last executing test programs: 8.99038212s ago: executing program 3 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x103, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x800, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x1, 0x5, 0x7fffffff, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r3}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x9, 0x0, &(0x7f0000000040)) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (rerun: 64) close(0x3) (async, rerun: 64) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x0) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000540)=0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 8.668940492s ago: executing program 3 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYBLOB="1c1a0f4aa7a28384ff63fe1517fdbbffd388156daba0307c534b616f"], 0x17) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000018000100000000000000000002200000000000080000000008000500ad1414bbc2fc56a3e6bce19163810aa0d2e75b7e199721ecbd569b23f421e02e91d7282408128c56605835fddcd0d97e3e86815019699ec0020a84b14d05c81b03099edbe0fc9837a4bd144fc36c9abe5e5c8ebe54e678cb1d126853367b"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0xfffffff9, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) (async) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async, rerun: 32) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0) (rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.549516001s ago: executing program 3 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a000000006861"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/92, 0x5c, 0x0, &(0x7f0000000740)=""/255, 0xff}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 8.21820428s ago: executing program 2 (id=708): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0x10, 0xb}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}, {0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="eb005feade8287c21b1ccbc3a5b0e1f6b7fd322b675c0b81ef12ab91dbb71657b204b3b2", @ANYRES8=r0]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x441}}, {0x95, &(0x7f0000001a00)=ANY=[@ANYBLOB="950319545cd88b20105939d5669c53756cbb625e07f688f941d1769eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5835347f35fce5dec6ecf96e1b0454fc1d4d7f9d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37a"]}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000280)="a2a11f5bf44d41530db1dd62d739ceb1", 0x10) userfaultfd(0x80001) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000008000000000000000"], &(0x7f0000009f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x55, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x90, 0x31, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x8, 0x6c}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x2, 0x9}}]}}}]}}]}}, 0x0) acct(&(0x7f0000000040)='./file0\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 5.800317069s ago: executing program 2 (id=722): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x80000, 0x0, 0xc69df4a5c16ba72b}, 0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x9aa}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x4, 0x47b, 0x7, 0x5, 0xffffff89}, &(0x7f0000000440)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r5}, 0x10) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r6, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}]}) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, 0x0) 5.362266059s ago: executing program 3 (id=723): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0xe0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x100}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@multicast2, @empty, 0xff, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffd}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0xe0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x100}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@multicast2, @empty, 0xff, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffd}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) (async) 5.343186397s ago: executing program 1 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0x1c}}, 0x40) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100), 0x22a00, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000200), 0x200200, 0x0) (async) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1407, 0x800, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000300)={0x5c, 0x6}) (async) r6 = accept4$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x10, 0x800) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r6, 0x4dd41000) (async) r7 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) (async, rerun: 64) r8 = dup2(r4, r1) (rerun: 64) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000400)={0xffffffff, {{0x2, 0x4e23, @local}}, 0x0, 0x1, [{{0x2, 0x4e20, @loopback}}]}, 0x10c) mknodat(r1, &(0x7f0000000540)='./file0\x00', 0x40, 0x1) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) (rerun: 64) pselect6(0x40, &(0x7f0000000580)={0x0, 0x8, 0x2, 0x5, 0xc, 0x5, 0x7f, 0xf0}, &(0x7f00000005c0)={0x2, 0x80000001, 0x9, 0x5, 0x8, 0x9, 0x1, 0x8}, &(0x7f0000000600)={0x6, 0xfffffffffffff001, 0x100000000, 0x2, 0x5195, 0x9, 0xffff, 0x6}, &(0x7f0000000680)={r9, r10+60000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x1, 0x598]}, 0x8}) (async, rerun: 64) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000740)=0x941, 0x4) (async, rerun: 64) r11 = socket$nl_audit(0x10, 0x3, 0x9) ppoll(&(0x7f0000000780)=[{r11, 0x84}], 0x1, &(0x7f00000007c0), &(0x7f0000000800)={[0x3]}, 0x8) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000840)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x6, 0x12bd23, 0x37361b}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0xdaa3, {{0x2, 0x4e24, @multicast1}}}, 0x84) (async) r12 = open(&(0x7f0000000980)='./file0\x00', 0x40, 0x10) io_uring_register$IORING_REGISTER_NAPI(r12, 0x1b, &(0x7f00000009c0)={0x9, 0x9}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000b80)={'nr0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x1aa, 0x0}, 0x8) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1000, '\x00', 0x0, r8, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x9, &(0x7f0000000a00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000a80)='GPL\x00', 0x7, 0x83, &(0x7f0000000ac0)=""/131, 0x0, 0x4d, '\x00', r13, @fallback=0x14, r8, 0x8, &(0x7f0000000bc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0x10, 0x5369e311, 0x8}, 0x10, r14, r3, 0x3, &(0x7f0000000d00)=[r15, r1, r3, r4, r3, r12], &(0x7f0000000d40)=[{0x3, 0x5, 0x2, 0x8}, {0x3, 0x5, 0x6, 0x7}, {0x4, 0x1, 0xf, 