting to 1000 [ 70.414016][ T6236] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 71.058778][ T6248] input: syz0 as /devices/virtual/input/input7 [ 71.145261][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 71.253376][ T6258] syzkaller1: entered promiscuous mode [ 71.253410][ T6258] syzkaller1: entered allmulticast mode [ 71.592236][ T5983] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.672653][ T6274] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.742727][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 71.746504][ T5983] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.746527][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.746546][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.746564][ T5983] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.746594][ T5983] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.746611][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.955931][ T5983] usb 6-1: GET_CAPABILITIES returned 0 [ 71.955955][ T5983] usbtmc 6-1:16.0: can't read capabilities [ 72.159713][ T5983] usb 6-1: USB disconnect, device number 4 [ 72.840385][ T6297] lo speed is unknown, defaulting to 1000 [ 72.982125][ T6022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 73.132135][ T6022] usb 8-1: Using ep0 maxpacket: 8 [ 73.140768][ T6022] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.144066][ T6022] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.147346][ T6022] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.150537][ T6022] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.158058][ T6022] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.160872][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.374933][ T6022] usb 8-1: GET_CAPABILITIES returned 0 [ 73.376851][ T6022] usbtmc 8-1:16.0: can't read capabilities [ 73.592982][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.602248][ T6326] lo speed is unknown, defaulting to 1000 [ 73.606745][ T843] usb 8-1: USB disconnect, device number 4 [ 73.763361][ T5949] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.907577][ T6339] overlayfs: failed to get inode (-116) [ 73.910131][ T6339] overlayfs: failed to get inode (-116) [ 73.914216][ T6339] overlayfs: failed to get inode (-116) [ 73.916223][ T6339] overlayfs: failed to get inode (-116) [ 73.952658][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 73.961678][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.967520][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.971534][ T5949] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.976922][ T5949] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 73.980564][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.987926][ T5949] usb 7-1: config 0 descriptor?? [ 74.288602][ T6348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 74.290731][ T6348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 74.294232][ T6348] vhci_hcd vhci_hcd.0: Device attached [ 74.405140][ T6355] batman_adv: batadv0: Adding interface: dummy0 [ 74.407833][ T6355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.416279][ T6355] batman_adv: batadv0: Interface activated: dummy0 [ 74.425771][ T6355] batadv0: mtu less than device minimum [ 74.429112][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.434397][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.439467][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.444106][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.448694][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.453310][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.458027][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.462674][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.466998][ T6355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.471471][ T5949] hid_parser_main: 5 callbacks suppressed [ 74.471481][ T5949] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 74.471503][ T5949] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 74.471515][ T5949] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 74.471526][ T5949] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 74.471538][ T5949] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 74.475322][ T5949] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 74.495296][ T5949] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 74.495529][ T5949] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 74.562174][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 74.564393][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 74.569605][ T6358] mmap: syz.3.99 (6358) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.570697][ T6360] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 74.608363][ T6322] netlink: 504 bytes leftover after parsing attributes in process `syz.2.86'. [ 74.614309][ T6023] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 74.614897][ T6022] usb 7-1: USB disconnect, device number 4 [ 74.617761][ T6023] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 74.623027][ T6023] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 74.626423][ T6023] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 74.875858][ T6349] vhci_hcd: connection reset by peer [ 74.877891][ T1143] vhci_hcd: stop threads [ 74.879370][ T1143] vhci_hcd: release socket [ 74.880831][ T1143] vhci_hcd: disconnect device [ 75.496277][ T6381] evm: overlay not supported [ 75.592176][ T844] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 75.743985][ T844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 75.748531][ T844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 75.753086][ T844] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.756660][ T844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.762299][ T6377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.762988][ T6022] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.765242][ T6377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.768877][ T844] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.926120][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.928462][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.933222][ T6022] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 75.937292][ T6022] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.940072][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.943877][ T6022] usb 6-1: config 0 descriptor?? [ 75.947600][ T6022] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 75.975343][ T6023] usb 7-1: USB disconnect, device number 5 [ 76.722194][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 76.853111][ T6414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 76.855937][ T6414] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.860879][ T6414] vhci_hcd vhci_hcd.0: Device attached [ 77.094642][ T6431] netlink: 'syz.0.122': attribute type 12 has an invalid length. [ 77.142118][ T6135] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.152257][ T6204] usb 44-1: SetAddress Request (2) to port 0 [ 77.155207][ T6204] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.302096][ T6135] usb 7-1: Using ep0 maxpacket: 8 [ 77.305118][ T6135] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.307227][ T6135] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.310169][ T6135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.314705][ T6135] usb 7-1: config 0 descriptor?? [ 77.441377][ T6415] vhci_hcd: connection reset by peer [ 77.444429][ T1143] vhci_hcd: stop threads [ 77.445935][ T1143] vhci_hcd: release socket [ 77.447619][ T1143] vhci_hcd: disconnect device [ 77.948213][ T6135] usbhid 7-1:0.0: can't add hid device: -71 [ 77.950887][ T6135] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 77.954882][ T6135] usb 7-1: USB disconnect, device number 6 [ 78.272163][ T843] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.422182][ T843] usb 5-1: Using ep0 maxpacket: 32 [ 78.426242][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.431681][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.436000][ T843] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 78.439725][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.445193][ T843] usb 5-1: config 0 descriptor?? [ 78.548972][ T6135] usb 6-1: USB disconnect, device number 5 [ 78.858633][ T843] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 79.117162][ T6135] usb 5-1: USB disconnect, device number 6 [ 79.434099][ T6457] netlink: 'syz.1.132': attribute type 12 has an invalid length. [ 79.603543][ T29] usb 40-1: device descriptor read/8, error -110 [ 79.872269][ T844] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.992186][ T6135] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.012831][ T29] usb usb40-port1: attempt power cycle [ 80.033346][ T844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.036469][ T844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 80.041352][ T844] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.044614][ T844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.047845][ T844] usb 6-1: Product: syz [ 80.049652][ T844] usb 6-1: Manufacturer: syz [ 80.051541][ T844] usb 6-1: SerialNumber: syz [ 80.055810][ T844] usb 6-1: config 0 descriptor?? [ 80.143351][ T6135] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 80.146074][ T6135] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.150099][ T6135] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 80.153031][ T6135] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 80.155516][ T6135] usb 8-1: Manufacturer: syz [ 80.159823][ T6135] usb 8-1: config 0 descriptor?? [ 80.212162][ T6135] rc_core: IR keymap rc-hauppauge not