last executing test programs: 1m35.31082619s ago: executing program 1 (id=104): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m35.169407648s ago: executing program 1 (id=105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002840)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000080009000000000008000a00"], 0x184}}, 0x0) 1m35.169095202s ago: executing program 1 (id=106): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0xa2100, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002280)={'macvlan1\x00', &(0x7f0000002480)=@ethtool_regs={0x4, 0x3, 0x4a, "a6723cfb28cd77cd51df9f621a2a2ec103a1a3d859f6f1d9636d284522da12faf0603fb45ef5027ff036cee20dfe7f4721c44223b463e97fe0aa48064bf45b8a83bbc544b1d579ebd8bd"}}) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newsa={0xec, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x89}, {@in=@remote, 0x4cf, 0x3c}, @in=@local, {0x1000000, 0x0, 0x0, 0x80000000008e30}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}}, 0xec}}, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f00000023c0), 0x820000, &(0x7f0000002540)={'trans=unix,', {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'macvlan1\x00'}}, {@appraise}, {@obj_user={'obj_user', 0x3d, '/dev/fb1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'macvlan1\x00'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) listen(0xffffffffffffffff, 0x7b) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0xffff, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x24) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 1m35.098872395s ago: executing program 1 (id=107): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) 1m33.199674146s ago: executing program 1 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000304000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) syz_io_uring_setup(0x16da, &(0x7f0000000140)={0x0, 0x965d, 0x1, 0x0, 0x8, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x16da, &(0x7f0000000140)={0x0, 0x965d, 0x1, 0x0, 0x8, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) (async) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r7) 1m32.989763778s ago: executing program 1 (id=115): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000001a00)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="430e12b1583bc8dc3dfb4afd2f7a643fd3b6ffbc5bf37b8eaefd769b22690d343c082bfd3c22d765b7ff1753c260a45c52c34b6c08dd8bc89d3d88180031cd8e3e4b09ea4385b103cee49a514462cc91c1cb3588d81225f1a90514cdd4c12bf08d073aacf6b656d030ced3b16e9f247cab5ce747d28eb53cf0ec2b792e681de78b2acea1fdae24ccb7d7bc94a1267fa9e5a67a9d04b139e7d24e9214b6874bb8397c547d1b244701572c", 0xaa}, {&(0x7f0000001900)="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", 0xff}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f00000002c0)="099582b38cf55c8596500743db29d98dcf8989b88b8b811a7f4d6bfecd7c650e64f6129638bd3aa4b7848649", 0x2c}, {&(0x7f0000001780)="79654f60d609a124248b53933f7da2310d9c39a85b576d2a2d455077cd7c43801cfb69b3561cb534a65689c1898e85fde492a0e61858c62e555c484831d85312b22857977f30421629b068eb3aabef1133fab04a806636d2ae9055dd9618b3ae981f08998868a7d412eac421ad6f45733c549c1d9cfe824769c91bf3d1567cb0f391fa81b1b00b27fd61", 0x8a}, {&(0x7f0000001840)="34d8033c2bef8bf754917dee27da6bca9bc4274198a1a9ed3244bcb6759b372a8bf3afc7783c89386fcd3c87995210db5746df35ce849014dfcadf898b8218d2d248e71917acba92e180deb1bf1ebc2881ebc5774bccf15c806ec77513b27528a54320bbe85f6357bef596c9f29171767b21c87ed3e8d78070fc719f762d7a85a22bc8632872e740b20a77303e6f55031fda6325329353edc49fc450e43d9699c8ac3012b435c1b4dc3bb43819bcf5cdf0d08fd429", 0xb5}, {&(0x7f0000001580)="0619b9632db948c0ec34a17dfa1c767a86a2a734d72d47fbe5bd71e8ced5d291b65eccfa4b1788efddfe6874b473e9cb50371d093c5076da93c6f3fbabd6b6a3a165461e629a5efe4c865109e7e8296e5d622a1aba127ffa9afbba8131bc850b48356df8e219221d86d0ee18ad2f65b77c432eed9b2ab7f0edfaf6c82247c4cddcc804f5e6b0ceb900f9e4891cbff5c518acacb3f21d19ad2c86c8721bbfe33b0bcc40e51e52dde981a73078dfe1c2cfdaa633d48a4cdba9c6cffe20ffb323f41afe9a77fd756d5ad067d90ada3f296bbc3f4679", 0xd4}, {&(0x7f0000000400)="011c875567edcd7a316dfac59ac97f574f325785cf0962d00c6e9ac240c61f39a3256e9d7076331f56e2", 0x2a}], 0x9) syz_open_dev$sndctrl(&(0x7f0000000280), 0x8000, 0x111400) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x8000, 0x111400) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x10000, 0x0, 0x0, "d8804337000000f6ffffffffffffff00"}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x10000, 0x0, 0x0, "d8804337000000f6ffffffffffffff00"}) socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x15) (async) syz_emit_vhci(0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) mprotect(&(0x7f0000945000/0x4000)=nil, 0x4000, 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xffffffffffffff91) syz_io_uring_setup(0xa3c, &(0x7f00000000c0)={0x0, 0xfdc8, 0x4, 0x0, 0x20000, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000340)) (async) r4 = syz_io_uring_setup(0xa3c, &(0x7f00000000c0)={0x0, 0xfdc8, 0x4, 0x0, 0x20000, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000340)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') unshare(0x22020600) move_mount(r6, 0x0, r6, &(0x7f0000000140)='./mnt\x00', 0x204) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8000}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0xfffffffd, 0x5]}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x240088c0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x240088c0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x9, &(0x7f0000000480), 0x1, 0x1}) io_uring_enter(r4, 0x2ded, 0xdefe, 0x60, 0x0, 0x0) (async) io_uring_enter(r4, 0x2ded, 0xdefe, 0x60, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}], 0x1c) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1m17.851367365s ago: executing program 32 (id=115): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000001a00)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="430e12b1583bc8dc3dfb4afd2f7a643fd3b6ffbc5bf37b8eaefd769b22690d343c082bfd3c22d765b7ff1753c260a45c52c34b6c08dd8bc89d3d88180031cd8e3e4b09ea4385b103cee49a514462cc91c1cb3588d81225f1a90514cdd4c12bf08d073aacf6b656d030ced3b16e9f247cab5ce747d28eb53cf0ec2b792e681de78b2acea1fdae24ccb7d7bc94a1267fa9e5a67a9d04b139e7d24e9214b6874bb8397c547d1b244701572c", 0xaa}, {&(0x7f0000001900)="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", 0xff}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f00000002c0)="099582b38cf55c8596500743db29d98dcf8989b88b8b811a7f4d6bfecd7c650e64f6129638bd3aa4b7848649", 0x2c}, {&(0x7f0000001780)="79654f60d609a124248b53933f7da2310d9c39a85b576d2a2d455077cd7c43801cfb69b3561cb534a65689c1898e85fde492a0e61858c62e555c484831d85312b22857977f30421629b068eb3aabef1133fab04a806636d2ae9055dd9618b3ae981f08998868a7d412eac421ad6f45733c549c1d9cfe824769c91bf3d1567cb0f391fa81b1b00b27fd61", 0x8a}, {&(0x7f0000001840)="34d8033c2bef8bf754917dee27da6bca9bc4274198a1a9ed3244bcb6759b372a8bf3afc7783c89386fcd3c87995210db5746df35ce849014dfcadf898b8218d2d248e71917acba92e180deb1bf1ebc2881ebc5774bccf15c806ec77513b27528a54320bbe85f6357bef596c9f29171767b21c87ed3e8d78070fc719f762d7a85a22bc8632872e740b20a77303e6f55031fda6325329353edc49fc450e43d9699c8ac3012b435c1b4dc3bb43819bcf5cdf0d08fd429", 0xb5}, {&(0x7f0000001580)="0619b9632db948c0ec34a17dfa1c767a86a2a734d72d47fbe5bd71e8ced5d291b65eccfa4b1788efddfe6874b473e9cb50371d093c5076da93c6f3fbabd6b6a3a165461e629a5efe4c865109e7e8296e5d622a1aba127ffa9afbba8131bc850b48356df8e219221d86d0ee18ad2f65b77c432eed9b2ab7f0edfaf6c82247c4cddcc804f5e6b0ceb900f9e4891cbff5c518acacb3f21d19ad2c86c8721bbfe33b0bcc40e51e52dde981a73078dfe1c2cfdaa633d48a4cdba9c6cffe20ffb323f41afe9a77fd756d5ad067d90ada3f296bbc3f4679", 0xd4}, {&(0x7f0000000400)="011c875567edcd7a316dfac59ac97f574f325785cf0962d00c6e9ac240c61f39a3256e9d7076331f56e2", 0x2a}], 0x9) syz_open_dev$sndctrl(&(0x7f0000000280), 0x8000, 0x111400) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x8000, 0x111400) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x10000, 0x0, 0x0, "d8804337000000f6ffffffffffffff00"}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x10000, 0x0, 0x0, "d8804337000000f6ffffffffffffff00"}) socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x15) (async) syz_emit_vhci(0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) mprotect(&(0x7f0000945000/0x4000)=nil, 0x4000, 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xffffffffffffff91) syz_io_uring_setup(0xa3c, &(0x7f00000000c0)={0x0, 0xfdc8, 0x4, 0x0, 0x20000, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000340)) (async) r4 = syz_io_uring_setup(0xa3c, &(0x7f00000000c0)={0x0, 0xfdc8, 0x4, 0x0, 0x20000, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000340)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') unshare(0x22020600) move_mount(r6, 0x0, r6, &(0x7f0000000140)='./mnt\x00', 0x204) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8000}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0xfffffffd, 0x5]}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x240088c0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x240088c0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x9, &(0x7f0000000480), 0x1, 0x1}) io_uring_enter(r4, 0x2ded, 0xdefe, 0x60, 0x0, 0x0) (async) io_uring_enter(r4, 0x2ded, 0xdefe, 0x60, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}], 0x1c) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 4.518772287s ago: executing program 4 (id=651): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_nanosleep(0x2, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x37, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x2, 0x0) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.149112957s ago: executing program 0 (id=653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0xff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000811) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) recvmmsg$unix(r6, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 3.025480749s ago: executing program 4 (id=656): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000060000fffe5dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 2.935672556s ago: executing program 2 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400408005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) 2.879158105s ago: executing program 2 (id=659): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a068a70ed55521639160000000058000b4824cb945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010003ff0000", 0x58}], 0x1) 2.797913278s ago: executing program 4 (id=660): socket(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000002c0)=0x1e) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0205710, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r7, 0x2284, &(0x7f0000000d40)=@manufact={0x4, 0x3, 0x800, "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"}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.797478651s ago: executing program 2 (id=661): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x1002, 0xec, 0x3ac, 0x1ec, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0xe, 0x4, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="b8d75668cd6a", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xfff0, 0x8, 0x6, 0x4, 0xfff7, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x52}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0afc0f6e6adf", @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000140)="cc"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabbae6886dd6002000000103afffe8000000000000000000000000000bbff0200000000000000000000001fca3bee34174973f5e800018600dd7401150d000000000100000000"], 0x0) mount(0x0, &(0x7f00000004c0)='./cgroup\x00', &(0x7f00000002c0)='efs\x00', 0x800000, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001400b59527bdf4e8302b272d59ed0993", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, &(0x7f0000006680)) alarm(0x1) 2.572811774s ago: executing program 2 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt(r0, 0x8, 0x9, &(0x7f0000000440)="12fd6bd4ce76fe55569c9b6d4e278002cd879e44f2acced0f444f0ac48b011335836d79611c67d8047c89877021c2aad3e7703cc6141bad1db7c6bc24b9986b40f9be2f8ca3eea985a89180b0c616b2aab3fa90431ac783fc83e380317e2dbe24cf79dad4afc77d5441dfa94cda13714141036f2a991863c28b6cc3b8ead763c9ed49797173ef4ff", 0x88) syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') syz_usb_connect(0x6, 0x3f9, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x41, 0x75, 0x9c, 0x8, 0x2c7c, 0x191, 0xc575, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e7, 0x1, 0x2, 0x2, 0x60, 0x7, [{{0x9, 0x4, 0xff, 0xa, 0x10, 0xff, 0xff, 0xff, 0x5, [], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0xd, 0x5, 0x7, [@generic={0xd7, 0x9, "ee44f5e08f147a5166cb1ee1f6e567376e387f595b76a8b4ba3d4f99cc2e8853b091475a21943016862f2b58a09bf78695562bedf3da30f7eeb5cc7594e006c865749126413e8122b87075dd6b8e530fc1a3e83ddd15c44c75734bcf835c1ded122ae601e64f500ca1793a81723e96599f1467b4270113116fd58bbc94d6e21841e238e1b223dfc546a59f89a72b798286526a6ce9397177dc9b76f001fdbf7f915a47fe048cd0c64f54bb3ec4fb8275b5a41f484e35cb142e0e654d91a3104ae8c6f6440482e54bc00238e3daf4542e41ecb3d2c7"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xd3}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x3, 0x8, 0x10, [@generic={0x71, 0x10, "d53344818ab5c180e43b91ef19896c5f49819a3be4be5e43c095e13c0a0984fe3cecd274345315b272fa40879d2117878620bf69aa8ab25313f9c28ff4e17a58d0013c56e0087ea251660635ba9fe6a1cd38c9b02aceb3bf13611555389f08f8d703eb127f4438ea86b450dd2704f1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfffd}]}}, {{0x9, 0x5, 0xf, 0x10, 0x628, 0xd, 0x6, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x2, 0x5}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x42f9d47400edb769, 0xc, 0x20, 0x5, 0x5, 0xff}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x2, 0x5, 0x2, [@generic={0xdc, 0xe, "5d2f058c73ba74340b21dcf9d0a3f35ec21a232e62ac114cf1c2cd4907fbc1429fb082c56242fe89a752f11350b136eb1e85f3962c0a263cf1a5fae5234678364bb0c26decd8a660f8d344af1538fc6e75689a62071b0d02f47ca468cc97eae6af3d25d855beffb3b229acfef7aa23a03018a917016872314ffc5556bb1f70b96f3bd9a17c1ef792fd92df3e805e53658e32eb9f95ace6e875c337c9cfd28d6039e90cb57455a479d3f3a832cd752b237b43713ecc837e6c32ae384b26e97a821d40693cec499e468987b0bdb8698ec97672306aca75a781e593"}, @generic={0x2e, 0x23, "105368c19780c63cc9abdee16c7df4728ac8234febe06854af61e28ccca949f88b04b5ff526207b9b7e086b4"}]}}, {{0x9, 0x5, 0xa, 0x0, 0xf6a4dbb4b94b49ab, 0x4, 0x3f, 0xb1}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x8, 0x0, 0xb, [@generic={0x11, 0x30, "7d12c1613479f4d933556907c4b9c0"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x9, 0xdf, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x7, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x81, 0x2, 0x10}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x5, 0x8, 0xd, [@generic={0xc6, 0x29, "c2afc9b8d042d9841331e1d3777f04051db38aa384e9449cbff8024f68caf91d376ac41c5df0caf52e5dd03f86eea1976257588ffd95f0c8da0cde1c548cc8014138d8b1398520be714e4a026bebe155259e81f4e81a16085e319b810fb78e7ce5a8d85d2593e823984d3abd0cd56b4c8d96d9ca183bd0e051afcac1c174e820b376e26455923c0ffd61b8161811aa83dae4a35e0d3b12fe75c6b7db510beeb784afe40d84809821e5e3363df13bb5638606dc2d1f26a3c0ce7489ce5a662c84d97b846e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xd, 0x5, 0x5}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x50, 0x8, 0xc6, 0xff, 0x6}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d4fda8558291ae96e00d0b5e6b491ade"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9, 0x40}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x1, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x75}}, {0x2b, &(0x7f00000001c0)=@string={0x2b, 0x3, "8fca6b9ed89a098f5075f838e8220ac882098547de32a0336c29309256e58ed07993982edd7daa4a2e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x103d}}, {0xee, &(0x7f0000000280)=@string={0xee, 0x3, "ac593daa969addb8e879149cb3beb56553d27bb7f70e40ec6d0357c1e668a0a0e0186f950c9ec33079117253a059208ac81dc1c1bb49e2f686ed700279fd06da8d4c0200e753c65e1c56bbed415eb8d0cd3cae96251157fcab99dbf18b6b7dcf7ec786c89c03a261d54c25a212a8ebc8d6d2e1e2f365f03c3b370dbe62990e2451c40a773a122dabd494bd2032f1ba96e9004c340b93ecd9c71ae9fe57e2c3f3d4a29c2f7ba8d876d3fa1d5ad4477745445d996deeb48dceec7806a2ae4987350beb70e20c9da89824bb3378e57825e3dd3dfa7a21fbbc01072943b82d7ca39e570a85b7f56782b993a9a08c"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)='/dev/hidraw#\x00') 2.505783477s ago: executing program 0 (id=663): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000186dd6002adf700383a00fe880000000000000000fff500000001ff03"], 0x0) 2.428903909s ago: executing program 0 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000110000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xd0}}, 0x0) 2.31700804s ago: executing program 0 (id=665): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x4, 0xe4, 