last executing test programs: 24m42.488884102s ago: executing program 32 (id=3106): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x40003, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x68c0, 0x4646, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m15.418425113s ago: executing program 2 (id=3335): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r6 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={0x0}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 24m14.55453863s ago: executing program 2 (id=3338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 24m13.491344721s ago: executing program 2 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2d78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 24m13.315898649s ago: executing program 2 (id=3354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 24m13.281854031s ago: executing program 2 (id=3355): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 24m12.433998627s ago: executing program 2 (id=3358): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r6 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={0x0}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 24m11.0415899s ago: executing program 33 (id=3369): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 24m5.153864796s ago: executing program 34 (id=3299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 23m58.96310276s ago: executing program 6 (id=3417): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x84000584) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 23m58.765533369s ago: executing program 35 (id=3348): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x\x00'], 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) 23m58.128311323s ago: executing program 6 (id=3421): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80) 23m58.071109578s ago: executing program 6 (id=3422): io_uring_setup(0x7882, &(0x7f0000000a40)={0x0, 0x17fe, 0x2, 0xfffffffe, 0x3bd}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 23m57.942446808s ago: executing program 6 (id=3423): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) 23m57.897213722s ago: executing program 6 (id=3424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r1, 0x5501) close(0x3) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) close_range(r2, 0xffffffffffffffff, 0x0) 23m57.660375219s ago: executing program 6 (id=3427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40086303, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23m57.626052804s ago: executing program 36 (id=3427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40086303, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23m57.31499261s ago: executing program 37 (id=3358): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r6 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={0x0}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 23m49.3432294s ago: executing program 8 (id=3476): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 23m49.177334252s ago: executing program 8 (id=3479): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r6 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={0x0}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 23m48.285428532s ago: executing program 8 (id=3482): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 23m47.909255216s ago: executing program 8 (id=3486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) execve(0x0, 0x0, 0x0) 23m47.021561943s ago: executing program 8 (id=3489): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 23m46.988789299s ago: executing program 8 (id=3490): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./file1\x00', 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 23m31.942486272s ago: executing program 38 (id=3490): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./file1\x00', 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 19m53.421222716s ago: executing program 0 (id=4448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x735, 0x0, 0x0) 19m52.589414114s ago: executing program 0 (id=4471): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x3ff, 0x5b, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 19m52.563514874s ago: executing program 0 (id=4472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) 19m52.502411596s ago: executing program 0 (id=4473): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 19m52.498786745s ago: executing program 0 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 19m52.375163679s ago: executing program 0 (id=4476): socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f0000000300)=""/153) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 19m52.330396276s ago: executing program 39 (id=4476): socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f0000000300)=""/153) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 5m0.239624478s ago: executing program 5 (id=10063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 4m59.375599004s ago: executing program 5 (id=10066): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x3000, 0xffffffd6, 0x9, 0x4, 0x0, [{0x3, 0x40, 0x2, '\x00', 0x81}, {0x9, 0x4, 0xa, '\x00', 0x5}, {0x7, 0x8, 0xde, '\x00', 0x7f}, {0x0, 0x6, 0x0, '\x00', 0xe}, {0x9, 0xe, 0x0, '\x00', 0x8}, {0xff, 0x9, 0xc}, {0xf, 0x8, 0x6, '\x00', 0x1}, {0xa, 0x8, 0x1}, {0xf, 0x5, 0x1, '\x00', 0x7}, {0x1, 0x1c, 0x8, '\x00', 0x53}, {0x80, 0x7, 0xfc, '\x00', 0x8c}, {0xfd, 0x9, 0x3, '\x00', 0x6}, {0x8, 0x3, 0x20, '\x00', 0x80}, {0xf8, 0x0, 0x44, '\x00', 0x22}, {0x8, 0x3, 0x8, '\x00', 0x9}, {0xde, 0x2, 0xc3, '\x00', 0x10}, {0x5, 0x8, 0x40, '\x00', 0x4}, {0x2, 0x81, 0x3, '\x00', 0x9}, {0x5, 0x4, 0xae, '\x00', 0x5}, {0x9, 0x0, 0x9, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x7, 0x7, 0x1, '\x00', 0xb}, {0x6, 0x8, 0x54, '\x00', 0xe}, {0x10, 0x9, 0x8, '\x00', 0xe}]}}) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08010000000000002900000002"], 0x108}}], 0x2, 0xc040) 4m59.30625354s ago: executing program 5 (id=10067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sync_file_range(r0, 0x5, 0x41d, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 4m59.305713623s ago: executing program 5 (id=10068): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 4m59.298894826s ago: executing program 5 (id=10070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) 4m59.202708288s ago: executing program 5 (id=10071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040) recvmsg$kcm(r0, 0x0, 0x0) 4m59.127760897s ago: executing program 40 (id=10071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040) recvmsg$kcm(r0, 0x0, 0x0) 4m26.864193652s ago: executing program 7 (id=10365): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x64000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) socket(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x44000) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000002280)=[{r4, 0x800}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 4m25.916397907s ago: executing program 7 (id=10372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0xc4) r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/133], 0x18}}, 0x2000c050) 4m25.006838406s ago: executing program 7 (id=10383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x6, 0x8000, 0x0, 0x6f, 0xc}, &(0x7f00000004c0)=0x14) 4m24.110429121s ago: executing program 7 (id=10396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0x4) 4m24.109436355s ago: executing program 7 (id=10397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000880)=""/28, 0x1c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/100, 0x64}], 0x3}, 0x800}], 0x1, 0x40000000, 0x0) 4m23.90210859s ago: executing program 7 (id=10398): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 4m23.858509314s ago: executing program 41 (id=10398): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 3.171475092s ago: executing program 9 (id=12690): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(0x0, 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)) 3.109878284s ago: executing program 9 (id=12691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) shutdown(r0, 0x1) 3.03865987s ago: executing program 9 (id=12693): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$inet(r2, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES8=r1, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000f5ff000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.036769223s ago: executing program 9 (id=12694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x69, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) 3.031398084s ago: executing program 9 (id=12695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000018c0)) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.317613843s ago: executing program 1 (id=12698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r1, @ANYBLOB="030000000a0001000180c2"], 0x30}}, 0x4) r3 = dup3(0xffffffffffffffff, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socket(0x6, 0x800, 0x2) unshare(0x400) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) 2.283963621s ago: executing program 1 (id=12699): timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) 2.267659891s ago: executing program 3 (id=12700): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x106, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199ae02000000000000001a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd6077f0052716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c7719b649b1ff1267491da00"/255, 0xff}], 0x2) 2.233234403s ago: executing program 3 (id=12701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x1, 0x1}]}}}}}, 0x0) 2.222808011s ago: executing program 4 (id=12702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) shutdown(r0, 0x1) 2.222282253s ago: executing program 3 (id=12703): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$inet(r2, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES8=r1, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000f5ff000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.193187321s ago: executing program 4 (id=12704): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd4c4cc2f24a55e8752448b4c37c520bb5a15833275b9601d6c5c4ab51b93badd121b6dc6ce7b0305b53da8056f62e21b6e61bb466e79eed64b229fb76ae72e773c2ba100f3350ef6f17073a4f3464a6a68d2b21fe0548eaea0a20b59f23080cae50972a2ba17140b98891c318be0ffce9b828f7a216b781d42f96df04466080b721bdf680ac562dc9783aa1e4ebd8d3e6e5a9f3f2535b9042dfc897d4ddce794cff6cb210bddb7670b1", 0xaa) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x2, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000040)) 2.191379309s ago: executing program 3 (id=12705): socket$inet_mptcp(0x2, 0x1, 0x106) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x26da8e97, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f0000000040)='./control\x00') r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 1.629651077s ago: executing program 4 (id=12706): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000002000000181800000f201d", @ANYRES32=0x1, @ANYBLOB="000000000000000000270900090000001854000004000000000000000000000018230000", @ANYRES32=0x1, @ANYRES32=0x1], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x78203, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001080)={{0xc, 0xf}, {0xc, 0xa}, 0x1, 0x4}) syz_open_dev$amidi(&(0x7f0000000940), 0x3ff, 0x90000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) read$FUSE(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x203, 0x4, 0x7}, 0x10) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.429135398s ago: executing program 1 (id=12707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 814.320346ms ago: executing program 4 (id=12708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r1, @ANYBLOB="030000000a0001000180c2"], 0x30}}, 0x4) r3 = dup3(0xffffffffffffffff, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socket(0x6, 0x800, 0x2) unshare(0x400) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) 788.066756ms ago: executing program 3 (id=12709): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x106, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199ae02000000000000001a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd6077f0052716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c7719b649b1ff1267491da00"/255, 0xff}], 0x2) 773.318137ms ago: executing program 4 (id=12710): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001080)={0x90000009}) 772.794837ms ago: executing program 3 (id=12711): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800000000000b80000003600"/24], 0x18}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) syz_open_dev$evdev(0x0, 0x8b, 0x0) 500.956301ms ago: executing program 1 (id=12712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x1, 0x1}]}}}}}, 0x0) 448.650571ms ago: executing program 1 (id=12713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) shutdown(r0, 0x1) 446.945102ms ago: executing program 1 (id=12714): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd4c4cc2f24a55e8752448b4c37c520bb5a15833275b9601d6c5c4ab51b93badd121b6dc6ce7b0305b53da8056f62e21b6e61bb466e79eed64b229fb76ae72e773c2ba100f3350ef6f17073a4f3464a6a68d2b21fe0548eaea0a20b59f23080cae50972a2ba17140b98891c318be0ffce9b828f7a216b781d42f96df04466080b721bdf680ac562dc9783aa1e4ebd8d3e6e5a9f3f2535b9042dfc897d4ddce794cff6cb210bddb7670b1", 0xaa) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x2, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000040)) 220.25863ms ago: executing program 4 (id=12715): gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) 0s ago: executing program 9 (id=12716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0xc4) r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_open_procfs(0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f"], 0x18}}, 0x2000c050) kernel console output (not intermixed with test programs): 8'. [ 2293.065912][T17692] vhci_hcd: connection reset by peer [ 2293.074560][ T75] vhci_hcd: stop threads [ 2293.076282][ T75] vhci_hcd: release socket [ 2293.078032][ T75] vhci_hcd: disconnect device [ 2293.165324][T17704] bond2: option mode: unable to set because the bond device has slaves [ 2294.059490][T17729] netlink: 48 bytes leftover after parsing attributes in process `syz.9.11139'. [ 2294.063719][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11139'. [ 2294.065837][T17730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2294.070413][T17730] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2294.116828][T17729] hsr_slave_1 (unregistering): left promiscuous mode [ 2294.197531][T17733] bond1: option mode: unable to set because the bond device is up [ 2295.696047][T17762] bond2: option mode: unable to set because the bond device has slaves [ 2297.683577][ T8353] vhci_hcd: vhci_device speed not set [ 2298.062741][T17816] syzkaller0: entered promiscuous mode [ 2298.066135][T17816] syzkaller0: entered allmulticast mode [ 2299.153734][T17832] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2301.063792][T17871] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2301.194514][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 2301.194525][ T40] audit: type=1326 audit(1755643443.535:22107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.11181" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32579 code=0x0 [ 2301.382945][ T8353] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2301.532919][ T8353] usb 9-1: Using ep0 maxpacket: 32 [ 2301.536134][ T8353] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2301.540025][ T8353] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2301.544865][ T8353] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2301.549668][ T8353] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2301.552239][ T8353] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2301.556560][ T8353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.560923][ T8353] usb 9-1: config 0 descriptor?? [ 2301.969080][ T8353] hid_parser_main: 20 callbacks suppressed [ 2301.969093][ T8353] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 2301.973763][ T8353] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 2301.976242][ T8353] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 2301.978938][ T8353] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 2301.981409][ T8353] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 2301.985238][ T8353] hid-thrustmaster 0003:044F:B65D.0034: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 2301.989477][ T8353] hid-thrustmaster 0003:044F:B65D.0034: Unexpected non-int endpoint [ 2302.169108][ C0] hid-thrustmaster 0003:044F:B65D.0034: URB to get model id failed with error -71 [ 2302.173524][ T8353] usb 9-1: USB disconnect, device number 11 [ 2303.013184][ T8353] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2303.171250][ T8353] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2303.176042][ T8353] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2303.183690][ T8353] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2303.187945][ T8353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2303.191723][ T8353] usb 9-1: SerialNumber: syz [ 2303.201406][ T8353] usb 9-1: 0:2 : does not exist [ 2303.438873][T17918] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2303.605496][ T6121] usb 9-1: USB disconnect, device number 12 [ 2304.719699][T17962] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2306.425141][T18007] binder: 18006:18007 ioctl c0306201 0 returned -14 [ 2306.592746][ C2] vkms_vblank_simulate: vblank timer overrun [ 2306.970747][T18015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11225'. [ 2307.007066][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11225'. [ 2307.100284][T18019] siw: device registration error -23 [ 2307.364656][T18033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 2307.367282][T18033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2307.369952][T18033] vhci_hcd vhci_hcd.0: Device attached [ 2307.622962][ T6349] usb 39-1: new high-speed USB device number 30 using vhci_hcd [ 2308.236247][T18034] vhci_hcd: connection reset by peer [ 2308.279931][T18837] vhci_hcd: stop threads [ 2308.281837][T18837] vhci_hcd: release socket [ 2308.288733][T18837] vhci_hcd: disconnect device [ 2309.154550][T18059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2309.163820][T18059] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 2309.316182][T18063] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2310.045669][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11250'. [ 2310.049135][T18091] tipc: Started in network mode [ 2310.051138][T18091] tipc: Node identity 7, cluster identity 4711 [ 2310.053685][T18091] tipc: Node number set to 7 [ 2310.363872][T18108] bond0: (slave lo): Releasing backup interface [ 2310.367334][T18108] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2310.386634][T18108] syz_tun: left allmulticast mode [ 2310.388520][T18108] syz_tun: left promiscuous mode [ 2310.391099][T18108] bridge0: port 1(syz_tun) entered disabled state [ 2310.414329][T18108] batadv1: left allmulticast mode [ 2310.416356][T18108] batadv1: left promiscuous mode [ 2310.418987][T18108] bridge0: port 2(batadv1) entered disabled state [ 2311.067750][T18117] gretap0: entered promiscuous mode [ 2311.071320][T18116] gretap0: left promiscuous mode [ 2311.337237][T18126] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2312.206380][T18139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2312.209520][T18139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2312.213741][T18139] vhci_hcd vhci_hcd.0: Device attached [ 2312.472983][ T6121] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 2312.967107][T18142] vhci_hcd: connection reset by peer [ 2312.969201][ T61] vhci_hcd: stop threads [ 2312.970647][ T61] vhci_hcd: release socket [ 2312.971968][ T61] vhci_hcd: disconnect device [ 2313.192973][ T6349] vhci_hcd: vhci_device speed not set [ 2313.661932][T18158] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2313.677037][T18158] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 2314.304462][T18179] netlink: 'syz.4.11279': attribute type 6 has an invalid length. [ 2314.307798][T18179] netlink: 'syz.4.11279': attribute type 7 has an invalid length. [ 2314.311014][T18179] netlink: 'syz.4.11279': attribute type 8 has an invalid length. [ 2315.615426][T18231] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 2315.692263][T18240] netlink: 'syz.4.11302': attribute type 1 has an invalid length. [ 2315.701264][T18240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2315.710684][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11302'. [ 2315.728782][T18242] syzkaller0: entered promiscuous mode [ 2315.730839][T18242] syzkaller0: entered allmulticast mode [ 2316.297622][T18265] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2316.300600][T18265] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 2316.453889][T18277] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2317.085230][T18285] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 2317.108094][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11318'. [ 2317.150415][T18287] team0: Mode changed to "activebackup" [ 2317.153944][T18287] vlan0: entered promiscuous mode [ 2317.160195][T18287] team0: Port device vlan0 added [ 2317.165285][T18287] tipc: Started in network mode [ 2317.167344][T18287] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2317.170124][T18287] tipc: Enabled bearer , priority 0 [ 2317.227263][T18293] sctp: [Deprecated]: syz.1.11316 (pid 18293) Use of int in max_burst socket option deprecated. [ 2317.227263][T18293] Use struct sctp_assoc_value instead [ 2317.260002][T18294] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2317.262539][T18294] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2317.265742][T18294] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2317.268489][T18294] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2317.271106][T18294] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2317.273941][T18294] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2317.275892][T18294] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2317.278845][T18294] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2317.281743][T18294] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2317.286015][T18294] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2317.288785][T18294] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2317.291580][T18294] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2317.593419][ T6121] vhci_hcd: vhci_device speed not set [ 2318.073278][T18306] syzkaller0: entered promiscuous mode [ 2318.075099][T18306] syzkaller0: entered allmulticast mode [ 2318.162945][T22637] tipc: Node number set to 11578026 [ 2318.214221][T18311] team0: Port device vlan0 removed [ 2318.219373][T18311] bond2: (slave macvlan3): Releasing backup interface [ 2318.227343][ T102] tipc: Resetting bearer [ 2318.238957][T18311] team0: Unable to change to the same mode the team is in [ 2318.876810][T18319] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2320.228949][T18350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11338'. [ 2320.293124][T22637] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 2320.433034][T22637] usb 8-1: device descriptor read/64, error -71 [ 2320.585483][T18362] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 2320.705712][T22637] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 2320.842930][T22637] usb 8-1: device descriptor read/64, error -71 [ 2320.953249][T22637] usb usb8-port1: attempt power cycle [ 2321.313041][T22637] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 2321.343552][T22637] usb 8-1: device descriptor read/8, error -71 [ 2321.592950][T22637] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 2321.613428][T22637] usb 8-1: device descriptor read/8, error -71 [ 2321.724094][T22637] usb usb8-port1: unable to enumerate USB device [ 2322.847674][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11359'. [ 2322.850541][T18417] tipc: Started in network mode [ 2322.852153][T18417] tipc: Node identity 7, cluster identity 4711 [ 2322.854377][T18417] tipc: Node number set to 7 [ 2323.277392][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11368'. [ 2323.359568][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11371'. [ 2324.170841][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11377'. [ 2324.667767][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11380'. [ 2324.808275][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11381'. [ 2325.132093][T18484] binder: 18483:18484 ioctl c0306201 80000680 returned -14 [ 2326.528166][T18512] bond1: (slave macvlan3): Releasing backup interface [ 2327.813961][T18536] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2328.106889][T18547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11404'. [ 2328.109870][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11404'. [ 2328.537927][T18557] binder: 18556:18557 ioctl c0306201 0 returned -14 [ 2328.649867][T18564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.780962][T18564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.902368][T18564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.963622][T18564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2329.042080][ T75] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.052267][ T75] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.056289][ T75] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.060612][ T75] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.280750][T18559] Set syz1 is full, maxelem 65536 reached [ 2331.141029][T18641] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2331.478492][T18650] binder: BINDER_SET_CONTEXT_MGR already set [ 2331.480982][T18650] binder: 18649:18650 ioctl 4018620d 80000100 returned -16 [ 2331.485180][T18650] binder: BINDER_SET_CONTEXT_MGR already set [ 2331.487244][T18650] binder: 18649:18650 ioctl 4018620d 800002c0 returned -16 [ 2331.642371][T18660] tipc: Resetting bearer [ 2331.679118][T18660] veth0_macvtap: left allmulticast mode [ 2331.695460][T22637] syz1: Port: 1 Link DOWN [ 2331.697234][ T102] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.700821][ T102] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.705031][ T102] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.708717][ T102] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.412619][T18672] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2332.414816][T18672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2332.417368][T18672] vhci_hcd vhci_hcd.0: Device attached [ 2332.559741][T18685] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2332.682922][T28669] usb 39-1: new high-speed USB device number 31 using vhci_hcd [ 2332.691933][T18694] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2332.882599][T18700] bond1: option mode: unable to set because the bond device is up [ 2332.907751][ T40] audit: type=1326 audit(1755643475.245:22108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.915414][ T40] audit: type=1326 audit(1755643475.245:22109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.922534][ T40] audit: type=1326 audit(1755643475.245:22110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.929608][ T40] audit: type=1326 audit(1755643475.245:22111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.939194][ T40] audit: type=1326 audit(1755643475.245:22112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.948899][ T40] audit: type=1326 audit(1755643475.245:22113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.957594][ T40] audit: type=1326 audit(1755643475.245:22114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.965323][ T40] audit: type=1326 audit(1755643475.245:22115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.972248][ T40] audit: type=1326 audit(1755643475.245:22116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2332.979137][ T40] audit: type=1326 audit(1755643475.245:22117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.9.11459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 2333.184808][T18673] vhci_hcd: connection reset by peer [ 2333.186899][ T1229] vhci_hcd: stop threads [ 2333.188254][ T1229] vhci_hcd: release socket [ 2333.189742][ T1229] vhci_hcd: disconnect device [ 2334.405172][T18751] bond4: option mode: unable to set because the bond device is up [ 2334.459200][T11212] Bluetooth: min 0 < 6 [ 2335.372051][T18774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2335.403226][T18776] syzkaller0: entered promiscuous mode [ 2335.405126][T18776] syzkaller0: entered allmulticast mode [ 2335.669938][T18780] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2335.673146][T18780] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2335.675990][T18780] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2335.678721][T18780] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2335.681307][T18780] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2335.684811][T18780] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2335.686758][T18780] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2335.689399][T18780] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2335.691792][T18780] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2335.694861][T18780] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2335.697979][T18780] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2335.701021][T18780] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2335.702108][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11489'. [ 2335.705739][T18765] Set syz1 is full, maxelem 65536 reached [ 2335.718133][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11489'. [ 2336.035057][T18803] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2336.482983][T11212] Bluetooth: hci3: command tx timeout [ 2336.675539][T18806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2336.775884][T18813] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2336.778555][T18813] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2336.781247][T18813] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2336.784214][T18813] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2336.787628][T18813] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2336.790625][T18813] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2336.793445][T18813] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2336.796866][T18813] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2336.800009][T18813] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2336.803446][T18813] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2336.806808][T18813] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2336.810253][T18813] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2337.358990][T18836] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2337.361604][T18836] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2337.365361][T18836] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2337.368832][T18836] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2337.371655][T18836] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2337.374412][T18836] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2337.376520][T18836] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2337.379335][T18836] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2337.381903][T18836] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2337.387054][T18836] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2337.392899][T18836] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2337.395970][T18836] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2337.420979][T18840] binder: BINDER_SET_CONTEXT_MGR already set [ 2337.424044][T18840] binder: 18839:18840 ioctl 4018620d 80000140 returned -16 [ 2337.752035][T18855] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2337.755129][T18855] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2337.757803][T18855] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2337.760620][T18855] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2337.763627][T18855] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2337.766080][T18855] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2337.768525][T18855] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2337.771873][T18855] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2337.775101][T18855] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2337.778416][T18855] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2337.781793][T18855] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2337.785172][T18855] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2337.805297][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11519'. [ 2337.843045][T28669] vhci_hcd: vhci_device speed not set [ 2337.867019][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11522'. [ 2337.871874][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11522'. [ 2338.066233][T18875] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2338.068809][T18875] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2338.071789][T18875] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2338.075531][T18875] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2338.078641][T18875] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2338.081568][T18875] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2338.083685][T18875] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2338.086489][T18875] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2338.088986][T18875] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2338.091588][T18875] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2338.091832][T18878] bond1: option mode: unable to set because the bond device is up [ 2338.094235][T18875] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2338.099357][T18875] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2338.138294][T18886] binder: BINDER_SET_CONTEXT_MGR already set [ 2338.140637][T18886] binder: 18885:18886 ioctl 4018620d 80000140 returned -16 [ 2338.147220][T18886] binder: BINDER_SET_CONTEXT_MGR already set [ 2338.149569][T18886] binder: 18885:18886 ioctl 4018620d 80000040 returned -16 [ 2338.290252][T18896] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 2338.292786][T18896] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2338.296168][T18896] vhci_hcd vhci_hcd.0: Device attached [ 2338.382009][T18907] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2338.386252][T18907] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2338.389872][T18907] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2338.394579][T18907] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2338.397507][T18907] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2338.400319][T18907] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2338.402240][T18907] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2338.407500][T18907] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2338.410279][T18907] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2338.413549][T18907] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2338.416878][T18907] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2338.420433][T18907] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2338.553493][ T6103] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 2339.072206][T18899] vhci_hcd: connection reset by peer [ 2339.076170][ T1229] vhci_hcd: stop threads [ 2339.078080][ T1229] vhci_hcd: release socket [ 2339.079881][ T1229] vhci_hcd: disconnect device [ 2339.737584][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11551'. [ 2339.900812][T18952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2339.902995][T18952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2339.905537][T18952] vhci_hcd vhci_hcd.0: Device attached [ 2340.172955][T28669] usb 39-1: new high-speed USB device number 32 using vhci_hcd [ 2340.675042][T18953] vhci_hcd: connection reset by peer [ 2340.677013][ T102] vhci_hcd: stop threads [ 2340.678376][ T102] vhci_hcd: release socket [ 2340.679820][ T102] vhci_hcd: disconnect device [ 2340.720721][T18968] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2340.724302][T18968] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2340.745544][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11562'. [ 2340.751529][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11562'. [ 2340.804270][T18975] syzkaller0: entered promiscuous mode [ 2340.806408][T18975] syzkaller0: entered allmulticast mode [ 2341.031407][T18985] bond2: option mode: unable to set because the bond device is up [ 2341.094414][T18990] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2341.096953][T18990] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2343.081891][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11597'. [ 2343.307696][T19079] syzkaller0: entered promiscuous mode [ 2343.310174][T19079] syzkaller0: entered allmulticast mode [ 2343.437240][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11606'. [ 2343.672922][ T6103] vhci_hcd: vhci_device speed not set [ 2343.680864][T19086] geneve2: entered promiscuous mode [ 2344.418880][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11615'. [ 2345.292918][T28669] vhci_hcd: vhci_device speed not set [ 2345.550199][T19140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2345.573791][T19143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2346.880641][T19176] team0: Mode changed to "activebackup" [ 2346.884261][T19176] vlan0: entered promiscuous mode [ 2346.891310][T19176] team0: Port device vlan0 added [ 2346.896631][T19176] tipc: Enabled bearer , priority 0 [ 2347.333059][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11645'. [ 2348.307566][T19207] Bluetooth: MGMT ver 1.23 [ 2348.309281][T19207] Bluetooth: hci0: invalid len left 7, exp >= 175 [ 2348.357100][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11655'. [ 2348.585877][T19233] binder: BINDER_SET_CONTEXT_MGR already set [ 2348.587850][T19233] binder: 19232:19233 ioctl 4018620d 80000140 returned -16 [ 2348.592230][T19233] binder: BINDER_SET_CONTEXT_MGR already set [ 2348.595587][T19233] binder: 19232:19233 ioctl 4018620d 80000040 returned -16 [ 2348.610750][T19237] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11665'. [ 2348.632738][T19237] team0: Mode "" not found [ 2348.795604][T19249] binder: BINDER_SET_CONTEXT_MGR already set [ 2348.797538][T19249] binder: 19248:19249 ioctl 4018620d 80000100 returned -16 [ 2348.802299][T19249] binder: BINDER_SET_CONTEXT_MGR already set [ 2348.805570][T19249] binder: 19248:19249 ioctl 4018620d 80004a80 returned -16 [ 2349.294308][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.532083][T19259] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2349.767900][T19275] binder: BINDER_SET_CONTEXT_MGR already set [ 2349.775433][T19275] binder: 19274:19275 ioctl 4018620d 80000140 returned -16 [ 2349.781160][T19275] binder: BINDER_SET_CONTEXT_MGR already set [ 2349.783952][T19275] binder: 19274:19275 ioctl 4018620d 80000040 returned -16 [ 2349.829050][T19280] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2350.022915][ T8353] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2350.173035][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2350.176956][ T8353] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2350.179936][ T8353] usb 8-1: config 0 has no interface number 0 [ 2350.185472][ T8353] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2350.191394][ T8353] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.194348][ T8353] usb 8-1: Product: syz [ 2350.195772][ T8353] usb 8-1: Manufacturer: syz [ 2350.197376][ T8353] usb 8-1: SerialNumber: syz [ 2350.199798][ T8353] usb 8-1: config 0 descriptor?? [ 2350.204084][ T8353] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2350.207162][ T8353] usb 8-1: selecting invalid altsetting 1 [ 2350.209076][ T8353] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2350.212075][ T8353] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2350.216235][ T8353] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2350.218997][ T8353] usb 8-1: media controller created [ 2350.225788][ T8353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2351.282985][ T8353] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2351.285372][ T8353] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2351.313460][T19277] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2351.319445][ T8353] usb 8-1: USB disconnect, device number 43 [ 2353.109159][T19359] syzkaller0: entered promiscuous mode [ 2353.110993][T19359] syzkaller0: entered allmulticast mode [ 2353.391767][T11212] Bluetooth: hci3: Malformed Event: 0x02 [ 2353.585549][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11718'. [ 2353.590573][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11718'. [ 2354.031869][T19399] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 2354.034698][T19399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2354.038032][T19399] vhci_hcd vhci_hcd.0: Device attached [ 2354.284287][T27091] usb 39-1: new high-speed USB device number 33 using vhci_hcd [ 2354.592237][T19422] binder: BINDER_SET_CONTEXT_MGR already set [ 2354.594369][T19422] binder: 19421:19422 ioctl 4018620d 80000040 returned -16 [ 2354.769875][T19401] vhci_hcd: connection reset by peer [ 2354.771984][T18837] vhci_hcd: stop threads [ 2354.773821][T18837] vhci_hcd: release socket [ 2354.775355][T18837] vhci_hcd: disconnect device [ 2355.023121][T27805] usb 14-1: new full-speed USB device number 58 using dummy_hcd [ 2355.175068][T27805] usb 14-1: config 1 interface 0 has no altsetting 0 [ 2355.178884][T27805] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2355.181864][T27805] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.184589][T27805] usb 14-1: Product: syz [ 2355.186030][T27805] usb 14-1: Manufacturer: syz [ 2355.187574][T27805] usb 14-1: SerialNumber: syz [ 2355.521274][T19446] syzkaller0: entered promiscuous mode [ 2355.524316][T19446] syzkaller0: entered allmulticast mode [ 2355.703279][T19460] team0: Unable to change to the same mode the team is in [ 2355.796379][T27805] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2356.020350][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11760'. [ 2356.199513][ C0] usblp0: nonzero write bulk status received: -71 [ 2356.201779][ T8353] usb 14-1: USB disconnect, device number 58 [ 2356.205032][ T8353] usblp0: removed [ 2356.298269][T19490] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2357.544021][T19523] random: crng reseeded on system resumption [ 2357.662668][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2357.666526][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2358.112552][T11212] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 2358.112570][T11212] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2358.147628][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11792'. [ 2358.153309][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11792'. [ 2358.975993][T19573] team0: Port device vlan0 removed [ 2358.984124][T18837] tipc: Resetting bearer [ 2359.197911][T19582] binder: BINDER_SET_CONTEXT_MGR already set [ 2359.200470][T19582] binder: 19581:19582 ioctl 4018620d 80000100 returned -16 [ 2359.207021][T19582] binder: BINDER_SET_CONTEXT_MGR already set [ 2359.209471][T19582] binder: 19581:19582 ioctl 4018620d 80004a80 returned -16 [ 2359.239432][ C2] sd 0:0:0:0: [sda] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2359.242815][ C2] sd 0:0:0:0: [sda] tag#4 CDB: Test Unit Ready [ 2359.433079][T27091] vhci_hcd: vhci_device speed not set [ 2359.673077][T19591] nbd0: detected capacity change from 0 to 127 [ 2359.683249][T11212] block nbd0: Receive control failed (result -104) [ 2359.683283][T21300] block nbd0: Receive control failed (result -32) [ 2360.085762][T19601] syzkaller1: entered promiscuous mode [ 2360.087691][T19601] syzkaller1: entered allmulticast mode [ 2360.314618][T19616] 9pnet_fd: Insufficient options for proto=fd [ 2360.353147][T19616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2360.355589][T19616] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2360.359190][T19616] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2360.362365][T19616] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2360.365025][T19616] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2360.368427][T19616] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2360.647870][T19640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2360.973020][ T8353] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2361.133085][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2361.137398][ T8353] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2361.140710][ T8353] usb 8-1: config 0 has no interface number 0 [ 2361.145266][ T8353] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2361.148373][ T8353] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.151211][ T8353] usb 8-1: Product: syz [ 2361.152558][ T8353] usb 8-1: Manufacturer: syz [ 2361.154108][ T8353] usb 8-1: SerialNumber: syz [ 2361.156362][ T8353] usb 8-1: config 0 descriptor?? [ 2361.159660][ T8353] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2361.162469][ T8353] usb 8-1: selecting invalid altsetting 1 [ 2361.164338][ T8353] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2361.167382][ T8353] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2361.171243][ T8353] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2361.174036][ T8353] usb 8-1: media controller created [ 2361.180593][ T8353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2361.361763][ T8353] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2361.364915][ T8353] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2361.368353][ T8353] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2361.395359][ T8353] usb 8-1: USB disconnect, device number 44 [ 2361.475792][T19652] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2361.894692][T19671] tipc: Started in network mode [ 2361.896323][T19671] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2361.899328][T19671] tipc: Enabling of bearer rejected, failed to enable media [ 2361.951468][T19676] binder_alloc: 19675: binder_alloc_buf, no vma [ 2362.105823][T19686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2362.107919][T19686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2362.113763][T19686] vhci_hcd vhci_hcd.0: Device attached [ 2362.373026][ T8145] usb 43-1: new high-speed USB device number 23 using vhci_hcd [ 2362.412981][T21300] Bluetooth: hci4: command 0x0c1a tx timeout [ 2362.413016][T11212] Bluetooth: hci3: command 0x0c1a tx timeout [ 2362.877596][T19687] vhci_hcd: connection reset by peer [ 2362.879778][T18837] vhci_hcd: stop threads [ 2362.881220][T18837] vhci_hcd: release socket [ 2362.882786][T18837] vhci_hcd: disconnect device [ 2362.963034][T27091] usb 14-1: new high-speed USB device number 59 using dummy_hcd [ 2363.122956][T27091] usb 14-1: Using ep0 maxpacket: 32 [ 2363.126780][T27091] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 2363.130116][T27091] usb 14-1: config 0 has no interface number 0 [ 2363.134971][T27091] usb 14-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2363.138699][T27091] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.141892][T27091] usb 14-1: Product: syz [ 2363.143745][T27091] usb 14-1: Manufacturer: syz [ 2363.145778][T27091] usb 14-1: SerialNumber: syz [ 2363.149095][T27091] usb 14-1: config 0 descriptor?? [ 2363.153195][T27091] usb 14-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2363.157141][T27091] usb 14-1: selecting invalid altsetting 1 [ 2363.159992][T27091] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2363.165039][T27091] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2363.169579][T27091] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2363.173424][T27091] usb 14-1: media controller created [ 2363.183713][T27091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2363.355043][T27091] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2363.357302][T27091] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2363.360087][T27091] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2363.371471][T27091] usb 14-1: USB disconnect, device number 59 [ 2363.522299][T19713] syzkaller0: entered promiscuous mode [ 2363.525184][T19713] syzkaller0: entered allmulticast mode [ 2363.941619][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11856'. [ 2364.204818][T19738] binder: BINDER_SET_CONTEXT_MGR already set [ 2364.208825][T19738] binder: 19737:19738 ioctl 4018620d 80000040 returned -16 [ 2364.242142][T19742] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11861'. [ 2364.483050][T11212] Bluetooth: hci3: command 0x0c1a tx timeout [ 2364.492996][T11212] Bluetooth: hci4: command 0x0c1a tx timeout [ 2364.560956][T19752] misc userio: Invalid payload size [ 2364.677991][T19754] loop6: detected capacity change from 0 to 7 [ 2364.685776][T15184] Dev loop6: unable to read RDB block 7 [ 2364.687858][T15184] loop6: AHDI p1 p2 p4 [ 2364.689515][T15184] loop6: partition table partially beyond EOD, truncated [ 2364.693268][T15184] loop6: p1 start 926365495 is beyond EOD, truncated [ 2364.698906][T19754] Dev loop6: unable to read RDB block 7 [ 2364.701329][T19754] loop6: AHDI p1 p2 p4 [ 2364.703463][T19754] loop6: partition table partially beyond EOD, truncated [ 2364.706856][T19754] loop6: p1 start 926365495 is beyond EOD, truncated [ 2365.549880][T19765] syzkaller0: entered promiscuous mode [ 2365.552605][T19765] syzkaller0: entered allmulticast mode [ 2365.755820][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11871'. [ 2366.122938][ T8353] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2366.274996][ T8353] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2366.280969][ T8353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2366.286545][ T8353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2366.290500][ T8353] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2366.296823][ T8353] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2366.301025][ T8353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.310709][ T8353] usb 9-1: config 0 descriptor?? [ 2366.471981][T19790] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2366.563182][T11212] Bluetooth: hci4: command 0x0c1a tx timeout [ 2366.563195][T21300] Bluetooth: hci3: command 0x0c1a tx timeout [ 2366.743624][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.750514][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.757830][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.761086][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.764349][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.767381][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.770369][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.773380][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.776335][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.779315][ T8353] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 2366.788803][ T8353] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2366.994525][ T6121] usb 9-1: USB disconnect, device number 13 [ 2367.279997][T19803] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2367.431102][T19815] syz.1.11883: attempt to access beyond end of device [ 2367.431102][T19815] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2367.513175][ T8145] vhci_hcd: vhci_device speed not set [ 2367.637607][T19823] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 2367.641842][T19823] tipc: Enabled bearer , priority 10 [ 2368.710643][T19848] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2368.785772][T19851] binder: BINDER_SET_CONTEXT_MGR already set [ 2368.788784][T19851] binder: 19850:19851 ioctl 4018620d 80000100 returned -16 [ 2368.795708][T19851] binder: BINDER_SET_CONTEXT_MGR already set [ 2368.799154][T19851] binder: 19850:19851 ioctl 4018620d 80004a80 returned -16 [ 2368.866781][T19857] tipc: Enabling of bearer rejected, already enabled [ 2368.926387][T19862] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11900'. [ 2369.609840][T19886] @: renamed from vlan0 [ 2370.172132][T19891] binder: BINDER_SET_CONTEXT_MGR already set [ 2370.186802][T19891] binder: 19890:19891 ioctl 4018620d 80000140 returned -16 [ 2370.194735][T19891] binder: BINDER_SET_CONTEXT_MGR already set [ 2370.196714][T19891] binder: 19890:19891 ioctl 4018620d 80000040 returned -16 [ 2370.345219][T19896] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2370.840673][T19888] Set syz1 is full, maxelem 65536 reached [ 2371.308362][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 2371.308396][ T40] audit: type=1326 audit(1755643513.645:22155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.333380][ T40] audit: type=1326 audit(1755643513.645:22156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.341698][ T40] audit: type=1326 audit(1755643513.645:22157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.350570][ T40] audit: type=1326 audit(1755643513.645:22158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.358243][ T40] audit: type=1326 audit(1755643513.645:22159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.365734][ T40] audit: type=1326 audit(1755643513.645:22160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.372473][ T40] audit: type=1326 audit(1755643513.645:22161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19925 comm="syz.4.11922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 2371.444567][T19933] netlink: 188 bytes leftover after parsing attributes in process `syz.9.11923'. [ 2372.085910][T19925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2372.645957][T19964] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 2372.645957][T19964] program syz.3.11932 not setting count and/or reply_len properly [ 2374.521284][T20029] binder: BINDER_SET_CONTEXT_MGR already set [ 2374.523885][T20029] binder: 20028:20029 ioctl 4018620d 80000040 returned -16 [ 2375.391637][T20071] binder: BINDER_SET_CONTEXT_MGR already set [ 2375.394278][T20071] binder: 20070:20071 ioctl 4018620d 80000040 returned -16 [ 2375.723990][T20087] batadv_slave_1: entered promiscuous mode [ 2376.443951][T20079] batadv_slave_1: left promiscuous mode [ 2377.791356][T20149] binder: 20148:20149 ioctl c0306201 0 returned -14 [ 2377.884162][T20161] netlink: 'syz.4.11992': attribute type 16 has an invalid length. [ 2377.887517][T20161] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.11992'. [ 2379.012927][T28669] usb 14-1: new high-speed USB device number 60 using dummy_hcd [ 2379.152905][T28669] usb 14-1: device descriptor read/64, error -71 [ 2379.392906][T28669] usb 14-1: new high-speed USB device number 61 using dummy_hcd [ 2379.523660][T28669] usb 14-1: device descriptor read/64, error -71 [ 2379.633138][T28669] usb usb14-port1: attempt power cycle [ 2379.983743][T28669] usb 14-1: new high-speed USB device number 62 using dummy_hcd [ 2380.005239][T28669] usb 14-1: device descriptor read/8, error -71 [ 2380.242977][T28669] usb 14-1: new high-speed USB device number 63 using dummy_hcd [ 2380.264368][T28669] usb 14-1: device descriptor read/8, error -71 [ 2380.383288][T28669] usb usb14-port1: unable to enumerate USB device [ 2381.367217][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12022'. [ 2381.374808][T20236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12022'. [ 2383.879424][T20295] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2383.962222][T20303] binder: 20302:20303 ioctl 4018620d 0 returned -22 [ 2383.966220][T20303] binder: BINDER_SET_CONTEXT_MGR already set [ 2383.968316][T20303] binder: 20302:20303 ioctl 4018620d 80004a80 returned -16 [ 2384.017592][T20307] input: syz1 as /devices/virtual/input/input65 [ 2384.701561][T20312] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2384.703804][T20312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2384.706369][T20312] vhci_hcd vhci_hcd.0: Device attached [ 2384.944132][ T6121] usb 43-1: new high-speed USB device number 24 using vhci_hcd [ 2384.974183][T20328] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2385.177126][T20340] binder: BINDER_SET_CONTEXT_MGR already set [ 2385.179238][T20340] binder: 20339:20340 ioctl 4018620d 80000040 returned -16 [ 2385.525294][T20313] vhci_hcd: connection reset by peer [ 2385.527377][T13097] vhci_hcd: stop threads [ 2385.528919][T13097] vhci_hcd: release socket [ 2385.530645][T13097] vhci_hcd: disconnect device [ 2386.094498][T20366] binder: 20365:20366 ioctl c0306201 0 returned -14 [ 2386.988507][T20392] binder: 20391:20392 ioctl c0306201 0 returned -14 [ 2387.185394][T20403] binder: BINDER_SET_CONTEXT_MGR already set [ 2387.187508][T20403] binder: 20402:20403 ioctl 4018620d 80004a80 returned -16 [ 2387.980219][T20425] binder: BINDER_SET_CONTEXT_MGR already set [ 2387.982315][T20425] binder: 20424:20425 ioctl 4018620d 80000140 returned -16 [ 2387.987256][T20425] binder: BINDER_SET_CONTEXT_MGR already set [ 2387.989532][T20425] binder: 20424:20425 ioctl 4018620d 80000040 returned -16 [ 2388.121938][T20432] binder: 20430:20432 ioctl c0306201 0 returned -14 [ 2389.186255][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12100'. [ 2389.191075][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12100'. [ 2389.289385][T20465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2389.292099][T20465] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2389.295105][T20465] vhci_hcd vhci_hcd.0: Device attached [ 2389.321432][T20469] binder: 20468:20469 ioctl c0306201 0 returned -14 [ 2389.402616][T20477] tipc: Enabling of bearer rejected, failed to enable media [ 2390.115112][T20466] vhci_hcd: connection reset by peer [ 2390.117955][ T1229] vhci_hcd: stop threads [ 2390.119460][ T1229] vhci_hcd: release socket [ 2390.120831][ T1229] vhci_hcd: disconnect device [ 2390.183192][ T6121] vhci_hcd: vhci_device speed not set [ 2390.245044][T17795] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.247422][T17795] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.254001][T17795] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.256830][T17795] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.259088][T17795] block nbd0: Dead connection, failed to find a fallback [ 2390.261735][T17795] block nbd0: shutting down sockets [ 2390.264660][T17795] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.265913][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12111'. [ 2390.267523][T17795] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2390.267563][T17795] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.273842][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12111'. [ 2390.275337][T17795] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2390.283263][T17795] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.286412][T17795] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.288840][T17795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.291957][T17795] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.294760][T16411] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.297535][T16411] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.300648][T16411] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.304108][T16411] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.307216][T16411] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.310915][T16411] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2390.314173][T16411] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.317707][T16411] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2390.321034][T16411] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.324591][T16411] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.333335][T16411] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.336704][T16411] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.339805][T16411] ldm_validate_partition_table(): Disk read failed. [ 2390.342620][T16411] Dev nbd0: unable to read RDB block 0 [ 2390.349204][T16411] nbd0: unable to read partition table [ 2390.390117][T20499] binder: BINDER_SET_CONTEXT_MGR already set [ 2390.392182][T20499] binder: 20498:20499 ioctl 4018620d 80000100 returned -16 [ 2390.394658][T16411] ldm_validate_partition_table(): Disk read failed. [ 2390.395114][T16411] Dev nbd0: unable to read RDB block 0 [ 2390.399622][T16411] nbd0: unable to read partition table [ 2390.401988][T20499] binder: 20498:20499 ioctl c0306201 0 returned -14 [ 2390.411120][T20499] binder: BINDER_SET_CONTEXT_MGR already set [ 2390.414416][T20499] binder: 20498:20499 ioctl 4018620d 80004a80 returned -16 [ 2390.655362][T20511] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2390.665727][T20511] netlink: 456 bytes leftover after parsing attributes in process `syz.9.12114'. [ 2390.787652][T20515] tipc: Enabling of bearer rejected, failed to enable media [ 2391.242307][T20520] veth0_macvtap: left allmulticast mode [ 2391.289675][ T1229] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.292544][ T1229] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.296442][ T1229] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.299373][ T1229] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.391983][T20527] binder: 20525:20527 ioctl 4018620d 0 returned -22 [ 2391.397363][T20527] binder: BINDER_SET_CONTEXT_MGR already set [ 2391.400344][T20527] binder: 20525:20527 ioctl 4018620d 80000040 returned -16 [ 2391.405410][T20524] syzkaller0: entered promiscuous mode [ 2391.407558][T20524] syzkaller0: entered allmulticast mode [ 2391.412391][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12122'. [ 2391.418820][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12122'. [ 2391.426175][T20533] binder: BINDER_SET_CONTEXT_MGR already set [ 2391.428783][T20533] binder: 20531:20533 ioctl 4018620d 80000100 returned -16 [ 2391.436323][T20533] binder: BINDER_SET_CONTEXT_MGR already set [ 2391.438548][T20533] binder: 20531:20533 ioctl 4018620d 80004a80 returned -16 [ 2392.373000][T22596] usb 14-1: new high-speed USB device number 64 using dummy_hcd [ 2392.494283][T20535] Set syz1 is full, maxelem 65536 reached [ 2392.542938][T22596] usb 14-1: Using ep0 maxpacket: 8 [ 2392.545969][T22596] usb 14-1: config 0 has no interfaces? [ 2392.549253][T22596] usb 14-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2392.552111][T22596] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.555608][T22596] usb 14-1: Product: syz [ 2392.557244][T22596] usb 14-1: Manufacturer: syz [ 2392.559137][T22596] usb 14-1: SerialNumber: syz [ 2392.562110][T22596] usb 14-1: config 0 descriptor?? [ 2392.673543][T20564] sctp: [Deprecated]: syz.4.12131 (pid 20564) Use of int in maxseg socket option. [ 2392.673543][T20564] Use struct sctp_assoc_value instead [ 2392.785115][T20566] binder: BINDER_SET_CONTEXT_MGR already set [ 2392.787113][T20566] binder: 20565:20566 ioctl 4018620d 80000040 returned -16 [ 2393.027797][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12135'. [ 2393.035699][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12135'. [ 2394.305977][T20600] binder: BINDER_SET_CONTEXT_MGR already set [ 2394.307949][T20600] binder: 20599:20600 ioctl 4018620d 80000140 returned -16 [ 2394.311909][T20600] binder: BINDER_SET_CONTEXT_MGR already set [ 2394.313914][T20600] binder: 20599:20600 ioctl 4018620d 80000040 returned -16 [ 2394.675975][T27805] usb 14-1: USB disconnect, device number 64 [ 2394.752624][T20608] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12145'. [ 2394.872556][T20613] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2394.874656][T20613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2394.877310][T20613] vhci_hcd vhci_hcd.0: Device attached [ 2395.066203][T20623] netdevsim netdevsim9 : renamed from netdevsim0 (while UP) [ 2395.112915][T27805] usb 39-1: new high-speed USB device number 34 using vhci_hcd [ 2395.681709][T20616] vhci_hcd: connection reset by peer [ 2395.684412][ T13] vhci_hcd: stop threads [ 2395.685815][ T13] vhci_hcd: release socket [ 2395.687286][ T13] vhci_hcd: disconnect device [ 2396.303098][ T8353] usb 14-1: new high-speed USB device number 65 using dummy_hcd [ 2396.452993][ T8353] usb 14-1: Using ep0 maxpacket: 8 [ 2396.464343][ T8353] usb 14-1: unable to get BOS descriptor or descriptor too short [ 2396.469124][ T8353] usb 14-1: config 4 has an invalid interface number: 30 but max is 0 [ 2396.472206][ T8353] usb 14-1: config 4 has no interface number 0 [ 2396.475351][ T8353] usb 14-1: config 4 interface 30 has no altsetting 0 [ 2396.481322][ T8353] usb 14-1: string descriptor 0 read error: -22 [ 2396.484460][ T8353] usb 14-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 2396.487767][ T8353] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.490281][T20643] binder_alloc: 20642: binder_alloc_buf, no vma [ 2396.494366][ T8353] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 2396.497165][ T8353] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2396.500306][ T8353] dvb-usb: bulk message failed: -22 (2/0) [ 2396.516362][ T8353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2396.522664][ T8353] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 2396.526130][ T8353] usb 14-1: media controller created [ 2396.528413][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.533707][ T8353] dw2102: i2c transfer failed. [ 2396.535362][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.537315][ T8353] dw2102: i2c transfer failed. [ 2396.539053][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.541185][ T8353] dw2102: i2c transfer failed. [ 2396.544173][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.546285][ T8353] dw2102: i2c transfer failed. [ 2396.548185][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.549975][ T8353] dw2102: i2c transfer failed. [ 2396.551492][ T8353] dvb-usb: bulk message failed: -22 (6/0) [ 2396.553941][ T8353] dw2102: i2c transfer failed. [ 2396.555512][ T8353] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2396.562016][ T8353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2396.568915][ T8353] dvb-usb: bulk message failed: -22 (3/0) [ 2396.570949][ T8353] dw2102: command 0x0e transfer failed. [ 2396.574265][ T8353] dvb-usb: bulk message failed: -22 (3/0) [ 2396.576123][ T8353] dw2102: command 0x0e transfer failed. [ 2396.883151][ T8353] dvb-usb: bulk message failed: -22 (3/0) [ 2396.888309][ T8353] dw2102: command 0x0e transfer failed. [ 2396.892021][ T8353] dvb-usb: bulk message failed: -22 (3/0) [ 2396.897119][ T8353] dw2102: command 0x0e transfer failed. [ 2396.901115][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2396.907154][ T8353] dw2102: command 0x51 transfer failed. [ 2396.911277][ T8353] dvb-usb: bulk message failed: -22 (5/0) [ 2396.913685][ T8353] dw2102: i2c probe for address 0x68 failed. [ 2396.915879][ T8353] dvb-usb: bulk message failed: -22 (5/0) [ 2396.918438][ T8353] dw2102: i2c probe for address 0x69 failed. [ 2396.920993][ T8353] dvb-usb: bulk message failed: -22 (5/0) [ 2396.925653][ T8353] dw2102: i2c probe for address 0x6a failed. [ 2396.928471][ T8353] dw2102: probing for demodulator failed. Is the external power switched on? [ 2396.932590][ T8353] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 2397.043263][ T8353] rc_core: IR keymap rc-tt-1500 not found [ 2397.045412][ T8353] Registered IR keymap rc-empty [ 2397.050591][ T8353] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 2397.058845][ T8353] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input66 [ 2397.066948][ T8353] dvb-usb: schedule remote query interval to 250 msecs. [ 2397.069876][ T8353] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2397.072638][ T8353] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 2397.324454][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2397.327425][ T8353] dw2102: i2c transfer failed. [ 2397.522028][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2397.530796][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2397.594601][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2397.599129][ T8353] dw2102: i2c transfer failed. [ 2397.832103][T20686] program syz.3.12169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2397.852997][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2397.855844][ T8353] dw2102: i2c transfer failed. [ 2398.056517][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12170'. [ 2398.122937][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2398.125668][ T8353] dw2102: i2c transfer failed. [ 2398.392935][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2398.394964][ T8353] dw2102: i2c transfer failed. [ 2398.653127][ T8353] dvb-usb: bulk message failed: -22 (1/0) [ 2398.660205][ T8353] dw2102: i2c transfer failed. [ 2398.873061][ T6121] usb 14-1: USB disconnect, device number 65 [ 2398.922040][ T6121] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 2399.902767][T20756] binder: BINDER_SET_CONTEXT_MGR already set [ 2399.905191][T20756] binder: 20755:20756 ioctl 4018620d 80000140 returned -16 [ 2399.911743][T20756] binder: BINDER_SET_CONTEXT_MGR already set [ 2399.915393][T20756] binder: 20755:20756 ioctl 4018620d 80000040 returned -16 [ 2400.118769][T20769] syzkaller1: entered promiscuous mode [ 2400.120879][T20769] syzkaller1: entered allmulticast mode [ 2400.232971][T27805] vhci_hcd: vhci_device speed not set [ 2400.971393][T20800] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 2402.073071][ T8353] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2402.233116][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2402.235678][ T8353] usb 8-1: no configurations [ 2402.237122][ T8353] usb 8-1: can't read configurations, error -22 [ 2402.373261][ T8353] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2402.532984][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2402.535148][ T8353] usb 8-1: no configurations [ 2402.536680][ T8353] usb 8-1: can't read configurations, error -22 [ 2402.539383][ T8353] usb usb8-port1: attempt power cycle [ 2402.883093][ T8353] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 2402.913696][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2402.915864][ T8353] usb 8-1: no configurations [ 2402.917427][ T8353] usb 8-1: can't read configurations, error -22 [ 2403.053068][ T8353] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2403.073372][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 2403.075548][ T8353] usb 8-1: no configurations [ 2403.077066][ T8353] usb 8-1: can't read configurations, error -22 [ 2403.079440][ T8353] usb usb8-port1: unable to enumerate USB device [ 2404.933109][T20873] binder: BINDER_SET_CONTEXT_MGR already set [ 2404.935079][T20873] binder: 20871:20873 ioctl 4018620d 80000140 returned -16 [ 2404.940471][T20873] binder: BINDER_SET_CONTEXT_MGR already set [ 2404.943384][T20873] binder: 20871:20873 ioctl 4018620d 80000040 returned -16 [ 2405.161725][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12241'. [ 2405.488177][T20888] binder: 20887:20888 unknown command 0 [ 2405.490691][T20888] binder: 20887:20888 ioctl c0306201 80000080 returned -22 [ 2405.496300][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2405.803260][T20898] syzkaller1: entered promiscuous mode [ 2405.805060][T20898] syzkaller1: entered allmulticast mode [ 2407.753068][T22596] usb 14-1: new high-speed USB device number 66 using dummy_hcd [ 2407.763685][T20936] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2407.922986][T22596] usb 14-1: Using ep0 maxpacket: 16 [ 2407.926552][T22596] usb 14-1: config 0 has no interfaces? [ 2407.929931][T22596] usb 14-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 2407.933779][T22596] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.936426][T22596] usb 14-1: Product: syz [ 2407.937831][T22596] usb 14-1: Manufacturer: syz [ 2407.939417][T22596] usb 14-1: SerialNumber: syz [ 2407.941688][T22596] usb 14-1: config 0 descriptor?? [ 2408.230906][ T8353] usb 14-1: USB disconnect, device number 66 [ 2408.634914][T20948] binder: 20947:20948 unknown command 0 [ 2408.637810][T20948] binder: 20947:20948 ioctl c0306201 80000080 returned -22 [ 2408.642384][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12261'. [ 2409.152930][ T8145] usb 14-1: new high-speed USB device number 67 using dummy_hcd [ 2409.178471][T20965] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2409.305176][ T8145] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 2409.309425][ T8145] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2409.314445][ T8145] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2409.319206][ T8145] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2409.324413][ T8145] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2409.330439][ T8145] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2409.334427][ T8145] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.341096][ T8145] usb 14-1: config 0 descriptor?? [ 2409.344589][T20960] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2409.752900][T22830] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2409.758025][ T8145] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 2409.763442][ T8145] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2409.913004][T22830] usb 8-1: Using ep0 maxpacket: 32 [ 2409.916356][T22830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.919652][T22830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2409.924845][T22830] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2409.927848][T22830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.930738][T22830] usb 8-1: Product: syz [ 2409.932073][T22830] usb 8-1: Manufacturer: syz [ 2409.933665][T22830] usb 8-1: SerialNumber: syz [ 2409.936161][T22830] usb 8-1: config 0 descriptor?? [ 2410.016582][T22596] usb 14-1: USB disconnect, device number 67 [ 2410.142777][ T8353] usb 8-1: USB disconnect, device number 49 [ 2410.725249][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2410.903182][T21001] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2411.740075][T21018] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2411.741917][T21018] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2411.746534][T21018] vhci_hcd vhci_hcd.0: Device attached [ 2411.993034][ T8353] usb 43-1: new high-speed USB device number 25 using vhci_hcd [ 2412.516532][T21019] vhci_hcd: connection reset by peer [ 2412.518412][ T13] vhci_hcd: stop threads [ 2412.520311][ T13] vhci_hcd: release socket [ 2412.522281][ T13] vhci_hcd: disconnect device [ 2413.182700][T21047] netlink: 51 bytes leftover after parsing attributes in process `syz.3.12291'. [ 2413.492803][T21033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2413.756690][T21062] binder: BINDER_SET_CONTEXT_MGR already set [ 2413.758982][T21062] binder: 21061:21062 ioctl 4018620d 800000c0 returned -16 [ 2413.761822][T21062] binder: 21061:21062 unknown command 0 [ 2413.763949][T21062] binder: 21061:21062 ioctl c0306201 80000080 returned -22 [ 2414.174889][T21075] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 2414.177427][T21075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2414.188308][T21075] vhci_hcd vhci_hcd.0: Device attached [ 2414.427744][T21083] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2414.443699][ T6121] usb 55-1: new high-speed USB device number 3 using vhci_hcd [ 2414.939567][T21076] vhci_hcd: connection reset by peer [ 2414.942354][ T75] vhci_hcd: stop threads [ 2414.943871][ T75] vhci_hcd: release socket [ 2414.945425][ T75] vhci_hcd: disconnect device [ 2415.242335][T21099] binder: BINDER_SET_CONTEXT_MGR already set [ 2415.244494][T21099] binder: 21098:21099 ioctl 4018620d 800000c0 returned -16 [ 2415.247374][T21099] binder: 21098:21099 unknown command 0 [ 2415.249428][T21099] binder: 21098:21099 ioctl c0306201 80000080 returned -22 [ 2415.252456][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12307'. [ 2415.256588][T21099] binder: BINDER_SET_CONTEXT_MGR already set [ 2415.258493][T21099] binder: 21098:21099 ioctl 4018620d 80000040 returned -16 [ 2417.123119][ T8353] vhci_hcd: vhci_device speed not set [ 2417.215026][T21130] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2417.217560][T21130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2417.220521][T21130] vhci_hcd vhci_hcd.0: Device attached [ 2417.363084][T28669] usb 14-1: new high-speed USB device number 68 using dummy_hcd [ 2417.453680][ T6103] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 2417.515152][T28669] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.520000][T28669] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2417.524197][T28669] usb 14-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2417.527681][T28669] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.533341][T28669] usb 14-1: config 0 descriptor?? [ 2417.942083][T28669] hid_parser_main: 5 callbacks suppressed [ 2417.942095][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.947307][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.951344][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.954358][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.956686][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.959399][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.962104][T28669] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 2417.967090][T28669] cp2112 0003:10C4:EA90.0037: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 2418.004363][T21131] vhci_hcd: connection reset by peer [ 2418.006723][ T1229] vhci_hcd: stop threads [ 2418.008084][ T1229] vhci_hcd: release socket [ 2418.009607][ T1229] vhci_hcd: disconnect device [ 2418.143480][T28669] cp2112 0003:10C4:EA90.0037: Part Number: 0x00 Device Version: 0x00 [ 2418.751363][T28669] cp2112 0003:10C4:EA90.0037: error reading lock byte: -71 [ 2418.764284][T28669] usb 14-1: USB disconnect, device number 68 [ 2419.277823][T21154] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12326'. [ 2419.310035][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12327'. [ 2419.322377][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12327'. [ 2419.455153][T21161] binder: 21160:21161 unknown command 0 [ 2419.457183][T21161] binder: 21160:21161 ioctl c0306201 80000080 returned -22 [ 2419.461585][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12328'. [ 2419.559623][T21164] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2419.562105][T21164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2419.565957][T21164] vhci_hcd vhci_hcd.0: Device attached [ 2419.603297][ T6121] vhci_hcd: vhci_device speed not set [ 2419.803714][T28669] usb 39-1: new high-speed USB device number 35 using vhci_hcd [ 2419.863305][ T8353] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2420.013020][ T8353] usb 9-1: Using ep0 maxpacket: 32 [ 2420.016402][ T8353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2420.019549][ T8353] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2420.024198][ T8353] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2420.027025][ T8353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.029497][ T8353] usb 9-1: Product: syz [ 2420.030803][ T8353] usb 9-1: Manufacturer: syz [ 2420.032273][ T8353] usb 9-1: SerialNumber: syz [ 2420.035252][ T8353] usb 9-1: config 0 descriptor?? [ 2420.206743][T21173] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2420.246453][ T8353] usb 9-1: USB disconnect, device number 14 [ 2420.343087][T21165] vhci_hcd: connection reset by peer [ 2420.345195][ T13] vhci_hcd: stop threads [ 2420.346770][ T13] vhci_hcd: release socket [ 2420.348314][ T13] vhci_hcd: disconnect device [ 2421.573619][T21192] netlink: 43 bytes leftover after parsing attributes in process `syz.9.12338'. [ 2422.176481][T21209] syzkaller0: entered promiscuous mode [ 2422.178223][T21209] syzkaller0: entered allmulticast mode [ 2422.573120][ T6103] vhci_hcd: vhci_device speed not set [ 2423.432948][ T8353] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2423.583037][ T8353] usb 9-1: Using ep0 maxpacket: 16 [ 2423.586093][ T8353] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 2423.588937][ T8353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2423.592313][ T8353] usb 9-1: config 0 has no interface number 0 [ 2423.594450][ T8353] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2423.597646][ T8353] usb 9-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2423.603829][ T8353] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2423.606814][ T8353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.609431][ T8353] usb 9-1: Product: syz [ 2423.610869][ T8353] usb 9-1: Manufacturer: syz [ 2423.612483][ T8353] usb 9-1: SerialNumber: syz [ 2423.614755][ T8353] usb 9-1: config 0 descriptor?? [ 2423.619988][T21223] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2423.624894][ T8353] asix 9-1:0.251: probe with driver asix failed with error -22 [ 2424.328634][T21233] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.330719][T21233] binder: 21232:21233 ioctl 4018620d 80000040 returned -16 [ 2424.873665][T21242] syzkaller0: entered promiscuous mode [ 2424.875627][T21242] syzkaller0: entered allmulticast mode [ 2424.953252][T28669] vhci_hcd: vhci_device speed not set [ 2425.340044][T21247] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2426.275750][T22596] usb 9-1: USB disconnect, device number 15 [ 2426.291071][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12358'. [ 2426.298220][T21261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12358'. [ 2427.788999][ T40] audit: type=1326 audit(1755643570.125:22162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.3.12365" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 2428.128969][T11212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2428.131581][T11212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2428.134691][T11212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2428.138299][T11212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2428.142019][T11212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2428.250230][T21289] chnl_net:caif_netlink_parms(): no params data found [ 2428.294423][T21289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.296918][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.299350][T21289] bridge_slave_0: entered allmulticast mode [ 2428.301900][T21289] bridge_slave_0: entered promiscuous mode [ 2428.306143][T21289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.309165][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.312185][T21289] bridge_slave_1: entered allmulticast mode [ 2428.315823][T21289] bridge_slave_1: entered promiscuous mode [ 2428.341107][T21289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2428.346696][T21289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2428.375211][T21289] team0: Port device team_slave_0 added [ 2428.379762][T21289] team0: Port device team_slave_1 added [ 2428.423878][T21289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.431686][T21289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2428.443241][T21289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.458470][T21289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.462528][T21289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2428.470988][T21289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.528132][T21289] hsr_slave_0: entered promiscuous mode [ 2428.531405][T21289] hsr_slave_1: entered promiscuous mode [ 2428.533587][T21289] debugfs: 'hsr0' already