found [ 80.214195][ T6135] Registered IR keymap rc-empty [ 80.216889][ T6135] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 80.221423][ T6135] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 80.296917][ T844] usb 6-1: USB disconnect, device number 6 [ 80.370573][ T6098] usb 8-1: USB disconnect, device number 5 [ 80.573257][ T29] usb usb40-port1: unable to enumerate USB device [ 81.056140][ T842] cfg80211: failed to load regulatory.db [ 81.148550][ T6502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 81.150756][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.154530][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 81.423380][ T6098] usb 42-1: SetAddress Request (2) to port 0 [ 81.429375][ T6098] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.747404][ T6503] vhci_hcd: connection reset by peer [ 81.750886][ T46] vhci_hcd: stop threads [ 81.752755][ T46] vhci_hcd: release socket [ 81.754264][ T46] vhci_hcd: disconnect device [ 82.242338][ T6204] usb 44-1: device descriptor read/8, error -110 [ 82.641593][ T6536] lo speed is unknown, defaulting to 1000 [ 82.652636][ T40] audit: type=1326 audit(1762855208.469:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.2.155" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0 [ 82.717507][ T6204] usb usb44-port1: attempt power cycle [ 82.830212][ T6545] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 82.946713][ T6536] autofs: Unknown parameter './file0' [ 83.291621][ T6204] usb usb44-port1: unable to enumerate USB device [ 84.362158][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.513300][ T54] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.517556][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.521847][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.525833][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 84.531660][ T54] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 84.535015][ T54] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 84.537544][ T54] usb 6-1: Manufacturer: syz [ 84.540245][ T54] usb 6-1: config 0 descriptor?? [ 84.949701][ T54] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 84.955238][ T54] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 85.312484][ T54] usb 6-1: USB disconnect, device number 7 [ 85.510746][ T6586] lo speed is unknown, defaulting to 1000 [ 85.531780][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 85.537744][ T6588] Zero length message leads to an empty skb [ 85.752400][ T29] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 85.923729][ T29] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.926358][ T29] usb 8-1: config 0 has no interface number 0 [ 85.928560][ T29] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.938736][ T29] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 85.953677][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.956805][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.960881][ T29] usb 8-1: config 0 descriptor?? [ 85.964005][ T6584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.970097][ T29] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 86.177948][ T29] usb 8-1: USB disconnect, device number 6 [ 86.482304][ T6098] usb 42-1: device descriptor read/8, error -110 [ 86.872899][ T6098] usb usb42-port1: attempt power cycle [ 87.023253][ T6616] input: syz1 as /devices/virtual/input/input10 [ 87.040093][ T40] audit: type=1326 audit(1762855212.849:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.3.183" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x0 [ 87.044352][ T6614] lo speed is unknown, defaulting to 1000 [ 87.301165][ T6614] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 87.306263][ T6614] autofs: Unknown parameter './file0' [ 87.464016][ T6098] usb usb42-port1: unable to enumerate USB device [ 89.324490][ T6642] orangefs_devreq_write_iter: userspace claims version42, minimum version required: 20903. [ 89.368568][ T6648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 89.370600][ T6648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.374318][ T6648] vhci_hcd vhci_hcd.0: Device attached [ 89.416373][ T6652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.682144][ T6204] usb 40-1: SetAddress Request (6) to port 0 [ 89.684236][ T6204] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 89.710541][ T6135] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 89.731677][ T6662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.892090][ T6135] usb 7-1: Using ep0 maxpacket: 8 [ 89.895055][ T6135] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.898435][ T6135] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.901442][ T6135] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.904838][ T6135] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.908909][ T6135] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.911709][ T6135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.104064][ T6649] vhci_hcd: connection reset by peer [ 90.106004][ T1148] vhci_hcd: stop threads [ 90.107471][ T1148] vhci_hcd: release socket [ 90.109079][ T1148] vhci_hcd: disconnect device [ 90.125613][ T6135] usb 7-1: GET_CAPABILITIES returned 0 [ 90.127407][ T6135] usbtmc 7-1:16.0: can't read capabilities [ 90.331124][ T6024] usb 7-1: USB disconnect, device number 7 [ 90.788961][ T6671] syzkaller0: entered promiscuous mode [ 90.790852][ T6671] syzkaller0: entered allmulticast mode [ 90.873566][ T40] audit: type=1804 audit(1762855216.689:85): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.206" name="/newroot/53/file1" dev="fuse" ino=1 res=1 errno=0 [ 90.966985][ T6681] lo speed is unknown, defaulting to 1000 [ 92.453523][ T6733] binder: 6731:6733 ioctl c0306201 0 returned -14 [ 92.458422][ T6733] binder: 6731:6733 ioctl c0306201 80000680 returned -14 [ 92.496370][ T6737] lo speed is unknown, defaulting to 1000 [ 92.622483][ T6745] overlayfs: failed to clone upperpath [ 93.923938][ T6779] overlayfs: failed to clone upperpath [ 94.176385][ T6749] net_ratelimit: 10 callbacks suppressed [ 94.176398][ T6749] Set syz1 is full, maxelem 65536 reached [ 94.194812][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 94.451758][ T6818] 9pnet_fd: Insufficient options for proto=fd [ 94.738904][ T6204] usb 40-1: device descriptor read/8, error -110 [ 94.871272][ T6831] vivid-002: disconnect [ 94.895146][ T40] audit: type=1326 audit(1762855220.699:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.903531][ T40] audit: type=1326 audit(1762855220.699:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.910406][ T40] audit: type=1326 audit(1762855220.699:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.917713][ T40] audit: type=1326 audit(1762855220.699:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.925742][ T40] audit: type=1326 audit(1762855220.699:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.939504][ T40] audit: type=1326 audit(1762855220.699:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.946245][ T40] audit: type=1326 audit(1762855220.699:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.953104][ T40] audit: type=1326 audit(1762855220.699:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 94.959915][ T40] audit: type=1326 audit(1762855220.699:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.255" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 95.135156][ T6204] usb usb40-port1: attempt power cycle [ 95.433355][ T5941] Bluetooth: Unexpected continuation frame (len 18) [ 95.605891][ T6850] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.259'. [ 95.609021][ T6847] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.259'. [ 95.637949][ T6829] vivid-002: reconnect [ 95.720544][ T6204] usb usb40-port1: unable to enumerate USB device [ 95.777408][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 96.944675][ T6911] tipc: Enabling of bearer rejected, failed to enable media [ 97.140709][ T6923] syzkaller0: entered promiscuous mode [ 97.143083][ T6923] syzkaller0: entered allmulticast mode [ 97.228924][ T6918] IPv6: NLM_F_REPLACE set, but no existing node found! [ 98.377923][ T6939] syzkaller0: entered promiscuous mode [ 98.380595][ T6939] syzkaller0: entered allmulticast mode [ 99.931964][ T6980] syzkaller0: entered promiscuous mode [ 99.934049][ T6980] syzkaller0: entered allmulticast mode [ 102.191705][ T7028] netlink: 176 bytes leftover after parsing attributes in process `syz.0.320'. [ 103.321894][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 103.660667][ T7041] tipc: Enabling of bearer rejected, failed to enable media [ 104.569501][ T7057] tipc: Started in network mode [ 104.572291][ T7057] tipc: Node identity 2279fd0076d9, cluster identity 4711 [ 104.575352][ T7057] tipc: Enabled bearer , priority 0 [ 104.579946][ T7057] syzkaller0: entered promiscuous mode [ 104.582258][ T7057] syzkaller0: entered allmulticast mode [ 104.602164][ T7057] tipc: Resetting bearer [ 104.610045][ T7056] tipc: Resetting bearer [ 104.619059][ T7056] tipc: Disabling bearer [ 105.210473][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.213592][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.277769][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.284995][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.368660][ T1148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.373247][ T6023] lo speed is unknown, defaulting to 1000 [ 105.376039][ T1148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.379845][ T6023] syz0: Port: 1 Link DOWN [ 105.382196][ T1148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.386083][ T1148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.536357][ T7085] lo speed is unknown, defaulting to 1000 [ 105.712940][ T7090] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 106.551630][ T7101] overlayfs: failed to resolve './file0': -2 [ 107.347512][ T5941] Bluetooth: hci2: Malformed LE Event: 0x1b [ 111.764178][ T7173] netlink: 196 bytes leftover after parsing attributes in process `syz.0.365'. [ 111.767154][ T7173] netlink: 196 bytes leftover after parsing attributes in process `syz.0.365'. [ 111.890670][ T7177] tipc: Enabling of bearer rejected, failed to enable media [ 113.648584][ T7197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.370'. [ 114.028509][ T7205] loop6: detected capacity change from 0 to 63 [ 114.035374][ T7207] syz_tun: entered allmulticast mode [ 114.036460][ T6173] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.040939][ T6173] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.044885][ T6173] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.048341][ T6173] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.051234][ T6173] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.091986][ T7203] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.095365][ T7203] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.097962][ T7203] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.100895][ T7203] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.104230][ T7203] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.864148][ T7206] syz_tun: left allmulticast mode [ 114.890141][ T7224] usb 1-1: USB disconnect, device number 2 [ 115.841223][ T7247] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 115.841223][ T7247] program syz.3.384 not setting count and/or reply_len properly [ 116.935819][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 116.935831][ T40] audit: type=1326 audit(1762855242.689:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 116.958995][ T40] audit: type=1326 audit(1762855242.699:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 116.978051][ T40] audit: type=1326 audit(1762855242.699:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 116.987348][ T40] audit: type=1326 audit(1762855242.699:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 116.998857][ T40] audit: type=1326 audit(1762855242.699:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.011816][ T40] audit: type=1326 audit(1762855242.699:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.022142][ T40] audit: type=1326 audit(1762855242.699:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.030050][ T40] audit: type=1326 audit(1762855242.699:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.042583][ T40] audit: type=1326 audit(1762855242.699:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.049385][ T40] audit: type=1326 audit(1762855242.699:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 117.708439][ T7263] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.315252][ T7305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 120.317855][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.349393][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 120.602445][ T6098] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 120.932140][ T7306] vhci_hcd: connection reset by peer [ 120.933991][ T46] vhci_hcd: stop threads [ 120.935475][ T46] vhci_hcd: release socket [ 120.937114][ T46] vhci_hcd: disconnect device [ 120.967866][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.970347][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.015628][ T7323] capability: warning: `syz.2.404' uses deprecated v2 capabilities in a way that may be insecure [ 121.737343][ T7336] overlayfs: missing 'lowerdir' [ 121.887787][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 122.586081][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.596563][ T7347] bond0: (slave rose0): Enslaving as an active interface with an up link [ 122.708766][ T7353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 123.565196][ T7380] netlink: 72 bytes leftover after parsing attributes in process `syz.0.412'. [ 124.368805][ T7384] 9pnet_fd: Insufficient options for proto=fd [ 124.553582][ T7399] nfs: Unknown parameter 'text¶' [ 125.031987][ T7408] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.743303][ T7423] 9pnet_fd: Insufficient options for proto=fd [ 125.832184][ T6098] vhci_hcd: vhci_device speed not set [ 126.132604][ T7425] random: crng reseeded on system resumption [ 126.139366][ T7425] warning: `syz.1.421' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.245700][ T7428] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 126.249025][ T7428] overlayfs: failed to look up (tracing) for ino (-66) [ 131.050797][ T7479] syz.3.440 (7479) used greatest stack depth: 17912 bytes left [ 133.855152][ T7517] 9pnet_fd: Insufficient options for proto=fd [ 134.422880][ T7534] syzkaller0: entered promiscuous mode [ 134.424715][ T7534] syzkaller0: entered allmulticast mode [ 134.646155][ T7539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 134.996914][ T7546] overlayfs: failed to clone upperpath [ 137.364081][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.366689][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.547050][ T7585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 137.549462][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.552268][ T7585] vhci_hcd vhci_hcd.0: Device attached [ 137.581980][ T7586] vhci_hcd: connection closed [ 137.592908][ T63] vhci_hcd: stop threads [ 137.596896][ T63] vhci_hcd: release socket [ 137.598316][ T63] vhci_hcd: disconnect device [ 139.859135][ T7616] lo speed is unknown, defaulting to 1000 [ 141.840110][ T7656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 141.842698][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.845597][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 142.262124][ T7657] vhci_hcd: connection closed [ 142.262215][ T13] vhci_hcd: stop threads [ 142.265761][ T13] vhci_hcd: release socket [ 142.267788][ T13] vhci_hcd: disconnect device [ 142.287002][ T53] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 142.292715][ T53] usb 43-1: enqueue for inactive port 0 [ 142.374668][ T53] vhci_hcd: vhci_device speed not set [ 142.612663][ T842] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.772173][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 142.778975][ T842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.786367][ T842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.792898][ T842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 142.796355][ T842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 142.817810][ T842] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.826597][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.840805][ T842] hub 6-1:1.0: bad descriptor, ignoring hub [ 142.849995][ T842] hub 6-1:1.0: probe with driver hub failed with error -5 [ 142.859398][ T842] cdc_wdm 6-1:1.0: skipping garbage [ 142.866946][ T842] cdc_wdm 6-1:1.0: skipping garbage [ 142.876213][ T842] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 142.880397][ T842] cdc_wdm 6-1:1.0: Unknown control protocol [ 143.695744][ T7662] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 143.702733][ T7662] usb 6-1: device reset changed ep0 maxpacket size! [ 143.708673][ T6204] usb 6-1: USB disconnect, device number 8 [ 144.023432][ T6204] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.303447][ T6204] usb 6-1: unable to get BOS descriptor or descriptor too short [ 144.307070][ T6204] usb 6-1: config 0 interface 0 has no altsetting 0 [ 144.312743][ T6204] usb 6-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 144.318589][ T6204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.324440][ T6204] usb 6-1: Product: syz [ 144.327568][ T6204] usb 6-1: Manufacturer: syz [ 144.330683][ T6204] usb 6-1: SerialNumber: syz [ 144.339792][ T6204] usb 6-1: config 0 descriptor?? [ 144.769532][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.775451][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.780314][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.784229][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.789159][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.792737][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.987144][ T6204] snd_usb_podhd 6-1:0.0: Line 6 POD HDDESKTOP found [ 144.990681][ T6204] snd_usb_podhd 6-1:0.0: set_interface failed [ 145.182281][ T6204] snd_usb_podhd 6-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 145.192135][ T6204] snd_usb_podhd 6-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 145.199841][ T6204] usb 6-1: USB disconnect, device number 9 [ 145.491147][ T7693] bridge1: entered allmulticast mode [ 145.505307][ T7693] ªªªªª»: renamed from hsr0 (while UP) [ 146.385495][ T7707] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.650882][ T7719] lo speed is unknown, defaulting to 1000 [ 146.816505][ T7717] openvswitch: netlink: Missing valid actions attribute. [ 146.819497][ T7717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.228180][ T7739] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 148.230289][ T7739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 148.232977][ T7739] vhci_hcd vhci_hcd.0: Device attached [ 148.433201][ T7745] binder: 7742:7745 ioctl 0 0 returned -22 [ 148.510301][ T7740] vhci_hcd: connection closed [ 148.510523][ T94] vhci_hcd: stop threads [ 148.514156][ T94] vhci_hcd: release socket [ 148.516415][ T94] vhci_hcd: disconnect device [ 148.532603][ T6204] usb 40-1: enqueue for inactive port 0 [ 148.637678][ T7746] fuse: Unknown parameter '0x000000000000000400000000000000000004' [ 