last executing test programs: 7m32.030177557s ago: executing program 3 (id=87): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x40080) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 7m31.945859309s ago: executing program 3 (id=90): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) syz_io_uring_setup(0xd3e, &(0x7f00000003c0)={0x0, 0x8000000, 0x100, 0x0, 0x220}, &(0x7f0000000700), 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x2020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$iommufd(0xffffff9c, 0x0, 0x101c01, 0x0) sendfile64(r1, 0xffffffffffffffff, 0x0, 0x6) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) mq_timedreceive(r2, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) 7m29.558229488s ago: executing program 3 (id=97): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x800, 0x2, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_open_dev$vcsn(&(0x7f0000000280), 0xffffffffffffff18, 0x60800) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x58565559, 0x2}}) getegid() bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x8800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) 7m28.979867068s ago: executing program 3 (id=99): syz_emit_ethernet(0x1338, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41ea, &(0x7f00000003c0)={0x0, 0x2, 0x8, 0x2, 0x1dc}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r0 = userfaultfd(0x801) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) shutdown(0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) 7m28.686857422s ago: executing program 3 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, 0x0) ptrace(0x10, r0) ptrace(0x420f, r0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 7m28.044423423s ago: executing program 3 (id=105): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000300)=""/87, 0x57}], 0x3, &(0x7f00000006c0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000013c0)) read$dsp(r4, &(0x7f0000000440)=""/171, 0xab) 7m12.936990709s ago: executing program 32 (id=105): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000300)=""/87, 0x57}], 0x3, &(0x7f00000006c0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000013c0)) read$dsp(r4, &(0x7f0000000440)=""/171, 0xab) 8.927448846s ago: executing program 2 (id=2007): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xa00) 6.322328995s ago: executing program 1 (id=2008): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x2000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x2, 0x40000) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 6.32215702s ago: executing program 2 (id=2009): openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5.414374185s ago: executing program 1 (id=2011): socket$inet6(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x5, 0x6, 0x5}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 5.300305668s ago: executing program 2 (id=2013): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="5daa000000000000791029000000000095000000000000009021f7eace5bc5e9b05abe6ed9e5a4652b362863df28dfc48da872b083f9e04df1c6a05416979458424efdacf5b0d0559b6fe9fefa4e4de876ea3fd8"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x4010, r2, 0x0) close(r2) setgroups(0x2, &(0x7f00000003c0)=[0x0, 0x0]) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4.490023402s ago: executing program 1 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) io_uring_setup(0x2524, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x21011, r2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) clock_gettime(0x0, 0x0) clock_settime(0x0, &(0x7f0000000340)) ptrace(0x10, r4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x9, @remote, 0x4}, 0x1c) 4.359375613s ago: executing program 0 (id=2017): socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324153, 0x0, 0x0, [{}, {}, {}, {0x1, 0xffffffff}, {}, {0xfffffff8, 0x6}, {0x0, 0x40}], 0x0, 0x7, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, 0x0, 0x30004001) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04003120"], 0x7) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r4, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 3.230666786s ago: executing program 0 (id=2027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 3.229143749s ago: executing program 1 (id=2028): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) setgid(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r2 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1fc, 0x2a8, 0x2a8, 0x1fc, 0x2a8, 0xac, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00'}, 0x10, 0x10c, 0x12c, 0x1c, {}, [@common=@unspec=@quota={{0x38}}, @common=@unspec=@physdev={{0x64}, {'pimreg\x00', {}, 'bridge_slave_1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2ec) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x20, 0xfffffffa}, 0x14) shutdown(r1, 0x1) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x7) open$dir(&(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x64) openat(r5, &(0x7f0000000d80)='./file0\x00', 0x10000, 0x102) 2.740188672s ago: executing program 1 (id=2030): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x80}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046}, &(0x7f0000002500), &(0x7f0000002540)) write(r3, &(0x7f0000000040)="09000000010000", 0x7) 2.332625009s ago: executing program 0 (id=2020): syz_open_pts(0xffffffffffffffff, 0x460640) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.181799158s ago: executing program 2 (id=2021): sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000000000008500000027000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0xfffffdef}], 0x72368e, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8000, 0x700, 0xfffffff9, 0x8, {{0x1d, 0x4, 0x1, 0x17, 0x74, 0x65, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x0, [{0x2, 0x2}, {0x7, 0x5, 'EnI'}, {0x1, 0x2}, {0x0, 0x8, "1a77e46e08c1"}, {0x2, 0xb, "128805954b432fdac8"}]}, @lsrr={0x83, 0xb, 0x9e, [@loopback, @broadcast]}, @lsrr={0x83, 0xb, 0x7c, [@empty, @multicast1]}, @rr={0x7, 0x27, 0xb2, [@local, @empty, @local, @broadcast, @remote, @private=0xa010100, @remote, @multicast2, @broadcast]}, @end]}}}}}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x8004) 2.128638712s ago: executing program 2 (id=2023): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xa00) 2.115443972s ago: executing program 4 (id=2024): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x935}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000010140)=@gcm_128={{0x303, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\x00', "614db5b3ffffffff"}, 0x28) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(r5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1a8aacd, 0x0) 2.07727368s ago: executing program 4 (id=2025): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.447744414s ago: executing program 4 (id=2026): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r2, 0x4) r3 = openat$ipvs(0xffffff9c, &(0x7f00000023c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x15, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0xe, 0x4, 0x0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r0, 0x0, r5, 0x0, 0x80000001, 0x0) pwritev2(r5, &(0x7f0000002300)=[{&(0x7f0000000040)="263ff287b65aecb2088255fb6364d701f9fda307096255fbf2c6", 0x1a}, {&(0x7f0000000200)="388205f85e83e5e6c18f46d1c6aadd87214d0d99312784ee1bf9112eb044855a7a799604978733e665eb2a6398f49a158a5276be4720c8306a2b9c8d7347b96c54ac313a91a05cb7b2bb22c147db956b93afda415dc9772250b07f298d9b58bb67f5cf8c4c0717b5fe6c58620d7ab6717a9480e32ee31b02b875acc4c89589d3ba81313d7680c5a37bc9c5ad01b96ca834702d0906506a06fef9908f599ac238d96f7cda9c2b376b8e8ba51e000e9d87b794724db8f7179191153eae655e6881fafac66fa1dceb2019f9304c0d1de0325101a3e36601a7888e8dbabb34ef5da695d9a53bc1d0a4ed40f8be69c8bdde42cd9862dc9a584a9b5ed9391515f1f9317ba5f5c5150c3dd05645e399dc9099d6f03db2369baa3875d2a268959b1c8d82cb3245759c07919943fe77d08d7da9a97198e6fd19e49103996ee5a3f00cc9e1b3e96a44eacacbf6f0597c201ed8690cd86ef8cb8403a5edccaba9fb47ee5fab74c875c0b9d03fb6fac6369460052b6a94d9b42db4a1bbbc650bd97590c04e38eccdab47b6def8e6feaa108a9dd87dbf431f7dbe6248943b63f51caae63b687246d03387814464f3777f8a90449f65fbebe83f0b3a1b3e535af9fbfafd7e7e6eb83ed0f8e22573fe12476a1807d617c4ac4e0bf4b2c239cfdc749eac2789260c622ae79a64e1cfa36aa5705d86c08728e4935de16b5a1ae55e9a15540cdd3da73f05cebdde1aab2fcbde5654ae0406cc8838a29dc74c5d3f44418344f249041e1e574eedbe121bc07b9e57620c816d4085b852cab6f25e031d3ace924a28103dc48bbe26efa09aecef4c7668f8ec702eb9b4e367e7f1d32e4bec4b42f6f070a28ede67564f6ae9667c137c70a6247681f88261a6e83dbf5aaf0bf5e6d9e65fa5e32ade4cb5e78720a8906e716a2ad6d88b638cf3687f0f62129b3883d25744d16b75590f5fbf0047f686b763867ca6fc2121129051f966b5a4f6a8172c9d5accf0bb748b1352d13cc0b35b0974b3f0f8033822fedbfe272c73bf0b33ae90a9d145de8c82747766b599a2219f6693325b7d8f34eeebcfe8cd9dfa34c9f748f96097616dfa0da2c5a87003b81663aa64f43cb25286b5f5ac3c440a8dbcb3178500c64fa74379b36c7739758e9161d37c5620c23bb5ee659ba94d36598b526a28031a2bf3149a5ae09ffbdba39650286aded62668597f3a3cf8c629628b59f21eebd3af7af97425c22a732e8527d290c760df4015030187dfbc09e5a8188d34a642b33ef7feae79d7025826db8263828fd13eca28f73047ea208e8e335f7e340c89c2f6a776bd347500bb8ebb565c3b631d406341de1304accdf2a082fe52e5271bc496e1cc6190af617bda8b091d5707eea6a5e8282dce0f36489929ebcac3ecddc6af80d9ddd3e526d7834aa90b2b4fedf1c29ceecb08b2c9abb54d08dacf06782cb117b5324fc25f4d278a78685d43e549d76ca8154bf620a26cfeb694e2191d330cab35ac29f4be84af229493cadb314fd2435a06b28249ebd722b51a88e0de80085ca097be09054ebd94df4cd9920d96770c5e6eb4403e391030b0738dcfaae3a4e446732a6908d71d7d108f5fbfa623764d4145d165066bf6737871d7aee5b82e2dd3161c475b5a6047b599fb742bfa0508aef10c7df43d27b825ab74c0545dfdf01898cb33da6d04f62c4cee62c63ea65e8f689162c1ec07d0b247ccddf2fca8ba9049fd6b29e06f112823c867209d263dca0a20eb5e6c71c064f07dfceb1984f19e0fb4eeb7c6b60a9316a09c774052a2e858ed36f7c20f071c0050fdbb624bd2fcadcb50a94f6219d38581cc289a3f4268af99046656f63fb616c32934a0bd6380fbe688b6d3fd76736a85da1d55550a8734d355677d8fe2d1253d9c2010db54b7d26c681cec0d7789494de35e6eb4f6476f7f8ca60083878b28463a296f04711a01335db042f226945bd8820b5d362b993b1f67ae1264d93127146085f6cbb9c6f4b2499e7cf987d44bed2dcfa7f3e31c39b2c59592b4ec991fc2fe8e56ee19a209d1ab79d0e1be084e1552967bc5566f52d5c4fa03cf90501e6ad93676b8a0d2b42abbd6f0722fa3420f2dbd3212abbb1828ba740e88879e5cca0b1a5e9524ec44e122448547f424e7804e3bb5417b22e5fad57d45fa1689c8222a5e6de7c95f1dceedf2867e666358646e3d1fa329e5005a994249d1616bb9ad9c90bf7c0ba3f95efa8041e2ff5d0e1db2cfd989e5904e0a1dd04ffde940365662a0ccd62ee85a19fa2cebc739edfd752a8de3acc920c0853613d1391652584fc60f0f856a289731dfd9ce8afcf0e86c2b8300dcac8765f754ff1d40a8bb7674f5b518086bd7c22fddeb5d35f96cfb0346af583925c07977fb35769fafa25c2bcbaed704937bdb42b7145226943973b1d09505634c8757490fe58a019131961ec0363b5f0bc99abcdd9c1781df20b0dd11fdacc3f9e5a4193127cd63eaa07af1f4e5eb60e5c2d7608415d5563e219ad1f6051f674315f8c1d6606b3e6d9f99a7d4ab38a55914ed19d442823c2663772ae96805cb7632f1808fdaf95730ae3036566ae6d93472e26c8479b15bfa843420cd3ab6fc4615c3e4bd66f10146f0da0a08cb54cb27f5443cc1e4875a91ffe0d2cea2f36fbf87d59111bd3bf2e43a3efa308cd8b6a977ec102e8675eb0c9bd32477604e51ee19c29b9836cf0e4112b312a0cb40635ca76eeead28fd93b3124051924b0b238fa0ab17975b7b3f061fa99823568badf1f82de193e743ed28f8f040893963cd4b02fa67e9b897dab2bc80addb3f99777d4dbbb5fa52d7b195ed0a192a1d6c66f846e9016af001f0b20734106307c9668aee97edb8ae205538358ea7c09cd9cf7d1f749df516c9c2f05de4995f4df3390a4ce6a43ba6412a47bcb5eb3d4f718e15ace9b213d812128c45ce51615f20a59e2b5dac57804d29fa72bd5df3897d91944c9b9ce1930239fa574f3f3a2ccfdbe88af6e62942aee6262d702946be0dd0ed0cef1aba07df9ee359220b313c8abdcfdc55c383973ba2563c9fac384f30029baad285537858d656c64870b536dc59f4e778bc1cd918cf6b4f2f66e27a5526f4aab18cbefd25e6d3e969a3f25e22390beab9a6448223b42d0395d325070355cdb17d64f56520593f8047b64f99bfcdf6e234da40b84293ca9b29ab31dc1b45ffe3450fb41892806c0c6200cf4226d83dbb76c6ecc725fb5dae0a7bc0bb41ef26036593232e4dcff895615a5698a06d4a58622cb2483d5dfc630fb42e65b140c16296f68ac5a8d35cdeda752278af7c58af68c74e2a59f2323c23df4f0d221a8b42458fd324e337ca7564b243deea62546cad1fb1b6e9405a942845455a9413f0e14ccc4695811c85bfd545d57e6467e4db25c45d3c4306015b840b74360801f0c05de59e7dee6b508672f6171e2964747e1656ff05d3525b8be616ab6c33226fb8cc36230edb5fbf465a383236457c1c39e773714558b6e6b4bc3846e5cde1c0e17cca63807507ef6bfec660febdadcdbac2abea6b502df413a5bf179eeaade7b97ecd1110c684a67eadca77724077ed6dd1f237b2ab4693ad5df44cda65b578e9d30d2267072c1a06472ed24b6832e754e5f97b661b75c8e8d5eb94b966ec6f45c04ce44923ef1a7c11eaf4c7dd2e8e7d17904862763dc066f704938edfa8c241b1d2b74f1b0cf9674d86e71973ac082330fd3df4791b6d581d244e1cad6782c80aa3367b79d99d3e2e889239949e60d786887388bfc8d83bab1395460d7913ce8d399c6f4ecf4bcfade56b94dca62c4d6cb465eba6e9de0de4667f94b0beb1101bf7e9013ecda9aacb21427a471cad659ff579d2f4028d2f6fa0f63f0633890b53a17a50e43c0f09c0ed74d0a39dbe16a5ff619e22cc448e183616900059579f3f15244242a7f43c835bf6f3f8df955f759aa629df32d4d5e48f44cc9834229ffa8ff05c987f30fd504f536e1470a0318f1790451c3530afda6c36d6a136e464b8db5f9cbf5bf6109f258453865dcfa420000427dded8a432742c70f0ddc12d38ccca8dbe2e3492267c746b9671c6339079d9adc4a78bb04e30e4228089ab06eb6532c8bc472b0cfb273bcef89f8c0e4f5bcec74d8753dadf35ced43795500f6cd104d1b5b1ba6b2b0ce8c44c265297b95dc63f662810b6eaffcf28eaf67e871dc40d84923715e42c0274469f7042b5e30cdaed3429962d2f0107cd78e38fdfa32e68afaee7ac26275451f5ba7eb0eafd0b1ddbd56e597941534247cd1935d1bfc447d500a7253b7842f543ff575d86df63e1af8959d33db522fc729166798619699a882889e782e0e17c68a49b46d09126bd548137f34ec3597352150d5521cfcf298064d0ba02e753a6bf4836ef0a610a246b0cab36e9ccfb6c36f016e164e713111cbab836c380d9fb40787fa4ae3c6c47e54227690a717b3a1ab6fe00536462a05a209657f0233b55aaa5aefee966832b947018c5a86ba472c23dcf93d8030d9060f63f3f14e98e724ca7208d217871672c3591b829eb7445d6bec85a6da4e4d2c7f035be859f59615663ab88a186f1a35526490c97b670f44f2d17acc3502664827ade0d8915a824a1075ef0f8482a66e49c3c6b56e750a8b2cd4bab99ce86c212c8da2b5457980c90023fde1cacf612f2439e980381d03c404fda685f465e04058c63f48fefc95a90f45c4cd37560f6b9d8416cee8cf0556ccbed2c0c1aa8dbbb9842388f5daa967d8be0fecf71c5e90bad29199b9658bcb6b4dda0d30bb35e58858bef0f2f7c5a9bc4f96ce8ce8185af0fe7f5951c8526c4d3caa9a4473b62117d45273e1f66a22b61c1012944ed76f22d73915596f698cfbe03e54a672c7ce78a3f79cf9ab3f9ab380ab9e5d813500e3fdee3619915ff732a784db5fe330f155a7a33ee965fefdc4884fbeae78e92a77f7bf60cc6737be1e00eb26416c9ba5f9c4155f7cef24feceea915ec1f2eeda219cea8dcbed48c6c46676e5dd94cfc1c9646a79653c014e4e91fe364f794c6383ad981165416b0e78680c6fbd0aa8aa5295982b405f626dbb082805b5c113b482f22811380f796c384743beff1de1095a174678432dee60fdb7cd819073884a119f1cb79d29fe26396c1b2ae83b99ae9a2d26491ee8b9cbc0e12548046fd62d7b268b994321bfefc023e7f86425919ae38f77ae67688edcb502aab3acaf49ff3496093fa8782c8b738b6e2c0e87e6ddbc2e78678b94da5d0f69d1e46449b878982c11946cb06fae9c2196f9108e9201ac67692743b846677f2df168a223628514cb374a559d07aa6da58d8605d87e8b33dc76c19381c1e2190def828f7325e3a6861f9b1ac31c47dac828128f9bf8fe3e148e3925b2121338cc388d6df307931be4e60831a9996c3ad338d9859ca5cb67df96f206fb57d24930f324ded83ffb0fe35f14934fa4543e35d55e071c0a3a6162caba6cbb5a89e22756c741a68c2acc20ccb5ee4db91b35b871696afd94b4d7b45561301ef2ff4a364de5fa4a6bbee884ae5e6621adbec8676719ade4af2ff3ba6e8a96d8cbce3485f11f4f73912e1ff95e607d6dbf5a9b87c26b5e396a0384581efe1952e00549827866496c17a1b04ec831cc166046abea7701a0992f40d0561c048b325a2bfe33f022e228e983ff2cc0bbef952493a329c736dc5944795a663f1941bfbfbdc77db722d5dc48a1636cf1d031fc0ebcc2586196f456429e869e221946595ecfc786668693c59cdcfb2d4ba7cb84aa44babda898719ee55d3abe23d06e2fa75ef5", 0x1000}, {&(0x7f00000000c0)="516ec71cc3263f62593eba76d335573591797e39c02443db04b74e723fd0949750f6f72cd74cef95a7b4811eef580d335c1167558f379a32f1ef9c07ac33eec1e3b661186170c5baa39c2c6b6856a60bf0a3f5be5381afeebec98f69c7f16c1ddbc09832211ccca79a0f4504157844f13d307deb466672a18d6ccdbd12680953dee7847ca2a10fbc281879197165ad60a2e31bb2cfd697e61986e22028d1327b7076c7aa675cf060264a211a4fe52b544874c3cd1276da28237e72d9954ddd73e52558790f63a5e8926e4a334936aac5a9bcb905cfdbd47d640c5a1d26943dc6e0adcfdacb98", 