0x8}], 0x10, 0x3}, 0x94) ioctl$HIDIOCSREPORT(r12, 0x400c4808, &(0x7f0000000e40)={0x1, 0x2, 0x4}) (async, rerun: 64) mkdirat(r12, &(0x7f0000000e80)='./file0\x00', 0x102) (rerun: 64) 5.227219623s ago: executing program 3 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd(0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x5) accept4(r8, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x4) listen(r5, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 5.139356556s ago: executing program 1 (id=726): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x8, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x1000006}, 0x76e0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x0, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0xcad2313ba67c0ca7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d8, 0x0, 0x0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xff03}}, {{@arp={@multicast2, @rand_addr=0x64010100, 0xff, 0xff000000, 0x10, 0xf, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7}}}, {{@arp={@rand_addr=0x64010100, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'ip6_vti0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @local}, 0x1c) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.869483087s ago: executing program 2 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d80001000"/16], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a6970740000000009000200"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/92, 0x5c, 0x0, &(0x7f0000000740)=""/255, 0xff}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 3.906236272s ago: executing program 0 (id=728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xd8, 0x30, 0x401, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x52, 0x6, "d8f195109eca43e24feb4a8813f9ac6d6d39c9ebe9a80bcd00b38ecc713449b747214140f06ce9a8c1cf27b01655777c76fbc86741641520d583a73c8aaf72e123f9741caf1e98eb581ba0afcaed"}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r5, 0x540a, 0x3) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.814952138s ago: executing program 1 (id=729): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0x10, 0xb}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}, {0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="eb005feade8287c21b1ccbc3a5b0e1f6b7fd322b675c0b81ef12ab91dbb71657b204b3b2", @ANYRES8=r0]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x441}}, {0x95, &(0x7f0000001a00)=ANY=[@ANYBLOB="950319545cd88b20105939d5669c53756cbb625e07f688f941d1769eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5835347f35fce5dec6ecf96e1b0454fc1d4d7f9d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37a"]}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000280)="a2a11f5bf44d41530db1dd62d739ceb1", 0x10) userfaultfd(0x80001) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000800000000000000000"], &(0x7f0000009f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x55, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x90, 0x31, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x8, 0x6c}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x2, 0x9}}]}}}]}}]}}, 0x0) acct(&(0x7f0000000040)='./file0\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 2.776598772s ago: executing program 0 (id=730): mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52ba}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) 2.688049494s ago: executing program 0 (id=731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a69707400"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/92, 0x5c, 0x0, &(0x7f0000000740)=""/255, 0xff}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 1.90524339s ago: executing program 2 (id=732): prctl$PR_SET_TSC(0x1a, 0x1) (async) openat$cdrom(0xffffff9c, &(0x7f00000010c0), 0x309900, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000001200)={0x5, 0x2}, &(0x7f0000001240)) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x101, 0x10001}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$pptp(0x18, 0x1, 0x2) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) (async) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x6, &(0x7f0000001100)=ANY=[@ANYRESHEX=r5, @ANYBLOB="2c7766646e823df5d7c86c6ba406e8fd6040f9be6eefecf5ce7511d1eb1994e2e0a7ae18e49db0dedca298f6ec42781a069d64f7e0d0f2497f0c28b1ad12c0dca7d60e419f8a556b3feecd8a37b1424cf3387b1706fe222909864dcf569ff15fc13b08e81fb31993b4d1cd2ca0d7d5b64d3d51935f2286fea5ca899f99e34c76ac45bcf7cac2abe551957deaf74f1039f630346eba5c4c43244b5b3637139f507c662bda433e914db646501fb8d125d0022dc9eba226d7f8515f17aa", @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(0xffffffffffffffff) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) 1.358713867s ago: executing program 0 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x450, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x425, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffe}, @device_a, @device_a, @random="ac841bba6144", {0x7, 0xffc}, @value=@ver_80211n={0x0, 0x589, 0x1, 0x2}}, 0x2011, 0x20, @default, @val={0x1, 0x3, [{0x6c, 0x1}, {0x16}, {0x16, 0x1}]}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x8, 0xf, 0x0, 0x77, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x2c, 0x5}}, [{0xdd, 0xc5, "78b2ae4a845fb55e07284669f8702c2ffdbb91db7ed8a8b1b2bced516483334e42c750e883c55eeb51789c44e9fcfcf348b7d1442f9fe669fc83b54f59b476a7bdd703a173d551c953552a5797b35e748226d3baa56c9733a63bc0f182ada3dd43a4c41936919a0d7eb9133146b1deaaa2f99c3a211b4d1519a94b09e656410476c1020b479413d7e7da4a948ff7dea98622ff8b40d72c728dcd47f0995ff22037a5524a74d31c0c66987a21b1c3b3f15e61cb8d6ae236259d2072dbd568423c70ae6e0ccb"}, {0xdd, 0xc5, "28ff2276294524ab5610d2a5b5126bc6cbadddbeaae2793e69fad75fa10eebe8865f2202673c4edac668fe998c1817558ee7a98774141eb7d8a1c71025d0a3c5fe3f4aa236b7c7f1babdfc66560f83b24b757e06fdb50fb12f1c13d932843825e8e757c6356f959f67455eb4b0cc0b3deac02002795dcc4a194d213db80bae4eb41e297833589c7df98e0e7aee5a32de383697fab5fb3c89f357a79cf3c43004324b3fb8fe1d9548fbe173f53eea7be23d885254182c1490ae3e08de943f0a92222059e2fd"}, {0xdd, 0x65, "60edfaa7a9d26292ff31b9b831c5c214f4866c4b7847c71ad5a0999f113de4a08e7532de89cd716084ddf761fd10e6d75b6ce78b56a01abefc728c8b7947f24f2a15ac8c47f46456885c442922ad61de0c9b59d3767573d4b275a872c5470db022d33a54d5"}, {0xdd, 0xea, "28f9528d78435e447c9dfe70267d58f540a8a73a30ab544bdf11b8b2cee9a254f5557e8498bac204a9a7d0322174ff01714df1b0b093e63bb67ed051bac6ab2e2988212931146edeed1f818a2e80093568b40452e9013ecc614f2a6d2ddeb5df02b2154d9ff322142fa7d992daa3b83a067ea08f6ae22a3a45853325759c75e2c11f9da43c326bd7104ccaf6bb9dd6cd5ad9cc3b5115205d488082377e7aa80616d76fb3977394b9b5648e6d7dfb9cb6e72a88516c9039453bc84111b70f7a6e5695911b4db51a2844528e687024dbef1a970e3d13dcba88d1f8a608a6a3b53467477b73e2ba4c69112d"}, {0xdd, 