0xfffffffe, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x12c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0x118, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6437, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xd0, 0x1e, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x3, 0xfffff242, 0x7fffffff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4b6, 0x6, 0xffffffffffffffff, 0x80008000, 0x7fff}, 0x8}}]}, {0x66, 0x6, "7e06665fca259bb434ec135cc10f37017b44a48bcfe0067a0a43f1e57dd088913ee5a4e9dd2a1947933690240e354ee230d3887ff816c27b14e109cd94b7ccaccf1d5599809eaf210d36443243e1191c6e1100a0952d28ce72970e99cc544c31ece1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x40, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x2, 0x2, 0x7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8000, 0xe, 0x0, 0x0, 0x0, "1c2251560ed1000000d65ab76fc5a1c8f5d4418b00000000fbffffffffffffff"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x20008010) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000080), &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x5, 0x5}) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.789019825s ago: executing program 3 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000003f01000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.788792831s ago: executing program 3 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0xf0ffff, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.728925766s ago: executing program 4 (id=668): socket$inet(0x2, 0x1, 0xfffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'bond0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x100e00, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x4, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000300", @ANYRES32=0x0, @ANYBLOB="cf1d8368669c91f71cf51ae0b1b6a125456fafde6e6453d5db35f740"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 1.677215514s ago: executing program 3 (id=669): socket$inet(0x2, 0x1, 0xfffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'bond0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x100e00, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x2, 0x300) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x4, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000300", @ANYRES32=0x0, @ANYBLOB="cf1d8368669c91f71cf51ae0b1b6a125456fafde6e6453d5db35f740"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 808.970502ms ago: executing program 4 (id=670): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) 808.234798ms ago: executing program 2 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000840900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}, 0x1, 0x0, 0x0, 0x40895}, 0x20008800) 807.973617ms ago: executing program 2 (id=672): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000090000000200", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6853d9d933be1dfd714164469626a146d27481484cbb5a43bede7e2a44e8e873380d076ba8d4079bb8f01e12e2bb2aa832f4523991ab5fe15336794847a1495afdd42307e427f194a003d3aa70181ca1e64bbc85a76728b17d9", @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) 763.531434ms ago: executing program 0 (id=673): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x1002, 0xec, 0x3ac, 0x1ec, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0xe, 0x4, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="b8d75668cd6a", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xfff0, 0x8, 0x6, 0x4, 0xfff7, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x52}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0afc0f6e6adf", @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000140)="cc"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabbae6886dd6002000000103afffe8000000000000000000000000000bbff0200000000000000000000001fca3bee34174973f5e800018600dd7401150d00000000"], 0x0) mount(0x0, &(0x7f00000004c0)='./cgroup\x00', &(0x7f00000002c0)='efs\x00', 0x800000, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, &(0x7f0000006680)) alarm(0x1) 699.134273ms ago: executing program 4 (id=674): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0xa2100, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000002280)=@file={0x0, './file1/file0\x00'}, 0x6e) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESOCT=r8]) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="340100000a0000000000000000000080e0000002000000000000000000000000fe80000000000000000000000000000d00000000000000000a0020a089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004cf3c000000ac1414aa000000000000000000000000000000010000000000000000000000000000000000000000308e000000008000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000005000000000000000000000000000000000000000200000000000000020004000000000048000200656362286369706865725f6e756c6c2900"/236], 0x134}}, 0x8000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0xc0810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(0xffffffffffffffff, 0x7b) r10 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r10, &(0x7f0000000040)=@in6={0x21, 0xffff, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 585.965246ms ago: executing program 3 (id=675): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x8400, {0x0, 0x84}}}, 0xc0}}, 0x0) 503.711211ms ago: executing program 3 (id=676): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) 58.80268ms ago: executing program 0 (id=677): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES16=r0]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000001f00010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 0s ago: executing program 3 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="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", 0xfe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000540)="ed3520", 0x3}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="dc00"], 0xdc}}], 0x2, 0x81) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x101, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = openat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x82, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:57898' (ED25519) to the list of known hosts. [ 41.296709][ T5857] cgroup: Unknown subsys name 'net' [ 41.444499][ T5857] cgroup: Unknown subsys name 'cpuset' [ 41.449149][ T5857] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.492261][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.179389][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.183109][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.185860][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.189323][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.191961][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.203124][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.206198][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.208748][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.212126][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.214717][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.225502][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.229124][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.232373][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.235473][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.238292][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.257212][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.260306][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.262751][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.268231][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.270951][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.407161][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.513863][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 46.544354][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.547111][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.549728][ T5941] bridge_slave_0: entered allmulticast mode [ 46.552541][ T5941] bridge_slave_0: entered promiscuous mode [ 46.560421][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.562743][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.565094][ T5941] bridge_slave_1: entered allmulticast mode [ 46.568074][ T5941] bridge_slave_1: entered promiscuous mode [ 46.629724][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.649267][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.737517][ T5941] team0: Port device team_slave_0 added [ 46.788975][ T5941] team0: Port device team_slave_1 added [ 46.851863][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.854979][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.857961][ T5945] bridge_slave_0: entered allmulticast mode [ 46.864376][ T5945] bridge_slave_0: entered promiscuous mode [ 46.869355][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.872441][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.875366][ T5945] bridge_slave_1: entered allmulticast mode [ 46.879100][ T5945] bridge_slave_1: entered promiscuous mode [ 46.917218][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.919564][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.927512][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.952540][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.958986][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.961389][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.970076][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.000648][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.011653][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.028553][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 47.072230][ T5945] team0: Port device team_slave_0 added [ 47.080945][ T5945] team0: Port device team_slave_1 added [ 47.169748][ T5941] hsr_slave_0: entered promiscuous mode [ 47.174613][ T5941] hsr_slave_1: entered promiscuous mode [ 47.184631][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.186850][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.196516][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.201006][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.203573][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.211734][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.358927][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.361319][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.363602][ T5947] bridge_slave_0: entered allmulticast mode [ 47.366253][ T5947] bridge_slave_0: entered promiscuous mode [ 47.368955][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.371662][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.373978][ T5951] bridge_slave_0: entered allmulticast mode [ 47.376981][ T5951] bridge_slave_0: entered promiscuous mode [ 47.380514][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.382757][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.385082][ T5951] bridge_slave_1: entered allmulticast mode [ 47.388665][ T5951] bridge_slave_1: entered promiscuous mode [ 47.414094][ T5945] hsr_slave_0: entered promiscuous mode [ 47.417250][ T5945] hsr_slave_1: entered promiscuous mode [ 47.420235][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.422843][ T5945] Cannot create hsr debugfs directory [ 47.424833][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.427109][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.429380][ T5947] bridge_slave_1: entered allmulticast mode [ 47.433796][ T5947] bridge_slave_1: entered promiscuous mode [ 47.503641][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.552875][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.557790][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.582480][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.675748][ T5951] team0: Port device team_slave_0 added [ 47.683467][ T5951] team0: Port device team_slave_1 added [ 47.691201][ T5947] team0: Port device team_slave_0 added [ 47.697084][ T5947] team0: Port device team_slave_1 added [ 47.744617][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.746813][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.754741][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.796597][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.798779][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.806856][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.814697][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.816912][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.824840][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.884048][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.886962][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.896196][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.934879][ T5951] hsr_slave_0: entered promiscuous mode [ 47.937736][ T5951] hsr_slave_1: entered promiscuous mode [ 47.939953][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.942324][ T5951] Cannot create hsr debugfs directory [ 48.044749][ T5947] hsr_slave_0: entered promiscuous mode [ 48.048429][ T5947] hsr_slave_1: entered promiscuous mode [ 48.053374][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.056535][ T5947] Cannot create hsr debugfs directory [ 48.129888][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.140499][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.158541][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.199725][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.230009][ T5943] Bluetooth: hci1: command tx timeout [ 48.230085][ T5948] Bluetooth: hci0: command tx timeout [ 48.251872][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.279564][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.306406][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.309874][ T5948] Bluetooth: hci2: command tx timeout [ 48.310697][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.319603][ T5948] Bluetooth: hci3: command tx timeout [ 48.336684][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.342987][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.349104][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.354669][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.418689][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.427805][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.433286][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.450882][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.485829][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.513815][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.524994][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.528170][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.538062][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.546322][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.549344][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.565212][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.571639][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.593007][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.595936][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.610987][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.613273][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.643385][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.652452][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.661644][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.664874][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.680950][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.683379][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.693348][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.705818][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.708819][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.727407][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.729705][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.779196][ T5947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.785697][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.819027][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.832128][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.868699][ T5945] veth0_vlan: entered promiscuous mode [ 48.879848][ T5945] veth1_vlan: entered promiscuous mode [ 48.905541][ T5941] veth0_vlan: entered promiscuous mode [ 48.916522][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.927759][ T5945] veth0_macvtap: entered promiscuous mode [ 48.938011][ T5941] veth1_vlan: entered promiscuous mode [ 48.944684][ T5945] veth1_macvtap: entered promiscuous mode [ 48.968617][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.975459][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.984923][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.995404][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.999191][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.004629][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.008280][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.017386][ T5951] veth0_vlan: entered promiscuous mode [ 