0xe6}, {&(0x7f0000001200)="b508faf15d80761526c6494365558e6011eb2971ac254abbd423f9287209786d76da1403831198bed0fafaf939e8d2e41b20d483c2b7e6a9b65c24bfdfbf5d9f20ff293a68e2243348f4364166851548bac7baeb28e67b2764a5833a763fccdc8b5cd7dbe40c745d8882c8f7f863cbb5fb6e769c5b7b84e3309e04a1b295433e621dcd9e9c4f7439e6fbfa94ebd63862f499282b6c408597c95b490c121b60ef4787027584d27451739b5c31f70340da1b18c350bf4ba7aa0da103367d35fe07c744aa888feadf601fa5ba65d5e68638f119569f40057ac8d9a2e3c771d65895e3d80e6158b93bad5028ddd12e62bf3a727394b5c29cf332c15e6a53970ca093c45305079d95dd600fed9f31e89cbec123e1072de180629fffa9c5750420442484a48f5238e202a3004d7d60688c4b382d34a192baa5e77407715d66eb0a19cff2d8e32ce559ac3deb55e2c3e2f806b7fdefc6afa1ee76e9cf24f0638c0d519af2ff827793c157190cc1e0415d47aefc83e951626ecb5ee224a445ee365abc09707142abf3910cfd616a5e29e58e99fb8dd55d9d33349f6b3112d34684817eede313898039a09d96ff1fea81a7450d508c4f34366445b52bb28bfdcdf6b1a7dc0786801af6ca3c4ba0cbf485e66cf3c796300b9cf4acc6a0f952c7d7327c81967ef52fcee33142aa45c5e949391364c563a0eb766bac972232cdcb7ee0eb8bd8b48be5f962223ed64d742d40eb7d262776e57bd63a19055427ba54fc2148c309e23e30ed5936c8d662ccbc3c502c44c2975e3adc2facc827fc795de106501eb982607ed73c804fa42e0c41393a686f26290ffe7769ac39590cc6207af671c1bbc0f8e0243017039caf196756b81b6d62861b702e9dde7d2b3d06ea524bd6b424d698edd474068a2edc1f9d7fd7093ed82a45f50463da3ac35a86293ee8432db9fab610c5805767e85f675339cc9ac939b49dfeb266b4c7013c825961c0732198ac632b1842d8a33dad7b83f530c267a24b7d23dc957bae6ce9a46da71a2aaa56e564cfa8ec69e6ac9cf3e7b2ad6ade762fa6219b0f69c80c058fd1fb659a02ac4c65166f49dffd0bbe8ffec28120c6a6f077dca4450acd4c7751abaa76ea85ed6c206d0ac1197925fae1202ae3a881b42239dd71f2d3fea27946942d13a9c2279ba6c093956b5a194fd94a8c44c58a902c171640742fb311029860d845dbfb34792f179c0c470c4947acf70817b433e59dc726c2a492b70245758e6c77fd40f207156da9119f827d79ba6652de960ee258772aa87a5b7b91a03a858889f1d930b00d71db5e0f1725183c4a0b36eefa2ba9c066b1b4f641370d50cbe0471d34bb3836159273becdd3c21cc4b7a86f70a582fec599e3a0bbc8e2f36ab950edcbd8148d29176da2780fd648cd5235b425382c430202dd8cd417bf6f396b342c57c289b9275a3bac00c82bf010784172ea8ffb819b7bb5fe0ab097bc5cf57429fdcd2d7092d26f81556d176cd6911669b21c1d77bd62b688ba7277c1b952a7643effaa5108c1a3347e4367628fce40786e25c8871c2b3f2d8e8de71b582b77cf9e3e1c11117862b20600852fd94b566c037119f40552b5129b34049ca81950dabe1523ceb47ff86d691acf01b2df98bbc0d85042f19d56dac67ef7d69c6ca2fd4f9142d64f6728caffa99de173c0f0f9170240af84db88986924eb38b7407df8aabb238ae596c9b792f05074a684fbb480bad7a965b270f0ea0ad9ac6e0f8d5d93463d6fd239a06dcf98e7807241c38ec5f61d0a928cf1a765d3960086b695636e1fef3c09825a4474347e13a90606fd650c60876b8e0f02ad3c4a8452d1ec620b96f22699de54583cb72c1ab28cb7dccc494b504c284d1dee3f128513f1bbc1c09880ec20a9cc9d3456665e7466bd86da6ea6cced172b6c4084d2385ef5684324bb8bdff7650a3c384d1ce5ddda4c3d758eb6f8b6568330ff7e5230da4f36db5a6f9287ffc76c2e37951624c68bc1d18fe14f013fa753f60fe260642fc5895be35c7e10d58708b1f316584262e0312c8d7ba85816c396dbdb0242fdbab99cec2d9131584c912294e1b0d0e341cff5b0de47834a4c8a2980bad866dfe11d813ca687d045527652f26e64c53ffe4da59b3fecbe68184d951bff6fd36d09fc329cbf76038fe6f09c09cc7e10e00bbda5908e18e055eebd789b7c81854af3f0243ab99d437519df4cddd670580e3bfa405c078d95b8c07d7f10201faa96d3027983b5e0d67567bacac62dc487e0d849a6e1f9ecdc82effd35a1b4f4c6a0caa89214486327cd2728c32b346c74e2b19f6852d2203c275aac6415edd00978db5203490ba3ff48cb25d7d89d17ea28c2f0b9e9f778e750eab64f26a1ae57cf776ef000d13a3357c3e2dcd1397645f0326f3ef780ace39b3b14b4963eda31b16ddab0d06baa8dbad179769ddc61321c4910259f5e478537aa01a3bdc9e64d79fc91aab3c6011638c945f7929a8ada18bf79d94214f7cac1e2a9501971653a62aca14af42c82c30dcf411795c59c51462df9f54a9f0026886a6e89062db8b6c72189b64f4cb2a2c5ecb7750b8ccdf62cceefa5a4f59146a8288ad037e8b01dc71dc958d4a345fd67f261eb4ea8079f1dd897913f79d2eb690259613099c3c50e966eac1500e828e5054942a9d533076fa6d0a6f821a8eb935b362b71677ef0c6b39e0273e9c547d605af04a1cd19eabc05922fcf9357f34c711942c517b09cfd1a7eb27981786507f9b753837d070dcb3534f4ca6f7706206eee4e1c550cafa3e59ab262b30b8bdb014651ede45bc00f8bba18255e22a3431054aa751b2e920c6c80eb800ef1cf85fe1630da53df0b1405be633a95150355df1c3b0675faee09de48d4bd9e93", 0x800}, {&(0x7f0000002200)="0d79fb7bc69a7c590e8d872cc46741b217b0d3db57bc118e685c72adc72aaa3f02166368cc7d1dc7cd3f384a4cd127441bc45ad26e3aa60380927f0782f5b971a958a0e87603f81224db4e43e72e50bc73d70745be1e67d4d9f5464201b83285fcf5eb1ff84a02054545c1d6ffc55e4859a0f120d02150f464e7c2857b217146e1056c45986f725ccc7d907b9255b2fab9ffffafc7fc8883a51e6759dd70a59be81b38392c63fc8d1e1354e624f435a1530e1e4958119ebdcd8989dacd5ce4d98c59a01ae566", 0xc6}], 0x5, 0x2, 0xfffffff7, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r9, 0x4bfa, &(0x7f0000000080)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[]) 983.280941ms ago: executing program 2 (id=2029): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) close(0xffffffffffffffff) accept4$llc(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5491fd11, &(0x7f0000000340)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) capset(0x0, 0x0) 982.576474ms ago: executing program 4 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60800) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) 975.519542ms ago: executing program 1 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$video4linux(0x0, 0x6, 0x440400) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 942.522222ms ago: executing program 4 (id=2032): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x7) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x4004801) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40012002, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340), 0x2000040, &(0x7f0000000580)={[{@metacopy_on}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@audit}]}) r1 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0xf7fe, 0x7ff, {0x0, 0x1}, {0x69, 0x1000}, @rumble={0x0, 0x2}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 937.617892ms ago: executing program 0 (id=2033): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 883.760944ms ago: executing program 4 (id=2034): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="5daa000000000000791029000000000095000000000000009021f7eace5bc5e9b05abe6ed9e5a4652b362863df28dfc48da872b083f9e04df1c6a05416979458424efdacf5b0d0559b6fe9fefa4e4de876ea3fd8"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x4010, r2, 0x0) close(r2) setgroups(0x2, &(0x7f00000003c0)=[0x0, 0x0]) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x3, r4, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1}) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r6, 0x1276, 0x0) kernel console output (not intermixed with test programs): ed: batadv_slave_1 [ 100.575893][ T218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.596785][ T218] veth1_macvtap: left promiscuous mode [ 100.598642][ T218] veth0_macvtap: left promiscuous mode [ 100.600300][ T218] veth1_vlan: left promiscuous mode [ 100.601906][ T218] veth0_vlan: left promiscuous mode [ 101.050423][ T6787] devpts: called with bogus options [ 101.174141][ T66] Bluetooth: hci1: command tx timeout [ 101.257556][ T218] team0 (unregistering): Port device team_slave_1 removed [ 101.315222][ T218] team0 (unregistering): Port device team_slave_0 removed [ 101.964960][ T6800] 9pnet_fd: Insufficient options for proto=fd [ 102.259502][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.272195][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.318326][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.320608][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.261900][ T66] Bluetooth: hci1: command tx timeout [ 103.402512][ T6846] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 103.405256][ T6846] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.409077][ T6846] vhci_hcd vhci_hcd.0: Device attached [ 103.593778][ T5976] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 103.672661][ T9] vhci_hcd: vhci_device speed not set [ 103.732626][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 103.942436][ T5976] usb 9-1: config 0 has no interfaces? [ 103.963403][ T5976] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 103.972296][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.975799][ T5976] usb 9-1: Product: syz [ 103.977473][ T5976] usb 9-1: Manufacturer: syz [ 103.979364][ T5976] usb 9-1: SerialNumber: syz [ 103.993307][ T5976] usb 9-1: config 0 descriptor?? [ 104.150783][ T6877] devpts: called with bogus options [ 104.266576][ T5979] usb 9-1: USB disconnect, device number 2 [ 104.315348][ T6848] vhci_hcd: connection reset by peer [ 104.318685][ T70] vhci_hcd: stop threads [ 104.320375][ T70] vhci_hcd: release socket [ 104.322817][ T70] vhci_hcd: disconnect device [ 104.947911][ T6898] misc userio: Invalid payload size [ 104.950118][ T6898] misc userio: Invalid payload size [ 105.343173][ T66] Bluetooth: hci1: command tx timeout [ 105.746476][ T6910] 9pnet_fd: Insufficient options for proto=fd [ 107.267376][ T39] audit: type=1326 audit(1737364431.383:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.273491][ T39] audit: type=1326 audit(1737364431.383:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.279664][ T39] audit: type=1326 audit(1737364431.383:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.287108][ T39] audit: type=1326 audit(1737364431.383:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.293407][ T39] audit: type=1326 audit(1737364431.383:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.299403][ T39] audit: type=1326 audit(1737364431.383:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.305603][ T39] audit: type=1326 audit(1737364431.383:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.311589][ T39] audit: type=1326 audit(1737364431.393:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.318237][ T39] audit: type=1326 audit(1737364431.393:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.326266][ T39] audit: type=1326 audit(1737364431.393:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.200" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 107.412326][ T66] Bluetooth: hci1: command tx timeout [ 108.284759][ T6958] 9pnet_fd: Insufficient options for proto=fd [ 108.849941][ T9] vhci_hcd: vhci_device speed not set [ 109.185809][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 109.188368][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 110.483852][ T6999] devpts: called with bogus options [ 110.996509][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 111.014382][ T7016] netlink: 76 bytes leftover after parsing attributes in process `syz.0.213'. [ 111.075961][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 111.882218][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.044808][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 112.504387][ T5998] usb 5-1: config 0 has no interfaces? [ 112.509845][ T5998] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 112.513909][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.516899][ T5998] usb 5-1: Product: syz [ 112.518508][ T5998] usb 5-1: Manufacturer: syz [ 112.520323][ T5998] usb 5-1: SerialNumber: syz [ 112.525679][ T5998] usb 5-1: config 0 descriptor?? [ 112.736375][ T1016] usb 5-1: USB disconnect, device number 4 [ 116.524196][ T7160] syz.1.243: attempt to access beyond end of device [ 116.524196][ T7160] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 116.528955][ T7160] FAT-fs (nbd1): unable to read boot sector [ 118.285736][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 118.285750][ T39] audit: type=1400 audit(1737364442.403:17): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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warning: `syz.0.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.447716][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.283506][ T7210] /dev/sr0: Can't open blockdev [ 119.290234][ T7213] /dev/nullb0: Can't open blockdev [ 119.502658][ T7212] /dev/sr0: Can't open blockdev [ 119.911930][ T7222] binder: 7221:7222 ioctl c0306201 20000080 returned -11 [ 119.915675][ T7224] 9pnet_fd: Insufficient options for proto=fd [ 120.579075][ T7231] hub 6-0:1.0: USB hub found [ 120.580576][ T7231] hub 6-0:1.0: 1 port detected [ 121.526590][ T7253] 9pnet_fd: Insufficient options for proto=fd [ 121.598155][ T7255] tipc: Started in network mode [ 121.599809][ T7255] tipc: Node identity 46c2e0caeb95, cluster identity 4711 [ 121.607659][ T7255] tipc: Enabled bearer , priority 0 [ 121.652812][ T7254] tipc: Disabling bearer [ 122.844764][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 122.871573][ T7283] misc userio: Invalid payload size [ 122.876802][ T7283] misc userio: Invalid payload size [ 122.998986][ T7289] hub 6-0:1.0: USB hub found [ 123.000464][ T7289] hub 6-0:1.0: 1 port detected [ 123.628118][ T7311] 9pnet_fd: Insufficient options for proto=fd [ 125.088684][ T7333] tc_dump_action: action bad kind [ 126.369397][ T7363] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 127.221912][ T7413] fuse: Bad value for 'fd' [ 127.321119][ T7415] 9pnet_fd: Insufficient options for proto=fd [ 127.379231][ T7390] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 127.546870][ T7421] 9pnet_fd: Insufficient options for proto=fd [ 128.351207][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 128.612625][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.935488][ T7455] hub 6-0:1.0: USB hub found [ 128.937451][ T7455] hub 6-0:1.0: 1 port detected [ 129.085225][ T7461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 129.937404][ T7465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.307'. [ 129.969538][ T7467] vlan2: entered promiscuous mode [ 129.971568][ T7467] vlan2: entered allmulticast mode [ 129.973832][ T7467] hsr_slave_1: entered allmulticast mode [ 129.990875][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 130.121214][ T7467] hsr_slave_1 (unregistering): left allmulticast mode [ 130.136288][ T7467] hsr_slave_1 (unregistering): left promiscuous mode [ 130.140810][ T7474] syz.4.309: attempt to access beyond end of device [ 130.140810][ T7474] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 130.146927][ T7474] FAT-fs (nbd4): unable to read boot sector [ 130.292092][ T5947] Bluetooth: hci1: command 0x0405 tx timeout [ 131.224727][ T7491] 9pnet_fd: Insufficient options for proto=fd [ 132.170155][ T7505] 9pnet_fd: Insufficient options for proto=fd [ 132.177481][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 132.218811][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.220786][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081897][ T7518] cgroup: fork rejected by pids controller in /syz0 [ 133.863606][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.033149][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.043126][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.046749][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.052660][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.055661][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.058065][ T35] usb 5-1: Product: syz [ 134.059494][ T35] usb 5-1: Manufacturer: syz [ 134.060942][ T35] usb 5-1: SerialNumber: syz [ 134.276038][ T35] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.495860][ T5976] usb 5-1: USB disconnect, device number 5 [ 134.500904][ T5976] usblp0: removed [ 135.496022][ T39] audit: type=1326 audit(1737364459.613:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.333" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f16579 code=0x0 [ 136.119208][ T7606] tipc: Invalid UDP bearer configuration [ 136.119229][ T7606] tipc: Enabling of bearer rejected, failed to enable media [ 136.783791][ T7609] netlink: 'syz.1.336': attribute type 12 has an invalid length. [ 137.837855][ T7636] gtp0: entered promiscuous mode [ 138.242476][ T63] e1000 0000:00:06.0 eth0: Reset adapter [ 140.097633][ T7690] gtp0: entered promiscuous mode [ 140.586989][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 149.172208][ T1016] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.392095][ T1016] usb 5-1: Using ep0 maxpacket: 32 [ 149.397654][ T1016] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.403854][ T1016] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.408784][ T1016] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.412502][ T1016] usb 5-1: Product: syz [ 149.414348][ T1016] usb 5-1: Manufacturer: syz [ 149.416208][ T1016] usb 5-1: SerialNumber: syz [ 149.418639][ T1016] usb 5-1: config 0 descriptor?? [ 149.421181][ T7713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.647009][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.650881][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.764217][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.768250][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.775457][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.779099][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.988760][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.994840][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.999932][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.004570][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.010969][ T5976] usb 5-1: USB disconnect, device number 6 [ 150.052575][ T63] e1000 0000:00:06.0 eth0: Reset adapter [ 151.020059][ T7781] batman_adv: batadv0: Adding interface: vxlan0 [ 151.026796][ T7781] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.037006][ T7781] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 152.213169][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 160.581574][ T7814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.124642][ T7826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.126983][ T7826] overlayfs: failed to set xattr on upper [ 161.128780][ T7826] overlayfs: ...falling back to redirect_dir=nofollow. [ 161.130897][ T7826] overlayfs: ...falling back to index=off. [ 161.132829][ T7826] overlayfs: ...falling back to uuid=null. [ 161.162874][ T7826] evm: overlay not supported [ 161.872994][ T7839] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 161.875738][ T7839] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 163.077073][ T7868] gtp0: entered promiscuous mode [ 163.412978][ T66] Bluetooth: hci1: command 0x0405 tx timeout [ 163.631501][ T66] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 164.373654][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 172.959375][ T7913] netlink: 'syz.4.393': attribute type 20 has an invalid length. [ 173.005600][ T7918] mkiss: ax0: crc mode is auto. [ 173.964179][ T39] audit: type=1326 