0x3f, "5bcb4c30d3f0d4200156e7010c2699aaa3e700a1f96542d2b7684556751dae28f1dc04e3a31b03512c34bca5472a69535da2f516b2847da373e8c4fa4e1d83"}, {0xdd, 0xba, "ca5317cba8c9bd6519147c4c85458c3acbaf4e0c9b922ad150368ede715fa6ae318e4b8a89667fef3447ecb90ea246d5981d113b796608b8176d28604f3dd1a3b31e4d544b0467e4ddd22c0d2fa15d5603b085849e457a935a57595e66a9aec25ec919e6d214d1d1d31d6e007bc2c6dac08d7adc46991d5f39aa69be3b422cc85d243f50a20c34f18d48c3df7dc7b0d9d4ed7e243e4ca91a2d9de26534d5e714adba964e9038e2fd160ab747cc52eb0618786dec276a286c69c7"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x450}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x450, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x425, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffe}, @device_a, @device_a, @random="ac841bba6144", {0x7, 0xffc}, @value=@ver_80211n={0x0, 0x589, 0x1, 0x2}}, 0x2011, 0x20, @default, @val={0x1, 0x3, [{0x6c, 0x1}, {0x16}, {0x16, 0x1}]}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x8, 0xf, 0x0, 0x77, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x2c, 0x5}}, [{0xdd, 0xc5, "78b2ae4a845fb55e07284669f8702c2ffdbb91db7ed8a8b1b2bced516483334e42c750e883c55eeb51789c44e9fcfcf348b7d1442f9fe669fc83b54f59b476a7bdd703a173d551c953552a5797b35e748226d3baa56c9733a63bc0f182ada3dd43a4c41936919a0d7eb9133146b1deaaa2f99c3a211b4d1519a94b09e656410476c1020b479413d7e7da4a948ff7dea98622ff8b40d72c728dcd47f0995ff22037a5524a74d31c0c66987a21b1c3b3f15e61cb8d6ae236259d2072dbd568423c70ae6e0ccb"}, {0xdd, 0xc5, "28ff2276294524ab5610d2a5b5126bc6cbadddbeaae2793e69fad75fa10eebe8865f2202673c4edac668fe998c1817558ee7a98774141eb7d8a1c71025d0a3c5fe3f4aa236b7c7f1babdfc66560f83b24b757e06fdb50fb12f1c13d932843825e8e757c6356f959f67455eb4b0cc0b3deac02002795dcc4a194d213db80bae4eb41e297833589c7df98e0e7aee5a32de383697fab5fb3c89f357a79cf3c43004324b3fb8fe1d9548fbe173f53eea7be23d885254182c1490ae3e08de943f0a92222059e2fd"}, {0xdd, 0x65, "60edfaa7a9d26292ff31b9b831c5c214f4866c4b7847c71ad5a0999f113de4a08e7532de89cd716084ddf761fd10e6d75b6ce78b56a01abefc728c8b7947f24f2a15ac8c47f46456885c442922ad61de0c9b59d3767573d4b275a872c5470db022d33a54d5"}, {0xdd, 0xea, "28f9528d78435e447c9dfe70267d58f540a8a73a30ab544bdf11b8b2cee9a254f5557e8498bac204a9a7d0322174ff01714df1b0b093e63bb67ed051bac6ab2e2988212931146edeed1f818a2e80093568b40452e9013ecc614f2a6d2ddeb5df02b2154d9ff322142fa7d992daa3b83a067ea08f6ae22a3a45853325759c75e2c11f9da43c326bd7104ccaf6bb9dd6cd5ad9cc3b5115205d488082377e7aa80616d76fb3977394b9b5648e6d7dfb9cb6e72a88516c9039453bc84111b70f7a6e5695911b4db51a2844528e687024dbef1a970e3d13dcba88d1f8a608a6a3b53467477b73e2ba4c69112d"}, {0xdd, 0x3f, "5bcb4c30d3f0d4200156e7010c2699aaa3e700a1f96542d2b7684556751dae28f1dc04e3a31b03512c34bca5472a69535da2f516b2847da373e8c4fa4e1d83"}, {0xdd, 0xba, "ca5317cba8c9bd6519147c4c85458c3acbaf4e0c9b922ad150368ede715fa6ae318e4b8a89667fef3447ecb90ea246d5981d113b796608b8176d28604f3dd1a3b31e4d544b0467e4ddd22c0d2fa15d5603b085849e457a935a57595e66a9aec25ec919e6d214d1d1d31d6e007bc2c6dac08d7adc46991d5f39aa69be3b422cc85d243f50a20c34f18d48c3df7dc7b0d9d4ed7e243e4ca91a2d9de26534d5e714adba964e9038e2fd160ab747cc52eb0618786dec276a286c69c7"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x450}}, 0x0) (async) 1.3579806s ago: executing program 0 (id=734): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x224, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x7}, {0xfff2, 0xb}, {0xb, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x7ff, 0x0, 0x2, 0x5, 0x6, 0x5}}, {0xe, 0x2, [0x9, 0x2, 0x8000, 0x401, 0x0]}}, {{0x1c, 0x1, {0x5, 0x10, 0x1000, 0x3, 0x0, 0xffff, 0x7f, 0x6}}, {0x10, 0x2, [0xcc, 0x3ff, 0x301, 0x4, 0xb, 0xc]}}, {{0x1c, 0x1, {0x10, 0x9, 0x79c7, 0xfffffff3, 0x1, 0x9, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x3d, 0x2f, 0x9, 0x400, 0x2, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x37, 0x101, 0x1, 0x592f, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x4}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0x7, 0x80, 0x1, 0xc0ab, 0xffc, 0x3}}, {0xa, 0x2, [0x6, 0x8, 0xb3]}}, {{0x1c, 0x1, {0x0, 0x0, 0x8001, 0x4, 0x2, 0x5, 0xc, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x2, 0xffffffff, 0x0, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x5, 0x16c2]}}]}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x9, 0x0, 0x0, 0x80000000, 0xbb95, 0x6}}, {0x10, 0x2, [0x6, 0x0, 0x6, 0x9, 0x240e, 0x1]}}, {{0x1c, 0x1, {0x6, 0x4, 0x1000, 0x7, 0x0, 0x7, 0x4, 0x4}}, {0xc, 0x2, [0x3, 0x7, 0x401, 0x1]}}, {{0x1c, 0x1, {0x8, 0x0, 0x1, 0x7, 0x0, 0x2c257a7e, 0x4, 0x8}}, {0x14, 0x2, [0x7f, 0x4, 0xc03, 0x19, 0x3ff, 0x0, 0x2, 0x7]}}, {{0x1c, 0x1, {0x20, 0xd, 0x7, 0x7, 0x2, 0xe7c, 0x8000, 0x8}}, {0x14, 0x2, [0x8, 0x30b7, 0x1, 0x7, 0xfff, 0x5, 0x1, 0x7]}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@bcast, @default, @default, @rose, @remote, @netrom, @null, @netrom]}, &(0x7f0000000340)=0x48, 0x80800) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000380)=r3) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(r3, &(0x7f0000000480)='net/psched\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000000000), &(0x7f0000ffe000)) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000180)=""/214, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c000c400000000000000006a42fd55710e3bb04abe24ce5118cc94bc86f098bf1ec96ea629fa498be0a2feedbb34791f542f6dbe257f7adc177d60fdade9fcd88728244ed98a4172ebf025ae9183ad5d5d92d7de81f34e922f7085e935d045860ceb06f288474a9a85d7f69a5235e20e150ffe2"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.209262228s ago: executing program 1 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 899.829617ms ago: executing program 2 (id=736): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r5, 0x80000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448d4, &(0x7f0000000000)={0x1, 0x2, '\x00', 0x0, 0xfd}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) sync() sync() sync() open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sync() ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) fsmount(r0, 0x0, 0xc) 898.262682ms ago: executing program 1 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000001380)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 559.258275ms ago: executing program 3 (id=738): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) mknod$loop(0x0, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x401) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 