49.028550][ T5941] veth0_macvtap: entered promiscuous mode [ 49.032604][ T5951] veth1_vlan: entered promiscuous mode [ 49.036423][ T5941] veth1_macvtap: entered promiscuous mode [ 49.056055][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.067644][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.087730][ T5951] veth0_macvtap: entered promiscuous mode [ 49.095025][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.097546][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.100638][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.104373][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.115420][ T5951] veth1_macvtap: entered promiscuous mode [ 49.123949][ T5947] veth0_vlan: entered promiscuous mode [ 49.124374][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129761][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.155336][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.170068][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.173798][ T5947] veth1_vlan: entered promiscuous mode [ 49.178155][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.184112][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.192578][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.195908][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.199292][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.203244][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.221045][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.223602][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.254908][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.262697][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.269457][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.284488][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.286718][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.308325][ T5947] veth0_macvtap: entered promiscuous mode [ 49.313828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.317161][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.334531][ T5947] veth1_macvtap: entered promiscuous mode [ 49.358152][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.367787][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.382405][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.386203][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.391110][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.394700][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.443284][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.444863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 49.446832][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.466622][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.469120][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.521781][ T6008] Invalid option length (474) for dns_resolver key [ 49.824073][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.832315][ T6018] ubi31: attaching mtd0 [ 49.838178][ T6018] ubi31: scanning is finished [ 49.839836][ T6018] ubi31: empty MTD device detected [ 50.316965][ T5948] Bluetooth: hci1: command tx timeout [ 50.320353][ T5948] Bluetooth: hci0: command tx timeout [ 50.380142][ T6018] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 50.394533][ T5948] Bluetooth: hci3: command tx timeout [ 50.397222][ T5948] Bluetooth: hci2: command tx timeout [ 50.459686][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.550246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.553726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.559933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.563613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.567056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.570867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.600385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.604000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.749621][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 50.759972][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.763433][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.766893][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 50.772711][ T9] usb 5-1: config 250 has no interface number 0 [ 50.775877][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 50.782171][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 50.785506][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.788686][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.793283][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 50.798427][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 50.804184][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.807038][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.810093][ T9] usb 5-1: Product: syz [ 50.811845][ T9] usb 5-1: SerialNumber: syz [ 50.817561][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 50.820494][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 51.154992][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 51.194599][ T9] usb 5-1: USB disconnect, device number 2 [ 51.199360][ T9] usblp0: removed [ 51.240600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.344239][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 51.347703][ T6039] openvswitch: netlink: Missing key (keys=40, expected=80) [ 51.699651][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.859598][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 51.863732][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 51.866575][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 51.869414][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 51.878147][ T9] usb 5-1: config 250 has no interface number 0 [ 51.885956][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 51.895422][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 51.899706][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 51.904695][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 51.908267][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 51.912765][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 51.916668][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 51.919471][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 51.922343][ T9] usb 5-1: Product: syz [ 51.923697][ T9] usb 5-1: SerialNumber: syz [ 51.931112][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 51.933167][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 52.389625][ T5943] Bluetooth: hci0: command tx timeout [ 52.391458][ T5943] Bluetooth: hci1: command tx timeout [ 52.420944][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 52.469905][ T5948] Bluetooth: hci2: command tx timeout [ 52.472169][ T5948] Bluetooth: hci3: command tx timeout [ 52.623030][ T9] usb 5-1: USB disconnect, device number 3 [ 52.781192][ T9] usblp0: removed [ 53.290780][ T6065] binder: 6061:6065 ioctl c0306201 80000240 returned -14 [ 54.539652][ T5948] Bluetooth: hci0: command tx timeout [ 54.542099][ T5943] Bluetooth: hci1: command tx timeout [ 54.550378][ T5943] Bluetooth: hci3: command tx timeout [ 54.550717][ T5948] Bluetooth: hci2: command tx timeout [ 54.830336][ T6083] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 56.285354][ T6093] netlink: 256 bytes leftover after parsing attributes in process `syz.3.21'. [ 56.409744][ T6103] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 56.805465][ T6111] 9pnet_fd: Insufficient options for proto=fd [ 56.815417][ T6111] loop6: detected capacity change from 0 to 524287999 [ 57.449570][ T838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.769549][ T838] usb 5-1: device descriptor read/64, error -71 [ 58.560940][ T838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.699663][ T838] usb 5-1: device descriptor read/64, error -71 [ 58.810055][ T838] usb usb5-port1: attempt power cycle [ 59.159611][ T838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.180863][ T838] usb 5-1: device descriptor read/8, error -71 [ 59.449673][ T838] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.485783][ T838] usb 5-1: device descriptor read/8, error -71 [ 59.669285][ T838] usb usb5-port1: unable to enumerate USB device [ 59.713337][ T6152] input: syz0 as /devices/virtual/input/input5 [ 60.445794][ T6155] Zero length message leads to an empty skb [ 61.161106][ T6190] openvswitch: netlink: Missing valid actions attribute. [ 61.163402][ T6190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.226702][ T6190] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 61.235762][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.244727][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.250167][ T6190] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 61.351544][ T6190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 61.354356][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.359792][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 61.377626][ T6196] vhci_hcd: connection closed [ 61.388261][ T60] vhci_hcd: stop threads [ 61.393315][ T60] vhci_hcd: release socket [ 61.394750][ T60] vhci_hcd: disconnect device [ 61.831391][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.833704][ T1325] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 61.836347][ T1325] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 62.000297][ T6218] loop2: detected capacity change from 0 to 7 [ 62.006481][ T6218] Dev loop2: unable to read RDB block 7 [ 62.029163][ T6218] loop2: AHDI p1 p2 p3 [ 62.032329][ T6218] loop2: partition table partially beyond EOD, truncated [ 62.035670][ T6218] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.038509][ T6218] loop2: p2 start 1702059890 is beyond EOD, truncated [ 63.909639][ T1325] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 63.912924][ T1325] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 63.919587][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.524955][ T6259] binder: 6252:6259 ioctl c0306201 0 returned -14 [ 65.990664][ T1325] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 65.992661][ T1325] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 65.999435][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.349667][ T6279] kernel profiling enabled (shift: 9) [ 66.591246][ T6284] vlan0: entered promiscuous mode [ 66.635705][ T6284] team0: Port device vlan0 added [ 66.653108][ T6284] tipc: Started in network mode [ 66.655877][ T6284] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 66.660602][ T6284] tipc: Enabled bearer , priority 0 [ 66.829213][ T6289] tipc: Started in network mode [ 66.830955][ T6289] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.835272][ T6289] tipc: Enabled bearer , priority 10 [ 67.680567][ T1019] tipc: Node number set to 11578026 [ 67.949715][ T838] tipc: Node number set to 2886997162 [ 68.149594][ T1325] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 68.149678][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.152218][ T1325] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 68.253646][ T6307] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 68.297112][ T6307] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 68.483400][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 68.488029][ T6326] netlink: 'syz.3.64': attribute type 23 has an invalid length. [ 68.539618][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.714204][ T838] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.718058][ T838] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 68.722984][ T838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.726730][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 68.731765][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 68.738670][ T838] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.742935][ T838] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.745730][ T838] usb 7-1: Product: syz [ 68.747054][ T838] usb 7-1: Manufacturer: syz [ 68.754138][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 68.756071][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 68.759166][ T838] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 68.761548][ T838] cdc_wdm 7-1:1.0: Unknown control protocol [ 69.239264][ T6342] process 'syz.3.68' launched './file0' with NULL argv: empty string added [ 69.454948][ T1325] usb 7-1: USB disconnect, device number 2 [ 70.255263][ T6352] lo: entered promiscuous mode [ 70.256888][ T6352] lo: entered allmulticast mode [ 70.263479][ T6352] tunl0: entered promiscuous mode [ 70.265157][ T6352] tunl0: entered allmulticast mode [ 70.269228][ T6352] gre0: entered promiscuous mode [ 70.270903][ T6352] gre0: entered allmulticast mode [ 70.510870][ T6352] gretap0: entered promiscuous mode [ 70.512630][ T6352] gretap0: entered allmulticast mode [ 70.516121][ T6352] erspan0: entered promiscuous mode [ 70.517852][ T6352] erspan0: entered allmulticast mode [ 70.521148][ T6352] ip_vti0: entered promiscuous mode [ 70.522829][ T6352] ip_vti0: entered allmulticast mode [ 70.525479][ T6352] ip6_vti0: entered promiscuous mode [ 70.527155][ T6352] ip6_vti0: entered allmulticast mode [ 70.530622][ T6352] sit0: entered promiscuous mode [ 70.532253][ T6352] sit0: entered allmulticast mode [ 70.536039][ T6352] ip6tnl0: entered promiscuous mode [ 70.537699][ T6352] ip6tnl0: entered allmulticast mode [ 70.540616][ T6352] ip6gre0: entered promiscuous mode [ 70.542319][ T6352] ip6gre0: entered allmulticast mode [ 70.545347][ T6352] syz_tun: entered promiscuous mode [ 70.547027][ T6352] syz_tun: entered allmulticast mode [ 70.562500][ T6352] ip6gretap0: entered promiscuous mode [ 70.564405][ T6352] ip6gretap0: entered allmulticast mode [ 70.568184][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.570913][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.574562][ T6352] bridge0: entered promiscuous mode [ 70.576216][ T6352] bridge0: entered allmulticast mode [ 70.581481][ T6352] vcan0: entered promiscuous mode [ 70.583114][ T6352] vcan0: entered allmulticast mode [ 70.586114][ T6352] bond0: entered promiscuous mode [ 70.587667][ T6352] bond_slave_0: entered promiscuous mode [ 70.589648][ T6352] bond_slave_1: entered promiscuous mode [ 70.591427][ T6352] bond0: entered allmulticast mode [ 70.593058][ T6352] bond_slave_0: entered allmulticast mode [ 70.594842][ T6352] bond_slave_1: entered allmulticast mode [ 70.598600][ T6352] tipc: Resetting bearer [ 70.603114][ T6352] team0: entered promiscuous mode [ 70.604723][ T6352] team_slave_0: entered promiscuous mode [ 70.606550][ T6352] team_slave_1: entered promiscuous mode [ 70.608434][ T6352] team0: entered allmulticast mode [ 70.610153][ T6352] team_slave_0: entered allmulticast mode [ 70.611942][ T6352] team_slave_1: entered allmulticast mode [ 70.613714][ T6352] vlan0: entered allmulticast mode [ 70.615346][ T6352] veth0_vlan: entered allmulticast mode [ 70.618697][ T6352] dummy0: entered promiscuous mode [ 70.620758][ T6352] dummy0: entered allmulticast mode [ 70.625149][ T6352] nlmon0: entered promiscuous mode [ 70.626800][ T6352] nlmon0: entered allmulticast mode [ 70.629122][ T6352] caif0: entered promiscuous mode [ 70.630791][ T6352] caif0: entered allmulticast mode [ 70.633112][ T6352] batadv0: entered promiscuous mode [ 70.634738][ T6352] batadv0: entered allmulticast mode [ 70.637922][ T6352] vxcan0: entered promiscuous mode [ 70.639611][ T6352] vxcan0: entered allmulticast mode [ 70.641693][ T6352] vxcan1: entered promiscuous mode [ 70.643321][ T6352] vxcan1: entered allmulticast mode [ 70.645730][ T6352] veth0: entered promiscuous mode [ 70.647324][ T6352] veth0: entered allmulticast mode [ 70.650937][ T6352] veth1: entered promiscuous mode [ 70.652549][ T6352] veth1: entered allmulticast mode [ 70.658736][ T6352] wg0: entered promiscuous mode [ 70.660374][ T6352] wg0: entered allmulticast mode [ 70.663335][ T6352] wg1: entered promiscuous mode [ 70.664910][ T6352] wg1: entered allmulticast mode [ 70.667715][ T6352] wg2: entered promiscuous mode [ 70.669296][ T6352] wg2: entered allmulticast mode [ 70.672501][ T6352] veth0_to_bridge: entered promiscuous mode [ 70.674361][ T6352] veth0_to_bridge: entered allmulticast mode [ 70.679223][ T6352] veth1_to_bridge: entered promiscuous mode [ 70.681281][ T6352] veth1_to_bridge: entered allmulticast mode [ 70.686640][ T6352] veth0_to_bond: entered promiscuous mode [ 70.688476][ T6352] veth0_to_bond: entered allmulticast mode [ 70.692301][ T6352] veth1_to_bond: entered promiscuous mode [ 70.694087][ T6352] veth1_to_bond: entered allmulticast mode [ 70.697781][ T6352] veth0_to_team: entered promiscuous mode [ 70.699697][ T6352] veth0_to_team: entered allmulticast mode [ 70.704537][ T6352] veth1_to_team: entered promiscuous mode [ 70.706328][ T6352] veth1_to_team: entered allmulticast mode [ 70.710942][ T6352] veth0_to_batadv: entered promiscuous mode [ 70.712844][ T6352] veth0_to_batadv: entered allmulticast mode [ 70.715916][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.718755][ T6352] batadv_slave_0: entered