149.437965][ T7752] bridge0: port 3(syz_tun) entered blocking state [ 149.440811][ T7752] bridge0: port 3(syz_tun) entered disabled state [ 149.443242][ T7752] syz_tun: entered allmulticast mode [ 149.446099][ T7752] syz_tun: entered promiscuous mode [ 149.448561][ T7752] bridge0: port 3(syz_tun) entered blocking state [ 149.450635][ T7752] bridge0: port 3(syz_tun) entered forwarding state [ 149.552741][ T6204] usb usb40-port1: attempt power cycle [ 149.677487][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 149.909732][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 150.114845][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 150.117875][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 150.221906][ T6204] usb usb40-port1: unable to enumerate USB device [ 151.247473][ T7788] binder: 7778:7788 ioctl 0 80000040 returned -22 [ 151.253466][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.256462][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.497492][ T7792] vlan2: entered allmulticast mode [ 151.500468][ T7792] hsr_slave_1: entered allmulticast mode [ 152.476455][ T7806] lo speed is unknown, defaulting to 1000 [ 153.207267][ T7819] overlayfs: failed to clone upperpath [ 153.216562][ T7820] binder: 7812:7820 ioctl 0 0 returned -22 [ 153.287674][ T7822] fuse: Unknown parameter '0x000000000000000400000000000000000004' [ 153.847676][ T7829] 9pnet_virtio: no channels available for device syz [ 155.095138][ T7848] lo speed is unknown, defaulting to 1000 [ 155.662313][ T94] Bluetooth: (null): Invalid header checksum [ 155.664474][ T94] Bluetooth: (null): Invalid header checksum [ 155.759897][ T7858] bridge0: port 3(syz_tun) entered blocking state [ 155.763186][ T7858] bridge0: port 3(syz_tun) entered disabled state [ 155.766326][ T7858] syz_tun: entered allmulticast mode [ 155.772100][ T7858] syz_tun: entered promiscuous mode [ 155.774715][ T103] Bluetooth: (null): Invalid header checksum [ 155.774879][ T7858] bridge0: port 3(syz_tun) entered blocking state [ 155.779999][ T7858] bridge0: port 3(syz_tun) entered forwarding state [ 155.882644][ T103] Bluetooth: (null): Invalid header checksum [ 155.992698][ T103] Bluetooth: (null): Invalid header checksum [ 156.748997][ T7877] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 157.141137][ T7878] sp0: Synchronizing with TNC [ 157.854360][ T7894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.542'. [ 159.746510][ T7917] bridge1: entered allmulticast mode [ 159.756254][ T7917] ªªªªª»: renamed from hsr0 [ 159.762089][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 160.044184][ T7923] syz_tun: left allmulticast mode [ 160.045815][ T7923] syz_tun: left promiscuous mode [ 160.047516][ T7923] bridge0: port 3(syz_tun) entered disabled state [ 160.068047][ T7923] bridge_slave_1: left allmulticast mode [ 160.072746][ T7923] bridge_slave_1: left promiscuous mode [ 160.080171][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.110791][ T7923] bridge_slave_0: left allmulticast mode [ 160.242198][ T7923] bridge_slave_0: left promiscuous mode [ 160.244646][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.363471][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 160.652734][ T7924] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 161.371387][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 161.371436][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 161.371460][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.371472][ T5941] Workqueue: hci2 hci_rx_work [ 161.371497][ T5941] Call Trace: [ 161.371503][ T5941] [ 161.371510][ T5941] dump_stack_lvl+0x16c/0x1f0 [ 161.371536][ T5941] sysfs_warn_dup+0x7f/0xa0 [ 161.371559][ T5941] sysfs_create_dir_ns+0x24b/0x2b0 [ 161.371582][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 161.371603][ T5941] ? find_held_lock+0x2b/0x80 [ 161.371627][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 161.371646][ T5941] kobject_add_internal+0x2c4/0x9b0 [ 161.371676][ T5941] kobject_add+0x16e/0x240 [ 161.371701][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 161.371727][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 161.371743][ T5941] ? kobject_put+0xab/0x5a0 [ 161.371772][ T5941] device_add+0x288/0x1aa0 [ 161.371798][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 161.371816][ T5941] ? __pfx_device_add+0x10/0x10 [ 161.371843][ T5941] ? mgmt_send_event_skb+0x2fb/0x460 [ 161.371870][ T5941] hci_conn_add_sysfs+0x17e/0x230 [ 161.371894][ T5941] le_conn_complete_evt+0x1260/0x2150 [ 161.371932][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 161.371950][ T5941] ? hci_event_packet+0x459/0x11c0 [ 161.371976][ T5941] hci_le_conn_complete_evt+0x23c/0x370 [ 161.372001][ T5941] hci_le_meta_evt+0x357/0x5e0 [ 161.372035][ T5941] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 161.372062][ T5941] hci_event_packet+0x685/0x11c0 [ 161.372082][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 161.372105][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 161.372128][ T5941] ? kcov_remote_start+0x3c9/0x6d0 [ 161.372147][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.372177][ T5941] hci_rx_work+0x2c5/0x16b0 [ 161.372200][ T5941] ? rcu_is_watching+0x12/0xc0 [ 161.372232][ T5941] process_one_work+0x9cf/0x1b70 [ 161.372273][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 161.372311][ T5941] ? assign_work+0x1a0/0x250 [ 161.372342][ T5941] worker_thread+0x6c8/0xf10 [ 161.372372][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 161.372390][ T5941] kthread+0x3c5/0x780 [ 161.372417][ T5941] ? __pfx_kthread+0x10/0x10 [ 161.372446][ T5941] ? rcu_is_watching+0x12/0xc0 [ 161.372465][ T5941] ? __pfx_kthread+0x10/0x10 [ 161.372492][ T5941] ret_from_fork+0x675/0x7d0 [ 161.372519][ T5941] ? __pfx_kthread+0x10/0x10 [ 161.372546][ T5941] ret_from_fork_asm+0x1a/0x30 [ 161.372604][ T5941] [ 161.373417][ T5941] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 161.373454][ T5941] Bluetooth: hci2: failed to register connection device [ 161.595935][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 161.678785][ T7951] macvlan2: entered allmulticast mode [ 161.678867][ T7951] veth1_vlan: entered allmulticast mode [ 161.682588][ T7951] veth1_vlan: left allmulticast mode [ 161.828040][ T7961] loop6: detected capacity change from 0 to 524288000 [ 161.876229][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 161.936110][ T7961] vlan2: entered allmulticast mode [ 161.938203][ T7961] hsr_slave_1: entered allmulticast mode [ 162.038419][ T7963] loop6: detected capacity change from 524288000 to 524287951 [ 162.231735][ T7977] netlink: 260 bytes leftover after parsing attributes in process `syz.1.561'. [ 162.404467][ T7988] usb usb8: usbfs: process 7988 (syz.1.563) did not claim interface 0 before use [ 162.408421][ T7988] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.619147][ T7992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 162.621263][ T7992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.665533][ T7992] vhci_hcd vhci_hcd.0: Device attached [ 162.934667][ T7993] vhci_hcd: connection closed [ 162.936493][ T63] vhci_hcd: stop threads [ 162.940214][ T63] vhci_hcd: release socket [ 162.942694][ T63] vhci_hcd: disconnect device [ 163.002192][ T6204] usb 40-1: enqueue for inactive port 0 [ 163.513060][ T6204] usb usb40-port1: attempt power cycle [ 164.372652][ T6204] usb usb40-port1: unable to enumerate USB device [ 164.471282][ T8022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.567'. [ 164.818847][ T5940] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 165.388900][ T8054] tmpfs: Bad value for 'mpol' [ 165.523239][ T8057] can0: slcan on pty22. [ 166.258153][ T8055] can0 (unregistered): slcan off pty22. [ 167.345630][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 167.345858][ T40] audit: type=1326 audit(1762855293.159:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.398960][ T40] audit: type=1326 audit(1762855293.169:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.430208][ T40] audit: type=1326 audit(1762855293.179:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.440654][ T40] audit: type=1326 audit(1762855293.179:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.463315][ T40] audit: type=1326 audit(1762855293.179:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.479447][ T40] audit: type=1326 audit(1762855293.179:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.489923][ T40] audit: type=1326 audit(1762855293.179:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.501753][ T40] audit: type=1326 audit(1762855293.189:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.511169][ T40] audit: type=1326 audit(1762855293.189:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.553889][ T40] audit: type=1326 audit(1762855293.189:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 167.865017][ T8105] overlayfs: failed to clone upperpath [ 168.530492][ T8110] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.541436][ T8110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.886768][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 168.890072][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 168.893594][ T5940] Bluetooth: hci1: hardware error 0x00 [ 169.905411][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 170.249531][ T8136] trusted_key: encrypted_key: master key parameter 'efcult' is invalid [ 170.258831][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 170.337025][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 170.398391][ T8143] overlayfs: failed to clone upperpath [ 170.743729][ T8151] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 170.746174][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.749255][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 170.972311][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 171.032282][ T6098] usb 44-1: SetAddress Request (6) to port 0 [ 171.034235][ T6098] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 171.468229][ T8152] vhci_hcd: connection reset by peer [ 171.470901][ T62] vhci_hcd: stop threads [ 171.472388][ T62] vhci_hcd: release socket [ 171.473912][ T62] vhci_hcd: disconnect device [ 172.923507][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 172.926823][ T8171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.596'. [ 172.956087][ T8171] geneve2: entered promiscuous mode [ 172.957814][ T8171] geneve2: entered allmulticast mode [ 174.248011][ T40] kauditd_printk_skb: 169 callbacks suppressed [ 174.248105][ T40] audit: type=1800 audit(1762855300.059:295): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.599" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 174.472165][ T8196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.474942][ T8196] IPv6: NLM_F_CREATE should be set when creating new route [ 174.939273][ T8202] binder: 8197:8202 ioctl 0 80000040 returned -22 [ 175.283877][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 175.731614][ T8218] program syz.1.