audit(1737364498.083:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.1.396" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f16579 code=0x0 [ 174.541462][ T7953] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 174.736554][ T7953] batman_adv: batadv0: Adding interface: team0 [ 174.738697][ T7953] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.747222][ T7953] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 174.818507][ T7947] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 174.822782][ T7947] netlink: 2 bytes leftover after parsing attributes in process `syz.4.397'. [ 174.828095][ T7947] team0: entered promiscuous mode [ 174.830377][ T7947] team_slave_0: entered promiscuous mode [ 174.836619][ T7947] team_slave_1: entered promiscuous mode [ 174.847168][ T7947] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.849914][ T7947] batman_adv: batadv0: Interface activated: team0 [ 174.852456][ T7947] batman_adv: batadv0: Interface deactivated: team0 [ 174.854883][ T7947] batman_adv: batadv0: Removing interface: team0 [ 174.858221][ T7947] bridge0: port 3(team0) entered blocking state [ 174.860493][ T7947] bridge0: port 3(team0) entered disabled state [ 174.862637][ T7947] team0: entered allmulticast mode [ 174.864892][ T7947] team_slave_0: entered allmulticast mode [ 174.867195][ T7947] team_slave_1: entered allmulticast mode [ 174.870725][ T7947] bridge0: port 3(team0) entered blocking state [ 174.872648][ T7947] bridge0: port 3(team0) entered forwarding state [ 176.706246][ T7990] syz.2.406 (7990) used greatest stack depth: 20416 bytes left [ 179.952079][ T8059] /dev/sr0: Can't open blockdev [ 180.062907][ T8060] /dev/sr0: Can't open blockdev [ 180.944369][ T39] audit: type=1800 audit(1737364505.063:20): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.428" name="bus" dev="9p" ino=38928824 res=0 errno=0 [ 181.042263][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 181.053436][ T8090] veth3: entered promiscuous mode [ 182.382088][ T5979] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 182.399056][ T8112] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 182.424698][ T8112] batman_adv: batadv0: Adding interface: team0 [ 182.426562][ T8112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.434046][ T8112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 182.445382][ T8112] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 182.448600][ T8112] netlink: 2 bytes leftover after parsing attributes in process `syz.1.434'. [ 182.455242][ T8112] team0: entered promiscuous mode [ 182.457352][ T8112] team_slave_0: entered promiscuous mode [ 182.460212][ T8112] team_slave_1: entered promiscuous mode [ 182.465159][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.468082][ T8112] batman_adv: batadv0: Interface activated: team0 [ 182.470773][ T8112] batman_adv: batadv0: Interface deactivated: team0 [ 182.474059][ T8112] batman_adv: batadv0: Removing interface: team0 [ 182.477645][ T8112] bridge0: port 3(team0) entered blocking state [ 182.480332][ T8112] bridge0: port 3(team0) entered disabled state [ 182.482294][ T8112] team0: entered allmulticast mode [ 182.483810][ T8112] team_slave_0: entered allmulticast mode [ 182.485488][ T8112] team_slave_1: entered allmulticast mode [ 182.489622][ T8112] bridge0: port 3(team0) entered blocking state [ 182.491608][ T8112] bridge0: port 3(team0) entered forwarding state [ 182.542217][ T5979] usb 9-1: Using ep0 maxpacket: 32 [ 182.548453][ T5979] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.553420][ T5979] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.556026][ T5979] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.558592][ T5979] usb 9-1: Product: syz [ 182.565296][ T5979] usb 9-1: Manufacturer: syz [ 182.569450][ T5979] usb 9-1: SerialNumber: syz [ 182.587512][ T5979] usb 9-1: config 0 descriptor?? [ 182.589986][ T8107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.800981][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.804235][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.911087][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.915939][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.920112][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.924650][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.131814][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.134963][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.140061][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.144409][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.148349][ T63] usb 9-1: USB disconnect, device number 3 [ 183.617102][ T8141] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.626531][ T8141] kvm: pic: level sensitive irq not supported [ 183.626968][ T8141] kvm: pic: non byte read [ 183.631533][ T8141] kvm: pic: level sensitive irq not supported [ 183.631798][ T8141] kvm: pic: non byte read [ 183.636523][ T8141] kvm: pic: level sensitive irq not supported [ 183.636789][ T8141] kvm: pic: non byte read [ 183.641124][ T8141] kvm: pic: level sensitive irq not supported [ 183.641404][ T8141] kvm: pic: non byte read [ 186.186724][ T8194] netlink: 56 bytes leftover after parsing attributes in process `syz.2.453'. [ 186.385682][ T8197] hub 6-0:1.0: USB hub found [ 186.387564][ T8197] hub 6-0:1.0: 1 port detected [ 186.555632][ T8206] bridge0: port 4(hsr_slave_1) entered blocking state [ 186.557987][ T8206] bridge0: port 4(hsr_slave_1) entered disabled state [ 186.560660][ T8206] hsr_slave_1: entered allmulticast mode [ 186.566467][ T8206] hsr_slave_1: left allmulticast mode [ 188.211712][ T8229] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 188.331716][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.1.464'. [ 188.825612][ T8246] hub 6-0:1.0: USB hub found [ 188.827723][ T8246] hub 6-0:1.0: 1 port detected [ 188.904473][ T39] audit: type=1800 audit(1737364513.023:21): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.469" name="bus" dev="9p" ino=38928824 res=0 errno=0 [ 188.964963][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 188.987203][ T8253] veth3: entered promiscuous mode [ 190.061850][ T8262] [U]  [ 191.603359][ T8303] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 191.632403][ T8303] batman_adv: batadv0: Adding interface: team0 [ 191.635424][ T8303] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.643378][ T8303] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 191.652204][ T8303] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 191.656767][ T8303] netlink: 2 bytes leftover after parsing attributes in process `syz.0.481'. [ 191.682898][ T8303] team0: entered promiscuous mode [ 191.684462][ T8303] team_slave_0: entered promiscuous mode [ 191.686283][ T8303] team_slave_1: entered promiscuous mode [ 191.689551][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.691795][ T8303] batman_adv: batadv0: Interface activated: team0 [ 191.694451][ T8303] batman_adv: batadv0: Interface deactivated: team0 [ 191.696975][ T8303] batman_adv: batadv0: Removing interface: team0 [ 191.705190][ T8303] bridge0: port 3(team0) entered blocking state [ 191.707186][ T8303] bridge0: port 3(team0) entered disabled state [ 191.709104][ T8303] team0: entered allmulticast mode [ 191.712409][ T8303] team_slave_0: entered allmulticast mode [ 191.717650][ T8303] team_slave_1: entered allmulticast mode [ 191.727485][ T8303] bridge0: port 3(team0) entered blocking state [ 191.729338][ T8303] bridge0: port 3(team0) entered forwarding state [ 191.757086][ T8310] syz.2.484: attempt to access beyond end of device [ 191.757086][ T8310] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 191.761510][ T8310] syz.2.484: attempt to access beyond end of device [ 191.761510][ T8310] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 191.765539][ T8310] Mount JFS Failure: -5 [ 192.639219][ T39] audit: type=1800 audit(1737364516.753:22): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.488" name="bus" dev="9p" ino=38928824 res=0 errno=0 [ 192.713619][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 192.736789][ T8324] veth3: entered promiscuous mode [ 192.862088][ T39] audit: type=1326 audit(1737364516.973:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.868324][ T39] audit: type=1326 audit(1737364516.973:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.874907][ T39] audit: type=1326 audit(1737364516.973:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.881037][ T39] audit: type=1326 audit(1737364516.973:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.887344][ T39] audit: type=1326 audit(1737364516.973:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.949989][ T39] audit: type=1326 audit(1737364517.063:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.958023][ T39] audit: type=1326 audit(1737364517.063:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 192.967266][ T39] audit: type=1326 audit(1737364517.063:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 193.663301][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.665182][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.765683][ T8346] gtp0: entered promiscuous mode [ 194.932167][ T5947] Bluetooth: hci1: command 0x0405 tx timeout [ 195.042626][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 195.344268][ T8362] hub 6-0:1.0: USB hub found [ 195.345820][ T8362] hub 6-0:1.0: 1 port detected [ 197.457125][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 197.468182][ T8398] ipvlan2: entered promiscuous mode [ 197.471841][ T8398] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.311824][ T8441] netlink: 219 bytes leftover after parsing attributes in process `syz.4.521'. [ 201.964821][ T8499] binder: 8498:8499 ioctl c0306201 20000680 returned -14 [ 202.549123][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 202.549134][ T39] audit: type=1800 audit(1737364526.663:38): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.542" name="/" dev="9p" ino=2 res=0 errno=0 [ 203.248864][ T8521] usb 1-1: USB disconnect, device number 2 [ 207.502521][ T8583] netlink: 'syz.2.559': attribute type 7 has an invalid length. [ 208.462115][ T5979] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.632084][ T5979] usb 7-1: Using ep0 maxpacket: 16 [ 208.638513][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.644334][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.648253][ T5979] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 208.651811][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.657911][ T5979] usb 7-1: config 0 descriptor?? [ 209.085680][ T5979] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 209.088248][ T5979] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 209.090397][ T5979] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 209.092534][ T5979] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 209.096204][ T5979] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 209.098775][ T5979] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 209.107874][ T5979] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 209.420058][ T63] usb 7-1: USB disconnect, device number 4 [ 209.886532][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 210.512668][ T8645] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 210.514750][ T8645] UDF-fs: Scanning with blocksize 2048 failed [ 210.517159][ T8645] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 210.519315][ T8645] UDF-fs: Scanning with blocksize 4096 failed [ 210.915503][ T8652] 9pnet_virtio: no channels available for device syz [ 210.979652][ T8653] overlayfs: overlapping lowerdir path [ 211.405851][ T8664] lo speed is unknown, defaulting to 1000 [ 211.410025][ T8664] lo speed is unknown, defaulting to 1000 [ 211.417463][ T8664] lo speed is unknown, defaulting to 1000 [ 211.493296][ T8664] infiniband sz1: set active [ 211.495597][ T35] lo speed is unknown, defaulting to 1000 [ 211.498304][ T8664] infiniband sz1: added lo [ 211.534548][ T8664] RDS/IB: sz1: added [ 211.536382][ T8664] smc: adding ib device sz1 with port count 1 [ 211.538997][ T8664] smc: ib device sz1 port 1 has pnetid [ 211.541460][ T35] lo speed is unknown, defaulting to 1000 [ 211.545399][ T8664] lo speed is unknown, defaulting to 1000 [ 211.642414][ T8664] lo speed is unknown, defaulting to 1000 [ 211.708082][ T8664] lo speed is unknown, defaulting to 1000 [ 211.793202][ T8664] lo speed is unknown, defaulting to 1000 [ 212.252207][ T35] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 212.407849][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.414448][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.422848][ T35] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.426222][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.437068][ T35] usb 9-1: config 0 descriptor?? [ 212.855435][ T35] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 212.857741][ T35] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 212.860053][ T35] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 212.866019][ T35] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.121054][ T5979] usb 9-1: USB disconnect, device number 4 [ 214.138315][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 215.765949][ T8751] lo speed is unknown, defaulting to 1000 [ 216.637279][ T8748] netlink: 'syz.0.601': attribute type 7 has an invalid length. [ 219.261620][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.615'. [ 219.264416][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'. [ 219.267747][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.615'. [ 219.270494][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.615'. [ 223.774339][ T8848] [U]  [ 224.199779][ T8867] lo speed is unknown, defaulting to 1000 [ 225.959802][ T8892] 9pnet_fd: Insufficient options for proto=fd [ 227.444186][ T8918] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 227.448270][ T8918] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.549775][ T66] Bluetooth: hci3: unexpected event for opcode 0x041b [ 228.331342][ T8939] 9pnet_fd: Insufficient options for proto=fd [ 230.226342][ T8971] loop7: detected capacity change from 16383 to 16384 [ 230.836846][ T8988] 9pnet_fd: Insufficient options for proto=fd [ 230.920403][ T8993] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 231.574112][ T66] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 231.577300][ T66] Bluetooth: hci3: Injecting HCI hardware error event [ 231.580963][ T66] Bluetooth: hci3: hardware error 0x00 [ 231.889292][ T9008] lo speed is unknown, defaulting to 1000 [ 233.382827][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 233.665327][ T66] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 236.274689][ T9077] hub 6-0:1.0: USB hub found [ 236.282160][ T9077] hub 6-0:1.0: 1 port detected [ 240.639316][ T9148] hub 6-0:1.0: USB hub found [ 240.662356][ T9148] hub 6-0:1.0: 1 port detected [ 240.955713][ T9160] bridge0: port 4(hsr_slave_1) entered blocking state [ 240.958039][ T9160] bridge0: port 4(hsr_slave_1) entered disabled state [ 240.960549][ T9160] hsr_slave_1: entered allmulticast mode [ 240.965515][ T9160] hsr_slave_1: left allmulticast mode [ 242.150877][ T9179] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 242.153200][ T9179] UDF-fs: Scanning with blocksize 2048 failed [ 242.318990][ T9179] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 242.321104][ T9179] UDF-fs: Scanning with blocksize 4096 failed [ 244.707623][ T9219] bridge0: port 1(hsr_slave_1) entered blocking state [ 244.710264][ T9219] bridge0: port 1(hsr_slave_1) entered disabled state [ 244.712732][ T9219] hsr_slave_1: entered allmulticast mode [ 244.719875][ T9219] hsr_slave_1: left allmulticast mode [ 245.599856][ T9230] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 245.613226][ T9230] UDF-fs: Scanning with blocksize 2048 failed [ 245.630442][ T9230] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 245.663112][ T9230] UDF-fs: Scanning with blocksize 4096 failed [ 246.422139][ T9244] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[9244] [ 246.460750][ T9234] hub 6-0:1.0: USB hub found [ 246.463111][ T9234] hub 6-0:1.0: 1 port detected [ 247.234818][ T9256] veth0_vlan: entered allmulticast mode [ 247.286244][ T9256] veth0_vlan: left promiscuous mode [ 247.288084][ T9256] veth0_vlan: entered promiscuous mode [ 247.795607][ T5981] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.934317][ T9270] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 247.936577][ T9270] UDF-fs: Scanning with blocksize 2048 failed [ 247.940978][ T9270] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 247.943275][ T9270] UDF-fs: Scanning with blocksize 4096 failed [ 247.952175][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 247.955720][ T5981] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 247.958165][ T5981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.961048][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.965260][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.967896][ T5981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.971442][ T5981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.974996][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.184554][ T5981] usb 6-1: GET_CAPABILITIES returned 0 [ 248.186173][ T5981] usbtmc 6-1:16.0: can't read capabilities [ 248.257401][ T9272] usb 6-1: USB