promiscuous mode [ 70.720676][ T6352] batadv_slave_0: entered allmulticast mode [ 70.724428][ T6352] veth1_to_batadv: entered promiscuous mode [ 70.726280][ T6352] veth1_to_batadv: entered allmulticast mode [ 70.729420][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.732354][ T6352] batadv_slave_1: entered promiscuous mode [ 70.734221][ T6352] batadv_slave_1: entered allmulticast mode [ 70.737531][ T6352] xfrm0: entered promiscuous mode [ 70.739127][ T6352] xfrm0: entered allmulticast mode [ 70.742231][ T6352] veth0_to_hsr: entered promiscuous mode [ 70.743996][ T6352] veth0_to_hsr: entered allmulticast mode [ 70.747079][ T6352] hsr_slave_0: entered allmulticast mode [ 70.750268][ T6352] veth1_to_hsr: entered promiscuous mode [ 70.752057][ T6352] veth1_to_hsr: entered allmulticast mode [ 70.755717][ T6352] hsr_slave_1: entered allmulticast mode [ 70.758768][ T6352] hsr0: entered promiscuous mode [ 70.760433][ T6352] hsr0: entered allmulticast mode [ 70.763644][ T6352] veth1_virt_wifi: entered promiscuous mode [ 70.765518][ T6352] veth1_virt_wifi: entered allmulticast mode [ 70.769033][ T6352] veth0_virt_wifi: entered promiscuous mode [ 70.770959][ T6352] veth0_virt_wifi: entered allmulticast mode [ 70.773876][ T6352] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 70.776136][ T6352] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 70.778993][ T6352] veth1_vlan: entered allmulticast mode [ 70.786098][ T6352] vlan1: entered promiscuous mode [ 70.787817][ T6352] vlan1: entered allmulticast mode [ 70.792266][ T6352] macvlan0: entered promiscuous mode [ 70.794076][ T6352] macvlan0: entered allmulticast mode [ 70.800393][ T6352] macvlan1: entered promiscuous mode [ 70.802187][ T6352] macvlan1: entered allmulticast mode [ 70.805226][ T6352] ipvlan0: entered promiscuous mode [ 70.806912][ T6352] ipvlan0: entered allmulticast mode [ 70.808672][ T6352] ipvlan1: entered promiscuous mode [ 70.811736][ T6352] ipvlan1: entered allmulticast mode [ 70.814202][ T6352] veth1_macvtap: entered allmulticast mode [ 70.817885][ T6352] veth0_macvtap: entered allmulticast mode [ 70.829843][ T6352] macvtap0: entered promiscuous mode [ 70.831581][ T6352] macvtap0: entered allmulticast mode [ 70.835617][ T6352] macsec0: entered promiscuous mode [ 70.837320][ T6352] macsec0: entered allmulticast mode [ 70.843377][ T6352] geneve0: entered promiscuous mode [ 70.845112][ T6352] geneve0: entered allmulticast mode [ 70.848613][ T6352] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.851465][ T6352] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.854336][ T6352] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.857147][ T6352] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.863825][ T6352] geneve1: entered promiscuous mode [ 70.866186][ T6352] geneve1: entered allmulticast mode [ 70.873614][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.875882][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.882062][ T6352] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 70.885118][ T6352] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 70.940104][ T6352] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 70.942420][ T6352] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 70.946673][ T6352] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 70.948931][ T6352] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 70.953782][ T6352] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 70.956181][ T6352] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 70.959150][ T6352] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 70.961392][ T6352] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 70.963657][ T6352] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 70.965929][ T6352] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 71.051208][ T6369] input: syz0 as /devices/virtual/input/input6 [ 71.660477][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.960382][ T6390] ======================================================= [ 71.960382][ T6390] WARNING: The mand mount option has been deprecated and [ 71.960382][ T6390] and is ignored by this kernel. Remove the mand [ 71.960382][ T6390] option from the mount to silence this warning. [ 71.960382][ T6390] ======================================================= [ 71.973678][ T6390] fuse: Bad value for 'user_id' [ 71.975789][ T6390] fuse: Bad value for 'user_id' [ 72.211093][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 72.215693][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 72.255905][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 72.259313][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.269543][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.272461][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 72.275906][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 72.279316][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 72.282542][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.283119][ T6395] futex_wake_op: syz.3.83 tries to shift op by -1; fix this program [ 72.293226][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 72.295094][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 72.297842][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 72.299460][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 72.306131][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 72.312283][ T6395] input: syz1 as /devices/virtual/input/input7 [ 72.314105][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 72.588834][ T6406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.85'. [ 72.687485][ T6406] batadv1: entered allmulticast mode [ 72.696527][ T6407] input: syz1 as /devices/virtual/input/input8 [ 72.727794][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 72.933993][ T6384] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 73.430668][ T9] usb 7-1: USB disconnect, device number 3 [ 73.694712][ T6423] ptrace attach of "/syz-executor exec"[5941] was attempted by ""[6423] [ 74.128430][ T6429] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 74.186383][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.213045][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.220989][ T6431] bond0: (slave bond_slave_0): Releasing backup interface [ 74.227987][ T6431] bond0: (slave bond_slave_1): Releasing backup interface [ 74.241078][ T6433] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 74.246549][ T6431] team0: Port device team_slave_0 removed [ 74.252489][ T6431] team0: Port device team_slave_1 removed [ 74.267024][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.277510][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.286614][ T6431] team0: Port device vlan0 removed [ 74.289391][ T6433] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 74.294906][ T6433] bond0: (slave wlan1): Opening slave failed [ 75.219621][ T6117] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.361507][ T6117] usb 7-1: device descriptor read/64, error -71 [ 75.599696][ T6117] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.602660][ T838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.739615][ T6117] usb 7-1: device descriptor read/64, error -71 [ 75.759614][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 75.762937][ T838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.766401][ T838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.768896][ T838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 75.772488][ T838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 75.775646][ T838] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.778336][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.797328][ T838] hub 5-1:1.0: bad descriptor, ignoring hub [ 75.799427][ T838] hub 5-1:1.0: probe with driver hub failed with error -5 [ 75.806448][ T838] cdc_wdm 5-1:1.0: skipping garbage [ 75.808007][ T838] cdc_wdm 5-1:1.0: skipping garbage [ 75.812002][ T838] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 75.813834][ T838] cdc_wdm 5-1:1.0: Unknown control protocol [ 75.850861][ T6117] usb usb7-port1: attempt power cycle [ 76.200378][ T6117] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.220922][ T6117] usb 7-1: device descriptor read/8, error -71 [ 76.469666][ T6117] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.490364][ T6117] usb 7-1: device descriptor read/8, error -71 [ 76.533695][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 76.597942][ T6477] netlink: 312 bytes leftover after parsing attributes in process `syz.1.105'. [ 76.609857][ T6117] usb usb7-port1: unable to enumerate USB device [ 76.832029][ T6459] cdc_wdm 5-1:1.0: Error autopm - -16 [ 76.832386][ T1019] usb 5-1: USB disconnect, device number 8 [ 76.949699][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.101342][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.104914][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.109112][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.113061][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 77.117440][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 77.123777][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.127377][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.130716][ T9] usb 6-1: Product: syz [ 77.132460][ T9] usb 6-1: Manufacturer: syz [ 77.139801][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 77.142010][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 77.146279][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 77.148699][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 77.795585][ T6117] usb 6-1: USB disconnect, device number 2 [ 77.899557][ T5978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 78.399577][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 78.405263][ T5978] usb 5-1: config 92 has an invalid interface number: 120 but max is 3 [ 78.408081][ T5978] usb 5-1: config 92 has an invalid descriptor of length 0, skipping remainder of the config [ 78.412212][ T5978] usb 5-1: config 92 has 1 interface, different from the descriptor's value: 4 [ 78.416311][ T5978] usb 5-1: config 92 has no interface number 0 [ 78.418403][ T5978] usb 5-1: config 92 interface 120 has no altsetting 0 [ 78.427746][ T5978] usb 5-1: string descriptor 0 read error: -22 [ 78.431496][ T5978] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a52, bcdDevice=a0.d0 [ 78.434571][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.618102][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 78.842601][ T6117] usb 5-1: USB disconnect, device number 9 [ 79.197687][ T6511] netlink: 120 bytes leftover after parsing attributes in process `syz.2.116'. [ 80.529768][ T838] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 80.692879][ T838] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.695814][ T838] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.698602][ T838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.706598][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 80.710341][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 80.717027][ T838] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.719877][ T838] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.722736][ T838] usb 8-1: Product: syz [ 80.724231][ T838] usb 8-1: Manufacturer: syz [ 80.730496][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 80.732488][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 80.734985][ T838] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 80.736678][ T838] cdc_wdm 8-1:1.0: Unknown control protocol [ 81.145439][ T10] cfg80211: failed to load regulatory.db [ 81.408033][ T24] usb 8-1: USB disconnect, device number 2 [ 82.365408][ T6552] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 82.370746][ T6552] team0: Device ipvlan1 failed to register rx_handler [ 82.482497][ T6556] syzkaller0: entered promiscuous mode [ 82.484692][ T6556] syzkaller0: entered allmulticast mode [ 83.309876][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.465690][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.468425][ T24] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.474461][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.477387][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 83.481007][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 83.497036][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.505174][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.508450][ T24] usb 8-1: Product: syz [ 83.520054][ T24] usb 8-1: Manufacturer: syz [ 83.528229][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 83.540093][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 83.549461][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 83.575440][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 83.857247][ T24] usb 8-1: USB disconnect, device number 3 [ 84.593518][ T6610] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 84.644330][ T6610] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 84.752452][ T6609] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 84.902698][ T6609] nlmon0: left promiscuous mode [ 84.907186][ T6609] nlmon0: left allmulticast mode [ 86.194417][ T6642] input: syz1 as /devices/virtual/input/input9 [ 86.338273][ T6646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.412035][ T6646] wireguard0: entered promiscuous mode [ 86.415917][ T6646] wireguard0: entered allmulticast mode [ 86.859577][ T6117] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.029673][ T6117] usb 8-1: Using ep0 maxpacket: 8 [ 87.033263][ T6117] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 87.048635][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.064024][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.073065][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.080259][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.086704][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.092902][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.101279][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.103957][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.112560][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.116130][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.136272][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.138828][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.145261][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.148253][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.153559][ T6117] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.156290][ T6117] usb 8-1: config 0 has no interface number 0 [ 87.158259][ T6117] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 87.161877][ T6653] Bluetooth: MGMT ver 1.23 [ 87.164862][ T6117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.173090][ T6653] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 87.180817][ T6653] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 87.185188][ T6117] usb 8-1: config 0 descriptor?? [ 87.220761][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 87.259801][ T6661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.321873][ T6117] viperboard 8-1:0.143: version 0.00 found at bus 008 address 004 [ 87.426201][ T6117] viperboard-i2c viperboard-i2c.3.auto: failure setting i2c_bus_freq to 100 [ 87.436033][ T6117] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 88.219544][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 88.355049][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 88.370264][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 88.374116][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.376952][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.391149][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.394186][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.397042][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.401573][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.405319][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.408167][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.413213][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.419146][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.428478][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.431928][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.434908][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.437773][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.445339][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.450159][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.452957][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.456321][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.482605][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.485650][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.489163][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.498991][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.507119][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.526840][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.554062][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 