exists in 'hsr' [ 2428.535499][T21289] Cannot create hsr debugfs directory [ 2428.831759][ T13] bond0 (unregistering): Released all slaves [ 2428.837930][ T13] bond1 (unregistering): Released all slaves [ 2428.845811][ T13] bond2 (unregistering): Released all slaves [ 2428.852041][ T13] bond3 (unregistering): Released all slaves [ 2428.859066][ T13] bond4 (unregistering): Released all slaves [ 2428.867027][ T13] bond5 (unregistering): Released all slaves [ 2428.874457][ T13] bond6 (unregistering): Released all slaves [ 2428.926674][ T13] tipc: Disabling bearer [ 2428.928754][ T13] tipc: Left network mode [ 2429.118757][ T13] hsr_slave_0: left promiscuous mode [ 2429.194964][T21331] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 2429.927825][ T13] IPVS: stop unused estimator thread 0... [ 2430.174924][T11212] Bluetooth: hci1: command tx timeout [ 2430.302885][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12377'. [ 2430.308826][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12377'. [ 2430.453614][T21356] binder: 21355:21356 unknown command 0 [ 2430.455870][T21356] binder: 21355:21356 ioctl c0306201 80000080 returned -22 [ 2430.459113][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12378'. [ 2430.679837][T21289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2430.686841][T21289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2430.694738][T21289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2430.700791][T21289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2430.756539][T21289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2430.765666][T21289] 8021q: adding VLAN 0 to HW filter on device team0 [ 2430.770827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.773873][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2430.781418][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.784891][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2430.902697][T21350] Set syz1 is full, maxelem 65536 reached [ 2430.907559][T21289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2430.944449][T21289] veth0_vlan: entered promiscuous mode [ 2430.951226][T21289] veth1_vlan: entered promiscuous mode [ 2430.975256][T21289] veth0_macvtap: entered promiscuous mode [ 2430.980513][T21289] veth1_macvtap: entered promiscuous mode [ 2430.990535][T21289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2430.998032][T21289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2431.004627][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.008457][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.012675][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.016562][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.049117][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.052609][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.075244][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.079072][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.482597][T21385] syzkaller0: entered promiscuous mode [ 2431.485624][T21385] syzkaller0: entered allmulticast mode [ 2431.628794][T21390] tipc: Resetting bearer [ 2432.253115][T11212] Bluetooth: hci1: command tx timeout [ 2433.637835][T21418] syzkaller0: entered promiscuous mode [ 2433.640078][T21418] syzkaller0: entered allmulticast mode [ 2434.323153][T11212] Bluetooth: hci1: command tx timeout [ 2435.169392][T21443] syzkaller0: entered promiscuous mode [ 2435.171288][T21443] syzkaller0: entered allmulticast mode [ 2435.823046][T27091] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2435.993029][T27091] usb 9-1: Using ep0 maxpacket: 8 [ 2436.003875][T27091] usb 9-1: config 0 has an invalid interface number: 56 but max is 0 [ 2436.006473][T27091] usb 9-1: config 0 has no interface number 0 [ 2436.010422][T27091] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2436.014264][T27091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.017672][T27091] usb 9-1: Product: syz [ 2436.019518][T27091] usb 9-1: Manufacturer: syz [ 2436.021368][T27091] usb 9-1: SerialNumber: syz [ 2436.030621][T27091] usb 9-1: config 0 descriptor?? [ 2436.282873][T27091] peak_usb 9-1:0.56 can0: unable to request usb[type=0 value=1] err=-32 [ 2436.285534][T27091] peak_usb 9-1:0.56: unable to read PCAN-USB X6 firmware info (err -32) [ 2436.334339][T27091] peak_usb 9-1:0.56: probe with driver peak_usb failed with error -32 [ 2436.368427][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2436.371389][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.403030][T11212] Bluetooth: hci1: command tx timeout [ 2436.609033][T21463] netlink: 'syz.9.12407': attribute type 1 has an invalid length. [ 2436.611657][T21463] netlink: 'syz.9.12407': attribute type 2 has an invalid length. [ 2437.505217][T21477] netlink: 51 bytes leftover after parsing attributes in process `syz.9.12410'. [ 2438.445822][T28045] usb 9-1: USB disconnect, device number 16 [ 2438.481429][T21507] binder: BINDER_SET_CONTEXT_MGR already set [ 2438.483656][T21507] binder: 21506:21507 ioctl 4018620d 80000140 returned -16 [ 2438.487740][T21507] binder: BINDER_SET_CONTEXT_MGR already set [ 2438.489786][T21507] binder: 21506:21507 ioctl 4018620d 80000040 returned -16 [ 2438.533377][T21510] bridge0: port 3(netdevsim0) entered blocking state [ 2438.536107][T21510] bridge0: port 3(netdevsim0) entered disabled state [ 2438.542116][T21510] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2438.547678][T21510] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2438.558897][T21510] bridge0: port 3(netdevsim0) entered blocking state [ 2438.561093][T21510] bridge0: port 3(netdevsim0) entered forwarding state [ 2438.591916][T21514] syzkaller1: entered promiscuous mode [ 2438.594125][T21514] syzkaller1: entered allmulticast mode [ 2439.044165][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12428'. [ 2439.372569][T21546] binder: 21545:21546 unknown command 0 [ 2439.375782][T21546] binder: 21545:21546 ioctl c0306201 80000080 returned -22 [ 2439.379482][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12438'. [ 2439.572138][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12445'. [ 2439.578389][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12445'. [ 2439.591334][T21568] binder: BINDER_SET_CONTEXT_MGR already set [ 2439.593286][T21568] binder: 21567:21568 ioctl 4018620d 800000c0 returned -16 [ 2439.596108][T21568] binder: 21567:21568 unknown command 0 [ 2439.597812][T21568] binder: 21567:21568 ioctl c0306201 80000080 returned -22 [ 2439.600452][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12448'. [ 2439.604233][T21568] binder: BINDER_SET_CONTEXT_MGR already set [ 2439.606093][T21568] binder: 21567:21568 ioctl 4018620d 80000040 returned -16 [ 2440.245040][T21593] binder: 21592:21593 unknown command 0 [ 2440.247429][T21593] binder: 21592:21593 ioctl c0306201 80000080 returned -22 [ 2440.251808][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12458'. [ 2440.281272][T21595] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12459'. [ 2440.710009][T21617] ptrace attach of "/syz-executor exec"[15511] was attempted by "/syz-executor exec"[21617] [ 2441.339616][T21626] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12468'. [ 2441.718362][T21300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2441.721026][T21300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2441.726560][T21300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2441.729735][T21300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2441.731066][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12480'. [ 2441.732603][T21300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2441.840572][T21650] chnl_net:caif_netlink_parms(): no params data found [ 2441.895605][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.898007][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.900872][T21650] bridge_slave_0: entered allmulticast mode [ 2441.903775][T21650] bridge_slave_0: entered promiscuous mode [ 2441.907565][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.910646][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.913826][T21650] bridge_slave_1: entered allmulticast mode [ 2441.917020][T21650] bridge_slave_1: entered promiscuous mode [ 2441.923161][T28045] usb 14-1: new high-speed USB device number 69 using dummy_hcd [ 2441.940035][T21650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2441.945366][T21650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2441.969833][T21650] team0: Port device team_slave_0 added [ 2441.977667][T21650] team0: Port device team_slave_1 added [ 2441.997396][T21650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2441.999862][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2442.008230][T21650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2442.012403][T21650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2442.014761][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2442.023613][T21650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2442.061966][T21650] hsr_slave_0: entered promiscuous mode [ 2442.064503][T21650] hsr_slave_1: entered promiscuous mode [ 2442.066567][T21650] debugfs: 'hsr0' already exists in 'hsr' [ 2442.068842][T21650] Cannot create hsr debugfs directory [ 2442.093322][T28045] usb 14-1: Using ep0 maxpacket: 32 [ 2442.101906][T28045] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 2442.104976][T28045] usb 14-1: config 0 has no interface number 0 [ 2442.108733][T28045] usb 14-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2442.112658][T28045] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.115358][T28045] usb 14-1: Product: syz [ 2442.116800][T28045] usb 14-1: Manufacturer: syz [ 2442.118419][T28045] usb 14-1: SerialNumber: syz [ 2442.120647][T28045] usb 14-1: config 0 descriptor?? [ 2442.126477][T28045] usb 14-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2442.129359][T28045] usb 14-1: selecting invalid altsetting 1 [ 2442.131233][T28045] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2442.136190][T28045] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2442.139591][T28045] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2442.145330][T28045] usb 14-1: media controller created [ 2442.154140][T28045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2442.331421][T28045] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2442.334994][T28045] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2442.337644][T28045] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2442.356293][T28045] usb 14-1: USB disconnect, device number 69 [ 2442.399669][T21650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2442.405186][T21650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2442.408631][T21650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2442.412093][T21650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2442.426823][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2442.428884][T21650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2442.431001][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.433070][T21650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2442.454137][T21650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2442.460416][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.465454][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.471297][T21650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2442.478301][T24157] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.480576][T24157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2442.486654][T24157] bridge0: port 2(bridge_slave_1) entered blocking state [ 2442.490057][T24157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2442.598963][T21650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2442.606607][T21690] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2442.706506][T21650] veth0_vlan: entered promiscuous mode [ 2442.710940][T21650] veth1_vlan: entered promiscuous mode [ 2442.722168][T21650] veth0_macvtap: entered promiscuous mode [ 2442.727387][T21650] veth1_macvtap: entered promiscuous mode [ 2442.734609][T21650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2442.739942][T21650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2442.745421][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.748287][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.751656][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.755190][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.780801][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2442.783577][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2442.794805][T18837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2442.797545][T18837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2443.630680][T21723] bridge_slave_0: left allmulticast mode [ 2443.632787][T21723] bridge_slave_0: left promiscuous mode [ 2443.634987][T21723] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.638871][T21723] bridge_slave_1: left allmulticast mode [ 2443.641790][T21723] bridge_slave_1: left promiscuous mode [ 2443.644067][T21723] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.648719][T21723] bond0: (slave bond_slave_0): Releasing backup interface [ 2443.655291][T21723] bond0: (slave bond_slave_1): Releasing backup interface [ 2443.662930][T21723] team0: Port device team_slave_0 removed [ 2443.669933][T21723] team0: Port device team_slave_1 removed [ 2443.674502][T21723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2443.677773][T21723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2443.688254][T21723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2443.691474][T21723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2443.700045][T21723] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2443.703145][T21723] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2443.706369][T21723] bridge0: port 3(netdevsim0) entered disabled state [ 2443.763183][T11212] Bluetooth: hci2: command tx timeout [ 2443.792384][T21732] __nla_validate_parse: 2 callbacks suppressed [ 2443.792397][T21732] netlink: 51 bytes leftover after parsing attributes in process `syz.9.12499'. [ 2443.943050][ T6103] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2444.112923][ T6103] usb 9-1: Using ep0 maxpacket: 32 [ 2444.115833][ T6103] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2444.118304][ T6103] usb 9-1: config 0 has no interface number 0 [ 2444.121895][ T6103] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2444.125004][ T6103] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.127471][ T6103] usb 9-1: Product: syz [ 2444.128817][ T6103] usb 9-1: Manufacturer: syz [ 2444.130296][ T6103] usb 9-1: SerialNumber: syz [ 2444.132531][ T6103] usb 9-1: config 0 descriptor?? [ 2444.135567][ T6103] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2444.138305][ T6103] usb 9-1: selecting invalid altsetting 1 [ 2444.140104][ T6103] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2444.143447][ T6103] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2444.146791][ T6103] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2444.149358][ T6103] usb 9-1: media controller created [ 2444.155034][ T6103] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2444.286358][T21736] binder: 21735:21736 ioctl 4018620d 0 returned -22 [ 2444.338182][ T6103] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2444.340655][ T6103] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2444.344416][ T6103] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2444.361545][ T6103] usb 9-1: USB disconnect, device number 17 [ 2445.407597][T21743] syz.9.12504: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2445.413537][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.9.12504 Not tainted syzkaller #0 PREEMPT(full) [ 2445.413554][T21743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2445.413561][T21743] Call Trace: [ 2445.413565][T21743] [ 2445.413571][T21743] dump_stack_lvl+0x16c/0x1f0 [ 2445.413590][T21743] warn_alloc+0x248/0x3a0 [ 2445.413604][T21743] ? __pfx_warn_alloc+0x10/0x10 [ 2445.413618][T21743] ? hash_net4_resize+0x1d8/0x1c40 [ 2445.413633][T21743] ? __vmalloc_node_noprof+0xad/0xf0 [ 2445.413644][T21743] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 2445.413656][T21743] ? hash_net4_resize+0x1d8/0x1c40 [ 2445.413672][T21743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2445.413684][T21743] ? ___kmalloc_large_node+0xed/0x160 [ 2445.413712][T21743] __kvmalloc_node_noprof+0x30a/0x620 [ 2445.413725][T21743] ? hash_net4_resize+0x1d8/0x1c40 [ 2445.413739][T21743] ? trace_kmalloc+0x2b/0xd0 [ 2445.413753][T21743] ? __kmalloc_noprof+0x242/0x510 [ 2445.413764][T21743] ? hash_net4_resize+0x1d8/0x1c40 [ 