disconnect, device number 5 [ 248.271432][ T9272] hub 6-0:1.0: USB hub found [ 248.273107][ T9272] hub 6-0:1.0: 1 port detected [ 248.412137][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 250.306728][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 250.318684][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.320911][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.430759][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.434492][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.438128][ T9302] batman_adv: batadv0: Removing interface: vxlan0 [ 251.122569][ T9314] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 251.125034][ T9314] UDF-fs: Scanning with blocksize 2048 failed [ 251.127332][ T9314] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 251.129517][ T9314] UDF-fs: Scanning with blocksize 4096 failed [ 253.632631][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 253.913328][ T9358] hub 6-0:1.0: USB hub found [ 253.914860][ T9358] hub 6-0:1.0: 1 port detected [ 255.096867][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.098732][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.291583][ T66] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 255.444702][ T9392] hub 6-0:1.0: USB hub found [ 255.446533][ T9392] hub 6-0:1.0: 1 port detected [ 255.535689][ T9386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.770'. [ 255.740497][ T9411] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 255.755425][ T9411] UDF-fs: Scanning with blocksize 2048 failed [ 255.759061][ T9411] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 255.761205][ T9411] UDF-fs: Scanning with blocksize 4096 failed [ 257.270666][ T9434] hub 6-0:1.0: USB hub found [ 257.272854][ T9434] hub 6-0:1.0: 1 port detected [ 257.804266][ T9444] hub 6-0:1.0: USB hub found [ 257.805754][ T9444] hub 6-0:1.0: 1 port detected [ 258.837218][ T9479] vivid-001: disconnect [ 259.546049][ T9487] binder: 9486:9487 ioctl c018620c 20000140 returned -22 [ 259.607514][ T9470] vivid-001: reconnect [ 260.091544][ T9499] ======================================================= [ 260.091544][ T9499] WARNING: The mand mount option has been deprecated and [ 260.091544][ T9499] and is ignored by this kernel. Remove the mand [ 260.091544][ T9499] option from the mount to silence this warning. [ 260.091544][ T9499] ======================================================= [ 260.112238][ T9499] overlayfs: missing 'lowerdir' [ 260.267118][ T9506] 9pnet_fd: Insufficient options for proto=fd [ 261.193077][ T9527] random: crng reseeded on system resumption [ 261.239166][ T9527] lo speed is unknown, defaulting to 1000 [ 262.282960][ T9546] netlink: 168 bytes leftover after parsing attributes in process `syz.0.812'. [ 262.507851][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.816'. [ 262.686016][ T5981] e1000 0000:00:06.0 eth0: Reset adapter [ 262.782339][ T6628] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 262.903782][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 262.908382][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 262.911104][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.822'. [ 262.950624][ T6628] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 262.953050][ T6628] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 262.955375][ T6628] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 262.964291][ T6628] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 262.967344][ T6628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 262.971667][ T6628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.975786][ T6628] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 262.982620][ T6628] usb 7-1: string descriptor 0 read error: -22 [ 262.984560][ T6628] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 262.987398][ T6628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.038918][ T6628] usb 7-1: config 0 descriptor?? [ 263.057194][ T6628] hub 7-1:0.0: bad descriptor, ignoring hub [ 263.059548][ T6628] hub 7-1:0.0: probe with driver hub failed with error -5 [ 263.068520][ T6628] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 263.224697][ T9581] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.270093][ T64] usb 7-1: USB disconnect, device number 5 [ 263.317234][ T9581] can0: slcan on ptm0. [ 263.413349][ T9581] can0 (unregistered): slcan off ptm0. [ 263.422746][ T9581] mkiss: ax0: crc mode is auto. [ 264.853210][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 280.202716][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 280.347127][ T9626] ubi1: attaching mtd0 [ 280.473648][ T9637] lo speed is unknown, defaulting to 1000 [ 280.662111][ T9640] block nbd4: Device being setup by another task [ 280.711765][ T9637] block nbd4: shutting down sockets [ 280.778789][ T9640] block nbd4: NBD_DISCONNECT [ 280.780502][ T9640] block nbd4: Send disconnect failed -32 [ 281.741019][ T9655] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20002 [ 281.788616][ T9658] netlink: 'syz.1.837': attribute type 16 has an invalid length. [ 281.791503][ T9658] netlink: 'syz.1.837': attribute type 3 has an invalid length. [ 281.793916][ T9658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.837'. [ 282.528512][ T9671] capability: warning: `syz.2.841' uses deprecated v2 capabilities in a way that may be insecure [ 282.962664][ T9678] hub 6-0:1.0: USB hub found [ 282.970535][ T9678] hub 6-0:1.0: 1 port detected [ 284.130478][ T9704] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 284.132832][ T9704] UDF-fs: Scanning with blocksize 2048 failed [ 284.135539][ T9704] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 284.137577][ T9704] UDF-fs: Scanning with blocksize 4096 failed [ 284.648572][ T9715] kvm: kvm [9714]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 285.494879][ T9725] hub 6-0:1.0: USB hub found [ 285.496293][ T9725] hub 6-0:1.0: 1 port detected [ 286.189321][ T9748] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 286.191446][ T9748] UDF-fs: Scanning with blocksize 2048 failed [ 286.255515][ T9748] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 286.257760][ T9748] UDF-fs: Scanning with blocksize 4096 failed [ 287.119519][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 287.775114][ T9765] hub 6-0:1.0: USB hub found [ 287.777068][ T9765] hub 6-0:1.0: 1 port detected [ 289.827431][ T9819] hub 6-0:1.0: USB hub found [ 289.832067][ T9819] hub 6-0:1.0: 1 port detected [ 290.349858][ T9841] random: crng reseeded on system resumption [ 290.410354][ T9841] lo speed is unknown, defaulting to 1000 [ 291.895943][ T9864] hub 6-0:1.0: USB hub found [ 291.897436][ T9864] hub 6-0:1.0: 1 port detected [ 292.530351][ T9882] random: crng reseeded on system resumption [ 293.851055][ T9907] hub 6-0:1.0: USB hub found [ 293.852675][ T9907] hub 6-0:1.0: 1 port detected [ 294.365220][ T9926] netlink: 'syz.2.910': attribute type 9 has an invalid length. [ 294.690191][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 295.693699][ T9939] hub 6-0:1.0: USB hub found [ 295.698818][ T9939] hub 6-0:1.0: 1 port detected [ 297.764140][T10001] hub 6-0:1.0: USB hub found [ 297.765612][T10001] hub 6-0:1.0: 1 port detected [ 299.866348][T10046] hub 6-0:1.0: USB hub found [ 299.868944][T10046] hub 6-0:1.0: 1 port detected [ 300.386723][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 300.412600][T10074] 9pnet_fd: Insufficient options for proto=fd [ 301.340596][T10092] hub 6-0:1.0: USB hub found [ 301.342179][T10092] hub 6-0:1.0: 1 port detected [ 301.631912][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 301.876995][T10115] 9pnet_fd: Insufficient options for proto=fd [ 302.408285][T10126] hub 6-0:1.0: USB hub found [ 302.409806][T10126] hub 6-0:1.0: 1 port detected [ 302.962574][T10147] 9pnet_fd: Insufficient options for proto=fd [ 303.699137][T10163] hub 6-0:1.0: USB hub found [ 303.701023][T10163] hub 6-0:1.0: 1 port detected [ 304.099127][T10182] 9pnet_fd: Insufficient options for proto=fd [ 304.729547][T10192] hub 6-0:1.0: USB hub found [ 304.731195][T10192] hub 6-0:1.0: 1 port detected [ 305.850480][T10218] 9pnet_fd: Insufficient options for proto=fd [ 306.012686][T10220] hub 6-0:1.0: USB hub found [ 306.014127][T10220] hub 6-0:1.0: 1 port detected [ 307.574574][T10260] 9pnet_fd: Insufficient options for proto=fd [ 307.593312][T10257] hub 6-0:1.0: USB hub found [ 307.594832][T10257] hub 6-0:1.0: 1 port detected [ 307.711469][T10265] lo speed is unknown, defaulting to 1000 [ 308.698041][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 308.701580][T10286] trusted_key: syz.4.1012 sent an empty control message without MSG_MORE. [ 309.033030][T10292] netlink: 'syz.1.1014': attribute type 4 has an invalid length. [ 309.934446][T10307] 9pnet_fd: Insufficient options for proto=fd [ 309.965193][T10301] hub 6-0:1.0: USB hub found [ 309.966748][T10301] hub 6-0:1.0: 1 port detected [ 310.988141][T10332] 9pnet_fd: Insufficient options for proto=fd [ 311.243290][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 311.303081][T10340] hub 6-0:1.0: USB hub found [ 311.304718][T10340] hub 6-0:1.0: 1 port detected [ 311.495506][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'. [ 312.074000][T10363] 9pnet_fd: Insufficient options for proto=fd [ 312.562420][T10369] hub 6-0:1.0: USB hub found [ 312.564033][T10369] hub 6-0:1.0: 1 port detected [ 313.144542][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 313.689520][T10393] 9pnet_fd: Insufficient options for proto=fd [ 314.332244][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1047'. [ 314.385869][T10402] hub 6-0:1.0: USB hub found [ 314.387409][T10402] hub 6-0:1.0: 1 port detected [ 314.830291][T10419] 9pnet_fd: Insufficient options for proto=fd [ 315.565066][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 315.596154][T10438] 9pnet_fd: Insufficient options for proto=fd [ 315.904423][T10445] 9pnet_fd: Insufficient options for proto=fd [ 315.964631][T10448] 9pnet_fd: Insufficient options for proto=fd [ 316.043768][T10450] netdevsim netdevsim0: Direct firmware load for . [ 316.043768][T10450] failed with error -2 [ 316.053450][T10450] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 316.053450][T10450] [ 316.462957][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 316.535350][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.537483][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.593629][T10473] 9pnet_fd: Insufficient options for proto=fd [ 317.261840][T10486] 9pnet_fd: Insufficient options for proto=fd [ 317.498092][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1074'. [ 317.897360][T10505] overlay: Unknown parameter '/' [ 318.243975][T10509] 9pnet_fd: Insufficient options for proto=fd [ 318.523730][T10516] 9pnet_fd: Insufficient options for proto=fd [ 319.261516][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 319.520538][T10534] hub 6-0:1.0: USB hub found [ 319.522167][T10534] hub 6-0:1.0: 1 port detected [ 320.573723][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 320.576505][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 320.599814][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 320.752438][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'. [ 321.368751][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.549188][T10576] hub 6-0:1.0: USB hub found [ 321.550945][T10576] hub 6-0:1.0: 1 port detected [ 322.252801][T10593] lo speed is unknown, defaulting to 1000 [ 322.896682][T10609] hub 6-0:1.0: USB hub found [ 322.906459][T10609] hub 6-0:1.0: 1 port detected [ 324.274522][T10643] netlink: 'syz.1.1115': attribute type 4 has an invalid length. [ 324.566012][T10646] hub 6-0:1.0: USB hub found [ 324.568204][T10646] hub 6-0:1.0: 1 port detected [ 326.092169][ T5976] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 326.252244][ T5976] usb 9-1: Using ep0 maxpacket: 8 [ 326.255689][ T5976] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 326.258610][ T5976] usb 9-1: config 0 has no interface number 0 [ 326.260690][ T5976] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 326.268345][ T5976] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 326.273920][ T5976] usb 9-1: config 0 interface 48 has no altsetting 0 [ 326.277647][ T5976] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 326.281040][ T5976] usb 9-1: config 0 has no interface number 0 [ 326.284036][ T5976] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 326.287503][ T5976] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 326.292220][ T5976] usb 9-1: config 0 interface 48 has no altsetting 0 [ 326.295195][ T5976] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 326.298808][ T5976] usb 9-1: config 0 has no interface number 0 [ 326.302154][ T5976] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 326.306492][ T5976] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 326.313606][ T5976] usb 9-1: config 0 interface 48 has no altsetting 0 [ 326.316565][ T5976] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 326.322217][ T5976] usb 9-1: config 0 has no interface number 0 [ 326.324149][ T5976] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 326.328804][ T5976] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 326.333132][ T5976] usb 9-1: config 0 interface 48 has no altsetting 0 [ 326.335755][ T5976] usb 9-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 326.339208][ T5976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.344042][ T5976] usb 9-1: config 0 descriptor?? [ 326.569870][ T5976] usb 9-1: string descriptor 0 read error: -71 [ 326.575739][T10690] hub 6-0:1.0: USB hub found [ 326.577312][T10690] hub 6-0:1.0: 1 port detected [ 326.581684][ T5976] usb 9-1: USB disconnect, device number 5 [ 328.055659][T10723] 9pnet_fd: Insufficient options for proto=fd [ 328.083020][T10725] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.086417][T10725] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 328.460353][T10728] hub 6-0:1.0: USB hub found [ 328.461910][T10728] hub 6-0:1.0: 1 port detected [ 328.655969][T10737] vivid-000: ================= START STATUS ================= [ 328.659113][T10737] vivid-000: Test Pattern: 75% Colorbar [ 328.661018][T10737] vivid-000: Fill Percentage of Frame: 100 [ 328.663518][T10737] vivid-000: Horizontal Movement: No Movement [ 328.665635][T10737] vivid-000: Vertical Movement: No Movement [ 328.668719][T10737] vivid-000: OSD Text Mode: All [ 328.670733][T10737] vivid-000: Show Border: false [ 328.673831][T10737] vivid-000: Show Square: false [ 328.675513][T10737] vivid-000: Sensor Flipped Horizontally: false [ 328.678067][T10737] vivid-000: Sensor Flipped Vertically: false [ 328.680466][T10737] vivid-000: Insert SAV Code in Image: false [ 328.683980][T10737] vivid-000: Insert EAV Code in Image: false [ 328.686411][T10737] vivid-000: Insert Video Guard Band: false [ 328.688782][T10737] vivid-000: Reduced Framerate: false [ 328.691050][T10737] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 328.694453][T10737] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 328.697580][T10737] vivid-000: Enable Capture Cropping: true [ 328.699730][T10737] vivid-000: Enable Capture Composing: true [ 328.701954][T10737] vivid-000: Enable Capture Scaler: true [ 328.703728][T10737] vivid-000: Timestamp Source: End of Frame [ 328.705449][T10737] vivid-000: Colorspace: sRGB [ 328.706818][T10737] vivid-000: Transfer Function: Default [ 328.708407][T10737] vivid-000: Y'CbCr Encoding: Default [ 328.709975][T10737] vivid-000: HSV Encoding: Hue 0-179 [ 328.711504][T10737] vivid-000: Quantization: Default [ 328.713542][T10737] vivid-000: Apply Alpha To Red Only: false [ 328.717558][T10737] vivid-000: Standard Aspect Ratio: 4x3 [ 328.722522][T10737] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 328.727312][T10738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.732090][T10737] vivid-000: DV Timings: 640x480p59 inactive [ 328.734039][T10737] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 328.736158][T10737] vivid-000: Maximum EDID Blocks: 2 [ 328.737688][T10737] vivid-000: Limited RGB Range (16-235): false [ 328.739474][T10737] vivid-000: Rx RGB Quantization Range: Automatic [ 328.741346][T10737] vivid-000: Power Present: 0x00000001 [ 328.743074][T10737] tpg source WxH: 640x360 (Y'CbCr) [ 328.744564][T10737] tpg field: 1 [ 328.745567][T10737] tpg crop: 640x360@0x0 [ 328.749076][T10737] tpg compose: 640x360@0x0 [ 328.750449][T10737] tpg colorspace: 8 [ 328.751705][T10737] tpg transfer function: 0/0 [ 328.757525][T10738] lo speed is unknown, defaulting to 1000 [ 328.762094][T10737] tpg Y'CbCr encoding: 0/0 [ 328.763931][T10737] tpg quantization: 0/0 [ 328.765614][T10737] tpg RGB range: 0/2 [ 328.767327][T10737] vivid-000: ================== END STATUS ================== [ 329.815942][T10764] 9pnet_fd: Insufficient options for proto=fd [ 330.049859][T10762] hub 6-0:1.0: USB hub found [ 330.053311][T10762] hub 6-0:1.0: 1 port detected [ 331.412167][ T5981] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 331.584628][ T5981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.587859][ T5981] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 331.590576][ T5981] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 331.594020][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.597759][ T5981] usb 7-1: config 0 descriptor?? [ 331.600637][ T5981] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 331.602822][ T5981] dvb-usb: bulk message failed: -22 (3/0) [ 331.608522][ T5981] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 331.611319][ T5981] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 331.615101][ T5981] usb 7-1: media controller created [ 331.617478][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.626171][ T5981] dvb-usb: bulk message failed: -22 (6/0) [ 331.628018][ T5981] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 331.632678][ T5981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input12 [ 331.640782][ T5981] dvb-usb: schedule remote query interval to 150 msecs. [ 331.643039][ T5981] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 331.805843][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 331.810156][T10834] dvb-usb: bulk message failed: -22 (2/0) [ 331.812886][ T5981] dvb-usb: error while querying for an remote control event. [ 331.814704][T10843] hub 6-0:1.0: USB hub found [ 331.817627][T10843] hub 6-0:1.0: 1 port detected [ 331.854154][T10834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.873604][T10845] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 331.907516][T10847] 9pnet_fd: Insufficient options for proto=fd [ 331.937503][T10834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.976416][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 331.980321][ T5981] dvb-usb: error while querying for an remote control event. [ 331.994449][T10845] /dev/sr0: Can't open blockdev [ 332.008331][T10834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.098139][T10834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.142065][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 332.143828][ T5981] dvb-usb: error while querying for an remote control event. [ 332.177673][T10834] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.193864][T10834] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.200094][T10834] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.205702][T10834] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.215138][ T5981] usb 7-1: USB disconnect, device number 6 [ 332.236295][ T5981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 332.419633][T10860] 9pnet_fd: Insufficient options for proto=fd [ 333.247241][T10884] 9pnet_fd: Insufficient options for proto=fd [ 333.609416][T10889] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 333.615791][T10889] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 333.729511][ T5980] IPVS: starting estimator thread 0... [ 333.797750][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 333.832597][T10907] IPVS: using max 36 ests per chain, 86400 per kthread [ 333.992145][ T5998] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 334.142070][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 334.145441][ T5998] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.149024][ T5998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.164709][ T5998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.172455][ T5998] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.182547][ T5998] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.191448][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.297583][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 334.421535][ T5998] usb 7-1: GET_CAPABILITIES returned 0 [ 334.423278][ T5998] usbtmc 7-1:16.0: can't read capabilities [ 334.637079][ T5980] usb 7-1: USB disconnect, device number 7 [ 335.010363][T10956] 9pnet_fd: Insufficient options for proto=fd [ 335.690764][ T39] audit: type=1326 audit(1737364659.803:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.698692][ T39] audit: type=1326 audit(1737364659.813:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.707205][ T39] audit: type=1326 audit(1737364659.813:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.715851][ T39] audit: type=1326 audit(1737364659.813:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.723966][ T39] audit: type=1326 audit(1737364659.813:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.732226][ T39] audit: type=1326 audit(1737364659.813:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.739405][ T39] audit: type=1326 audit(1737364659.813:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.746819][ T39] audit: type=1326 audit(1737364659.813:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.754704][ T39] audit: type=1326 audit(1737364659.813:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 335.763402][ T39] audit: type=1326 audit(1737364659.833:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 336.755893][T11003] Bluetooth: MGMT ver 1.23 [ 337.240603][T11018] Cannot find add_set index 3 as target [ 338.035816][T11040] virtio-fs: tag not found [ 338.282322][ T5998] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 338.442118][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 338.442943][T11052] 9pnet_fd: Insufficient options for proto=fd [ 338.450710][ T5998] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 338.455453][ T5998] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 338.458295][ T5998] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 338.461125][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.476530][ T5998] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.479880][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.491757][ T5998] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 338.495964][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.499755][ T5998] usb 5-1: config 0 descriptor?? [ 338.610545][T11056] syzkaller0: entered promiscuous mode [ 338.612425][T11056] syzkaller0: entered allmulticast mode [ 338.722471][ T5998] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 338.734090][ T5998] usb 5-1: USB disconnect, device number 7 [ 338.746024][ T5998] usblp0: removed [ 339.089397][T11061] hub 6-0:1.0: USB hub found [ 339.091212][T11061] hub 6-0:1.0: 1 port detected [ 339.152118][ T5998] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 339.302178][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 339.305995][ T5998] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 339.308602][ T5998] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 339.312338][ T5998] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 339.316071][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.319895][ T5998] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.323682][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.328975][ T5998] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 339.332862][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.335486][T11067] 9pnet_fd: Insufficient options for proto=fd [ 339.336785][ T5998] usb 5-1: config 0 descriptor?? [ 339.554440][ T5998] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 340.041588][T11074] team0: left allmulticast mode [ 340.044908][T11074] team_slave_0: left allmulticast mode [ 340.046545][T11074] team_slave_1: left allmulticast mode [ 340.048264][T11074] bridge0: port 3(team0) entered disabled state [ 340.056261][T11074] bridge_slave_0: left allmulticast mode [ 340.057979][T11074] bridge_slave_0: left promiscuous mode [ 340.059810][T11074] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.069612][T11074] bridge_slave_1: left allmulticast mode [ 340.071625][T11074] bridge_slave_1: left promiscuous mode [ 340.073385][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.077930][T11074] bond0: (slave bond_slave_0): Releasing backup interface [ 340.081918][T11074] bond0: (slave bond_slave_1): Releasing backup interface [ 340.085659][T11074] team_slave_0: left promiscuous mode [ 340.095787][T11074] team0: Port device team_slave_0 removed [ 340.097893][T11074] team_slave_1: left promiscuous mode [ 340.106163][T11074] team0: Port device team_slave_1 removed [ 340.106657][ T833] usb 5-1: USB disconnect, device number 8 [ 340.108138][T11074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.112936][T11074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.113021][ T833] usblp0: removed [ 340.118007][T11074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.120236][T11074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.145894][T11075] team0: Mode changed to "broadcast" [ 340.150039][T11074] vlan0: entered promiscuous mode [ 340.158556][T11074] team0: Port device vlan0 added [ 340.161741][T11074] tipc: Started in network mode [ 340.166021][T11074] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 340.168762][T11074] tipc: Enabled bearer , priority 0 [ 340.243218][T11081] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 340.246385][T11081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1222'. [ 340.250280][T11081] team0: entered allmulticast mode [ 340.253352][T11081] vlan0: entered allmulticast mode [ 340.255396][T11081] veth0_vlan: entered allmulticast mode [ 340.257896][T11081] bridge0: port 1(team0) entered blocking state [ 340.260601][T11081] bridge0: port 1(team0) entered disabled state [ 340.264968][T11081] bridge0: port 1(team0) entered blocking state [ 340.267420][T11081] bridge0: port 1(team0) entered forwarding state [ 340.337374][T11083] overlayfs: missing 'workdir' [ 340.760599][T11087] hub 6-0:1.0: USB hub found [ 340.765154][T11087] hub 6-0:1.0: 1 port detected [ 341.147239][ T1016] libceph: connect (1)[c::]:6789 error -22 [ 341.149701][ T1016] libceph: mon0 (1)[c::]:6789 connect error [ 341.184288][ T833] tipc: Node number set to 11578026 [ 341.358641][T11100] veth0_vlan: entered allmulticast mode [ 341.384570][T11102] 9pnet_fd: Insufficient options for proto=fd [ 341.386134][T11100] veth0_vlan: left promiscuous mode [ 341.389192][T11100] veth0_vlan: entered promiscuous mode [ 341.458288][ T1016] libceph: connect (1)[c::]:6789 error -22 [ 341.467801][ T1016] libceph: mon0 (1)[c::]:6789 connect error [ 341.561255][T11092] ceph: No mds server is up or the cluster is laggy [ 344.067763][T11144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1236'. [ 344.502739][T11160] random: crng reseeded on system resumption [ 344.978469][T11165] 9pnet_fd: Insufficient options for proto=fd [ 346.353596][T11192] 9pnet_fd: Insufficient options for proto=fd [ 346.720190][T11212] random: crng reseeded on system resumption [ 348.209205][T11237] cgroup: fork rejected by pids controller in /syz2 [ 349.535257][T11322] random: crng reseeded on system resumption [ 349.588940][T11322] lo speed is unknown, defaulting to 1000 [ 349.809601][T11316] netlink: 'syz.0.1266': attribute type 9 has an invalid length. [ 350.467778][T11342] random: crng reseeded on system resumption [ 350.718963][T11342] lo speed is unknown, defaulting to 1000 [ 353.562446][T11389] random: crng reseeded on system resumption [ 353.613135][T11389] lo speed is unknown, defaulting to 1000 [ 358.637578][T11467] Cannot find add_set index 3 as target [ 359.180911][T11473] 9pnet_fd: Insufficient options for proto=fd [ 359.340833][T11471] hub 6-0:1.0: USB hub found [ 359.342422][T11471] hub 6-0:1.0: 1 port detected [ 359.367059][T11480] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.541693][T11480] can0: slcan on ptm0. [ 359.647331][ T5952] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 359.651470][ T5952] CPU: 3 UID: 0 PID: 5952 Comm: kworker/u33:7 Not tainted 6.13.0-syzkaller #0 [ 359.654930][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.659086][ T5952] Workqueue: hci1 hci_rx_work [ 359.660981][ T5952] Call Trace: [ 359.662303][ T5952] [ 359.663510][ T5952] dump_stack_lvl+0x16c/0x1f0 [ 359.665379][ T5952] sysfs_warn_dup+0x7f/0xa0 [ 359.667236][ T5952] sysfs_create_dir_ns+0x24d/0x2b0 [ 359.669266][ T5952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 359.671480][ T5952] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.673260][ T5952] ? kobject_add_internal+0x12d/0x990 [ 359.674796][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 359.676379][ T5952] kobject_add_internal+0x2c8/0x990 [ 359.677879][ T5952] kobject_add+0x16f/0x240 [ 359.679206][ T5952] ? __pfx_kobject_add+0x10/0x10 [ 359.680624][ T5952] ? class_to_subsys+0x3e/0x160 [ 359.682075][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 359.683610][ T5952] ? kobject_put+0xab/0x5a0 [ 359.684977][ T5952] device_add+0x289/0x1a70 [ 359.686337][ T5952] ? __pfx_dev_set_name+0x10/0x10 [ 359.687791][ T5952] ? __pfx_device_add+0x10/0x10 [ 359.689198][ T5952] ? mgmt_send_event_skb+0x2f2/0x460 [ 359.690715][ T5952] hci_conn_add_sysfs+0x17e/0x230 [ 359.692167][ T5952] le_conn_complete_evt+0xfce/0x1d10 [ 359.693757][ T5952] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 359.695389][ T5952] ? __mutex_lock+0x1cc/0xa60 [ 359.696840][ T5952] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 359.698532][ T5952] ? skb_pull_data+0x166/0x210 [ 359.699906][ T5952] hci_le_meta_evt+0x2e2/0x5d0 [ 359.701277][ T5952] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 359.703126][ T5952] hci_event_packet+0x666/0x1190 [ 359.704565][ T5952] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 359.706136][ T5952] ? __pfx_hci_event_packet+0x10/0x10 [ 359.707671][ T5952] ? mark_held_locks+0x9f/0xe0 [ 359.709072][ T5952] ? kcov_remote_start+0x3cf/0x6e0 [ 359.710540][ T5952] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.712123][ T5952] hci_rx_work+0x2c5/0x16b0 [ 359.713502][ T5952] ? process_one_work+0x8bb/0x1b30 [ 359.714984][ T5952] process_one_work+0x958/0x1b30 [ 359.716500][ T5952] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 359.718124][ T5952] ? __pfx_process_one_work+0x10/0x10 [ 359.719658][ T5952] ? rcu_is_watching+0x12/0xc0 [ 359.721038][ T5952] ? assign_work+0x1a0/0x250 [ 359.722366][ T5952] worker_thread+0x6c8/0xf00 [ 359.723741][ T5952] ? __kthread_parkme+0x148/0x220 [ 359.725238][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 359.726886][ T5952] kthread+0x2c1/0x3a0 [ 359.728084][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.729586][ T5952] ? __pfx_kthread+0x10/0x10 [ 359.730913][ T5952] ret_from_fork+0x45/0x80 [ 359.732191][ T5952] ? __pfx_kthread+0x10/0x10 [ 359.733559][ T5952] ret_from_fork_asm+0x1a/0x30 [ 359.734940][ T5952] [ 359.739923][ T5952] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.744089][ T5952] Bluetooth: hci1: failed to register connection device [ 359.902455][T11480] can0 (unregistered): slcan off ptm0. [ 359.908666][T11480] mkiss: ax0: crc mode is auto. [ 360.695290][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 360.697979][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 360.954553][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 360.956768][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 361.045125][T11512] ceph: No mds server is up or the cluster is laggy [ 361.915585][T11535] 9pnet_fd: Insufficient options for proto=fd [ 362.867381][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 364.274214][T11577] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1327'. [ 364.938201][T11614] 9pnet_fd: Insufficient options for proto=fd [ 364.970362][T11612] lo speed is unknown, defaulting to 1000 [ 365.444282][T11611] hub 6-0:1.0: USB hub found [ 365.445981][T11611] hub 6-0:1.0: 1 port detected [ 365.822100][T11659] lo speed is unknown, defaulting to 1000 [ 366.444374][T11675] vivid-000: ================= START STATUS ================= [ 366.446589][T11675] vivid-000: Test Pattern: 75% Colorbar [ 366.448191][T11675] vivid-000: Fill Percentage of Frame: 100 [ 366.449929][T11675] vivid-000: Horizontal Movement: No Movement [ 366.451700][T11675] vivid-000: Vertical Movement: No Movement [ 366.454240][T11675] vivid-000: OSD Text Mode: All [ 366.455699][T11675] vivid-000: Show Border: false [ 366.457537][T11675] vivid-000: Show Square: false [ 366.461057][T11675] vivid-000: Sensor Flipped Horizontally: false [ 366.463675][T11675] vivid-000: Sensor Flipped Vertically: false [ 366.465552][T11675] vivid-000: Insert SAV Code in Image: false [ 366.467318][T11675] vivid-000: Insert EAV Code in Image: false [ 366.469060][T11675] vivid-000: Insert Video Guard Band: false [ 366.470765][T11675] vivid-000: Reduced Framerate: false [ 366.472841][T11675] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 366.474937][T11675] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 366.477318][T11675] vivid-000: Enable Capture Cropping: true [ 366.479011][T11675] vivid-000: Enable Capture Composing: true [ 366.480898][T11675] vivid-000: Enable Capture Scaler: true [ 366.483130][T11675] vivid-000: Timestamp Source: End of Frame [ 366.484881][T11675] vivid-000: Colorspace: sRGB [ 366.486274][T11675] vivid-000: Transfer Function: Default [ 366.487956][T11675] vivid-000: Y'CbCr Encoding: Default [ 366.489528][T11675] vivid-000: HSV Encoding: Hue 0-179 [ 366.491062][T11675] vivid-000: Quantization: Default [ 366.493037][T11675] vivid-000: Apply Alpha To Red Only: false [ 366.494786][T11675] vivid-000: Standard Aspect Ratio: 4x3 [ 366.496469][T11675] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 366.499500][T11675] vivid-000: DV Timings: 640x480p59 inactive [ 366.501265][T11675] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 366.503660][T11675] vivid-000: Maximum EDID Blocks: 2 [ 366.505194][T11675] vivid-000: Limited RGB Range (16-235): false [ 