88.557759][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 88.562502][ T10] usb 5-1: Product: syz [ 88.564374][ T10] usb 5-1: Manufacturer: syz [ 88.566380][ T10] usb 5-1: SerialNumber: syz [ 88.712846][ T10] usb 5-1: config 0 descriptor?? [ 88.725923][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 88.931459][ T10] usb 5-1: USB disconnect, device number 10 [ 88.938482][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 89.439574][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 89.488591][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'. [ 89.586398][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 89.637036][ T40] audit: type=1804 audit(1748580336.985:2): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.164" name="/newroot/53/file0" dev="tmpfs" ino=292 res=1 errno=0 [ 89.881519][ T24] usb 8-1: USB disconnect, device number 4 [ 90.020521][ T6706] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 90.087894][ T6707] bridge_slave_0: left allmulticast mode [ 90.090369][ T6707] bridge_slave_0: left promiscuous mode [ 90.092888][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.112711][ T6707] bridge_slave_1: left allmulticast mode [ 90.114629][ T6707] bridge_slave_1: left promiscuous mode [ 90.116505][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.138319][ T6707] bond0: (slave bond_slave_0): Releasing backup interface [ 90.141057][ T6708] netlink: 'syz.3.166': attribute type 10 has an invalid length. [ 90.165701][ T6707] bond0: (slave bond_slave_1): Releasing backup interface [ 90.180846][ T6709] mmap: syz.2.165 (6709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.220015][ T6707] team0: Port device team_slave_0 removed [ 90.263971][ T6707] team0: Port device team_slave_1 removed [ 90.283346][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.286788][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.316880][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.321612][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.397430][ T6707] bond1: (slave ip6gretap1): Releasing backup interface [ 90.432496][ T6708] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 90.438348][ T6708] bond0: (slave wlan1): Opening slave failed [ 90.586481][ T6705] hpfs: hpfs_map_sector(): read error [ 91.049549][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.209564][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 91.212463][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.215362][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.218859][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.223295][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.227828][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.238065][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.241377][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.245914][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.254572][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.259111][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.265065][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.268318][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.273356][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.277030][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.280701][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.287752][ T10] usb 7-1: string descriptor 0 read error: -22 [ 91.289810][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.292968][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.309606][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 91.502384][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.505332][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.549136][ T5978] usb 7-1: USB disconnect, device number 8 [ 91.625234][ T6737] netlink: 3 bytes leftover after parsing attributes in process `syz.3.171'. [ 91.640857][ T6737] batadv1: entered allmulticast mode [ 91.696890][ T6739] input: syz1 as /devices/virtual/input/input10 [ 91.737143][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 92.276886][ T6746] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 92.326926][ T6750] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 92.339342][ T6750] syz_tun: entered promiscuous mode [ 92.385436][ T6752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.177'. [ 93.248737][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 93.481278][ T6769] loop2: detected capacity change from 0 to 7 [ 93.487141][ T6769] Dev loop2: unable to read RDB block 7 [ 93.490694][ T6769] loop2: AHDI p1 p2 p3 [ 93.492121][ T6769] loop2: partition table partially beyond EOD, truncated [ 93.494714][ T6769] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.496867][ T6769] loop2: p2 start 1702059890 is beyond EOD, truncated [ 93.933338][ T5354] Dev loop2: unable to read RDB block 7 [ 93.935826][ T5354] loop2: AHDI p1 p2 p3 [ 93.937686][ T5354] loop2: partition table partially beyond EOD, truncated [ 93.941968][ T5354] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.944888][ T5354] loop2: p2 start 1702059890 is beyond EOD, truncated [ 94.094865][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.097860][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.100623][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.104147][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.106820][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.119612][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.122847][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.126113][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.131291][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.134759][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.261358][ T6777] chnl_net:caif_netlink_parms(): no params data found [ 95.072262][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.074737][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.077292][ T6777] bridge_slave_0: entered allmulticast mode [ 95.080301][ T6777] bridge_slave_0: entered promiscuous mode [ 95.088559][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.091675][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.094760][ T6777] bridge_slave_1: entered allmulticast mode [ 95.094918][ T6797] Cannot find add_set index 1 as target [ 95.099216][ T6777] bridge_slave_1: entered promiscuous mode [ 95.188641][ T6800] usb usb1: usbfs: process 6800 (syz.0.191) did not claim interface 42 before use [ 95.278550][ T6803] lo speed is unknown, defaulting to 1000 [ 95.329985][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.333366][ T6803] lo speed is unknown, defaulting to 1000 [ 95.336111][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.339908][ T6803] lo speed is unknown, defaulting to 1000 [ 95.434317][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.464588][ T6803] infiniband sz1: set active [ 95.466201][ T6803] infiniband sz1: added lo [ 95.484811][ T6803] RDS/IB: sz1: added [ 95.486854][ T6803] smc: adding ib device sz1 with port count 1 [ 95.487048][ T6777] team0: Port device team_slave_0 added [ 95.488890][ T6803] smc: ib device sz1 port 1 has pnetid [ 95.494221][ T6777] team0: Port device team_slave_1 added [ 95.496526][ T6803] lo speed is unknown, defaulting to 1000 [ 95.589523][ T6803] lo speed is unknown, defaulting to 1000 [ 95.612687][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.615568][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.635337][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.644996][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.647390][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.656721][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.696365][ T1019] lo speed is unknown, defaulting to 1000 [ 95.698882][ T6777] hsr_slave_0: entered promiscuous mode [ 95.701891][ T6777] hsr_slave_1: entered promiscuous mode [ 95.704158][ T6777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.706619][ T6777] Cannot create hsr debugfs directory [ 95.724131][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.732158][ T5979] lo speed is unknown, defaulting to 1000 [ 95.735256][ T6803] lo speed is unknown, defaulting to 1000 [ 95.787047][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.891482][ T6803] lo speed is unknown, defaulting to 1000 [ 95.928179][ T6777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.000237][ T1019] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 96.023809][ T6803] lo speed is unknown, defaulting to 1000 [ 96.060610][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.079912][ T6777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.092796][ T6777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.100795][ T6777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.151008][ T5948] Bluetooth: hci4: command tx timeout [ 96.171410][ T6777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.191790][ T1019] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.192493][ T6777] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.195375][ T1019] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.209652][ T1019] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.223673][ T1019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.235223][ T6812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.244040][ T1019] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.244808][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.249746][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271097][ T12] bridge_slave_1: left allmulticast mode [ 96.273208][ T12] bridge_slave_1: left promiscuous mode [ 96.276268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.314242][ T12] bridge_slave_0: left allmulticast mode [ 96.316067][ T12] bridge_slave_0: left promiscuous mode [ 96.317885][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.669131][ T838] usb 8-1: USB disconnect, device number 5 [ 96.781043][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.786321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.791258][ T12] bond0 (unregistering): Released all slaves [ 96.811945][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.814316][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.883075][ T12] tipc: Disabling bearer [ 96.888819][ T12] tipc: Left network mode [ 96.946697][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 96.948819][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 97.024457][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.035996][ T6837] ceph: No mds server is up or the cluster is laggy [ 97.208006][ T6777] veth0_vlan: entered promiscuous mode [ 97.219383][ T6777] veth1_vlan: entered promiscuous mode [ 97.246591][ T6777] veth0_macvtap: entered promiscuous mode [ 97.261060][ T6777] veth1_macvtap: entered promiscuous mode [ 97.273131][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.355900][ T12] hsr_slave_0: left promiscuous mode [ 97.358108][ T12] hsr_slave_1: left promiscuous mode [ 97.368612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.371076][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.373853][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.376102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.413261][ T12] veth1_macvtap: left promiscuous mode [ 97.415789][ T12] veth0_macvtap: left promiscuous mode [ 97.418198][ T12] veth1_vlan: left promiscuous mode [ 97.429805][ T12] veth0_vlan: left promiscuous mode [ 98.022320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.148229][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.221712][ T6882] openvswitch: netlink: Message has 4 unknown bytes. [ 98.224478][ T6882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.239801][ T5948] Bluetooth: hci4: command tx timeout [ 98.265353][ T6884] xt_hashlimit: invalid rate [ 98.267885][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 98.466323][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 98.694161][ T6886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'. [ 98.765313][ T6893] program syz.0.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.801681][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.807450][ T6777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.811268][ T6777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.814897][ T6777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818378][ T6777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.825317][ T6894] program syz.0.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.880964][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.883531][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.924487][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.927382][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.745648][ T6925] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 99.897807][ T6927] ubi31: attaching mtd0 [ 99.901007][ T6927] ubi31: scanning is finished [ 99.999827][ T6927] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.003118][ T6927] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.006092][ T6927] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.081930][ T6927] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 100.084321][ T6927] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.086460][ T6927] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.088969][ T6927] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3341262489 [ 100.106413][ T6927] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.195670][ T6934] ubi31: background thread "ubi_bgt31d" started, PID 6934 [ 100.231603][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 100.261328][ T1118] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 100.284661][ T6942] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 100.287057][ T6942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.302189][ T1118] sr 2:0:0:0: [sr0] tag#31 Sense Key : Illegal Request [current] [ 100.305466][ T1118] sr 2:0:0:0: [sr0] tag#31 Add. Sense: Invalid command operation code [ 100.307723][ T6940] bridge_slave_1: left allmulticast mode [ 100.308622][ T1118] sr 2:0:0:0: [sr0] tag#31 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 100.310963][ T6940] bridge_slave_1: left promiscuous mode [ 100.313668][ T5948] Bluetooth: hci4: command tx timeout [ 100.314918][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 100.315024][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 100.328434][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.443388][ T6942] vhci_hcd vhci_hcd.0: Device attached [ 100.564396][ T1019] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 100.573626][ T6940] bridge_slave_0: left allmulticast mode [ 100.576101][ T6940] bridge_slave_0: left promiscuous mode [ 100.579310][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.631153][ T6943] vhci_hcd: connection reset by peer [ 100.633539][ T12] vhci_hcd: stop threads [ 100.634901][ T12] vhci_hcd: release socket [ 100.637104][ T12] vhci_hcd: disconnect device [ 101.043259][ T6955] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 101.047690][ T6955] random: crng reseeded on system resumption [ 101.390106][ T6035] IPVS: starting estimator thread 0... [ 101.509623][ T6977] IPVS: using max 43 ests per chain, 103200 per kthread [ 101.971341][ T7005] vlan0: entered promiscuous mode [ 101.987396][ T7005] team0: Port device vlan0 added [ 101.993739][ T7005] tipc: Started in network mode [ 101.995376][ T7005] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 101.997736][ T7005] tipc: Enabled bearer , priority 0 [ 102.013640][ T7010] netlink: 'syz.0.230': attribute type 30 has an invalid length. [ 102.016292][ T7010] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 102.019165][ T7010] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 102.264171][ T7024] netlink: 292 bytes leftover after parsing attributes in process `syz.2.233'. [ 102.409767][ T5948] Bluetooth: hci4: command tx timeout [ 102.511919][ T7029] team0: Port device vlan0 removed [ 102.535037][ T5978] lo speed is unknown, defaulting to 1000 [ 102.540944][ T12] tipc: Resetting bearer [ 102.682768][ T7058] warning: `syz.0.