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.899093][ T8220] /dev/nullb0: Can't lookup blockdev [ 176.099716][ T6098] usb 44-1: device descriptor read/8, error -110 [ 176.504580][ T6098] usb usb44-port1: attempt power cycle [ 177.156868][ T8233] SQUASHFS error: Failed to read block 0x0: -5 [ 177.228999][ T8231] openvswitch: netlink: Duplicate or invalid key (type 1). [ 177.231323][ T8231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.440431][ T6098] usb usb44-port1: unable to enumerate USB device [ 177.527164][ T8238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 177.536779][ T8238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3447808065 (55164929040 ns) > initial count (14750416992 ns). Using initial count to start timer. [ 177.613473][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 177.657210][ T8240] : entered promiscuous mode [ 178.348118][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 178.402391][ T8253] macvlan2: entered allmulticast mode [ 178.404176][ T8253] veth1_vlan: entered allmulticast mode [ 178.413700][ T8253] veth1_vlan: left allmulticast mode [ 179.602104][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 182.072869][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.634'. [ 182.110170][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.493202][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 185.590741][ T8343] tipc: Started in network mode [ 185.600372][ T8343] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 185.604503][ T8343] tipc: Enabling of bearer rejected, failed to enable media [ 185.614614][ T8343] netlink: 'syz.2.641': attribute type 39 has an invalid length. [ 185.679733][ T8339] lo speed is unknown, defaulting to 1000 [ 185.711026][ T40] audit: type=1326 audit(1762855311.519:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.0.647" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 186.058396][ T8339] Invalid/unusable pipe [ 186.861610][ T8361] tipc: Enabling of bearer rejected, failed to enable media [ 186.872165][ T8361] netlink: 'syz.2.645': attribute type 39 has an invalid length. [ 187.113797][ T8366] tipc: Enabled bearer , priority 10 [ 187.124695][ T8366] netlink: 'syz.1.648': attribute type 39 has an invalid length. [ 187.350337][ T8370] tipc: Started in network mode [ 187.351942][ T8370] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 187.356349][ T8370] tipc: Enabled bearer , priority 10 [ 187.374026][ T8370] netlink: 'syz.3.649': attribute type 39 has an invalid length. [ 187.378700][ T8370] bridge0: port 3(syz_tun) entered disabled state [ 187.389817][ T8370] syz_tun (unregistering): left allmulticast mode [ 187.392790][ T8370] syz_tun (unregistering): left promiscuous mode [ 187.395321][ T8370] bridge0: port 3(syz_tun) entered disabled state [ 187.947784][ T8383] can0: slcan on pty26. [ 188.258067][ T5949] tipc: Node number set to 1419836672 [ 188.392540][ T8375] can0 (unregistered): slcan off pty26. [ 188.506307][ T53] tipc: Node number set to 4269801488 [ 189.901275][ T8414] tipc: Enabling of bearer rejected, already enabled [ 190.260023][ T8420] tipc: Enabling of bearer rejected, already enabled [ 190.267724][ T8420] netlink: 'syz.3.660': attribute type 39 has an invalid length. [ 190.652769][ T1143] Bluetooth: (null): Invalid header checksum [ 190.655518][ T1143] Bluetooth: (null): Invalid header checksum [ 190.762340][ T1143] Bluetooth: (null): Invalid header checksum [ 190.823272][ T40] audit: type=1326 audit(1762855316.639:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 190.832394][ T40] audit: type=1326 audit(1762855316.639:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 190.873302][ T63] Bluetooth: (null): Invalid header checksum [ 190.985364][ T12] Bluetooth: (null): Invalid header checksum [ 191.082726][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 191.089978][ T8429] netlink: 'syz.2.663': attribute type 39 has an invalid length. [ 191.092300][ T12] Bluetooth: (null): Invalid header checksum [ 191.144388][ T8432] tipc: Enabling of bearer rejected, failed to enable media [ 191.150571][ T8432] netlink: 'syz.2.664': attribute type 39 has an invalid length. [ 191.370560][ T8440] tipc: Enabling of bearer rejected, already enabled [ 191.378051][ T8440] netlink: 'syz.3.667': attribute type 39 has an invalid length. [ 196.324217][ T40] audit: type=1326 audit(1762855322.109:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.332846][ T40] audit: type=1326 audit(1762855322.109:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.339639][ T40] audit: type=1326 audit(1762855322.109:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.346541][ T40] audit: type=1326 audit(1762855322.109:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.353582][ T40] audit: type=1326 audit(1762855322.109:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.360848][ T40] audit: type=1326 audit(1762855322.109:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.367444][ T40] audit: type=1326 audit(1762855322.109:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.374160][ T40] audit: type=1326 audit(1762855322.109:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.380842][ T40] audit: type=1326 audit(1762855322.109:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 196.387613][ T40] audit: type=1326 audit(1762855322.109:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 198.328404][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 198.331513][ T8508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.683'. [ 198.609275][ T8508] geneve2: entered promiscuous mode [ 198.611618][ T8508] geneve2: entered allmulticast mode [ 198.808949][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.811643][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.223422][ T8516] binder: 8509:8516 ioctl 0 80000040 returned -22 [ 204.403265][ T8547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 204.405334][ T8547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.425236][ T8547] vhci_hcd vhci_hcd.0: Device attached [ 205.503809][ T8549] vhci_hcd: connection closed [ 205.503992][ T62] vhci_hcd: stop threads [ 205.508573][ T62] vhci_hcd: release socket [ 205.510768][ T62] vhci_hcd: disconnect device [ 206.243865][ T8562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.246997][ T8562] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.255913][ T8562] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.263477][ T8562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.266345][ T8562] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.303442][ T8562] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 207.386890][ T8569] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 207.602222][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 208.323338][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 209.539475][ T8602] overlayfs: failed to clone upperpath [ 209.682803][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 210.402123][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 211.331697][ T8621] tipc: Enabling of bearer rejected, failed to enable media [ 211.339932][ T8621] netlink: 'syz.2.713': attribute type 39 has an invalid length. [ 211.762407][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 212.493165][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 213.645954][ T8634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 213.648106][ T8634] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.660525][ T8634] vhci_hcd vhci_hcd.0: Device attached [ 214.492319][ T6098] usb 44-1: SetAddress Request (10) to port 0 [ 214.497432][ T6098] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 214.506312][ T8637] vhci_hcd: connection closed [ 214.506499][ T1180] vhci_hcd: stop threads [ 214.513968][ T1180] vhci_hcd: release socket [ 214.519102][ T1180] vhci_hcd: disconnect device [ 214.525101][ T8646] overlayfs: failed to clone upperpath [ 218.772436][ T1143] Bluetooth: (null): Invalid header checksum [ 218.774975][ T1143] Bluetooth: (null): Invalid header checksum [ 218.882578][ T1180] Bluetooth: (null): Invalid header checksum [ 218.992346][ T1143] Bluetooth: (null): Invalid header checksum [ 219.522147][ T6098] usb 44-1: device descriptor read/8, error -110 [ 219.912626][ T6098] usb usb44-port1: attempt