366.506976][T11675] vivid-000: Rx RGB Quantization Range: Automatic [ 366.508841][T11675] vivid-000: Power Present: 0x00000001 [ 366.516186][T11676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.521520][T11675] tpg source WxH: 640x360 (Y'CbCr) [ 366.524022][T11675] tpg field: 1 [ 366.525516][T11675] tpg crop: 640x360@0x0 [ 366.527233][T11675] tpg compose: 640x360@0x0 [ 366.529087][T11675] tpg colorspace: 8 [ 366.530672][T11675] tpg transfer function: 0/0 [ 366.545829][T11675] tpg Y'CbCr encoding: 0/0 [ 366.547730][T11675] tpg quantization: 0/0 [ 366.549470][T11675] tpg RGB range: 0/2 [ 366.551040][T11675] vivid-000: ================== END STATUS ================== [ 366.566369][T11676] lo speed is unknown, defaulting to 1000 [ 366.918579][T11683] 9pnet_fd: Insufficient options for proto=fd [ 367.416273][T11687] hub 6-0:1.0: USB hub found [ 367.421900][T11687] hub 6-0:1.0: 1 port detected [ 368.000049][T11701] lo speed is unknown, defaulting to 1000 [ 368.294087][T11707] kvm: kvm [11706]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 368.710297][T11719] lo speed is unknown, defaulting to 1000 [ 368.849674][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 368.856618][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.858778][T11722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.869581][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.874146][T11722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.984235][T11718] block nbd2: shutting down sockets [ 368.990516][T11718] block nbd2: server does not support multiple connections per device. [ 368.994462][T11718] block nbd2: NBD_DISCONNECT [ 368.995939][T11718] block nbd2: Send disconnect failed -32 [ 368.997777][T11718] block nbd2: Send disconnect failed -32 [ 369.238628][T11729] 9pnet_fd: Insufficient options for proto=fd [ 369.897464][T11738] hub 6-0:1.0: USB hub found [ 369.899215][T11738] hub 6-0:1.0: 1 port detected [ 370.125554][T11745] overlayfs: missing 'lowerdir' [ 370.831371][T11757] kvm: kvm [11756]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 371.823078][T11770] 9pnet_fd: Insufficient options for proto=fd [ 371.907448][T11776] lo speed is unknown, defaulting to 1000 [ 372.323147][T11769] hub 6-0:1.0: USB hub found [ 372.325420][T11769] hub 6-0:1.0: 1 port detected [ 372.397473][T11786] random: crng reseeded on system resumption [ 372.453147][T11786] lo speed is unknown, defaulting to 1000 [ 373.371411][T11792] hub 6-0:1.0: USB hub found [ 373.493150][T11792] hub 6-0:1.0: 1 port detected [ 374.187297][T11810] hub 6-0:1.0: USB hub found [ 374.189264][T11810] hub 6-0:1.0: 1 port detected [ 374.297763][T11818] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.873004][T11818] can0: slcan on ptm0. [ 374.992851][T11818] can0 (unregistered): slcan off ptm0. [ 375.014322][T11818] mkiss: ax0: crc mode is auto. [ 375.559510][T11847] 9pnet_fd: Insufficient options for proto=fd [ 376.061426][T11851] veth0_vlan: entered allmulticast mode [ 376.085137][T11851] veth0_vlan: left promiscuous mode [ 376.086976][T11851] veth0_vlan: entered promiscuous mode [ 377.023846][T11868] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 377.973675][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.975564][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.250166][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 378.861663][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.616748][T11907] infiniband sz1: set active [ 379.631739][ T5976] lo speed is unknown, defaulting to 1000 [ 380.474350][T11918] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.614017][T11918] can0: slcan on ptm0. [ 380.626593][T11490] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 380.683195][T11918] can0 (unregistered): slcan off ptm0. [ 380.702454][T11918] mkiss: ax0: crc mode is auto. [ 381.453353][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 381.747850][T11964] cgroup: fork rejected by pids controller in /syz4 [ 382.751676][T12373] 9pnet_fd: Insufficient options for proto=fd [ 383.347029][T12387] 9pnet_fd: Insufficient options for proto=fd [ 383.389456][T12383] lo speed is unknown, defaulting to 1000 [ 386.042127][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 386.212114][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 386.214532][T12444] overlay: Unknown parameter '/' [ 386.215302][ T30] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 386.218675][ T30] usb 7-1: config 0 has no interface number 0 [ 386.220585][ T30] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 386.223940][ T30] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 386.227723][ T30] usb 7-1: config 0 interface 48 has no altsetting 0 [ 386.231206][ T30] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 386.234324][ T30] usb 7-1: config 0 has no interface number 0 [ 386.236273][ T30] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 386.239151][ T30] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 386.242988][ T30] usb 7-1: config 0 interface 48 has no altsetting 0 [ 386.247934][ T30] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 386.250298][ T30] usb 7-1: config 0 has no interface number 0 [ 386.252476][ T30] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 386.257422][ T30] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 386.261186][ T30] usb 7-1: config 0 interface 48 has no altsetting 0 [ 386.266068][ T30] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 386.268614][ T30] usb 7-1: config 0 has no interface number 0 [ 386.270297][ T30] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 386.273517][ T30] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 386.278340][ T30] usb 7-1: config 0 interface 48 has no altsetting 0 [ 386.280346][ T30] usb 7-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 386.287199][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.294470][ T30] usb 7-1: config 0 descriptor?? [ 386.547747][T12449] netdevsim netdevsim1: Direct firmware load for . [ 386.547747][T12449] failed with error -2 [ 386.565930][T12449] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 386.565930][T12449] [ 386.625381][ T30] usb 7-1: string descriptor 0 read error: -71 [ 386.634042][ T30] usb 7-1: USB disconnect, device number 8 [ 387.770010][T12474] vivid-000: disconnect [ 387.970747][T12479] 9pnet_fd: Insufficient options for proto=fd [ 388.626999][T12468] vivid-000: reconnect [ 388.834196][T12489] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 388.870261][T12492] 9pnet_fd: Insufficient options for proto=fd [ 389.070965][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 390.251703][T12533] xt_TCPMSS: Only works on TCP SYN packets [ 390.402511][T12537] netdevsim netdevsim4: Direct firmware load for . [ 390.402511][T12537] failed with error -2 [ 390.405800][T12537] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 390.405800][T12537] [ 391.541610][T12560] ip6gretap0: entered promiscuous mode [ 392.003440][T12571] netlink: 'syz.4.1444': attribute type 4 has an invalid length. [ 392.014654][T12571] infiniband sz1: set down [ 392.016540][ T35] lo speed is unknown, defaulting to 1000 [ 392.026750][ T35] lo speed is unknown, defaulting to 1000 [ 392.731145][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 392.734066][T12592] netlink: 'syz.4.1450': attribute type 30 has an invalid length. [ 393.329565][T12597] netlink: 'syz.0.1451': attribute type 9 has an invalid length. [ 393.338846][T12599] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 393.392828][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 393.471937][T12600] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 393.477131][T12600] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 394.300701][T12614] 9pnet_fd: Insufficient options for proto=fd [ 394.836435][T12599] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 394.840138][T12599] bond1 (unregistering): Released all slaves [ 396.054696][T12640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3738224872 (478492783616 ns) > initial count (91121186304 ns). Using initial count to start timer. [ 397.599718][T12664] lo speed is unknown, defaulting to 1000 [ 398.238083][T12677] netlink: 'syz.0.1470': attribute type 4 has an invalid length. [ 398.255142][T12678] 9pnet_fd: Insufficient options for proto=fd [ 401.640575][T12743] syz.0.1487[12743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.640627][T12743] syz.0.1487[12743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.644357][T12743] syz.0.1487[12743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.650349][T12743] random: crng reseeded on system resumption [ 402.466133][T12761] 9pnet_fd: Insufficient options for proto=fd [ 403.202826][T12769] xt_TCPMSS: Only works on TCP SYN packets [ 405.730315][T12817] 9pnet_fd: Insufficient options for proto=fd [ 407.467986][T12853] Bluetooth: MGMT ver 1.23 [ 408.313229][T12862] lo speed is unknown, defaulting to 1000 [ 408.368445][T12866] 9pnet_fd: Insufficient options for proto=fd [ 408.447286][T12872] 9pnet_fd: Insufficient options for proto=fd [ 409.023136][T12889] netlink: 'syz.2.1522': attribute type 39 has an invalid length. [ 409.539189][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 409.539206][ T39] audit: type=1326 audit(1737364733.653:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.564965][ T39] audit: type=1326 audit(1737364733.663:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.573348][ T39] audit: type=1326 audit(1737364733.663:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.581567][ T39] audit: type=1326 audit(1737364733.663:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.590000][ T39] audit: type=1326 audit(1737364733.663:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.598294][ T39] audit: type=1326 audit(1737364733.663:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.606977][ T39] audit: type=1326 audit(1737364733.673:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.615261][ T39] audit: type=1326 audit(1737364733.673:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.623701][ T39] audit: type=1326 audit(1737364733.673:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.631838][ T39] audit: type=1326 audit(1737364733.673:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.0.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 409.802116][ T834] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 409.970407][ T834] usb 5-1: config 6 has an invalid interface number: 199 but max is 0 [ 409.972963][ T834] usb 5-1: config 6 has no interface number 0 [ 409.974839][ T834] usb 5-1: config 6 interface 199 altsetting 64 endpoint 0xA is Bulk; changing to Interrupt [ 409.977836][ T834] usb 5-1: config 6 interface 199 has no altsetting 0 [ 409.987186][ T834] usb 5-1: string descriptor 0 read error: -22 [ 409.989089][ T834] usb 5-1: New USB device found, idVendor=045e, idProduct=043b, bcdDevice=d4.5a [ 409.992202][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.002436][T12898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.193306][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 410.221193][ T5976] usb 5-1: USB disconnect, device number 9 [ 411.106374][T12924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.276343][T12924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.336498][T12931] netlink: zone id is out of range [ 411.338238][T12931] netlink: zone id is out of range [ 411.340268][T12931] netlink: zone id is out of range [ 411.370168][T12924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.507402][T12924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.607584][T12924] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.621731][T12924] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.640266][T12924] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.659846][T12924] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.696130][T12935] virtio-fs: tag not found [ 411.942157][ T30] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 412.102093][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 412.107216][ T30] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 412.110134][ T30] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 412.113687][ T30] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 412.116680][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.119994][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.123937][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.127920][ T30] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 412.130885][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.211781][ T30] usb 9-1: config 0 descriptor?? [ 412.511374][ T30] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 412.519464][ T30] usb 9-1: USB disconnect, device number 6 [ 412.528280][ T30] usblp0: removed [ 413.182253][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 413.332074][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 413.338505][ T30] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 413.340900][ T30] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 413.343473][ T30] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 413.346164][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.349169][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.352160][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 413.356764][ T30] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 413.359355][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.363786][ T30] usb 9-1: config 0 descriptor?? [ 413.571625][ T30] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 414.152796][ T63] usb 9-1: USB disconnect, device number 7 [ 414.270287][ T63] usblp0: removed [ 416.468867][T13022] virtio-fs: tag not found [ 416.792239][ T30] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 416.952179][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 416.966385][ T30] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 416.971200][ T30] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 416.978841][ T30] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 416.990566][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 417.003221][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 417.011928][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 417.024557][ T30] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 417.039278][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.087103][ T30] usb 7-1: config 0 descriptor?? [ 417.493214][ T30] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 417.522775][ T30] usb 7-1: USB disconnect, device number 9 [ 417.542397][ T30] usblp0: removed [ 418.020981][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 418.245854][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 418.248809][ T30] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 418.251930][ T30] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 418.255392][ T30] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 418.258757][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.263825][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.266844][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 418.270866][ T30] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 418.275592][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.282108][ T30] usb 7-1: config 0 descriptor?? [ 418.548649][ T30] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 419.105821][ T63] usb 7-1: USB disconnect, device number 10 [ 419.109051][ T63] usblp0: removed [ 423.492718][T13115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.597876][T13115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.752983][T13115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.804417][T13115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.875075][T13115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.898893][T13115] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.912076][T13115] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.928493][T13115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.948777][T13131] lo speed is unknown, defaulting to 1000 [ 424.728499][T13144] xt_TCPMSS: Only works on TCP SYN packets [ 425.477180][T13159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 425.479864][T13159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 425.487282][T13159] vhci_hcd vhci_hcd.0: Device attached [ 425.673151][ T63] vhci_hcd: vhci_device speed not set [ 425.732889][ T63] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 426.320989][T13160] vhci_hcd: connection reset by peer [ 426.326185][ T1135] vhci_hcd: stop threads [ 426.329406][ T1135] vhci_hcd: release socket [ 426.331416][ T1135] vhci_hcd: disconnect device [ 427.089492][T13191] netlink: zone id is out of range [ 427.091102][T13191] netlink: zone id is out of range [ 427.092817][T13191] netlink: zone id is out of range [ 427.666013][T13196] 9pnet_fd: Insufficient options for proto=fd [ 428.392433][T13212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 428.794038][T13219] vxcan1: tx address claim with dlc 1 [ 429.972120][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.226287][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 430.230099][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 