229.755703ms ago: executing program 0 (id=739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000e4ff000006"], 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000e4ff000006"], 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048000) r3 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 89.538054ms ago: executing program 2 (id=740): syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r0], 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000400)=@dstopts={0x62}, 0x8) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}, 0x0, 0x0, 0x1) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x9, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1e, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0xa7, &(0x7f00000003c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 1 (id=741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a69707400"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/92, 0x5c, 0x0, &(0x7f0000000740)=""/255, 0xff}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) kernel console output (not intermixed with test programs): xecutor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.590749][ T40] audit: type=1326 audit(1767813198.909:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.598446][ T40] audit: type=1326 audit(1767813198.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.605919][ T40] audit: type=1326 audit(1767813198.909:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.614123][ T40] audit: type=1326 audit(1767813198.909:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.622329][ T40] audit: type=1326 audit(1767813198.909:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.630004][ T40] audit: type=1326 audit(1767813198.909:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.637585][ T40] audit: type=1326 audit(1767813198.909:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 64.842180][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.878597][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 65.012255][ T6094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 65.015087][ T6094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 65.021616][ T6094] vhci_hcd vhci_hcd.0: Device attached [ 65.308154][ T5986] usb 38-1: SetAddress Request (2) to port 0 [ 65.310477][ T5986] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.792356][ T6095] vhci_hcd: connection reset by peer [ 65.797110][ T13] vhci_hcd vhci_hcd.0: stop threads [ 65.799770][ T13] vhci_hcd vhci_hcd.0: release socket [ 65.809183][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 65.993270][ T6111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.007453][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 67.466574][ T6141] Cannot find del_set index 3 as target [ 67.594129][ T6144] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.373300][ T5986] usb 38-1: device descriptor read/8, error -110 [ 70.379986][ T4725] wlan1: Trigger new scan to find an IBSS to join [ 70.767704][ T5986] usb usb38-port1: attempt power cycle [ 71.227153][ T142] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.242847][ T9] cfg80211: failed to load regulatory.db [ 71.417341][ T142] usb 5-1: Using ep0 maxpacket: 32 [ 71.579715][ T5986] usb usb38-port1: unable to enumerate USB device [ 71.602607][ T6191] 9p: Bad value for 'rfdno' [ 73.839016][ T4725] wlan1: Trigger new scan to find an IBSS to join [ 73.980470][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 73.980483][ T40] audit: type=1326 audit(1767813208.329:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 73.989394][ T40] audit: type=1326 audit(1767813208.329:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 73.997714][ T40] audit: type=1326 audit(1767813208.329:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.046265][ T6236] ======================================================= [ 74.046265][ T6236] WARNING: The mand mount option has been deprecated and [ 74.046265][ T6236] and is ignored by this kernel. Remove the mand [ 74.046265][ T6236] option from the mount to silence this warning. [ 74.046265][ T6236] ======================================================= [ 74.067156][ T6208] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.121661][ T40] audit: type=1326 audit(1767813208.469:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.131626][ T40] audit: type=1326 audit(1767813208.469:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.371235][ T142] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.376671][ T142] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 74.380921][ T142] usb 5-1: can't read configurations, error -71 [ 74.407111][ T6208] usb 7-1: Using ep0 maxpacket: 32 [ 74.851470][ T1146] wlan1: Creating new IBSS network, BSSID 8e:19:90:b4:47:e4 [ 75.124285][ T6208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 75.146903][ T6208] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 75.155084][ T6208] usb 7-1: can't read configurations, error -71 [ 75.162768][ T5949] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.317054][ T5949] usb 8-1: Using ep0 maxpacket: 32 [ 75.702020][ T5949] usb 8-1: unable to get BOS descriptor or descriptor too short [ 75.712919][ T5949] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 75.721798][ T5949] usb 8-1: can't read configurations, error -71 [ 76.060726][ T6284] Bluetooth: MGMT ver 1.23 [ 76.135933][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.139061][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.795863][ T6290] infiniband syz2: set down [ 76.798109][ T6290] infiniband syz2: added ipvlan0 [ 76.896835][ T6290] RDS/IB: syz2: added [ 76.899283][ T6290] smc: adding ib device syz2 with port count 1 [ 76.901176][ T6290] smc: ib device syz2 port 1 has no pnetid [ 78.357650][ T142] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.527330][ T142] usb 5-1: Using ep0 maxpacket: 8 [ 78.530972][ T142] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 78.533809][ T142] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.536874][ T142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.537716][ T6311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.541539][ T142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.549930][ T142] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.555438][ T142] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.559807][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.562560][ T6311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40'. [ 78.747177][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.774449][ T142] usb 5-1: usb_control_msg returned -32 [ 78.776356][ T142] usbtmc 5-1:16.0: can't read capabilities [ 78.897077][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 79.316778][ T6310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.324985][ T6310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.344268][ T5986] usb 5-1: USB disconnect, device number 4 [ 79.388666][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 79.393601][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 79.396601][ T5949] usb 6-1: can't read configurations, error -71 [ 79.743153][ T6321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.753159][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.44'. [ 79.843427][ T6323] fuse: Bad value for 'fd' [ 79.845258][ T6323] fuse: Bad value for 'fd' [ 79.850604][ T6325] overlayfs: missing 'workdir' [ 80.482118][ T5949] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 80.857312][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 80.938794][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 80.948103][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 80.950958][ T5949] usb 6-1: can't read configurations, error -71 [ 80.954780][ T5949] usb usb6-port1: attempt power cycle [ 81.017907][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.179249][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.182702][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.186353][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.191316][ T54] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 81.194497][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.202603][ T54] usb 8-1: config 0 descriptor?? [ 81.414185][ T6364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 81.416379][ T6364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.420115][ T6364] vhci_hcd vhci_hcd.0: Device attached [ 81.657054][ T6208] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 82.007049][ T6378] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 82.021706][ T6365] vhci_hcd: connection reset by peer [ 82.033292][ T1180] vhci_hcd vhci_hcd.0: stop threads [ 82.035443][ T1180] vhci_hcd vhci_hcd.0: release socket [ 82.037399][ T1180] vhci_hcd vhci_hcd.0: disconnect device [ 82.299238][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.303931][ T6392] team0: Port device batadv1 added [ 82.909698][ T6401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.915226][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 83.380884][ T54] usbhid 8-1:0.0: can't add hid device: -71 [ 83.388878][ T54] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.406312][ T54] usb 8-1: USB disconnect, device number 4 [ 83.473079][ T6406] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.533811][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.64'. [ 83.538693][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.344291][ T6407] Process accounting resumed [ 84.445302][ T6418] netlink: 196 bytes leftover after parsing attributes in process `syz.0.68'. [ 84.447117][ T5955] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.448771][ T5957] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.453033][ T6418] netlink: 196 bytes leftover after parsing attributes in process `syz.0.68'. [ 84.681874][ T6426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.929032][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 84.939201][ T6414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.002858][ T6461] dummy0: entered allmulticast mode [ 86.012491][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 86.427223][ T6472] syzkaller0: entered promiscuous mode [ 86.429079][ T6472] syzkaller0: entered allmulticast mode [ 86.442360][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.450872][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 86.467135][ T55] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.611502][ T6476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.616858][ T6476] block device autoloading is deprecated and will be removed. [ 86.617287][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 86.625685][ T55] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 86.630181][ T55] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 86.632975][ T55] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.636255][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 86.639678][ T55] usb 7-1: config 1 has no interface number 0 [ 86.641762][ T55] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 86.644900][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.655872][ T55] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 86.757139][ T6208] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.902643][ T6482] syzkaller1: entered promiscuous mode [ 86.904828][ T6482] syzkaller1: entered allmulticast mode [ 86.999125][ T55] snd_usb_pod 7-1:1.1: set_interface failed [ 87.009396][ T6486] netlink: 168 bytes leftover after parsing attributes in process `syz.3.86'. [ 87.010667][ T6487] input: syz0 as /devices/virtual/input/input5 [ 87.017096][ T55] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 87.021270][ T55] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 87.025250][ T6483] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.84'. [ 87.025743][ T55] usb 7-1: USB disconnect, device number 5 [ 87.769506][ T916] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 87.967820][ T916] usb 8-1: Using ep0 maxpacket: 32 [ 88.229424][ T40] audit: type=1326 audit(1767813222.439:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.88" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0 [ 88.238903][ T5957] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 88.242355][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: kworker/u33:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.242376][ T5957] Tainted: [L]=SOFTLOCKUP [ 88.242381][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.242389][ T5957] Workqueue: hci3 hci_rx_work [ 88.242409][ T5957] Call Trace: [ 88.242414][ T5957] [ 88.242419][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 88.242440][ T5957] sysfs_warn_dup+0x7f/0xa0 [ 88.242456][ T5957] sysfs_create_dir_ns+0x24b/0x2b0 [ 88.242469][ T5957] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.242482][ T5957] ? find_held_lock+0x2b/0x80 [ 88.242501][ T5957] ? do_raw_spin_unlock+0x172/0x230 [ 88.242519][ T5957] kobject_add_internal+0x2c4/0x9d0 [ 88.242533][ T5957] kobject_add+0x16e/0x240 [ 88.242545][ T5957] ? __pfx_kobject_add+0x10/0x10 [ 88.242559][ T5957] ? kobject_put+0xaf/0x6f0 [ 88.242568][ T5957] ? _raw_spin_unlock+0x28/0x50 [ 88.242588][ T5957] device_add+0x288/0x1980 [ 88.242604][ T5957] ? __pfx_dev_set_name+0x10/0x10 [ 88.242621][ T5957] ? __pfx_device_add+0x10/0x10 [ 88.242636][ T5957] ? mgmt_send_event_skb+0x2fb/0x460 [ 88.242655][ T5957] hci_conn_add_sysfs+0x1a8/0x260 [ 88.242673][ T5957] le_conn_complete_evt+0x11ed/0x1fa0 [ 88.242692][ T5957] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.242711][ T5957] hci_le_conn_complete_evt+0x23c/0x3a0 [ 88.242729][ T5957] hci_le_meta_evt+0x357/0x610 [ 88.242745][ T5957] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 88.242762][ T5957] hci_event_packet+0x685/0x1210 [ 88.242784][ T5957] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.242801][ T5957] ? __pfx_hci_event_packet+0x10/0x10 [ 88.242817][ T5957] ? kcov_remote_start+0x399/0x680 [ 88.242833][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.242854][ T5957] hci_rx_work+0x2c9/0x1020 [ 88.242872][ T5957] process_one_work+0x9ba/0x1b20 [ 88.242891][ T5957] ? __pfx_process_one_work+0x10/0x10 [ 88.242908][ T5957] ? assign_work+0x1a0/0x250 [ 88.242920][ T5957] worker_thread+0x6c8/0xf10 [ 88.242939][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 88.242952][ T5957] kthread+0x3c5/0x780 [ 88.242963][ T5957] ? __pfx_kthread+0x10/0x10 [ 88.242975][ T5957] ? rcu_is_watching+0x12/0xc0 [ 88.242991][ T5957] ? __pfx_kthread+0x10/0x10 [ 88.243002][ T5957] ret_from_fork+0x983/0xb10 [ 88.243014][ T5957] ? __pfx_ret_from_fork+0x10/0x10 [ 88.243027][ T5957] ? __switch_to+0x7af/0x10d0 [ 88.243041][ T5957] ? __pfx_kthread+0x10/0x10 [ 88.243053][ T5957] ret_from_fork_asm+0x1a/0x30 [ 88.243077][ T5957] [ 88.243100][ T5957] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.332215][ T5957] Bluetooth: hci3: failed to register connection device [ 88.686610][ T916] usb 8-1: unable to get BOS descriptor or descriptor too short [ 88.695542][ T916] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 88.699567][ T916] usb 8-1: can't read configurations, error -71 [ 89.839597][ T6530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.852685][ T6537] capability: warning: `syz.3.99' uses deprecated v2 capabilities in a way that may be insecure [ 90.091218][ T6537] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 90.093557][ T6537] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.098055][ T6537] vhci_hcd vhci_hcd.0: Device attached [ 90.105398][ T6542] vhci_hcd: connection closed [ 90.107890][ T1180] vhci_hcd vhci_hcd.3: stop threads [ 90.111606][ T1180] vhci_hcd vhci_hcd.3: release socket [ 90.113338][ T1180] vhci_hcd vhci_hcd.3: disconnect device [ 90.350958][ T6551] mmap: syz.1.102 (6551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.358138][ T6551] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 90.360661][ T6551] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.363221][ T6551] vhci_hcd vhci_hcd.0: Device attached [ 90.371174][ T6551] pim6reg: entered allmulticast mode [ 90.556953][ T54] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 90.616804][ T54] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 90.765520][ T6555] can0: slcan on ttynull. [ 90.776725][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 90.776844][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.957562][ T6554] can0 (unregistered): slcan off ttynull. [ 91.076580][ T6576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 91.080074][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.106631][ T6576] vhci_hcd vhci_hcd.0: Device attached [ 91.128855][ T6576] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.106'. [ 91.198503][ T6580] netlink: 96 bytes leftover after parsing attributes in process `syz.3.106'. [ 91.309369][ T6577] vhci_hcd: cannot find the pending unlink 4294967287 [ 91.339750][ T6036] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.437628][ T142] usb 44-1: SetAddress Request (2) to port 0 [ 91.442929][ T142] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 91.517828][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 91.806807][ T6552] vhci_hcd: connection reset by peer [ 91.817266][ T4725] vhci_hcd vhci_hcd.1: stop threads [ 91.819187][ T4725] vhci_hcd vhci_hcd.1: release socket [ 91.828629][ T4725] vhci_hcd vhci_hcd.1: disconnect device [ 91.984106][ T6036] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.010867][ T6036] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 92.024688][ T6036] usb 5-1: can't read configurations, error -71 [ 92.072087][ T6577] vhci_hcd: connection reset by peer [ 92.083625][ T1243] vhci_hcd vhci_hcd.3: stop threads [ 92.085390][ T1243] vhci_hcd vhci_hcd.3: release socket [ 92.090154][ T1243] vhci_hcd vhci_hcd.3: disconnect device [ 92.120188][ T6582] netlink: 'syz.2.105': attribute type 21 has an invalid length. [ 92.122899][ T6582] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.563796][ T6580] syz.3.106 (6580): drop_caches: 2 [ 92.956675][ T6587] Cannot find add_set index 46338 as target [ 93.060399][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 93.256508][ T6618] kAFS: unable to lookup cell '' [ 93.352723][ T6629] capability: warning: `syz.0.119' uses 32-bit capabilities (legacy support in use) [ 93.494887][ T6632] vivid-000: disconnect [ 93.544256][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 94.025492][ T6643] 9p: Bad value for 'rfdno' [ 94.093838][ T6649] binder: 6648:6649 ioctl c0306201 80000180 returned -14 [ 94.122103][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 94.313825][ T6661] can0: slcan on ttyS3. [ 94.328110][ T6631] vivid-000: reconnect [ 94.364466][ T6664] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 94.396004][ T6660] can0 (unregistered): slcan off ttyS3. [ 94.603520][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.608115][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.681577][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.688275][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.704892][ T6061] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.836443][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.840318][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.844240][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.849043][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.864766][ T6061] usb 6-1: Using ep0 maxpacket: 16 [ 94.869310][ T6061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.883256][ T6061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.887235][ T6699] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 94.894618][ T6061] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.901274][ T6061] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 94.924600][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.930364][ T6061] usb 6-1: config 0 descriptor?? [ 95.138415][ T6714] random: crng reseeded on system resumption [ 95.189928][ T6061] usbhid 6-1:0.0: can't add hid device: -71 [ 95.193185][ T6061] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 95.212220][ T6061] usb 6-1: USB disconnect, device number 7 [ 96.190570][ T6723] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.213973][ T54] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 96.523846][ T142] usb 44-1: device descriptor read/8, error -110 [ 96.914687][ T142] usb usb44-port1: attempt power cycle [ 97.174089][ T6775] netlink: 100 bytes leftover after parsing attributes in process `syz.1.151'. [ 97.366009][ T6776] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.588394][ T142] usb usb44-port1: unable to enumerate USB device [ 97.739709][ T6787] syzkaller1: entered promiscuous mode [ 97.741705][ T6787] syzkaller1: entered allmulticast mode [ 97.747608][ T6787] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 98.103057][ T142] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.253586][ T142] usb 5-1: Using ep0 maxpacket: 32 [ 98.858066][ T40] audit: type=1326 audit(1767813489.211:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 98.868889][ T40] audit: type=1326 audit(1767813489.221:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 98.878812][ T40] audit: type=1326 audit(1767813489.231:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 98.891846][ T40] audit: type=1326 audit(1767813489.231:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 98.893980][ T142] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.900437][ T40] audit: type=1326 audit(1767813489.231:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 98.906170][ T142] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.911528][ T142] usb 5-1: can't read configurations, error -71 [ 98.937578][ T6807] loop6: detected capacity change from 0 to 2560 [ 98.941915][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.945856][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.949591][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.953613][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.956348][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.959187][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.962262][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.965668][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.968686][ T6807] ldm_validate_partition_table(): Disk read failed. [ 98.970990][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.974448][ T6807] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.977633][ T6807] Dev loop6: unable to read RDB block 0 [ 98.980481][ T6807] loop6: unable to read partition table [ 98.983262][ T6807] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 98.991846][ T40] audit: type=1326 audit(1767813489.341:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 99.083771][ T40] audit: type=1326 audit(1767813489.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 99.093048][ T6801] siw: device registration error -23 [ 99.097599][ T6801] smc: removing ib device syz2 [ 99.105892][ T40] audit: type=1326 audit(1767813489.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 99.139265][ T40] audit: type=1326 audit(1767813489.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 99.162613][ T40] audit: type=1326 audit(1767813489.441:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 100.195564][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 100.200111][ T6850] Unknown options in mask b7f2 [ 100.236395][ T6850] CUSE: unknown device info "" [ 100.238465][ T6850] CUSE: zero length info key specified [ 100.427966][ T6861] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 100.430461][ T6861] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.437445][ T6861] vhci_hcd vhci_hcd.0: Device attached [ 100.533271][ T55] libceph: connect (1)[c::]:6789 error -101 [ 100.537141][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 100.544310][ T55] libceph: connect (1)[c::]:6789 error -101 [ 100.548241][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 100.722383][ T54] usb 42-1: SetAddress Request (2) to port 0 [ 100.724941][ T54] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.804029][ T55] libceph: connect (1)[c::]:6789 error -101 [ 100.811902][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 100.884318][ T6864] vhci_hcd: connection reset by peer [ 100.891598][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 100.893726][ T1143] vhci_hcd vhci_hcd.2: release socket [ 100.896824][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 101.071242][ T6853] ceph: No mds server is up or the cluster is laggy [ 101.123889][ T6880] loop0: detected capacity change from 0 to 2560 [ 101.289777][ T5955] Bluetooth: hci1: connection err: -111 [ 101.619912][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 101.625771][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 101.834889][ T6900] fuse: Bad value for 'fd' [ 102.239742][ T6884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.244142][ T6884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.260993][ T6884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.269025][ T6884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.272196][ T6884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.280121][ T6884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.286930][ T6884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.293111][ T6884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.295980][ T6884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.300804][ T6884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.448002][ T6903] xt_SECMARK: invalid mode: 0 [ 102.556291][ T6911] qnx6: unable to set blocksize [ 102.560811][ T6208] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 102.720757][ T6208] usb 5-1: Invalid ep0 maxpacket: 32 [ 102.809333][ T6924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 102.811467][ T6924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.837449][ T6924] vhci_hcd vhci_hcd.0: Device attached [ 102.860723][ T6208] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 103.224531][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 103.230468][ T6208] usb 5-1: Invalid ep0 maxpacket: 32 [ 103.234241][ T6208] usb usb5-port1: attempt power cycle [ 