2445.413778][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.413790][T21743] ? hash_net4_resize+0x1d8/0x1c40 [ 2445.413804][T21743] hash_net4_resize+0x1d8/0x1c40 [ 2445.413819][T21743] ? __pfx_hash_net4_add+0x10/0x10 [ 2445.413833][T21743] ? __pfx_hash_net4_uadt+0x10/0x10 [ 2445.413846][T21743] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2445.413862][T21743] ? call_ad.constprop.0+0x2aa/0x940 [ 2445.413878][T21743] ? __pfx_hash_net4_resize+0x10/0x10 [ 2445.413892][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.413902][T21743] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 2445.413920][T21743] call_ad.constprop.0+0x36d/0x940 [ 2445.413936][T21743] ? __pfx_hash_net4_resize+0x10/0x10 [ 2445.413951][T21743] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 2445.413967][T21743] ? __pfx___nla_validate_parse+0x10/0x10 [ 2445.413979][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.413990][T21743] ? __nla_parse+0x40/0x60 [ 2445.414000][T21743] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 2445.414013][T21743] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 2445.414024][T21743] ? srcu_gp_start_if_needed+0xdb0/0xe70 [ 2445.414045][T21743] ? nfnetlink_rcv_msg+0x8a5/0x1200 [ 2445.414055][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.414066][T21743] nfnetlink_rcv_msg+0x9fc/0x1200 [ 2445.414078][T21743] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2445.414090][T21743] ? consume_skb+0xcc/0x100 [ 2445.414110][T21743] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2445.414122][T21743] netlink_rcv_skb+0x155/0x420 [ 2445.414136][T21743] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2445.414147][T21743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2445.414163][T21743] ? ns_capable+0xd7/0x110 [ 2445.414175][T21743] nfnetlink_rcv+0x1b3/0x430 [ 2445.414189][T21743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2445.414198][T21743] ? netlink_deliver_tap+0x1ae/0xd30 [ 2445.414212][T21743] netlink_unicast+0x5aa/0x870 [ 2445.414226][T21743] ? __pfx_netlink_unicast+0x10/0x10 [ 2445.414240][T21743] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2445.414255][T21743] netlink_sendmsg+0x8d1/0xdd0 [ 2445.414270][T21743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2445.414284][T21743] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2445.414297][T21743] ____sys_sendmsg+0xa95/0xc70 [ 2445.414314][T21743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2445.414330][T21743] ? get_compat_msghdr+0x11a/0x170 [ 2445.414343][T21743] ? __pfx_futex_wake_mark+0x10/0x10 [ 2445.414360][T21743] ___sys_sendmsg+0x134/0x1d0 [ 2445.414373][T21743] ? lock_release+0x201/0x2f0 [ 2445.414386][T21743] ? __pfx____sys_sendmsg+0x10/0x10 [ 2445.414399][T21743] ? futex_private_hash_put+0x11c/0x300 [ 2445.414413][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.414428][T21743] __sys_sendmsg+0x16d/0x220 [ 2445.414441][T21743] ? __pfx___sys_sendmsg+0x10/0x10 [ 2445.414454][T21743] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 2445.414471][T21743] ? rcu_is_watching+0x12/0xc0 [ 2445.414481][T21743] __do_fast_syscall_32+0x7c/0x3a0 [ 2445.414496][T21743] do_fast_syscall_32+0x32/0x80 [ 2445.414509][T21743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2445.414523][T21743] RIP: 0023:0xf704e579 [ 2445.414532][T21743] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2445.414543][T21743] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2445.414554][T21743] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2445.414560][T21743] RDX: 00000000240008c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 2445.414567][T21743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2445.414573][T21743] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2445.414579][T21743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2445.414588][T21743] [ 2445.414602][T21743] Mem-Info: [ 2445.564736][T21743] active_anon:1492 inactive_anon:2032 isolated_anon:0 [ 2445.564736][T21743] active_file:1711 inactive_file:695 isolated_file:0 [ 2445.564736][T21743] unevictable:1771 dirty:7 writeback:0 [ 2445.564736][T21743] slab_reclaimable:7031 slab_unreclaimable:71900 [ 2445.564736][T21743] mapped:22821 shmem:2287 pagetables:2002 [ 2445.564736][T21743] sec_pagetables:347 bounce:0 [ 2445.564736][T21743] kernel_misc_reclaimable:0 [ 2445.564736][T21743] free:69623 free_pcp:1436 free_cma:0 [ 2445.578873][T21743] Node 0 active_anon:1444kB inactive_anon:8kB active_file:292kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:6904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7024kB pagetables:1468kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB [ 2445.588579][T21743] Node 1 active_anon:4524kB inactive_anon:8120kB active_file:6552kB inactive_file:2776kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:88908kB dirty:28kB writeback:0kB shmem:2244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:9404kB pagetables:6540kB sec_pagetables:184kB all_unreclaimable? no Balloon:0kB [ 2445.599853][T21743] Node 0 DMA free:2588kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2445.608876][T21743] lowmem_reserve[]: 0 288 288 288 288 [ 2445.611048][T21743] Node 0 DMA32 free:34188kB boost:28672kB min:41892kB low:45196kB high:48500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1416kB inactive_anon:8kB active_file:292kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 2445.619751][T21762] binder: 21761:21762 ioctl c0306201 0 returned -14 [ 2445.623485][T21743] lowmem_reserve[]: 0 0 0 0 0 [ 2445.628241][T21743] Node 1 DMA32 free:243852kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4524kB inactive_anon:6020kB active_file:6552kB inactive_file:2776kB unevictable:3548kB writepending:28kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:5348kB local_pcp:2720kB free_cma:0kB [ 2445.639863][T21743] lowmem_reserve[]: 0 0 0 0 0 [ 2445.641449][T21743] Node 0 DMA: 49*4kB (UE) 35*8kB (UE) 10*16kB (UE) 5*32kB (UE) 6*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2588kB [ 2445.653193][T21743] Node 0 DMA32: 1129*4kB (UME) 667*8kB (UME) 321*16kB (UME) 344*32kB (UME) 82*64kB (UME) 21*128kB (UME) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34188kB [ 2445.660654][T21743] Node 1 DMA32: 1263*4kB (UME) 1268*8kB (UME) 883*16kB (UME) 920*32kB (UME) 306*64kB (UME) 239*128kB (UME) 237*256kB (UME) 103*512kB (UME) 25*1024kB (UME) 0*2048kB 0*4096kB = 247948kB [ 2445.667821][T21743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2445.671088][T21743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2445.674331][T21743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2445.677486][T21743] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2445.680723][T21743] 5291 total pagecache pages [ 2445.682578][T21743] 1104 pages in swap cache [ 2445.684316][T21743] Free swap = 56928kB [ 2445.685696][T21743] Total swap = 124996kB [ 2445.687307][T21743] 524155 pages RAM [ 2445.688796][T21743] 0 pages HighMem/MovableOnly [ 2445.690516][T21743] 209473 pages reserved [ 2445.692388][T21743] 0 pages cma reserved [ 2445.730267][T21770] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 2445.844250][T11212] Bluetooth: hci2: command tx timeout [ 2446.062976][T22830] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 2446.214305][T22830] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2446.222967][T22830] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2446.229065][T22830] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2446.236775][T22830] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2446.240536][T22830] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2446.246103][T22830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2446.250533][T22830] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2446.254547][T22830] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2446.257828][T22830] usb 9-1: Product: syz [ 2446.259176][T22830] usb 9-1: Manufacturer: syz [ 2446.260996][T22830] usb 9-1: SerialNumber: syz [ 2446.264193][T22830] usb 9-1: config 0 descriptor?? [ 2446.266602][T21780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2446.270179][T22830] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2446.274818][T22830] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2446.480898][T22830] usb 9-1: USB disconnect, device number 18 [ 2446.486033][T22830] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 2447.372230][T21791] Set syz1 is full, maxelem 65536 reached [ 2447.802987][ T8184] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2447.922931][T11212] Bluetooth: hci2: command tx timeout [ 2447.975168][ T8184] usb 9-1: Using ep0 maxpacket: 16 [ 2447.978905][ T8184] usb 9-1: config 0 has no interfaces? [ 2447.983225][ T8184] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2447.986246][ T8184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.988852][ T8184] usb 9-1: Product: syz [ 2447.990356][ T8184] usb 9-1: Manufacturer: syz [ 2447.991975][ T8184] usb 9-1: SerialNumber: syz [ 2447.997095][ T8184] usb 9-1: config 0 descriptor?? [ 2448.030226][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2448.034688][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2448.224718][T21809] tipc: Started in network mode [ 2448.226405][T21809] tipc: Node identity 7f000001, cluster identity 4711 [ 2448.228741][T21809] tipc: New replicast peer: 0.0.0.0 [ 2448.230744][T21809] tipc: Enabled bearer , priority 10 [ 2448.234641][T21809] ptrace attach of "/syz-executor exec"[21650] was attempted by "/syz-executor exec"[21809] [ 2449.155644][T21854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12540'. [ 2449.223289][ T6349] tipc: Node number set to 2130706433 [ 2449.980044][T21861] binder: 21860:21861 unknown command 0 [ 2449.982704][T21861] binder: 21860:21861 ioctl c0306201 80000080 returned -22 [ 2449.988377][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12542'. [ 2450.003730][T11212] Bluetooth: hci2: command tx timeout [ 2450.416582][ T6349] usb 9-1: USB disconnect, device number 19 [ 2450.489143][T21869] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2451.163050][T21890] fuse: Unknown parameter 'r' [ 2452.630363][T21929] binder: 21928:21929 unknown command 0 [ 2452.632286][T21929] binder: 21928:21929 ioctl c0306201 80000080 returned -22 [ 2452.636183][T21929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12565'. [ 2452.640505][T21929] binder: BINDER_SET_CONTEXT_MGR already set [ 2452.643135][T21929] binder: 21928:21929 ioctl 4018620d 80000040 returned -16 [ 2452.965410][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12568'. [ 2454.202670][T21962] binder: 21961:21962 unknown command 0 [ 2454.204641][T21962] binder: 21961:21962 ioctl c0306201 80000080 returned -22 [ 2454.209045][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12575'. [ 2454.215463][T21962] binder: BINDER_SET_CONTEXT_MGR already set [ 2454.217731][T21962] binder: 21961:21962 ioctl 4018620d 80000040 returned -16 [ 2455.370444][T21990] binder: 21989:21990 unknown command 0 [ 2455.372419][T21990] binder: 21989:21990 ioctl c0306201 80000080 returned -22 [ 2455.377245][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12585'. [ 2455.381667][T21990] binder: BINDER_SET_CONTEXT_MGR already set [ 2455.384406][T21990] binder: 21989:21990 ioctl 4018620d 80000040 returned -16 [ 2456.763148][ T6349] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2456.811492][T22024] fuse: Bad value for 'fd' [ 2456.837914][T22026] binder: 22025:22026 unknown command 0 [ 2456.839829][T22026] binder: 22025:22026 ioctl c0306201 80000080 returned -22 [ 2456.923043][ T6349] usb 9-1: Using ep0 maxpacket: 16 [ 2456.927530][ T6349] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2456.930445][ T6349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.933047][ T6349] usb 9-1: Product: syz [ 2456.934409][ T6349] usb 9-1: Manufacturer: syz [ 2456.935961][ T6349] usb 9-1: SerialNumber: syz [ 2457.333219][T28045] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 2457.483321][T28045] usb 8-1: Using ep0 maxpacket: 16 [ 2457.496198][T28045] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2457.500805][T28045] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2457.506853][T28045] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2457.510532][T28045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.517515][T28045] usb 8-1: config 0 descriptor?? [ 2458.010167][T28045] usbhid 8-1:0.0: can't add hid device: -71 [ 2458.017417][T28045] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2458.023810][T28045] usb 8-1: USB disconnect, device number 50 [ 2459.333612][ T6349] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2459.346643][ T6349] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2459.395469][ T6349] usb 9-1: USB disconnect, device number 20 [ 2459.396584][T22061] binder: 22060:22061 unknown command 0 [ 2459.400681][T22061] binder: 22060:22061 ioctl c0306201 80000080 returned -22 [ 2459.606550][T16411] udevd[16411]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2460.751794][T22076] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2460.754516][T22076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2460.756363][T22076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2460.759724][T22076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2460.762644][T22076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2460.764929][T22076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2460.767303][T22076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2462.722953][T11212] Bluetooth: hci4: command 0x0c1a tx timeout [ 2462.812946][T11212] Bluetooth: hci2: command 0x0405 tx timeout [ 2462.813086][T21300] Bluetooth: hci1: command 0x0c1a tx timeout [ 2464.792997][ T6349] usb 14-1: new high-speed USB device number 70 using dummy_hcd [ 2464.883003][T21300] Bluetooth: hci1: command 0x0c1a tx timeout [ 2464.883067][T11212] Bluetooth: hci2: command 0x0405 tx timeout [ 2464.942908][ T6349] usb 14-1: Using ep0 maxpacket: 8 [ 2464.946103][ T6349] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 2464.949456][ T6349] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2464.953368][ T6349] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2464.956566][ T6349] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2464.959870][ T6349] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2464.964107][ T6349] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2464.971779][ T6349] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.198190][ T6349] usb 14-1: usb_control_msg returned -32 [ 2465.200069][ T6349] usbtmc 14-1:16.0: can't read capabilities [ 2465.533020][ T8184] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2465.551295][T22156] usbtmc 14-1:16.0: usb_control_msg returned -32 [ 2465.555127][T27091] usb 14-1: USB disconnect, device number 70 [ 2465.682967][ T8184] usb 8-1: Using ep0 maxpacket: 8 [ 2465.686212][ T8184] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 2465.688833][ T8184] usb 8-1: config 0 has no interface number 0 [ 2465.692347][ T8184] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2465.696219][ T8184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.698799][ T8184] usb 8-1: Product: syz [ 2465.700207][ T8184] usb 8-1: Manufacturer: syz [ 2465.701664][ T8184] usb 8-1: SerialNumber: syz [ 2465.704757][ T8184] usb 8-1: config 0 descriptor?? [ 2465.924358][ T8184] peak_usb 8-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2466.126659][ T8184] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 2466.130042][ T8184] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 2466.133267][ T8184] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 2466.173529][ T8184] peak_usb 8-1:0.56: probe with driver peak_usb failed with error -22 [ 2466.322975][T27808] usb 14-1: new high-speed USB device number 71 using dummy_hcd [ 2466.389454][T22148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2466.392492][T22148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2466.484244][T27808] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 2466.487625][T27808] usb 14-1: config 0 has no interface number 0 [ 2466.491338][T27808] usb 14-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2466.494892][T27808] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.497460][T27808] usb 14-1: Product: syz [ 2466.498795][T27808] usb 14-1: Manufacturer: syz [ 2466.500356][T27808] usb 14-1: SerialNumber: syz [ 2466.503899][T27808] usb 14-1: config 0 descriptor?? [ 2466.709390][T27808] usb 14-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2466.714223][T27808] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2466.717946][T27808] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2466.720457][T27808] usb 14-1: media