power cycle [ 220.393349][ T8690] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.492935][ T6098] usb usb44-port1: unable to enumerate USB device [ 221.153218][ T8689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.155462][ T8689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.867366][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 223.462138][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 224.582364][ T62] Bluetooth: (null): Invalid header checksum [ 224.585192][ T62] Bluetooth: (null): Invalid header checksum [ 224.587914][ T62] Bluetooth: (null): Invalid header checksum [ 226.157216][ T8732] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.924900][ T8731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.927814][ T8731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.913937][ T8745] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 228.137243][ T8752] netlink: 'syz.0.746': attribute type 39 has an invalid length. [ 228.242502][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 228.315972][ T8750] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 228.962244][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 233.687359][ T8804] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 233.704515][ T8791] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 234.753899][ T103] Bluetooth: (null): Invalid header checksum [ 234.755865][ T103] Bluetooth: (null): Invalid header checksum [ 234.928723][ T12] Bluetooth: (null): Invalid header checksum [ 234.930702][ T12] Bluetooth: (null): Invalid header checksum [ 235.133054][ T12] Bluetooth: (null): Invalid header checksum [ 235.925537][ T12] Bluetooth: (null): Invalid header checksum [ 235.927518][ T12] Bluetooth: (null): Invalid header checksum [ 235.929483][ T12] Bluetooth: (null): Invalid header checksum [ 235.931832][ T12] Bluetooth: (null): Invalid header checksum [ 235.934307][ T12] Bluetooth: (null): Invalid header checksum [ 235.936289][ T12] Bluetooth: (null): Invalid header checksum [ 235.938220][ T12] Bluetooth: (null): Invalid header checksum [ 235.940313][ T12] Bluetooth: (null): Invalid header checksum [ 237.229753][ T8832] overlayfs: failed to clone upperpath [ 237.715571][ T46] Bluetooth: (null): Invalid header checksum [ 237.718067][ T103] Bluetooth: (null): Invalid header checksum [ 237.832311][ T103] Bluetooth: (null): Invalid header checksum [ 237.942372][ T103] Bluetooth: (null): Invalid header checksum [ 240.684396][ T46] Bluetooth: (null): Invalid header checksum [ 240.686478][ T12] Bluetooth: (null): Invalid header checksum [ 240.783076][ T103] Bluetooth: (null): Invalid header checksum [ 240.892330][ T103] Bluetooth: (null): Invalid header checksum [ 241.002438][ T103] Bluetooth: (null): Invalid header checksum [ 241.109100][ T8870] overlayfs: failed to clone upperpath [ 244.653706][ T8900] overlayfs: failed to clone upperpath [ 257.070437][ T8979] overlayfs: failed to clone upperpath [ 260.244226][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.246810][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.311277][ T9009] overlayfs: failed to clone upperpath [ 264.641689][ T9042] overlayfs: failed to clone upperpath [ 264.696748][ T9045] netlink: 'syz.0.828': attribute type 39 has an invalid length. [ 273.962938][ T9111] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 275.378414][ T9129] tipc: Enabling of bearer rejected, already enabled [ 275.387831][ T9129] netlink: 'syz.3.851': attribute type 39 has an invalid length. [ 277.980736][ T9167] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 277.996057][ T9167] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.010675][ T9167] lo: entered promiscuous mode [ 278.012968][ T9167] lo: entered allmulticast mode [ 278.015256][ T9167] tunl0: entered promiscuous mode [ 278.016824][ T9167] tunl0: entered allmulticast mode [ 278.018924][ T9167] gre0: entered promiscuous mode [ 278.020764][ T9167] gre0: entered allmulticast mode [ 278.022963][ T9169] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 278.025831][ T9167] gretap0: entered promiscuous mode [ 278.027497][ T9167] gretap0: entered allmulticast mode [ 278.029566][ T9167] erspan0: entered promiscuous mode [ 278.031239][ T9167] erspan0: entered allmulticast mode [ 278.033335][ T9167] ip_vti0: entered promiscuous mode [ 278.035056][ T9167] ip_vti0: entered allmulticast mode [ 278.037334][ T9167] ip6_vti0: entered promiscuous mode [ 278.039406][ T9167] ip6_vti0: entered allmulticast mode [ 278.041428][ T9167] sit0: entered promiscuous mode [ 278.043232][ T9167] sit0: entered allmulticast mode [ 278.045155][ T9167] ip6tnl0: entered promiscuous mode [ 278.046822][ T9167] ip6tnl0: entered allmulticast mode [ 278.050048][ T9167] ip6gre0: entered promiscuous mode [ 278.053028][ T9167] ip6gre0: entered allmulticast mode [ 278.055259][ T9167] ip6gretap0: entered promiscuous mode [ 278.057068][ T9167] ip6gretap0: entered allmulticast mode [ 278.059657][ T9167] bridge0: entered promiscuous mode [ 278.062244][ T9167] bridge0: entered allmulticast mode [ 278.064557][ T9167] vcan0: entered promiscuous mode [ 278.066273][ T9167] vcan0: entered allmulticast mode [ 278.068341][ T9167] bond0: entered promiscuous mode [ 278.070010][ T9167] bond_slave_0: entered promiscuous mode [ 278.071946][ T9167] bond_slave_1: entered promiscuous mode [ 278.074526][ T9167] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 278.078085][ T9167] bond0: entered allmulticast mode [ 278.080455][ T9167] bond_slave_0: entered allmulticast mode [ 278.083729][ T9167] bond_slave_1: entered allmulticast mode [ 278.085576][ T9167] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 278.090403][ T9167] team0: entered promiscuous mode [ 278.092828][ T9167] team_slave_0: entered promiscuous mode [ 278.096984][ T9167] team_slave_1: entered promiscuous mode [ 278.099214][ T9167] team0: entered allmulticast mode [ 278.100910][ T9167] team_slave_0: entered allmulticast mode [ 278.103138][ T9167] team_slave_1: entered allmulticast mode [ 278.105917][ T9167] dummy0: entered promiscuous mode [ 278.109082][ T9167] dummy0: entered allmulticast mode [ 278.111017][ T9167] nlmon0: entered promiscuous mode [ 278.113016][ T9167] nlmon0: entered allmulticast mode [ 278.115368][ T9167] caif0: entered promiscuous mode [ 278.116959][ T9167] caif0: entered allmulticast mode [ 278.118594][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.123808][ T9173] overlayfs: failed to clone upperpath [ 278.134230][ T9169] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.137536][ T9171] lo: entered promiscuous mode [ 278.139262][ T9171] lo: entered allmulticast mode [ 278.141500][ T9171] tunl0: entered promiscuous mode [ 278.179806][ T9171] tunl0: entered allmulticast mode [ 278.184661][ T9171] gre0: entered promiscuous mode [ 278.186830][ T9171] gre0: entered allmulticast mode [ 278.191821][ T9171] gretap0: entered promiscuous mode [ 278.195096][ T9171] gretap0: entered allmulticast mode [ 278.197588][ T9171] erspan0: entered promiscuous mode [ 278.199229][ T9171] erspan0: entered allmulticast mode [ 278.201193][ T9171] ip_vti0: entered promiscuous mode [ 278.203596][ T9171] ip_vti0: entered allmulticast mode [ 278.206443][ T9171] ip6_vti0: entered promiscuous mode [ 278.208125][ T9171] ip6_vti0: entered allmulticast mode [ 278.210207][ T9171] sit0: entered promiscuous mode [ 278.211844][ T9171] sit0: entered allmulticast mode [ 278.214084][ T9171] ip6tnl0: entered promiscuous mode [ 278.215936][ T9171] ip6tnl0: entered allmulticast mode [ 278.219176][ T9171] ip6gre0: entered promiscuous mode [ 278.221149][ T9171] ip6gre0: entered allmulticast mode [ 278.224654][ T9171] ip6gretap0: entered promiscuous mode [ 278.226541][ T9171] ip6gretap0: entered allmulticast mode [ 278.229178][ T9171] vcan0: entered promiscuous mode [ 278.231003][ T9171] vcan0: entered allmulticast mode [ 278.233273][ T9171] bond0: entered promiscuous mode [ 278.235016][ T9171] bond_slave_0: entered promiscuous mode [ 278.236983][ T9171] bond_slave_1: entered promiscuous mode [ 278.238882][ T9171] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 278.241247][ T9171] bond0: entered allmulticast mode [ 278.244251][ T9171] bond_slave_0: entered allmulticast mode [ 278.246448][ T9171] bond_slave_1: entered allmulticast mode [ 278.248379][ T9171] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 278.253223][ T9171] team0: entered promiscuous mode [ 278.254988][ T9171] team_slave_0: entered promiscuous mode [ 278.256971][ T9171] team_slave_1: entered promiscuous mode [ 278.259224][ T9171] team0: entered allmulticast mode [ 278.260948][ T9171] team_slave_0: entered allmulticast mode [ 278.263477][ T9171] team_slave_1: entered allmulticast mode [ 278.267770][ T9171] dummy0: entered promiscuous mode [ 278.269507][ T9171] dummy0: entered allmulticast mode [ 278.272491][ T9171] nlmon0: entered promiscuous mode [ 278.274569][ T9171] nlmon0: entered allmulticast mode [ 278.278365][ T9171] caif0: entered promiscuous mode [ 278.281067][ T9171] caif0: entered allmulticast mode [ 278.283334][ T9171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.366785][ T9183] tipc: Enabling of bearer rejected, already enabled [ 278.374343][ T9183] netlink: 'syz.1.867': attribute type 39 has an invalid length. [ 279.445639][ T9190] lo: entered promiscuous mode [ 279.452136][ T9190] lo: entered allmulticast mode [ 279.460046][ T9190] tunl0: entered promiscuous mode [ 279.461704][ T9190] tunl0: entered allmulticast mode [ 279.467706][ T9190] gre0: entered promiscuous mode [ 279.469349][ T9190] gre0: entered allmulticast mode [ 279.475498][ T9190] gretap0: entered