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.111863][ T6117] tipc: Node number set to 11578026 [ 103.670041][ T7075] random: crng reseeded on system resumption [ 104.400931][ T40] audit: type=1800 audit(1748580351.755:3): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file0" dev="9p" ino=35913868 res=0 errno=0 [ 104.517296][ T7087] xt_hashlimit: overflow, try lower: 5/0 [ 105.518252][ T7117] tipc: Enabled bearer , priority 10 [ 105.669642][ T1019] vhci_hcd: vhci_device speed not set [ 106.214127][ T7126] input: syz0 as /devices/virtual/input/input11 [ 106.427081][ T7145] syz.2.264: attempt to access beyond end of device [ 106.427081][ T7145] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 106.433114][ T7145] qnx6: unable to read the first superblock [ 106.436708][ T7145] syz.2.264: attempt to access beyond end of device [ 106.436708][ T7145] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 106.546744][ T7145] qnx6: unable to read the first superblock [ 106.555915][ T7145] qnx6: unable to read the first superblock [ 108.456598][ T7215] tipc: Enabling of bearer rejected, already enabled [ 108.484008][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 108.751017][ T7227] netlink: 3 bytes leftover after parsing attributes in process `syz.2.288'. [ 108.770529][ T7227] batadv1: entered allmulticast mode [ 108.779612][ T6117] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 108.814474][ T7228] input: syz1 as /devices/virtual/input/input12 [ 108.822151][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.288'. [ 108.896388][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 108.900185][ T7231] gretap0: entered promiscuous mode [ 108.930922][ T6117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.937792][ T6117] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.941634][ T6117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.946464][ T6117] usb 8-1: config 0 descriptor?? [ 109.160081][ T6117] usbhid 8-1:0.0: can't add hid device: -71 [ 109.164545][ T6117] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 109.170945][ T6117] usb 8-1: USB disconnect, device number 6 [ 109.222692][ T40] audit: type=1804 audit(1748580356.575:4): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.293" name="/newroot/86/file0" dev="tmpfs" ino=474 res=1 errno=0 [ 109.402108][ T7255] tipc: Started in network mode [ 109.404093][ T7255] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 109.408705][ T7255] tipc: Enabled bearer , priority 10 [ 109.469906][ T40] audit: type=1804 audit(1748580356.815:5): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.299" name="/newroot/87/file0/file0" dev="ramfs" ino=12258 res=1 errno=0 [ 110.329612][ T1019] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 110.493675][ T1019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.497523][ T1019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.501031][ T1019] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.511692][ T1019] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.522998][ T1019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.539563][ T6006] tipc: Node number set to 4269801488 [ 110.552166][ T1019] usb 9-1: config 0 descriptor?? [ 110.569574][ T6117] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.729589][ T6117] usb 8-1: Using ep0 maxpacket: 8 [ 110.773618][ T6117] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.780388][ T6117] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.784252][ T6117] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 110.788899][ T6117] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 110.793603][ T6117] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.797212][ T6117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.813253][ T6117] hub 8-1:1.0: bad descriptor, ignoring hub [ 110.852398][ T6117] hub 8-1:1.0: probe with driver hub failed with error -5 [ 110.856896][ T6117] cdc_wdm 8-1:1.0: skipping garbage [ 110.859102][ T6117] cdc_wdm 8-1:1.0: skipping garbage [ 110.867759][ T6117] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 110.871246][ T6117] cdc_wdm 8-1:1.0: Unknown control protocol [ 111.129724][ T6117] usb 8-1: USB disconnect, device number 7 [ 111.417558][ T7300] syzkaller0: entered promiscuous mode [ 111.419731][ T7300] syzkaller0: entered allmulticast mode [ 112.077970][ T1019] usbhid 9-1:0.0: can't add hid device: -71 [ 112.080303][ T1019] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 112.088778][ T1019] usb 9-1: USB disconnect, device number 2 [ 112.888575][ T7341] openvswitch: netlink: Message has 4 unknown bytes. [ 112.910573][ T7341] loop2: detected capacity change from 0 to 7 [ 112.920301][ T6034] loop2: [ 112.921753][ T6034] loop2: partition table partially beyond EOD, truncated [ 112.937598][ T7341] loop2: [ 112.938615][ T7341] loop2: partition table partially beyond EOD, truncated [ 113.182524][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 113.743602][ T7353] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 114.077512][ T7362] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 114.082580][ T7362] syz_tun: entered promiscuous mode [ 114.088071][ T7362] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 115.716439][ T7421] binder: 7403:7421 ioctl c0306201 80000240 returned -14 [ 116.058731][ T7426] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 116.131486][ T7428] tipc: Resetting bearer [ 116.134880][ T7429] ext2: Unknown parameter 'bar°ÿ ' [ 116.270238][ T7428] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 116.277031][ T7428] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 116.296771][ T7428] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.334073][ T7436] hfs: unable to load iocharset "io#harset" [ 116.409570][ T6006] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 116.582346][ T6006] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.585269][ T6006] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.588705][ T6006] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.591950][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 116.598867][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 116.609959][ T6006] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.613081][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.616815][ T6006] usb 9-1: Product: syz [ 116.620610][ T6006] usb 9-1: Manufacturer: syz [ 116.655751][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 116.663839][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 116.673521][ T6006] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 116.678425][ T6006] cdc_wdm 9-1:1.0: Unknown control protocol [ 117.064268][ T6117] usb 9-1: USB disconnect, device number 3 [ 117.475141][ T7480] FAULT_INJECTION: forcing a failure. [ 117.475141][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.479639][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.0.343 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 117.479660][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.479667][ T7480] Call Trace: [ 117.479671][ T7480] [ 117.479676][ T7480] dump_stack_lvl+0x16c/0x1f0 [ 117.479693][ T7480] should_fail_ex+0x512/0x640 [ 117.479710][ T7480] _copy_from_user+0x2e/0xd0 [ 117.479726][ T7480] move_addr_to_kernel+0x65/0x170 [ 117.479744][ T7480] __sys_connect+0xb1/0x160 [ 117.479754][ T7480] ? __pfx___sys_connect+0x10/0x10 [ 117.479769][ T7480] ? __pfx_ksys_write+0x10/0x10 [ 117.479787][ T7480] __ia32_sys_connect+0x71/0xb0 [ 117.479797][ T7480] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 117.479810][ T7480] __do_fast_syscall_32+0x7c/0x3a0 [ 117.479824][ T7480] do_fast_syscall_32+0x32/0x80 [ 117.479837][ T7480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.479850][ T7480] RIP: 0023:0xf70be579 [ 117.479859][ T7480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.479869][ T7480] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 117.479879][ T7480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 117.479885][ T7480] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 117.479891][ T7480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.479896][ T7480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.479902][ T7480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.479915][ T7480] [ 117.876806][ T7489] binder: 7485:7489 ioctl c0306201 80000240 returned -14 [ 118.774385][ T40] audit: type=1326 audit(1748580366.125:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.784127][ T40] audit: type=1326 audit(1748580366.125:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.792905][ T40] audit: type=1326 audit(1748580366.125:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.800289][ T7521] sp0: Synchronizing with TNC [ 118.807663][ T7520] [U] è` [ 118.809982][ T40] audit: type=1326 audit(1748580366.125:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.818744][ T40] audit: type=1326 audit(1748580366.125:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.827695][ T40] audit: type=1326 audit(1748580366.125:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.836938][ T40] audit: type=1326 audit(1748580366.135:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.843504][ T40] audit: type=1326 audit(1748580366.135:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.850049][ T40] audit: type=1326 audit(1748580366.135:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 118.856215][ T40] audit: type=1326 audit(1748580366.135:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 119.908710][ T7553] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 120.218275][ T7567] netlink: 'syz.0.372': attribute type 3 has an invalid length. [ 120.223484][ T7567] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.372'. [ 120.229447][ T7565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 120.232107][ T7565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.236468][ T7565] vhci_hcd vhci_hcd.0: Device attached [ 120.245073][ T7569] lo speed is unknown, defaulting to 1000 [ 120.469681][ T1019] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 120.602904][ T7569] bond0: (slave syz_tun): Releasing backup interface [ 120.692969][ T7569] syz_tun: left promiscuous mode [ 120.804551][ T7570] vhci_hcd: connection reset by peer [ 120.810046][ T1068] vhci_hcd: stop threads [ 120.811426][ T1068] vhci_hcd: release socket [ 120.813574][ T1068] vhci_hcd: disconnect device [ 120.901815][ T7609] 9pnet_virtio: no channels available for device syz [ 122.309952][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 122.688146][ T7648] syz_tun: left promiscuous mode [ 122.693171][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.696196][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.741130][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.785373][ T7648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.788113][ T7648] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.790945][ T7648] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.793794][ T7648] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.979976][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 124.129537][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 124.132435][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.136027][ T10] usb 7-1: config 0 has no interface number 0 [ 124.141068][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.144734][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.147576][ T10] usb 7-1: Product: syz [ 124.148946][ T10] usb 7-1: Manufacturer: syz [ 124.151085][ T10] usb 7-1: SerialNumber: syz [ 124.155895][ T10] usb 7-1: config 0 descriptor?? [ 124.161361][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.534754][ T7699] binder: 7697:7699 ioctl c0306201 80000240 returned -14 [ 124.739589][ T6006] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 124.889646][ T6006] usb 9-1: Invalid ep0 maxpacket: 64 [ 125.029603][ T6006] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 125.120413][ T7721] tipc: Enabling of bearer rejected, already enabled [ 125.200687][ T6006] usb 9-1: Invalid ep0 maxpacket: 64 [ 125.202574][ T6006] usb usb9-port1: attempt power cycle [ 125.539557][ T6006] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 125.559944][ T6006] usb 9-1: Invalid ep0 maxpacket: 64 [ 125.590682][ T1019] vhci_hcd: vhci_device speed not set [ 125.691557][ T6006] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 125.710868][ T6006] usb 9-1: Invalid ep0 maxpacket: 64 [ 125.712840][ T6006] usb usb9-port1: unable to enumerate USB device [ 126.376085][ T7742] tipc: Enabled bearer , priority 10 [ 126.758490][ T10] usb 7-1: qt2_attach - failed to power on unit: -71 [ 126.817474][ T7747] FAULT_INJECTION: forcing a failure. [ 126.817474][ T7747] name failslab, interval 1, probability 0, space 0, times 1 [ 126.822053][ T7747] CPU: 3 UID: 0 PID: 7747 Comm: syz.2.428 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 126.822067][ T7747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.822073][ T7747] Call Trace: [ 126.822077][ T7747] [ 126.822081][ T7747] dump_stack_lvl+0x16c/0x1f0 [ 126.822098][ T7747] should_fail_ex+0x512/0x640 [ 126.822112][ T7747] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.822124][ T7747] should_failslab+0xc2/0x120 [ 126.822138][ T7747] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.822148][ T7747] ? bpf_lsm_capable+0x9/0x10 [ 126.822157][ T7747] ? pagemap_read+0x296/0x890 [ 126.822169][ T7747] pagemap_read+0x296/0x890 [ 126.822180][ T7747] ? __pfx_pagemap_read+0x10/0x10 [ 126.822192][ T7747] ? rw_verify_area+0xcf/0x680 [ 126.822208][ T7747] ? __pfx_pagemap_read+0x10/0x10 [ 126.822218][ T7747] vfs_read+0x1e1/0xc60 [ 126.822230][ T7747] ? __pfx_vfs_read+0x10/0x10 [ 126.822239][ T7747] ? find_held_lock+0x2b/0x80 [ 126.822253][ T7747] ? __fget_files+0x204/0x3c0 [ 126.822265][ T7747] ? __fget_files+0x20e/0x3c0 [ 126.822273][ T7747] ? __fget_files+0x1c0/0x3c0 [ 126.822286][ T7747] ksys_pread64+0x161/0x1a0 [ 126.822297][ T7747] ? __pfx_ksys_pread64+0x10/0x10 [ 126.822306][ T7747] ? syscall_user_dispatch+0x78/0x140 [ 126.822320][ T7747] ? rcu_is_watching+0x12/0xc0 [ 126.822336][ T7747] __do_fast_syscall_32+0x7c/0x3a0 [ 126.822351][ T7747] do_fast_syscall_32+0x32/0x80 [ 126.822363][ T7747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.822376][ T7747] RIP: 0023:0xf7fb6579 [ 126.822385][ T7747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 126.822394][ T7747] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 126.822404][ T7747] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001240 [ 126.822410][ T7747] RDX: 0000000000200000 RSI: 0000000000200000 RDI: 0000000000000000 [ 126.822416][ T7747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.822422][ T7747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 126.822427][ T7747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.822440][ T7747] [ 127.250310][ T10] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 127.275793][ T10] usb 7-1: USB disconnect, device number 9 [ 129.029584][ T6006] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 129.181399][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.184786][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.187740][ T6006] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 129.195134][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.242463][ T6006] usb 9-1: config 0 descriptor?? [ 129.599598][ T5979] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 129.771185][ T5979] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.774478][ T5979] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.779541][ T5979] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.783480][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.799553][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.830641][ T5979] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.833578][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.836126][ T5979] usb 7-1: Product: syz [ 129.837474][ T5979] usb 7-1: Manufacturer: syz [ 129.843625][ T5979] cdc_wdm 7-1:1.0: skipping garbage [ 129.845325][ T5979] cdc_wdm 7-1:1.0: skipping garbage [ 129.848911][ T5979] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 129.851600][ T5979] cdc_wdm 7-1:1.0: Unknown control protocol [ 130.605865][ T6006] usb 9-1: string descriptor 0 read error: -71 [ 130.937836][ T6006] usbhid 9-1:0.0: can't add hid device: -71 [ 131.071518][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 131.101498][ T10] usb 7-1: USB disconnect, device number 10 [ 131.185180][ T7802] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 131.224683][ T6006] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 131.230142][ T6006] usb 9-1: USB disconnect, device number 8 [ 131.286723][ T53] libceph: connect (1)[c::]:6789 error -101 [ 131.288926][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 131.554428][ T53] libceph: connect (1)[c::]:6789 error -101 [ 131.560812][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 131.739563][ T6006] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 131.879631][ T6006] usb 5-1: device descriptor read/64, error -71 [ 132.069950][ T53] libceph: connect (1)[c::]:6789 error -101 [ 132.075621][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 132.081975][ T7807] ceph: No mds server is up or the cluster is laggy [ 132.139642][ T6006] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 132.269626][ T6006] usb 5-1: device descriptor read/64, error -71 [ 132.322080][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.324845][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.386375][ T7830] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 132.389046][ T7830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.390479][ T6006] usb usb5-port1: attempt power cycle [ 132.398709][ T7830] vhci_hcd vhci_hcd.0: Device attached [ 132.461175][ T7830] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 132.465701][ T7830] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 132.669588][ T5979] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 132.711320][ T7838] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 132.740164][ T6006] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 132.761898][ T6006] usb 5-1: device descriptor read/8, error -71 [ 132.999582][ T6006] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 133.018384][ T7831] vhci_hcd: connection reset by peer [ 133.020692][ T6006] usb 5-1: device descriptor read/8, error -71 [ 133.023100][ T1068] vhci_hcd: stop threads [ 133.024814][ T1068] vhci_hcd: release socket [ 133.026383][ T1068] vhci_hcd: disconnect device [ 133.117401][ T7846] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 133.125878][ T7846] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 133.140501][ T6006] usb usb5-port1: unable to enumerate USB device [ 133.704816][ T7855] FAULT_INJECTION: forcing a failure. [ 133.704816][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 133.710091][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.2.457 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 133.710112][ T7855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.710122][ T7855] Call Trace: [ 133.710128][ T7855] [ 133.710134][ T7855] dump_stack_lvl+0x16c/0x1f0 [ 133.710157][ T7855] should_fail_ex+0x512/0x640 [ 133.710182][ T7855] should_failslab+0xc2/0x120 [ 133.710203][ T7855] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.710222][ T7855] ? sctp_get_port_local+0x51e/0x1610 [ 133.710246][ T7855] sctp_get_port_local+0x51e/0x1610 [ 133.710272][ T7855] ? __pfx_sctp_get_port_local+0x10/0x10 [ 133.710291][ T7855] ? sctp_bind_addr_match+0x193/0x300 [ 133.710312][ T7855] ? sctp_bind_addr_match+0x19d/0x300 [ 133.710334][ T7855] sctp_do_bind+0x223/0x700 [ 133.710361][ T7855] sctp_connect_new_asoc+0x5fd/0x790 [ 133.710387][ T7855] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.710421][ T7855] __sctp_connect+0x3f3/0xc60 [ 133.710451][ T7855] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.710471][ T7855] ? __pfx___sctp_connect+0x10/0x10 [ 133.710495][ T7855] ? __pfx_sctp_inet_connect+0x10/0x10 [ 133.710520][ T7855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.710541][ T7855] ? __pfx_sctp_inet_connect+0x10/0x10 [ 133.710563][ T7855] sctp_inet_connect+0x15f/0x200 [ 133.710588][ T7855] __sys_connect_file+0x13e/0x1a0 [ 133.710607][ T7855] __sys_connect+0x13b/0x160 [ 133.710622][ T7855] ? __pfx___sys_connect+0x10/0x10 [ 133.710646][ T7855] ? __pfx_ksys_write+0x10/0x10 [ 133.710667][ T7855] __ia32_sys_connect+0x71/0xb0 [ 133.710681][ T7855] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 133.710700][ T7855] __do_fast_syscall_32+0x7c/0x3a0 [ 133.710720][ T7855] do_fast_syscall_32+0x32/0x80 [ 133.710738][ T7855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.710758][ T7855] RIP: 0023:0xf7fb6579 [ 133.710770][ T7855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.710785][ T7855] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 133.710800][ T7855] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 133.710809][ T7855] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 133.710818][ T7855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.710826][ T7855] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.710835][ T7855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.710856][ T7855] [ 133.897375][ T7858] binder: 7856:7858 ioctl c0306201 80000240 returned -14 [ 135.575935][ T7883] rdma_rxe: rxe_newlink: failed to add lo [ 135.889569][ T1019] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 136.060935][ T1019] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.064389][ T1019] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.067443][ T1019] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.076894][ T1019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.084115][ T7884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.088345][ T1019] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.214909][ T7923] sctp: [Deprecated]: syz.2.477 (pid 7923) Use of int in maxseg socket option. [ 137.214909][ T7923] Use struct sctp_assoc_value instead [ 137.572848][ T7931] binder: 7929:7931 ioctl 4018620d 0 returned -22 [ 137.819633][ T5979] vhci_hcd: vhci_device speed not set [ 137.889662][ T1468] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.542408][ T61] usb 9-1: USB disconnect, device number 9 [ 138.998958][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.003795][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.007419][ T1468] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 139.013892][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.031223][ T1468] usb 5-1: config 0 descriptor?? [ 139.272508][ T1468] usb 5-1: string descriptor 0 read error: -71 [ 139.414778][ T1468] usbhid 5-1:0.0: can't add hid device: -71 [ 139.416965][ T1468] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.443021][ T1468] usb 5-1: USB disconnect, device number 15 [ 139.722645][ T7962] xt_hashlimit: overflow, try lower: 5/0 [ 139.855323][ T7965] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 139.857426][ T7965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.860134][ T7965] vhci_hcd vhci_hcd.0: Device attached [ 140.279756][ T5979] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 140.333806][ T7967] vhci_hcd: connection reset by peer [ 140.346764][ T13] vhci_hcd: stop threads [ 140.348722][ T13] vhci_hcd: release socket [ 140.350873][ T13] vhci_hcd: disconnect device [ 140.699615][ T1019] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.879654][ T1019] usb 5-1: Using ep0 maxpacket: 32 [ 140.882804][ T1019] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.889301][ T1019] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.898654][ T1019] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.901269][ T1019] usb 5-1: Product: syz [ 140.902605][ T1019] usb 5-1: Manufacturer: syz [ 140.904154][ T1019] usb 5-1: SerialNumber: syz [ 140.930158][ T1019] usb 5-1: config 0 descriptor?? [ 140.936734][ T7977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.130594][ T1468] usb 5-1: USB disconnect, device number 16 [ 143.147859][ T8020] xt_connbytes: Forcing CT accounting to be enabled [ 143.305628][ T8026] wg1: entered promiscuous mode [ 143.307527][ T8026] wg1: entered allmulticast mode [ 143.686487][ T1468] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 143.797077][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.508'. [ 143.849573][ T1468] usb 9-1: Using ep0 maxpacket: 8 [ 143.853596][ T1468] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.857496][ T1468] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.860617][ T1468] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 143.864207][ T1468] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 143.867740][ T1468] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.870986][ T1468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.882748][ T1468] hub 9-1:1.0: bad descriptor, ignoring hub [ 143.885426][ T1468] hub 9-1:1.0: probe with driver hub failed with error -5 [ 143.888994][ T1468] cdc_wdm 9-1:1.0: skipping garbage [ 143.891671][ T1468] cdc_wdm 9-1:1.0: skipping garbage [ 143.896095][ T1468] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 143.898597][ T1468] cdc_wdm 9-1:1.0: Unknown control protocol [ 144.947305][ T8031] cdc_wdm 9-1:1.0: Error autopm - -16 [ 144.947544][ T53] usb 9-1: USB disconnect, device number 10 [ 145.277813][ T8073] binder: 8071:8073 ioctl c0306201 80000240 returned -14 [ 145.750915][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 145.919538][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 145.923944][ T53] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.928117][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.932033][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 145.936618][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 145.941369][ T53] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.945148][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.954939][ T53] hub 9-1:1.0: bad descriptor, ignoring hub [ 145.957482][ T53] hub 9-1:1.0: probe with driver hub failed with error -5 [ 145.961088][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 145.962690][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 145.965569][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 145.967445][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 146.467530][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.2.521'. [ 146.469953][ T5979] vhci_hcd: vhci_device speed not set [ 147.022189][ T6006] usb 9-1: USB disconnect, device number 11 [ 147.024216][ T8080] cdc_wdm 9-1:1.0: Error autopm - -16 [ 147.516352][ T8118] netlink: 3 bytes leftover after parsing attributes in process `syz.3.526'. [ 147.542300][ T8118] batadv1: entered allmulticast mode [ 147.583523][ T8119] input: syz1 as /devices/virtual/input/input14 [ 147.606377][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 148.278875][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.531'. [ 148.283688][ T8130] netlink: 43 bytes leftover after parsing attributes in process `syz.2.531'. [ 148.286449][ T8130] netlink: 'syz.2.531': attribute type 5 has an invalid length. [ 148.289041][ T8130] netlink: 43 bytes leftover after parsing attributes in process `syz.2.531'. [ 148.705557][ T8136] binder: 8132:8136 ioctl c0306201 80000240 returned -14 [ 150.131696][ T8162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.538'. [ 150.539825][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 150.845696][ T8175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 150.847785][ T8175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.851573][ T8175] vhci_hcd vhci_hcd.0: Device attached [ 150.909805][ T8195] vhci_hcd: connection closed [ 150.922136][ T46] vhci_hcd: stop threads [ 150.925019][ T46] vhci_hcd: release socket [ 150.926410][ T46] vhci_hcd: disconnect device [ 150.929552][ T5979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 151.059566][ T5979] usb 5-1: device descriptor read/64, error -71 [ 151.299546][ T5979] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 151.439891][ T5979] usb 5-1: device descriptor read/64, error -71 [ 151.549670][ T5979] usb usb5-port1: attempt power cycle [ 151.567667][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 151.889539][ T5979] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 151.910280][ T5979] usb 5-1: device descriptor read/8, error -71 [ 152.159551][ T5979] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 152.190072][ T5979] usb 5-1: device descriptor read/8, error -71 [ 152.300126][ T5979] usb usb5-port1: unable to enumerate USB device [ 152.713838][ T8213] netlink: 256 bytes leftover after parsing attributes in process `syz.4.553'. [ 153.600122][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 153.602514][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 153.779800][ T8223] ceph: No mds server is up or the cluster is laggy [ 153.797334][ T8241] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 153.829730][ T8241] bond1: entered promiscuous mode [ 153.831980][ T8241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.894396][ T8243] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 153.896657][ T8243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.899393][ T8243] vhci_hcd vhci_hcd.0: Device attached [ 153.917352][ T8241] bond1: (slave veth3): making interface the new active one [ 153.925615][ T8241] veth3: entered promiscuous mode [ 153.936277][ T8241] bond1: (slave veth3): Enslaving as an active interface with an up link [ 154.269789][ T5979] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 154.464719][ T8274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'. [ 154.598949][ T8278] lo speed is unknown, defaulting to 1000 [ 154.722154][ T8246] vhci_hcd: connection reset by peer [ 154.725726][ T46] vhci_hcd: stop threads [ 154.727072][ T46] vhci_hcd: release socket [ 154.728505][ T46] vhci_hcd: disconnect device [ 154.952037][ T8287] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 154.958875][ T8287] team0: Device ipvlan1 failed to register rx_handler [ 155.337669][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.570'. [ 155.344711][ T8292] veth0: entered promiscuous mode [ 155.346643][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 155.714384][ T8300] input: syz1 as /devices/virtual/input/input15 [ 155.731367][ T8302] usb usb8: usbfs: process 8302 (syz.2.573) did not claim interface 0 before use [ 155.738889][ T8300] netlink: 'syz.4.569': attribute type 32 has an invalid length. [ 155.741610][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 155.751446][ T8300] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 156.992457][ T8320] binder: 8314:8320 ioctl 4018620d 0 returned -22 [ 157.770063][ T1019] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 157.950244][ T1019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.989172][ T1019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.034801][ T1019] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 158.068444][ T1019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.162607][ T1019] usb 5-1: config 0 descriptor?? [ 158.413682][ T8342] netlink: 44 bytes leftover after parsing attributes in process `syz.2.585'. [ 158.578926][ T8343] binder: 8337:8343 ioctl c0306201 80000240 returned -14 [ 158.957866][ T8351] binder: 8349:8351 ioctl 4018620d 0 returned -22 [ 159.419895][ T5979] vhci_hcd: vhci_device speed not set [ 159.679706][ T6006] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 159.923337][ T1019] usb 5-1: string descriptor 0 read error: -71 [ 159.924197][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.931769][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.936502][ T6006] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 159.941678][ T1019] usbhid 5-1:0.0: can't add hid device: -71 [ 159.946391][ T1019] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 159.954037][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.954539][ T1019] usb 5-1: USB disconnect, device number 21 [ 160.023859][ T6006] usb 9-1: config 0 descriptor?? [ 160.647247][ T6006] usb 9-1: string descriptor 0 read error: -71 [ 160.655969][ T6006] usbhid 9-1:0.0: can't add hid device: -71 [ 160.658134][ T6006] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 160.661921][ T6006] usb 9-1: USB disconnect, device number 12 [ 160.887739][ T8371] XFS (nullb0): Invalid superblock magic number [ 160.975722][ T8380] tipc: Enabling of bearer rejected, already enabled [ 161.559180][ T6006] kernel read not supported for file /240/oom_adj (pid: 6006 comm: kworker/2:3) [ 162.019717][ T6006] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 162.169856][ T6006] usb 8-1: Using ep0 maxpacket: 8 [ 162.178312][ T6006] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.185122][ T6006] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.215390][ T6006] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 162.240641][ T6006] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 162.281585][ T6006] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 162.311780][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.503283][ T6006] hub 8-1:1.0: bad descriptor, ignoring hub [ 162.521272][ T6006] hub 8-1:1.0: probe with driver hub failed with error -5 [ 162.555633][ T6006] cdc_wdm 8-1:1.0: skipping garbage [ 162.566976][ T6006] cdc_wdm 8-1:1.0: skipping garbage [ 162.600672][ T6006] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 162.609900][ T6006] cdc_wdm 8-1:1.0: Unknown control protocol [ 162.669788][ T6006] usb 8-1: USB disconnect, device number 8 [ 164.177872][ T1325] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 164.199945][ T6006] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 164.303204][ T8455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.620'. [ 164.336187][ T8455] batadv1: entered allmulticast mode [ 164.341030][ T1325] usb 8-1: Using ep0 maxpacket: 8 [ 164.350346][ T1325] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.353590][ T1325] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.356498][ T1325] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.359669][ T6006] usb 9-1: Using ep0 maxpacket: 8 [ 164.363323][ T1325] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.366131][ T1325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.371671][ T6006] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.375613][ T6006] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.386511][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.390477][ T1325] hub 8-1:1.0: bad descriptor, ignoring hub [ 164.392407][ T1325] hub 8-1:1.0: probe with driver hub failed with error -5 [ 164.398169][ T6006] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.405433][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.408263][ T1325] cdc_wdm 8-1:1.0: skipping garbage [ 164.411278][ T1325] cdc_wdm 8-1:1.0: skipping garbage [ 164.415013][ T1325] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.420965][ T6006] hub 9-1:1.0: bad descriptor, ignoring hub [ 164.426298][ T6006] hub 9-1:1.0: probe with driver hub failed with error -5 [ 164.430215][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 164.431987][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 164.433648][ T6006] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.495382][ T8457] input: syz1 as /devices/virtual/input/input16 [ 164.539427][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 164.729852][ T1325] usb 8-1: USB disconnect, device number 9 [ 164.769844][ T6006] usb 9-1: USB disconnect, device number 13 [ 165.683935][ T53] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 165.829777][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 165.836360][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.846393][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.857800][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.869905][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.879616][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.882451][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.996840][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 166.104498][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 166.106258][ T53] usbtmc 9-1:16.0: can't read capabilities [ 166.239810][ T8493] binder: 8491:8493 ioctl c0306201 80000240 returned -14 [ 166.400342][ T6006] usb 9-1: USB disconnect, device number 14 [ 166.440538][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 166.564633][ T8509] Cannot find del_set index 2 as target [ 166.595751][ T8513] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:65535 [ 166.600003][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 166.603650][ T53] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.604559][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 166.606821][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.606846][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.610831][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 166.614632][ T53] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 166.623499][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.636626][ T53] hub 8-1:1.0: bad descriptor, ignoring hub [ 166.638556][ T53] hub 8-1:1.0: probe with driver hub failed with error -5 [ 166.644011][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 166.645894][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 166.647627][ T53] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 166.700927][ T8519] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 166.703756][ T8518] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 166.712738][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 166.717206][ T8518] bond2: entered allmulticast mode [ 166.719744][ T8518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.950629][ T53] usb 8-1: USB disconnect, device number 10 [ 166.976886][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 166.979891][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 167.003063][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 167.005275][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 167.101593][ T8540] ceph: No mds server is up or the cluster is laggy [ 167.182432][ T8536] ceph: No mds server is up or the cluster is laggy [ 167.388442][ T8561] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 167.407808][ T8561] bond2: entered promiscuous mode [ 167.410825][ T8561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.464525][ T8561] bond2: (slave veth5): making interface the new active one [ 167.466642][ T8561] veth5: entered promiscuous mode [ 167.469241][ T8561] bond2: (slave veth5): Enslaving as an active interface with an up link [ 168.799414][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 168.805433][ T8574] FAULT_INJECTION: forcing a failure. [ 168.805433][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 168.810553][ T8574] CPU: 2 UID: 0 PID: 8574 Comm: syz.3.655 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 168.810578][ T8574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.810586][ T8574] Call Trace: [ 168.810591][ T8574] [ 168.810596][ T8574] dump_stack_lvl+0x16c/0x1f0 [ 168.810621][ T8574] should_fail_ex+0x512/0x640 [ 168.810641][ T8574] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 168.810660][ T8574] should_failslab+0xc2/0x120 [ 168.810678][ T8574] __kmalloc_cache_noprof+0x6a/0x3e0 [ 168.810694][ T8574] ? __asan_memcpy+0x3c/0x60 [ 168.810708][ T8574] ? sctp_association_new+0xbb/0x2a00 [ 168.810731][ T8574] ? sctp_add_bind_addr+0x2a1/0x3f0 [ 168.810751][ T8574] sctp_association_new+0xbb/0x2a00 [ 168.810782][ T8574] sctp_connect_new_asoc+0x1b6/0x790 [ 168.810811][ T8574] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 168.810848][ T8574] __sctp_connect+0x3f3/0xc60 [ 168.810898][ T8574] ? do_raw_spin_lock+0x12c/0x2b0 [ 168.810918][ T8574] ? __pfx___sctp_connect+0x10/0x10 [ 168.810946][ T8574] ? __pfx_sctp_inet_connect+0x10/0x10 [ 168.810974][ T8574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.810996][ T8574] ? __pfx_sctp_inet_connect+0x10/0x10 [ 168.811021][ T8574] sctp_inet_connect+0x15f/0x200 [ 168.811047][ T8574] __sys_connect_file+0x13e/0x1a0 [ 168.811069][ T8574] __sys_connect+0x13b/0x160 [ 168.811085][ T8574] ? __pfx___sys_connect+0x10/0x10 [ 168.811110][ T8574] ? __pfx_ksys_write+0x10/0x10 [ 168.811135][ T8574] __ia32_sys_connect+0x71/0xb0 [ 168.811156][ T8574] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 168.811178][ T8574] __do_fast_syscall_32+0x7c/0x3a0 [ 168.811201][ T8574] do_fast_syscall_32+0x32/0x80 [ 168.811220][ T8574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.811243][ T8574] RIP: 0023:0xf7f47579 [ 168.811256][ T8574] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 168.811274][ T8574] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 168.811291][ T8574] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 168.811303][ T8574] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 168.811313][ T8574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.811322][ T8574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 168.811332][ T8574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.811356][ T8574] [ 168.819350][ T8572] macvtap1: entered promiscuous mode [ 168.916382][ T8572] macvtap1: entered allmulticast mode [ 168.918597][ T8572] gretap0: entered allmulticast mode [ 168.985414][ T8586] capability: warning: `syz.4.660' uses 32-bit capabilities (legacy support in use) [ 169.088662][ T8588] binder: 8583:8588 ioctl c0306201 80000240 returned -14 [ 169.363813][ T8598] lo speed is unknown, defaulting to 1000 [ 169.366323][ T8598] lo speed is unknown, defaulting to 1000 [ 169.369039][ T8598] lo speed is unknown, defaulting to 1000 [ 169.375684][ T8598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.384125][ T8598] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 169.384375][ T8599] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 169.392924][ T8599] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 169.399733][ T5978] lo speed is unknown, defaulting to 1000 [ 169.402582][ T5978] lo speed is unknown, defaulting to 1000 [ 169.403330][ T8598] lo speed is unknown, defaulting to 1000 [ 169.404497][ T5978] lo speed is unknown, defaulting to 1000 [ 169.408402][ T8598] lo speed is unknown, defaulting to 1000 [ 169.414438][ T8598] lo speed is unknown, defaulting to 1000 [ 169.442943][ T8598] lo speed is unknown, defaulting to 1000 [ 169.456560][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.660'. [ 169.479583][ T6117] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 169.629610][ T6117] usb 7-1: Using ep0 maxpacket: 8 [ 169.633570][ T6117] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.637949][ T6117] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.642183][ T6117] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 169.646717][ T6117] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 169.651606][ T6117] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 169.655331][ T6117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.670936][ T6117] hub 7-1:1.0: bad descriptor, ignoring hub [ 169.673554][ T6117] hub 7-1:1.0: probe with driver hub failed with error -5 [ 169.676582][ T6117] cdc_wdm 7-1:1.0: skipping garbage [ 169.678265][ T6117] cdc_wdm 7-1:1.0: skipping garbage [ 169.686439][ T6117] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 169.688402][ T6117] cdc_wdm 7-1:1.0: Unknown control protocol [ 170.021005][ T6006] usb 7-1: USB disconnect, device number 11 [ 171.198726][ T8631] binder: 8626:8631 ioctl c0306201 80000240 returned -14 [ 171.234794][ T8634] wireguard0: entered promiscuous mode [ 171.236837][ T8634] wireguard0: entered allmulticast mode [ 171.819629][ T1068] ------------[ cut here ]------------ [ 171.822006][ T1068] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 171.826046][ T1068] WARNING: CPU: 3 PID: 1068 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 171.829235][ T1068] Modules linked in: [ 171.830729][ T1068] CPU: 3 UID: 0 PID: 1068 Comm: kworker/u32:5 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 171.835644][ T1068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.839107][ T1068] Workqueue: bond0 bond_mii_monitor [ 171.841095][ T1068] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 171.842863][ T1068] Code: 05 ff ff ff e8 34 74 60 f8 c6 05 99 33 15 07 01 90 ba 48 00 00 00 48 c7 c6 40 52 c2 8c 48 c7 c7 e0 51 c2 8c e8 04 f6 1f f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 24 ae 87 90 e8 8e ff c5 f8 e9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.848382][ T1068] RSP: 0018:ffffc900067c79f0 EFLAGS: 00010286 [ 171.851049][ T1068] RAX: 0000000000000000 RBX: ffff8880675d0000 RCX: ffffffff817aa868 [ 171.854018][ T1068] RDX: ffff888022f2c880 RSI: ffffffff817aa875 RDI: 0000000000000001 [ 171.857064][ T1068] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 171.860279][ T1068] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000cf8f48 [ 171.863540][ T1068] R13: ffff8880675d0cc5 R14: ffffffff8ce55140 R15: ffffffff8993e1c0 [ 171.866190][ T1068] FS: 0000000000000000(0000) GS:ffff888097a7f000(0000) knlGS:0000000000000000 [ 171.869011][ T1068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.871530][ T1068] CR2: 000000002f5fcffc CR3: 00000000650b0000 CR4: 0000000000352ef0 [ 171.874204][ T1068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.877014][ T1068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.879449][ T1068] Call Trace: [ 171.880568][ T1068] [ 171.881797][ T1068] ethtool_op_get_link+0x1d/0x70 [ 171.883369][ T1068] bond_check_dev_link+0x3fc/0x710 [ 171.884943][ T1068] ? __pfx_bond_check_dev_link+0x10/0x10 [ 171.886670][ T1068] bond_mii_monitor+0x3c0/0x2dc0 [ 171.888512][ T1068] ? __pfx_bond_mii_monitor+0x10/0x10 [ 171.890554][ T1068] ? rcu_is_watching+0x12/0xc0 [ 171.892621][ T1068] process_one_work+0x9cc/0x1b70 [ 171.894296][ T1068] ? __pfx_process_one_work+0x10/0x10 [ 171.895996][ T1068] ? assign_work+0x1a0/0x250 [ 171.897514][ T1068] worker_thread+0x6c8/0xf10 [ 171.899066][ T1068] ? __kthread_parkme+0x19e/0x250 [ 171.901120][ T1068] ? __pfx_worker_thread+0x10/0x10 [ 171.903258][ T1068] kthread+0x3c5/0x780 [ 171.905102][ T1068] ? __pfx_kthread+0x10/0x10 [ 171.907080][ T1068] ? rcu_is_watching+0x12/0xc0 [ 171.909098][ T1068] ? __pfx_kthread+0x10/0x10 [ 171.911432][ T1068] ret_from_fork+0x5d4/0x6f0 [ 171.913335][ T1068] ? __pfx_kthread+0x10/0x10 [ 171.915494][ T1068] ret_from_fork_asm+0x1a/0x30 [ 171.916987][ T1068] [ 171.918071][ T1068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.920282][ T1068] CPU: 3 UID: 0 PID: 1068 Comm: kworker/u32:5 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 171.924172][ T1068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.927526][ T1068] Workqueue: bond0 bond_mii_monitor [ 171.929117][ T1068] Call Trace: [ 171.930265][ T1068] [ 171.931222][ T1068] dump_stack_lvl+0x3d/0x1f0 [ 171.932675][ T1068] panic+0x71c/0x800 [ 171.934022][ T1068] ? __pfx_panic+0x10/0x10 [ 171.935492][ T1068] ? show_trace_log_lvl+0x29b/0x3e0 [ 171.937321][ T1068] ? check_panic_on_warn+0x1f/0xb0 [ 171.939018][ T1068] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.940730][ T1068] check_panic_on_warn+0xab/0xb0 [ 171.942413][ T1068] __warn+0xf6/0x3c0 [ 171.943661][ T1068] ? preempt_schedule_notrace+0x62/0xe0 [ 171.945332][ T1068] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.947128][ T1068] report_bug+0x3c3/0x580 [ 171.948445][ T1068] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.950237][ T1068] handle_bug+0x184/0x210 [ 171.951651][ T1068] exc_invalid_op+0x17/0x50 [ 171.953257][ T1068] asm_exc_invalid_op+0x1a/0x20 [ 171.954940][ T1068] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 171.957170][ T1068] Code: 05 ff ff ff e8 34 74 60 f8 c6 05 99 33 15 07 01 90 ba 48 00 00 00 48 c7 c6 40 52 c2 8c 48 c7 c7 e0 51 c2 8c e8 04 f6 1f f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 24 ae 87 90 e8 8e ff c5 f8 e9 [ 171.963579][ T1068] RSP: 0018:ffffc900067c79f0 EFLAGS: 00010286 [ 171.965492][ T1068] RAX: 0000000000000000 RBX: ffff8880675d0000 RCX: ffffffff817aa868 [ 171.968077][ T1068] RDX: ffff888022f2c880 RSI: ffffffff817aa875 RDI: 0000000000000001 [ 171.970678][ T1068] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 171.973127][ T1068] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000cf8f48 [ 171.975753][ T1068] R13: ffff8880675d0cc5 R14: ffffffff8ce55140 R15: ffffffff8993e1c0 [ 171.978251][ T1068] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 171.980085][ T1068] ? __warn_printk+0x198/0x350 [ 171.981601][ T1068] ? __warn_printk+0x1a5/0x350 [ 171.983232][ T1068] ethtool_op_get_link+0x1d/0x70 [ 171.984774][ T1068] bond_check_dev_link+0x3fc/0x710 [ 171.986392][ T1068] ? __pfx_bond_check_dev_link+0x10/0x10 [ 171.988274][ T1068] bond_mii_monitor+0x3c0/0x2dc0 [ 171.989822][ T1068] ? __pfx_bond_mii_monitor+0x10/0x10 [ 171.991637][ T1068] ? rcu_is_watching+0x12/0xc0 [ 171.993087][ T1068] process_one_work+0x9cc/0x1b70 [ 171.994746][ T1068] ? __pfx_process_one_work+0x10/0x10 [ 171.996673][ T1068] ? assign_work+0x1a0/0x250 [ 171.998126][ T1068] worker_thread+0x6c8/0xf10 [ 171.999596][ T1068] ? __kthread_parkme+0x19e/0x250 [ 172.001179][ T1068] ? __pfx_worker_thread+0x10/0x10 [ 172.002773][ T1068] kthread+0x3c5/0x780 [ 172.004077][ T1068] ? __pfx_kthread+0x10/0x10 [ 172.005576][ T1068] ? rcu_is_watching+0x12/0xc0 [ 172.007113][ T1068] ? __pfx_kthread+0x10/0x10 [ 172.008624][ T1068] ret_from_fork+0x5d4/0x6f0 [ 172.010071][ T1068] ? __pfx_kthread+0x10/0x10 [ 172.011556][ T1068] ret_from_fork_asm+0x1a/0x30 [ 172.013060][ T1068] [ 172.014680][ T1068] Kernel Offset: disabled [ 172.016102][ T1068] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:46:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000560d99 RBX=0000000000000000 RCX=ffffffff8b77e419 RDX=0000000000000000 RSI=ffffffff8dbfed55 RDI=ffffffff8bf51880 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000001 R9 =ffffed100564663d R10=ffff88802b2331eb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90877c50 R15=0000000000000000 RIP=ffffffff8b77cf7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809777f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=0000000065c00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=81b3ed86 EBX=ffffffff ECX=81b3e86d EDX=0007748a ESI=f7474fe8 EDI=f68df008 EBP=f7fa5610 ESP=ffb364c0 EIP=f711e431 EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 58178440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffa5e024 CR3=000000000df56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=0002f01c EBX=f7422ff4 ECX=82088437 EDX=ffffffff ESI=f7454fe8 EDI=f68b7008 EBP=f7f85610 ESP=ffa5dba0 EIP=f70fe48d EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57eef440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f309ffc CR3=00000000128c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8554b905 RDI=ffffffff9ae4fd80 RBP=ffffffff9ae4fd40 RSP=ffffc900067c7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9ae4fd40 R15=ffffffff8554b8a0 RIP=ffffffff8554b92f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a7f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f5fcffc CR3=00000000650b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000