controller created [ 2466.726875][T27808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2466.913392][T27808] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2466.924158][T27808] usb 14-1: USB disconnect, device number 71 [ 2466.963041][T11212] Bluetooth: hci1: command 0x0c1a tx timeout [ 2466.973483][T11212] Bluetooth: hci2: command 0x0405 tx timeout [ 2468.216187][T27808] usb 8-1: USB disconnect, device number 51 [ 2469.345790][T21300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2469.349991][T21300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2469.352506][T21300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2469.356297][T21300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2469.359690][T21300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2469.469323][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12650'. [ 2469.472439][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12650'. [ 2469.504844][T22201] chnl_net:caif_netlink_parms(): no params data found [ 2469.550547][T22201] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.553441][T22201] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.556492][T22201] bridge_slave_0: entered allmulticast mode [ 2469.559806][T22201] bridge_slave_0: entered promiscuous mode [ 2469.565352][T22201] bridge0: port 2(bridge_slave_1) entered blocking state [ 2469.568300][T22201] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.571477][T22201] bridge_slave_1: entered allmulticast mode [ 2469.575070][T22201] bridge_slave_1: entered promiscuous mode [ 2469.599945][T22211] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2469.608562][T22201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2469.614606][T22201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2469.638128][T22201] team0: Port device team_slave_0 added [ 2469.641054][T22201] team0: Port device team_slave_1 added [ 2469.660012][T22201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2469.662289][T22201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2469.673103][T22201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2469.677832][T22201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2469.680186][T22201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2469.688961][T22201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2469.717011][T22201] hsr_slave_0: entered promiscuous mode [ 2469.719241][T22201] hsr_slave_1: entered promiscuous mode [ 2469.721443][T22201] debugfs: 'hsr0' already exists in 'hsr' [ 2469.723354][T22201] Cannot create hsr debugfs directory [ 2469.788413][T22201] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.864778][T22201] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.940474][T22201] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.996936][T22201] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.044254][ T6103] usb 14-1: new full-speed USB device number 72 using dummy_hcd [ 2470.102097][T22201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2470.108351][T22201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2470.114400][T22201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2470.119867][T22201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2470.136994][T22201] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.140198][T22201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2470.143376][T22201] bridge0: port 1(bridge_slave_0) entered blocking state [ 2470.146427][T22201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2470.170904][T22201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2470.178251][T22201] 8021q: adding VLAN 0 to HW filter on device team0 [ 2470.194870][ T6103] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 2470.198471][ T6103] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2470.203806][ T6103] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2470.208570][ T6103] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2470.212686][ T6103] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2470.218436][ T6103] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2470.224298][ T6103] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2470.228354][ T6103] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2470.231618][ T6103] usb 14-1: Product: syz [ 2470.234564][ T6103] usb 14-1: Manufacturer: syz [ 2470.236489][ T6103] usb 14-1: SerialNumber: syz [ 2470.239986][ T6103] usb 14-1: config 0 descriptor?? [ 2470.247109][T22215] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2470.251135][ T6103] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2470.255816][ T6103] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2470.287983][T22201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2470.305250][T22201] veth0_vlan: entered promiscuous mode [ 2470.309126][T22201] veth1_vlan: entered promiscuous mode [ 2470.320618][T22201] veth0_macvtap: entered promiscuous mode [ 2470.324376][T22201] veth1_macvtap: entered promiscuous mode [ 2470.331251][T22201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.338876][T22201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2470.344861][ T1229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.348736][ T1229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.353089][ T1229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.357903][ T1229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.386267][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.389764][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.409742][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.412400][T22238] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12659'. [ 2470.412409][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.454734][ T6349] usb 14-1: USB disconnect, device number 72 [ 2470.457259][ T6349] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 2471.453016][T11212] Bluetooth: hci3: command tx timeout [ 2471.852963][ T6349] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2471.888752][T22266] netlink: 51 bytes leftover after parsing attributes in process `syz.9.12668'. [ 2471.916675][T22269] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2472.023076][ T6349] usb 9-1: Using ep0 maxpacket: 16 [ 2472.026751][ T6349] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2472.031225][ T6349] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2472.034793][ T6349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.037325][ T6349] usb 9-1: Product: syz [ 2472.038738][ T6349] usb 9-1: Manufacturer: syz [ 2472.040237][ T6349] usb 9-1: SerialNumber: syz [ 2472.044092][ T6349] usb 9-1: config 0 descriptor?? [ 2472.047213][ T6349] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2472.050088][ T6349] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 2472.165544][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.361047][T18837] bond0 (unregistering): Released all slaves [ 2472.366448][T18837] bond1 (unregistering): Released all slaves [ 2472.372214][T18837] bond2 (unregistering): Released all slaves [ 2472.377491][T18837] bond3 (unregistering): Released all slaves [ 2472.383180][T18837] bond4 (unregistering): Released all slaves [ 2472.388960][T18837] bond5 (unregistering): Released all slaves [ 2472.395870][T18837] bond6 (unregistering): Released all slaves [ 2472.402179][T18837] bond7 (unregistering): Released all slaves [ 2472.408797][T18837] bond8 (unregistering): Released all slaves [ 2472.473929][T18837] tipc: Disabling bearer [ 2472.475981][T18837] tipc: Left network mode [ 2472.650311][ T6349] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2472.655276][T18837] hsr_slave_0: left promiscuous mode [ 2473.066657][ T6349] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2473.069832][ T6349] em28xx 9-1:0.0: board has no eeprom [ 2473.123048][ T6349] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2473.125902][ T6349] em28xx 9-1:0.0: dvb set to bulk mode. [ 2473.127972][T22596] em28xx 9-1:0.0: Binding DVB extension [ 2473.133363][ T6349] usb 9-1: USB disconnect, device number 21 [ 2473.135723][ T6349] em28xx 9-1:0.0: Disconnecting em28xx [ 2473.150618][T22596] em28xx 9-1:0.0: Registering input extension [ 2473.153182][ T6349] em28xx 9-1:0.0: Closing input extension [ 2473.165672][ T6349] em28xx 9-1:0.0: Freeing device [ 2473.533332][T11212] Bluetooth: hci3: command tx timeout [ 2473.937271][T22306] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2473.939361][T22306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2473.942289][T22306] vhci_hcd vhci_hcd.0: Device attached [ 2474.172967][ T6349] usb 55-1: new high-speed USB device number 4 using vhci_hcd [ 2474.424925][T22318] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 2474.630335][T22331] team0: Device vlan2 is up. Set it down before adding it as a team port [ 2475.230512][T22307] vhci_hcd: connection reset by peer [ 2475.232377][ T13] vhci_hcd: stop threads [ 2475.234438][ T13] vhci_hcd: release socket [ 2475.236311][ T13] vhci_hcd: disconnect device [ 2475.344854][T22344] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2475.603021][T11212] Bluetooth: hci3: command tx timeout [ 2476.219039][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12698'. [ 2476.224610][T22372] binder: BINDER_SET_CONTEXT_MGR already set [ 2476.226582][T22372] binder: 22371:22372 ioctl 4018620d 80000040 returned -16 [ 2476.305218][T22382] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 2476.915749][T22393] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2477.683102][T11212] Bluetooth: hci3: command tx timeout [ 2477.714965][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12708'. [ 2477.718742][T22405] binder: BINDER_SET_CONTEXT_MGR already set [ 2477.720424][T22405] binder: 22401:22405 ioctl 4018620d 80000040 returned -16 [ 2478.522134][T22431] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 2478.526071][T22431] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22431, name: syz-executor [ 2478.531676][T22431] preempt_count: 1, expected: 0 [ 2478.533392][T22431] RCU nest depth: 0, expected: 0 [ 2478.534971][T22431] INFO: lockdep is turned off. [ 2478.536481][T22431] Preemption disabled at: [ 2478.536487][T22431] [] refill_obj_stock+0x2c/0x6d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2478.539967][T22431] CPU: 0 UID: 0 PID: 22431 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2478.539981][T22431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2478.539988][T22431] Call Trace: [ 2478.539992][T22431] [ 2478.539996][T22431] dump_stack_lvl+0x16c/0x1f0 [ 2478.540013][T22431] __might_resched+0x3c0/0x5e0 [ 2478.540024][T22431] ? __pfx___might_resched+0x10/0x10 [ 2478.540034][T22431] ? pcpu_block_update+0x562/0x660 [ 2478.540051][T22431] ? pcpu_chunk_relocate+0x126/0x190 [ 2478.540062][T22431] vfree+0x75/0xb50 [ 2478.540078][T22431] ? rcu_is_watching+0x12/0xc0 [ 2478.540089][T22431] ? kfree+0x24f/0x4d0 [ 2478.540099][T22431] ? free_percpu+0x6db/0x13c0 [ 2478.540110][T22431] futex_hash_free+0x98/0xc0 [ 2478.540123][T22431] __mmdrop+0x33f/0x580 [ 2478.540135][T22431] ? rcu_is_watching+0x12/0xc0 [ 2478.540145][T22431] finish_task_switch.isra.0+0x7a4/0xc10 [ 2478.540157][T22431] schedule_tail+0xe/0xe0 [ 2478.540170][T22431] ret_from_fork+0x25/0x6f0 [ 2478.540187][T22431] ret_from_fork_asm+0x1a/0x30 [ 2478.540203][T22431] [ 2478.936146][T13097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.056367][T13097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.117517][T13097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.205043][T13097] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.273047][ T6349] vhci_hcd: vhci_device speed not set [ 2479.516109][T13097] bond0 (unregistering): Released all slaves [ 2479.741309][T13097] hsr_slave_0: left promiscuous mode [ 2479.744020][T13097] hsr_slave_1: left promiscuous mode [ 2479.748893][T13097] veth1_macvtap: left promiscuous mode [ 2479.750765][T13097] veth0_macvtap: left promiscuous mode [ 2479.752533][T13097] veth1_vlan: left promiscuous mode [ 2479.754342][T13097] veth0_vlan: left promiscuous mode [ 2480.378118][T13097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.457207][T13097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.536731][T13097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.585549][T13097] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.708413][T13097] bridge_slave_1: left allmulticast mode [ 2480.710753][T13097] bridge_slave_1: left promiscuous mode [ 2480.713609][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.717851][T13097] bridge_slave_0: left allmulticast mode [ 2480.720192][T13097] bridge_slave_0: left promiscuous mode [ 2480.722543][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.811013][T13097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2480.816047][T13097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2480.820409][T13097] bond0 (unregistering): Released all slaves [ 2481.089278][T13097] hsr_slave_0: left promiscuous mode [ 2481.091350][T13097] hsr_slave_1: left promiscuous mode [ 2481.093557][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2481.096196][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2481.099030][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2481.101524][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2481.108131][T13097] veth1_macvtap: left promiscuous mode [ 2481.110094][T13097] veth0_macvtap: left promiscuous mode [ 2481.111902][T13097] veth1_vlan: left promiscuous mode [ 2481.113832][T13097] veth0_vlan: left promiscuous mode [ 2481.220067][T13097] team0 (unregistering): Port device team_slave_1 removed [ 2481.227138][T13097] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:47:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000428f898 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=000000000000006c R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d313ff8 CR3=00000000553ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000006cd3a34 RBX=0000000000000001 RCX=ffffffff8b908bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005813c4c0 CR3=000000005539e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000002568c1c RBX=0000000000000002 RCX=ffffffff8b908bf9 RDX=ffffed1005686656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fac2238000 CR3=000000004a0bf000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000031b4 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffff0201 c7080008004baa0e 000000ff00000006 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ac0030fffffff ff040ab003038004 0aa0030fffffffff 040a90030008000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88030208000a8003 0780020882c5bca2 0800010000000806 060129be00100007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0030fffffffff04 07b00323800407a0 030fffffffff0407 9003000800078803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000780030fff ffffff0205bc8208 0001000000080606 0129c00004000408 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100020880a5bd c208000100000008 06060129ee108080 0800000301800208 ZMM25=1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a ZMM26=415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d ZMM27=655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff821741dd RDX=ffff888024538000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000001416 RSP=ffffc9000320f530 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000012 R12=ffff88806e9cf9c0 R13=0000000000000001 R14=ffffc9000320f5c8 R15=0000000000000000 RIP=ffffffff81bb079c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3790d61300 000fffff 00000000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fac223c000 CR3=000000004a0bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000031b4 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffff0201 c7080008004baa0e 000000ff00000006 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ac0030fffffff ff040ab003038004 0aa0030fffffffff 040a90030008000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88030208000a8003 0780020882c5bca2 0800010000000806 060129be00100007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0030fffffffff04 07b00323800407a0 030fffffffff0407 9003000800078803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000780030fff ffffff0205bc8208 0001000000080606 0129c00004000408 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100020880a5bd c208000100000008 06060129ee108080 0800000301800208 ZMM25=1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a 1c87581a1c87581a ZMM26=415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d 415a530d415a530d ZMM27=655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 655790e6655790e6 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000 e07c0000e07c0000