promiscuous mode [ 279.477705][ T9190] gretap0: entered allmulticast mode [ 279.483768][ T9190] erspan0: entered promiscuous mode [ 279.502227][ T9190] erspan0: entered allmulticast mode [ 279.597317][ T9190] ip_vti0: entered promiscuous mode [ 279.600247][ T9190] ip_vti0: entered allmulticast mode [ 279.612563][ T9190] ip6_vti0: entered promiscuous mode [ 279.624515][ T9190] ip6_vti0: entered allmulticast mode [ 279.654653][ T9190] sit0: entered promiscuous mode [ 279.672115][ T9190] sit0: entered allmulticast mode [ 279.691890][ T9192] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 279.736889][ T9190] ip6tnl0: entered promiscuous mode [ 279.748859][ T9190] ip6tnl0: entered allmulticast mode [ 279.751439][ T9190] ip6gre0: entered promiscuous mode [ 279.753251][ T9190] ip6gre0: entered allmulticast mode [ 279.755713][ T9190] ip6gretap0: entered promiscuous mode [ 279.757553][ T9190] ip6gretap0: entered allmulticast mode [ 279.760406][ T9190] bridge0: entered promiscuous mode [ 279.762381][ T9190] bridge0: entered allmulticast mode [ 279.765454][ T9190] vcan0: entered promiscuous mode [ 279.767288][ T9190] vcan0: entered allmulticast mode [ 279.769691][ T9190] bond0: entered promiscuous mode [ 279.771383][ T9190] bond_slave_0: entered promiscuous mode [ 279.774045][ T9190] bond_slave_1: entered promiscuous mode [ 279.776242][ T9190] bond0: entered allmulticast mode [ 279.777879][ T9190] bond_slave_0: entered allmulticast mode [ 279.779687][ T9190] bond_slave_1: entered allmulticast mode [ 279.823430][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.826534][ T9190] team0: entered promiscuous mode [ 279.828717][ T9190] team_slave_0: entered promiscuous mode [ 279.830994][ T9190] team_slave_1: entered promiscuous mode [ 279.833017][ T9190] team0: entered allmulticast mode [ 279.835236][ T9190] team_slave_0: entered allmulticast mode [ 279.837273][ T9190] team_slave_1: entered allmulticast mode [ 279.840276][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.843860][ T9190] dummy0: entered promiscuous mode [ 279.846123][ T9190] dummy0: entered allmulticast mode [ 279.850194][ T9190] nlmon0: entered promiscuous mode [ 279.852144][ T9190] nlmon0: entered allmulticast mode [ 279.863093][ T9190] caif0: entered promiscuous mode [ 279.865932][ T9190] caif0: entered allmulticast mode [ 279.868192][ T9190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.880720][ T10] lo speed is unknown, defaulting to 1000 [ 279.889712][ T10] syz0: Port: 1 Link ACTIVE [ 281.327530][ T9219] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 282.770586][ T9237] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 282.789384][ T9237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.029258][ T9246] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 283.048464][ T9246] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 283.050988][ T9246] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 283.054919][ T9246] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.073269][ T9246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.283933][ T9253] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 283.317929][ T9253] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.336809][ T9253] lo: entered promiscuous mode [ 283.338400][ T9253] lo: entered allmulticast mode [ 283.343308][ T9253] tunl0: entered promiscuous mode [ 283.344981][ T9253] tunl0: entered allmulticast mode [ 283.346951][ T9253] gre0: entered promiscuous mode [ 283.348556][ T9253] gre0: entered allmulticast mode [ 283.350563][ T9253] gretap0: entered promiscuous mode [ 283.352587][ T9253] gretap0: entered allmulticast mode [ 283.354768][ T9253] erspan0: entered promiscuous mode [ 283.356615][ T9253] erspan0: entered allmulticast mode [ 283.358863][ T9253] ip_vti0: entered promiscuous mode [ 283.360650][ T9253] ip_vti0: entered allmulticast mode [ 283.363225][ T9253] ip6_vti0: entered promiscuous mode [ 283.365217][ T9253] ip6_vti0: entered allmulticast mode [ 283.367726][ T9253] sit0: entered promiscuous mode [ 283.369708][ T9253] sit0: entered allmulticast mode [ 283.372003][ T9253] ip6tnl0: entered promiscuous mode [ 283.374150][ T9253] ip6tnl0: entered allmulticast mode [ 283.376565][ T9253] ip6gre0: entered promiscuous mode [ 283.378651][ T9253] ip6gre0: entered allmulticast mode [ 283.381196][ T9253] ip6gretap0: entered promiscuous mode [ 283.383842][ T9253] ip6gretap0: entered allmulticast mode [ 283.386125][ T9253] bridge0: entered promiscuous mode [ 283.387801][ T9253] bridge0: entered allmulticast mode [ 283.390150][ T9253] vcan0: entered promiscuous mode [ 283.392926][ T9253] vcan0: entered allmulticast mode [ 283.395457][ T9253] bond0: entered promiscuous mode [ 283.397177][ T9253] bond_slave_0: entered promiscuous mode [ 283.399218][ T9253] bond_slave_1: entered promiscuous mode [ 283.401186][ T9253] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 283.404030][ T9253] bond0: entered allmulticast mode [ 283.406099][ T9253] bond_slave_0: entered allmulticast mode [ 283.408258][ T9253] bond_slave_1: entered allmulticast mode [ 283.410151][ T9253] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 283.415233][ T9253] team0: entered promiscuous mode [ 283.417414][ T9253] team_slave_0: entered promiscuous mode [ 283.420814][ T9253] team_slave_1: entered promiscuous mode [ 283.422978][ T9253] team0: entered allmulticast mode [ 283.425207][ T9253] team_slave_0: entered allmulticast mode [ 283.427373][ T9253] team_slave_1: entered allmulticast mode [ 283.430160][ T9253] dummy0: entered promiscuous mode [ 283.432544][ T9253] dummy0: entered allmulticast mode [ 283.434684][ T9253] nlmon0: entered promiscuous mode [ 283.436450][ T9253] nlmon0: entered allmulticast mode [ 283.465821][ T9253] caif0: entered promiscuous mode [ 283.468043][ T9253] caif0: entered allmulticast mode [ 283.470215][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.649565][ T9251] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 284.184115][ T9275] tipc: Enabling of bearer rejected, already enabled [ 284.199747][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 284.207823][ T9275] netlink: 'syz.3.895': attribute type 39 has an invalid length. [ 284.680091][ T9279] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 284.825107][ T9285] overlayfs: failed to clone upperpath [ 284.862236][ T9287] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 284.875505][ T9290] overlayfs: failed to clone upperpath [ 284.879942][ T9287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.418228][ T9302] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 285.434106][ T9302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.745964][ T9304] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 286.333831][ T9313] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 289.153957][ T9360] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 289.159797][ T9360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.427377][ T9370] overlayfs: failed to clone upperpath [ 289.574121][ T9365] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 290.946453][ T12] Bluetooth: (null): Invalid header checksum [ 290.949057][ T12] Bluetooth: (null): Invalid header checksum [ 291.042513][ T12] Bluetooth: (null): Invalid header checksum [ 291.153245][ T103] Bluetooth: (null): Invalid header checksum [ 291.262732][ T103] Bluetooth: (null): Invalid header checksum [ 291.438823][ T9402] tipc: Enabling of bearer rejected, already enabled [ 291.463462][ T9402] netlink: 'syz.1.933': attribute type 39 has an invalid length. [ 293.027335][ T9414] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 293.037655][ T9414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.152479][ T62] Bluetooth: (null): Invalid header checksum [ 294.154473][ T1180] Bluetooth: (null): Invalid header checksum [ 294.447451][ T62] Bluetooth: (null): Invalid header checksum [ 294.450873][ T62] Bluetooth: (null): Invalid header checksum [ 294.482550][ T103] Bluetooth: (null): Invalid header checksum [ 296.922904][ T9463] tipc: Enabling of bearer rejected, failed to enable media [ 296.953333][ T9463] netlink: 'syz.2.951': attribute type 39 has an invalid length. [ 300.483600][ T9492] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 300.794758][ T9500] overlayfs: failed to resolve './file0': -2 [ 301.345984][ T9504] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 301.351748][ T9504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.807190][ T9508] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 302.901582][ T9527] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 302.965931][ T9527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.644299][ T9554] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 305.658525][ T9554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.820777][ T9561] overlayfs: failed to clone upperpath [ 308.596717][ T9578] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 309.533634][ T9602] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 309.592248][ T9606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.182748][ T9620] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 310.188692][ T9620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.831784][ T9629] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 312.239106][ T9642] tipc: Started in network mode [ 312.240940][ T9642] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 312.245381][ T9642] tipc: Enabled bearer , priority 10 [ 312.255346][ T9642] netlink: 'syz.0.1004': attribute type 39 has an invalid length. [ 312.458447][ T9649] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 