430.585154][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 430.864377][ T63] vhci_hcd: vhci_device speed not set [ 431.324645][T13255] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 431.327558][T13255] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1622'. [ 436.321304][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 436.452940][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 436.555222][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 436.559947][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'. [ 438.519922][T13375] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 438.521684][T13375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 438.523913][T13375] vhci_hcd vhci_hcd.0: Device attached [ 438.902245][ T9] vhci_hcd: vhci_device speed not set [ 438.962154][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 439.368069][T13376] vhci_hcd: connection reset by peer [ 439.371358][ T1176] vhci_hcd: stop threads [ 439.372746][ T1176] vhci_hcd: release socket [ 439.374051][ T1176] vhci_hcd: disconnect device [ 439.413384][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.415288][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.358122][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 441.417228][T13422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 441.419853][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.426913][T13422] vhci_hcd vhci_hcd.0: Device attached [ 441.602328][ T30] vhci_hcd: vhci_device speed not set [ 441.662241][ T30] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 442.415136][T13423] vhci_hcd: connection reset by peer [ 442.424663][ T45] vhci_hcd: stop threads [ 442.426504][ T45] vhci_hcd: release socket [ 442.428395][ T45] vhci_hcd: disconnect device [ 442.665636][T13436] 9pnet_fd: Insufficient options for proto=fd [ 443.225893][T13442] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 444.042226][ T9] vhci_hcd: vhci_device speed not set [ 444.236183][T13463] vxcan1: tx address claim with dlc 1 [ 444.716422][T13468] can0: slcan on pts0. [ 444.772370][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.782860][T13468] can0 (unregistered): slcan off pts0. [ 444.932446][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 444.940881][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 446.113221][T13512] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.557121][T13521] 9pnet_fd: Insufficient options for proto=fd [ 446.762148][ T30] vhci_hcd: vhci_device speed not set [ 446.827305][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 447.092200][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.668712][T13540] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.401621][T13540] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.520647][T13540] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.616394][T13540] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.676933][T13540] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.684111][T13540] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.691940][T13540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.699671][T13540] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.692209][T13586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.785342][T13586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.812731][ T63] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 450.946008][T13586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.972220][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 450.975348][ T63] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 450.979809][ T63] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 450.985706][ T63] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 450.989190][ T63] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 450.993701][ T63] usb 5-1: config 0 interface 0 has no altsetting 0 [ 450.998109][ T63] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 451.001674][ T63] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 451.004671][ T63] usb 5-1: Product: syz [ 451.012088][ T63] usb 5-1: Manufacturer: syz [ 451.014026][ T63] usb 5-1: SerialNumber: syz [ 451.017832][T13586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.031377][ T63] usb 5-1: config 0 descriptor?? [ 451.035213][ T63] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 451.039560][ T63] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 451.135755][T13586] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.147331][T13586] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.155335][T13586] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.160713][T13586] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.356624][ T35] usb 5-1: USB disconnect, device number 10 [ 451.358063][ C2] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 451.365000][T13583] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 451.367566][ T35] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 451.820539][T13583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.824257][T13583] bond0 (unregistering): Released all slaves [ 454.053537][T13636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1721'. [ 454.056189][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 454.069990][T13636] bridge0: port 3(team0) entered disabled state [ 454.072406][T13636] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.074564][T13636] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.216686][T13642] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.275503][T13642] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.329518][T13642] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.407796][T13642] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.497308][T13642] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.508270][T13642] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.516072][T13642] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.523132][T13642] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.616762][T13647] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 454.653171][T13647] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 454.665715][ T45] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.666099][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.682072][T13647] vlan2: entered promiscuous mode [ 454.685477][T13647] bond0: entered promiscuous mode [ 454.686932][T13647] ip6gretap1: entered promiscuous mode [ 454.782981][ T45] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.859948][T13647] bond0: left promiscuous mode [ 454.862161][T13647] ip6gretap1: left promiscuous mode [ 455.310121][ T35] hid (null): unknown global tag 0xe [ 455.320589][ T35] hid (null): unknown global tag 0xe [ 455.326055][ T35] hid (null): unknown global tag 0xc [ 455.328628][ T35] hid (null): unknown global tag 0xd [ 455.350244][ T35] hid-generic 0000:0004:00A9.0004: unknown main item tag 0x0 [ 455.355774][ T35] hid-generic 0000:0004:00A9.0004: unknown global tag 0xe [ 455.358611][ T35] hid-generic 0000:0004:00A9.0004: item 0 2 1 14 parsing failed [ 455.366223][ T35] hid-generic 0000:0004:00A9.0004: probe with driver hid-generic failed with error -22 [ 456.766715][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 456.769341][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 456.778579][T13678] bridge0: port 1(team0) entered disabled state [ 457.562981][T13685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.620338][T13685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.753486][T13685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.820242][T13685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.961106][T13691] macvtap1: entered promiscuous mode [ 457.963751][T13691] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 457.966031][T13691] macvtap1: entered allmulticast mode [ 457.967897][T13691] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 457.971825][T13691] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 457.975150][T13691] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 458.009364][T13695] netlink: zone id is out of range [ 458.012146][T13695] netlink: zone id is out of range [ 458.014221][T13695] netlink: zone id is out of range [ 458.016237][T13695] netlink: zone id is out of range [ 458.017906][T13695] netlink: zone id is out of range [ 458.019485][T13695] netlink: zone id is out of range [ 458.021412][T13695] netlink: zone id is out of range [ 458.024042][T13695] netlink: zone id is out of range [ 458.241245][T13685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.248020][T13685] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.253999][T13685] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.259274][T13685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.422141][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 462.592064][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 462.594872][ T35] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 462.597293][ T35] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 462.600675][ T35] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 462.605897][ T35] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 462.609653][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 462.614576][ T35] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 462.617136][ T35] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 462.620028][ T35] usb 7-1: Product: syz [ 462.621602][ T35] usb 7-1: Manufacturer: syz [ 462.626577][ T35] usb 7-1: SerialNumber: syz [ 462.629753][ T35] usb 7-1: config 0 descriptor?? [ 462.632761][ T35] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.638356][ T35] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 463.015133][T13763] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 463.015278][ T5981] usb 7-1: USB disconnect, device number 11 [ 463.017347][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 463.033062][ T5981] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 463.395978][T13763] bond0 (unregistering): Released all slaves [ 463.969688][T13791] lo speed is unknown, defaulting to 1000 [ 469.041777][T13872] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.123608][T13872] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.199787][T13872] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.377184][T13872] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.522114][T13872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.532573][T13872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.543614][T13872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.546232][T13883] syz.1.1786: attempt to access beyond end of device [ 469.546232][T13883] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 469.548924][T13872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.551573][T13883] syz.1.1786: attempt to access beyond end of device [ 469.551573][T13883] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 469.563417][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.566238][T13883] syz.1.1786: attempt to access beyond end of device [ 469.566238][T13883] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 469.582135][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.586381][T13883] syz.1.1786: attempt to access beyond end of device [ 469.586381][T13883] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 469.593394][T13883] syz.1.1786: attempt to access beyond end of device [ 469.593394][T13883] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 469.599311][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.603886][T13883] syz.1.1786: attempt to access beyond end of device [ 469.603886][T13883] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 469.612363][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.623648][T13883] syz.1.1786: attempt to access beyond end of device [ 469.623648][T13883] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 469.627342][T13883] syz.1.1786: attempt to access beyond end of device [ 469.627342][T13883] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 469.631010][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.637219][T13883] syz.1.1786: attempt to access beyond end of device [ 469.637219][T13883] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 469.642763][T13883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.646011][T13883] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 469.702223][T13875] block nbd1: shutting down sockets [ 469.806073][T13897] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 469.808428][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 469.841523][T13897] lo speed is unknown, defaulting to 1000 [ 470.497294][T13907] 9p: Unknown uid 00000000004294967295 [ 470.551537][T13909] overlayfs: failed to resolve './bus': -2 [ 470.558336][T13907] sctp: [Deprecated]: syz.1.1795 (pid 13907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.558336][T13907] Use struct sctp_sack_info instead [ 470.709731][T13916] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 470.735473][T13916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.778645][T13916] bond1: (slave gretap1): making interface the new active one [ 470.781411][T13916] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 471.715777][T13937] netlink: 'syz.0.1804': attribute type 1 has an invalid length. [ 471.718056][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 471.747635][T13938] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 471.756900][T13938] macvtap1: entered promiscuous mode [ 471.759052][T13938] macvtap1: entered allmulticast mode [ 471.760694][T13938] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 471.768122][T13938] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 471.773183][T13938] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 471.794512][T13937] lo speed is unknown, defaulting to 1000 [ 474.434369][T13985] lo speed is unknown, defaulting to 1000 [ 474.977413][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 477.197120][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1828'. [ 477.542115][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 478.042327][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 478.046134][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 478.051470][ T35] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 478.055357][ T35] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 478.058442][ T35] usb 5-1: Product: syz [ 478.060079][ T35] usb 5-1: Manufacturer: syz [ 478.061495][ T35] usb 5-1: SerialNumber: syz [ 478.066180][ T35] usb 5-1: config 0 descriptor?? [ 478.070548][T14033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.088070][T14047] tipc: Started in network mode [ 478.090048][T14047] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 478.093504][T14047] tipc: Enabled bearer , priority 0 [ 478.120704][T14048] : entered promiscuous mode [ 478.407684][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.414594][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.791550][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.806358][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.822062][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.831548][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.990760][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1837'. [ 478.994390][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1837'. [ 479.047814][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.050836][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.056663][ T35] usb 5-1: USB disconnect, device number 11 [ 479.222078][ T834] tipc: Node number set to 11578026 [ 479.612054][ T834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.762046][ T834] usb 5-1: Using ep0 maxpacket: 32 [ 479.765336][ T834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 479.770020][ T834] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 479.773384][ T834] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 479.777996][ T834] usb 5-1: Product: syz [ 479.780359][ T834] usb 5-1: Manufacturer: syz [ 479.783944][ T834] usb 5-1: SerialNumber: syz [ 479.788564][ T834] usb 5-1: config 0 descriptor?? [ 479.792887][T14033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.009999][ T834] usb 5-1: USB disconnect, device number 12 [ 481.171974][T14107] netlink: 'syz.4.1847': attribute type 10 has an invalid length. [ 481.177237][T14107] netlink: 'syz.4.1847': attribute type 10 has an invalid length. [ 481.912356][T14120] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 481.916635][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 481.919955][T14120] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 482.049793][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 485.233149][T14205] lo speed is unknown, defaulting to 1000 [ 486.440788][T14241] hub 9-0:1.0: USB hub found [ 486.442731][T14241] hub 9-0:1.0: 1 port detected [ 487.422241][T11490] Bluetooth: hci1: command 0x0405 tx timeout [ 487.974738][T14270] lo speed is unknown, defaulting to 1000 [ 490.839278][T14301] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 490.861030][T14301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.884715][T14301] bond1: (slave gretap1): making interface the new active one [ 