312.482288][ T9649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.089364][ T9662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.262175][ T6135] tipc: Node number set to 4269801488 [ 313.358998][ T9663] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 313.845289][ T9661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.849212][ T9661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.122516][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 315.922200][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 316.112540][ T9697] overlayfs: failed to clone upperpath [ 316.231810][ T9700] overlayfs: failed to clone upperpath [ 316.403039][ T9704] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 316.415048][ T9704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.616193][ T9721] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 317.880101][ T9721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.433445][ T9728] netlink: 'syz.2.1030': attribute type 10 has an invalid length. [ 318.443116][ T9728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.822897][ T63] Bluetooth: (null): Invalid header checksum [ 318.824983][ T63] Bluetooth: (null): Invalid header checksum [ 318.933417][ T63] Bluetooth: (null): Invalid header checksum [ 319.116231][ T46] Bluetooth: (null): Invalid header checksum [ 319.230336][ T1143] Bluetooth: (null): Invalid header checksum [ 319.839200][ T9747] netlink: 'syz.1.1036': attribute type 10 has an invalid length. [ 319.849619][ T9747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.832732][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.835085][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.820577][ T9778] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 322.827045][ T9778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.512562][ T103] Bluetooth: (null): Invalid header checksum [ 323.515183][ T63] Bluetooth: (null): Invalid header checksum [ 324.260253][ T9798] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 325.149362][ T9809] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 325.640024][ T9805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.292500][ T12] Bluetooth: (null): Invalid header checksum [ 326.295179][ T12] Bluetooth: (null): Invalid header checksum [ 326.297965][ T46] Bluetooth: (null): Invalid header checksum [ 326.300543][ T46] Bluetooth: (null): Invalid header checksum [ 326.402431][ T63] Bluetooth: (null): Invalid header checksum [ 328.272309][ T9860] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 328.281346][ T9860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.646944][ T63] Bluetooth: (null): Invalid header checksum [ 328.649672][ T63] Bluetooth: (null): Invalid header checksum [ 328.712512][ T63] Bluetooth: (null): Invalid header checksum [ 328.767647][ T9873] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 328.789086][ T9880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.832431][ T46] Bluetooth: (null): Invalid header checksum [ 328.965286][ T46] Bluetooth: (null): Invalid header checksum [ 329.521928][ T9893] overlayfs: failed to clone upperpath [ 330.489354][ T9912] overlayfs: failed to clone upperpath [ 330.823818][ T9916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.895683][ T9919] overlayfs: failed to clone upperpath [ 331.750216][ T9932] overlayfs: failed to clone upperpath [ 332.081217][ T9929] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 334.943265][ T9990] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 336.239793][T10006] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 336.243521][T10006] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 336.246626][T10006] CPU: 2 UID: 0 PID: 10006 Comm: syz.1.1113 Not tainted syzkaller #0 PREEMPT(full) [ 336.250261][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.253580][T10006] RIP: 0010:h5_recv+0x104/0x950 [ 336.255138][T10006] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 81 fa 7d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 336.261087][T10006] RSP: 0018:ffffc90004b27b98 EFLAGS: 00010287 [ 336.262994][T10006] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc9000e1c3000 [ 336.265473][T10006] RDX: 0000000000080000 RSI: ffffffff883e5dff RDI: 0000000000000005 [ 336.267947][T10006] RBP: ffffc90004b27d20 R08: 0000000000000005 R09: 0000000000000000 [ 336.270410][T10006] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 336.272867][T10006] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907f80 [ 336.275344][T10006] FS: 0000000000000000(0000) GS:ffff888097a0e000(0063) knlGS:00000000f5484b40 [ 336.278101][T10006] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 336.280180][T10006] CR2: 00000000f73fc2c0 CR3: 000000005ee54000 CR4: 0000000000352ef0 [ 336.282660][T10006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000410 [ 336.285136][T10006] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 336.287613][T10006] Call Trace: [ 336.288667][T10006] [ 336.289604][T10006] ? __pfx_h5_recv+0x10/0x10 [ 336.291062][T10006] hci_uart_tty_receive+0x254/0x7e0 [ 336.292686][T10006] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 336.294486][T10006] tty_ioctl+0x583/0x1680 [ 336.295850][T10006] ? __pfx_tty_ioctl+0x10/0x10 [ 336.297355][T10006] ? do_vfs_ioctl+0x128/0x14f0 [ 336.298880][T10006] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.300475][T10006] ? find_held_lock+0x2b/0x80 [ 336.301975][T10006] ? hook_file_ioctl_common+0x145/0x410 [ 336.303715][T10006] ? __fget_files+0x20e/0x3c0 [ 336.305221][T10006] ? do_raw_spin_unlock+0xe0/0x230 [ 336.306839][T10006] tty_compat_ioctl+0x24a/0x4d0 [ 336.308378][T10006] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 336.310080][T10006] __ia32_compat_sys_ioctl+0x242/0x370 [ 336.311794][T10006] __do_fast_syscall_32+0x7c/0x300 [ 336.313411][T10006] do_fast_syscall_32+0x32/0x80 [ 336.314971][T10006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.316933][T10006] RIP: 0023:0xf7fd7579 [ 336.318240][T10006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.324110][T10006] RSP: 002b:00000000f548455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 336.326698][T10006] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000005412 [ 336.329138][T10006] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.331521][T10006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.333721][T10006] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.336106][T10006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.338556][T10006] [ 336.339539][T10006] Modules linked in: [ 336.341241][T10006] ---[ end trace 0000000000000000 ]--- [ 336.342993][T10006] RIP: 0010:h5_recv+0x104/0x950 [ 336.344549][T10006] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 81 fa 7d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 336.350527][T10006] RSP: 0018:ffffc90004b27b98 EFLAGS: 00010287 [ 336.352403][T10006] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc9000e1c3000 [ 336.354887][T10006] RDX: 0000000000080000 RSI: ffffffff883e5dff RDI: 0000000000000005 [ 336.357337][T10006] RBP: ffffc90004b27d20 R08: 0000000000000005 R09: 0000000000000000 [ 336.359805][T10006] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 336.362326][T10006] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907f80 [ 336.364848][T10006] FS: 0000000000000000(0000) GS:ffff888097a0e000(0063) knlGS:00000000f5484b40 [ 336.367617][T10006] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 336.369675][T10006] CR2: 00000000f73fc2c0 CR3: 000000005ee54000 CR4: 0000000000352ef0 [ 336.372246][T10006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000410 [ 336.374736][T10006] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 336.377219][T10006] Kernel panic - not syncing: Fatal exception [ 336.379799][T10006] Kernel Offset: disabled [ 336.381156][T10006] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:04:22 Registers: info registers vcpu 0 CPU#0 RAX=000000000032901c RBX=0000000000000000 RCX=ffffffff8b5d62a9 RDX=ffffed1005646656 RSI=ffffffff8bf07540 RDI=ffffffff8191bf0d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908241d0 R15=0000000000000000 RIP=ffffffff8b5d4d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c42d500 CR3=000000005ee54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802b3332a8 RCX=ffffffff818cf5a6 RDX=0000000000000000 RSI=ffffffff8bf07540 RDI=ffffffff8dcceee8 RBP=0000000000000001 RSP=ffffc90004ac7440 R8 =0000000000000000 R9 =fffffbfff210483a R10=ffffffff908241d7 R11=0000000000000001 R12=0000000000006175 R13=0000000000000001 R14=ffff888022174a28 R15=ffff888022174900 RIP=ffffffff81a14240 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809790e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003000dffc CR3=000000005ee54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267e75 RDI=ffffffff9adc4de0 RBP=ffffffff9adc4da0 RSP=ffffc90004b27500 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9adc4da0 R15=ffffffff85267e10 RIP=ffffffff85267e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a0e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73fc2c0 CR3=000000005ee54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000410 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000007ffff RBX=0000000000000000 RCX=ffffc9000ca92000 RDX=0000000000080000 RSI=ffffffff892b5c30 RDI=0000000000000001 RBP=ffff88806e2c0780 RSP=ffffc90004f77750 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffc90004f77d58 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bc58d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ff00ff8 CR3=000000005ee54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000