490.887175][T14301] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 491.487072][T14316] netlink: 'syz.2.1888': attribute type 2 has an invalid length. [ 491.489422][T14316] netlink: 'syz.2.1888': attribute type 8 has an invalid length. [ 491.491617][T14316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1888'. [ 491.863095][T14322] 9pnet_fd: Insufficient options for proto=fd [ 491.866765][T14322] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 491.995053][T14322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.018393][T14323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.020546][T14323] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 492.025898][T14323] bond1: (slave vcan0): Error -95 calling set_mac_address [ 492.424014][T14331] tipc: Cannot configure node identity twice [ 493.294567][T14350] ptrace attach of "/syz-executor exec"[5951] was attempted by "/syz-executor exec"[14350] [ 494.806753][T14374] netlink: 'syz.1.1901': attribute type 2 has an invalid length. [ 494.812275][T14374] netlink: 'syz.1.1901': attribute type 8 has an invalid length. [ 494.822520][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1901'. [ 495.808799][T14388] Unknown status report in ack skb [ 497.442278][ T6628] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 497.592147][ T6628] usb 5-1: Using ep0 maxpacket: 16 [ 497.598406][ T6628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 497.601676][ T6628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 497.605584][ T6628] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 497.608356][ T6628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.612148][ T6628] usb 5-1: config 0 descriptor?? [ 497.614455][T14405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.262634][ T6628] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0005/input/input13 [ 498.329949][ T6628] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 500.092328][ T833] usb 5-1: USB disconnect, device number 13 [ 500.790982][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 500.806802][T14469] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.818795][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.853871][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.857887][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.962620][T14471] bridge_slave_0 (unregistering): left allmulticast mode [ 500.964811][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.485584][T14520] ptrace attach of "/syz-executor exec"[5938] was attempted by "/syz-executor exec"[14520] [ 505.449704][T14537] ntfs3(nullb0): Primary boot signature is not NTFS. [ 505.453037][T14537] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 506.331917][T14554] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 506.335774][T14554] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 507.723684][T14569] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 507.729600][T14569] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 507.733461][T14569] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 512.084408][T14674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 512.086683][T14674] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 512.089311][T14674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 514.844510][T14714] loop7: detected capacity change from 0 to 16384 [ 515.053153][T14715] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.059639][T14715] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 515.062447][T14715] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 515.367179][T14725] lo speed is unknown, defaulting to 1000 [ 516.442785][T14740] lo speed is unknown, defaulting to 1000 [ 517.653141][T14766] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1987'. [ 517.932193][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 518.082926][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 518.087983][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.090724][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.094788][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.098175][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.100819][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.103476][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.106080][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.108622][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.111169][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.113757][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.116330][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.118850][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.121418][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.124014][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.126591][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.129138][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.132654][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 518.135207][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 518.139660][ T9] usb 7-1: Product: syz [ 518.141805][ T9] usb 7-1: Manufacturer: syz [ 518.143633][ T9] usb 7-1: SerialNumber: syz [ 518.152448][ T9] usb 7-1: config 0 descriptor?? [ 518.156580][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 518.421222][ T5981] usb 7-1: USB disconnect, device number 12 [ 518.451355][ T5981] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 518.719425][T14782] lo speed is unknown, defaulting to 1000 [ 519.662199][T11490] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.662237][ T5947] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 522.013059][T14827] input: syz0 as /devices/virtual/input/input14 [ 522.028483][T14827] syz_tun: entered allmulticast mode [ 522.037630][T14827] syz_tun: left allmulticast mode [ 522.352150][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 522.506861][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 522.515344][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 522.525955][ T30] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.536691][ T30] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 522.539478][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.541944][ T30] usb 9-1: Product: syz [ 522.543562][ T30] usb 9-1: Manufacturer: syz [ 522.545193][ T30] usb 9-1: SerialNumber: syz [ 522.756033][ T30] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 522.996070][ T30] usb 9-1: USB disconnect, device number 8 [ 522.999846][ T30] usblp0: removed [ 526.724525][T14874] loop7: detected capacity change from 0 to 16384 [ 527.594181][ T5947] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 529.048735][T14903] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 529.604139][T14913] trusted_key: encrypted_key: insufficient parameters specified [ 529.738665][T14916] 9pnet_fd: Insufficient options for proto=fd [ 531.022959][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2038'. [ 531.204511][T14949] loop7: detected capacity change from 0 to 16384 [ 531.664394][ T5947] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 531.667148][ T5947] Bluetooth: hci2: Injecting HCI hardware error event [ 531.672814][T11490] Bluetooth: hci2: hardware error 0x00 [ 531.953435][T14954] [ 531.954172][T14954] ====================================================== [ 531.956189][T14954] WARNING: possible circular locking dependency detected [ 531.958204][T14954] 6.13.0-syzkaller #0 Not tainted [ 531.959848][T14954] ------------------------------------------------------ [ 531.962934][T14954] syz.0.2035/14954 is trying to acquire lock: [ 531.964685][T14954] ffff88804c5e76e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.967259][T14954] [ 531.967259][T14954] but task is already holding lock: [ 531.969407][T14954] ffff88804573c3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 531.972069][T14954] [ 531.972069][T14954] which lock already depends on the new lock. [ 531.972069][T14954] [ 531.975005][T14954] [ 531.975005][T14954] the existing dependency chain (in reverse order) is: [ 531.977584][T14954] [ 531.977584][T14954] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 531.979808][T14954] __mutex_lock+0x19b/0xa60 [ 531.981256][T14954] blk_register_queue+0x13c/0x4f0 [ 531.982843][T14954] add_disk_fwnode+0x785/0x1300 [ 531.984396][T14954] brd_alloc.isra.0+0x50a/0x7c0 [ 531.986042][T14954] brd_init+0x12b/0x1d0 [ 531.987551][T14954] do_one_initcall+0x128/0x630 [ 531.989247][T14954] kernel_init_freeable+0x58f/0x8b0 [ 531.990899][T14954] kernel_init+0x1c/0x2b0 [ 531.992441][T14954] ret_from_fork+0x45/0x80 [ 531.993867][T14954] ret_from_fork_asm+0x1a/0x30 [ 531.995407][T14954] [ 531.995407][T14954] -> #3 (&q->sysfs_lock){+.+.}-{4:4}: [ 531.997612][T14954] __mutex_lock+0x19b/0xa60 [ 531.999096][T14954] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 532.000973][T14954] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 532.002716][T14954] nbd_start_device+0x15b/0xd70 [ 532.004254][T14954] nbd_ioctl+0x21a/0xfd0 [ 532.005633][T14954] compat_blkdev_ioctl+0x2f7/0x750 [ 532.007281][T14954] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 532.008934][T14954] __do_fast_syscall_32+0x73/0x120 [ 532.010540][T14954] do_fast_syscall_32+0x32/0x80 [ 532.012081][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.014019][T14954] [ 532.014019][T14954] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 532.016482][T14954] blk_mq_submit_bio+0x1fb6/0x24c0 [ 532.018151][T14954] __submit_bio+0x384/0x540 [ 532.019616][T14954] submit_bio_noacct_nocheck+0x698/0xd70 [ 532.021382][T14954] submit_bio_noacct+0x93a/0x1e20 [ 532.022975][T14954] block_read_full_folio+0x812/0xa50 [ 532.024659][T14954] filemap_read_folio+0xc6/0x2a0 [ 532.026222][T14954] filemap_get_pages+0x155f/0x1be0 [ 532.027859][T14954] filemap_read+0x3ca/0xd70 [ 532.029305][T14954] blkdev_read_iter+0x187/0x480 [ 532.030847][T14954] vfs_read+0x87f/0xbe0 [ 532.032209][T14954] ksys_read+0x12b/0x250 [ 532.033580][T14954] do_syscall_64+0xcd/0x250 [ 532.035030][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.036879][T14954] [ 532.036879][T14954] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 532.039512][T14954] down_read+0x9a/0x330 [ 532.040871][T14954] page_cache_ra_unbounded+0x173/0x750 [ 532.042593][T14954] page_cache_ra_order+0x8f2/0xc80 [ 532.044233][T14954] filemap_fault+0x14a5/0x2820 [ 532.045744][T14954] __do_fault+0x10a/0x490 [ 532.047191][T14954] do_pte_missing+0x99f/0x3e00 [ 532.048714][T14954] __handle_mm_fault+0x103c/0x2a40 [ 532.050374][T14954] handle_mm_fault+0x3fa/0xaa0 [ 532.051884][T14954] __get_user_pages+0x8d9/0x3b50 [ 532.053444][T14954] __gup_longterm_locked+0x5ff/0x1870 [ 532.055118][T14954] pin_user_pages+0x13f/0x160 [ 532.056611][T14954] xdp_umem_create+0x73c/0x1270 [ 532.058160][T14954] xsk_setsockopt+0x7e7/0xac0 [ 532.059679][T14954] do_sock_setsockopt+0x222/0x480 [ 532.061256][T14954] __sys_setsockopt+0x1a0/0x230 [ 532.062792][T14954] __ia32_sys_setsockopt+0xbc/0x160 [ 532.064422][T14954] __do_fast_syscall_32+0x73/0x120 [ 532.066030][T14954] do_fast_syscall_32+0x32/0x80 [ 532.067610][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.069573][T14954] [ 532.069573][T14954] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 532.071729][T14954] __lock_acquire+0x249e/0x3c40 [ 532.073257][T14954] lock_acquire.part.0+0x11b/0x380 [ 532.074895][T14954] __might_fault+0x11b/0x190 [ 532.076386][T14954] _copy_from_user+0x29/0xd0 [ 532.077901][T14954] compat_blk_trace_setup+0xc9/0x200 [ 532.079597][T14954] blk_trace_ioctl+0x24a/0x290 [ 532.081123][T14954] compat_blkdev_ioctl+0x13c/0x750 [ 532.082751][T14954] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 532.084558][T14954] __do_fast_syscall_32+0x73/0x120 [ 532.086179][T14954] do_fast_syscall_32+0x32/0x80 [ 532.087750][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.089687][T14954] [ 532.089687][T14954] other info that might help us debug this: [ 532.089687][T14954] [ 532.092548][T14954] Chain exists of: [ 532.092548][T14954] &mm->mmap_lock --> &q->sysfs_lock --> &q->debugfs_mutex [ 532.092548][T14954] [ 532.096210][T14954] Possible unsafe locking scenario: [ 532.096210][T14954] [ 532.098427][T14954] CPU0 CPU1 [ 532.099952][T14954] ---- ---- [ 532.101460][T14954] lock(&q->debugfs_mutex); [ 532.102788][T14954] lock(&q->sysfs_lock); [ 532.104717][T14954] lock(&q->debugfs_mutex); [ 532.106713][T14954] rlock(&mm->mmap_lock); [ 532.108017][T14954] [ 532.108017][T14954] *** DEADLOCK *** [ 532.108017][T14954] [ 532.110276][T14954] 1 lock held by syz.0.2035/14954: [ 532.111740][T14954] #0: ffff88804573c3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 532.114559][T14954] [ 532.114559][T14954] stack backtrace: [ 532.116259][T14954] CPU: 3 UID: 0 PID: 14954 Comm: syz.0.2035 Not tainted 6.13.0-syzkaller #0 [ 532.118766][T14954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 532.121821][T14954] Call Trace: [ 532.122784][T14954] [ 532.123646][T14954] dump_stack_lvl+0x116/0x1f0 [ 532.125028][T14954] print_circular_bug+0x41c/0x610 [ 532.126475][T14954] check_noncircular+0x31a/0x400 [ 532.127922][T14954] ? __pfx_check_noncircular+0x10/0x10 [ 532.129470][T14954] ? lockdep_lock+0xc6/0x200 [ 532.130788][T14954] ? __pfx_lockdep_lock+0x10/0x10 [ 532.132237][T14954] __lock_acquire+0x249e/0x3c40 [ 532.133791][T14954] ? __pfx___lock_acquire+0x10/0x10 [ 532.135295][T14954] ? bdev_name.constprop.0+0x298/0x490 [ 532.136856][T14954] lock_acquire.part.0+0x11b/0x380 [ 532.138344][T14954] ? __might_fault+0xe3/0x190 [ 532.139703][T14954] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 532.141304][T14954] ? rcu_is_watching+0x12/0xc0 [ 532.142682][T14954] ? trace_lock_acquire+0x14e/0x1f0 [ 532.144192][T14954] ? __might_fault+0xe3/0x190 [ 532.145529][T14954] ? lock_acquire+0x2f/0xb0 [ 532.146825][T14954] ? __might_fault+0xe3/0x190 [ 532.148202][T14954] ? __might_fault+0xe3/0x190 [ 532.149541][T14954] __might_fault+0x11b/0x190 [ 532.150858][T14954] ? __might_fault+0xe3/0x190 [ 532.152215][T14954] _copy_from_user+0x29/0xd0 [ 532.153536][T14954] compat_blk_trace_setup+0xc9/0x200 [ 532.155047][T14954] ? __pfx_compat_blk_trace_setup+0x10/0x10 [ 532.156731][T14954] ? blk_trace_ioctl+0xc9/0x290 [ 532.158154][T14954] ? snprintf+0xc8/0x100 [ 532.159372][T14954] ? __pfx_snprintf+0x10/0x10 [ 532.160715][T14954] blk_trace_ioctl+0x24a/0x290 [ 532.162096][T14954] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 532.163609][T14954] ? __pfx_lock_release+0x10/0x10 [ 532.165041][T14954] ? trace_lock_acquire+0x14e/0x1f0 [ 532.166515][T14954] ? __pfx___schedule+0x10/0x10 [ 532.167932][T14954] compat_blkdev_ioctl+0x13c/0x750 [ 532.169390][T14954] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 532.170988][T14954] ? __fget_files+0x206/0x3a0 [ 532.172342][T14954] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 532.173928][T14954] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 532.175445][T14954] __do_fast_syscall_32+0x73/0x120 [ 532.176915][T14954] do_fast_syscall_32+0x32/0x80 [ 532.178345][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.180150][T14954] RIP: 0023:0xf7f16579 [ 532.181309][T14954] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 532.186713][T14954] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 532.189109][T14954] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0401273 [ 532.191363][T14954] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.193593][T14954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.195854][T14954] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 532.198089][T14954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.200330][T14954] [ 533.732155][T11490] Bluetooth: hci2: Opcode 0x0c03 failed: -110 VM DIAGNOSIS: 09:20:55 Registers: info registers vcpu 0 CPU#0 RAX=00000004000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000004 RSI=00000000000000fb RDI=0000000000000004 RBP=0000000000000002 RSP=ffffc90000007e20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff816b5f6e R12=0000000000000002 R13=0000000000000000 R14=ffff88802b63ed00 R15=ffff8880218f8401 RIP=ffffffff8147a098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000da58c4 RBX=0000000000000001 RCX=ffffffff8b1a8899 RDX=ffffed10056a6fee RSI=ffffffff8bb19a40 RDI=ffffffff81702c79 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=ffff88802b43fb10 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901d29d0 R15=0000000000000000 RIP=ffffffff8b1a9c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020030000 CR3=00000000735b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000168000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005e87ac RBX=0000000000000002 RCX=ffffffff8b1a8899 RDX=ffffed10056c6fee RSI=ffffffff8bb19a40 RDI=ffffffff81702c79 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=ffff88802b73fb10 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901d29d0 R15=0000000000000000 RIP=ffffffff8b1a9c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002d000 CR3=000000004d0bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145395 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc9000717f320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85145330 R15=0000000000000000 RIP=ffffffff851453bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020543000 CR3=000000006784e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000