103.330679][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.357653][ T6925] vhci_hcd: connection closed [ 103.357915][ T6128] vhci_hcd vhci_hcd.2: stop threads [ 103.370964][ T6128] vhci_hcd vhci_hcd.2: release socket [ 103.374660][ T6128] vhci_hcd vhci_hcd.2: disconnect device [ 103.600288][ T6208] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 103.627658][ T6208] usb 5-1: Invalid ep0 maxpacket: 32 [ 103.759569][ T6942] netlink: 3283 bytes leftover after parsing attributes in process `syz.1.185'. [ 103.762608][ T6208] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 103.780658][ T6208] usb 5-1: Invalid ep0 maxpacket: 32 [ 103.782666][ T6208] usb usb5-port1: unable to enumerate USB device [ 104.283084][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.359992][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.885589][ T6969] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.915395][ T6969] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 104.921718][ T6969] overlayfs: failed to look up (tracing) for ino (-66) [ 105.399425][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.685755][ T6977] netlink: 104 bytes leftover after parsing attributes in process `syz.3.194'. [ 105.762082][ T6979] netlink: 'syz.0.195': attribute type 8 has an invalid length. [ 105.799296][ T54] usb 42-1: device descriptor read/8, error -110 [ 106.190048][ T54] usb usb42-port1: attempt power cycle [ 106.368898][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.448835][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.663231][ T5982] libceph: connect (1)[c::]:6789 error -101 [ 106.665717][ T5982] libceph: mon0 (1)[c::]:6789 connect error [ 106.699355][ T6989] ceph: No mds server is up or the cluster is laggy [ 106.774638][ T54] usb usb42-port1: unable to enumerate USB device [ 107.418055][ T1024] IPVS: starting estimator thread 0... [ 107.424912][ T7011] qnx6: unable to read the first superblock [ 107.490449][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.502652][ T54] IPVS: starting estimator thread 0... [ 107.518501][ T7012] IPVS: using max 45 ests per chain, 108000 per kthread [ 107.608487][ T7015] IPVS: using max 26 ests per chain, 62400 per kthread [ 107.860098][ T7023] overlayfs: failed to resolve './file0': -2 [ 108.437915][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.517933][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.539881][ T7041] i2c i2c-1: Invalid block write size 34 [ 108.589173][ T7045] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 108.601236][ T7045] cramfs: wrong magic [ 108.729126][ T7051] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 108.732018][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.746617][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 108.841227][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.061775][ T916] usb 40-1: SetAddress Request (2) to port 0 [ 109.064544][ T916] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 109.262430][ T7058] CUSE: unknown device info "ÿ" [ 109.264597][ T7058] CUSE: zero length info key specified [ 109.656472][ T7052] vhci_hcd: connection reset by peer [ 109.660409][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 109.663175][ T1143] vhci_hcd vhci_hcd.1: release socket [ 109.665229][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 109.814557][ T7062] syz.2.216: attempt to access beyond end of device [ 109.814557][ T7062] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 109.821643][ T7062] gfs2: error -5 reading superblock [ 110.230573][ T5955] Bluetooth: hci1: connection err: -111 [ 110.587787][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.247195][ T7082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.264172][ T7082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.672917][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'. [ 112.800692][ T7100] syzkaller0: entered promiscuous mode [ 112.802817][ T7100] syzkaller0: entered allmulticast mode [ 112.902184][ T7103] netlink: 2804 bytes leftover after parsing attributes in process `syz.1.225'. [ 112.935678][ T7103] sit0: entered promiscuous mode [ 113.368822][ T7103] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 113.374764][ T7103] netlink: 1 bytes leftover after parsing attributes in process `syz.1.225'. [ 114.036663][ T7126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.115060][ T916] usb 40-1: device descriptor read/8, error -110 [ 114.204963][ T5955] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 114.357037][ T7128] syzkaller1: entered promiscuous mode [ 114.359143][ T7128] syzkaller1: entered allmulticast mode [ 114.518341][ T916] usb usb40-port1: attempt power cycle [ 114.688712][ T7132] mkiss: ax0: crc mode is auto. [ 115.166724][ T916] usb usb40-port1: unable to enumerate USB device [ 115.326434][ T7168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.421076][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 115.640449][ T7166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.682238][ T7175] tipc: Started in network mode [ 115.684031][ T7175] tipc: Node identity da3a432e2c5e, cluster identity 4711 [ 115.688202][ T7175] tipc: Enabled bearer , priority 0 [ 115.692492][ T7175] syzkaller0: entered promiscuous mode [ 115.695499][ T7175] syzkaller0: entered allmulticast mode [ 115.736893][ T7166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.833800][ T7166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.898111][ T7166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.010403][ T4725] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.019358][ T4725] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.029319][ T1243] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.039580][ T1243] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.057886][ T7165] tipc: Resetting bearer [ 116.071576][ T7165] tipc: Disabling bearer [ 116.670510][ T7185] syzkaller1: entered promiscuous mode [ 116.672395][ T7185] syzkaller1: entered allmulticast mode [ 116.902460][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.364576][ T7191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 117.366750][ T7191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.382944][ T7191] vhci_hcd vhci_hcd.0: Device attached [ 117.421536][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 117.623322][ T142] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 117.696777][ T7192] vhci_hcd: connection reset by peer [ 117.699501][ T6109] vhci_hcd vhci_hcd.0: stop threads [ 117.701944][ T6109] vhci_hcd vhci_hcd.0: release socket [ 117.705045][ T6109] vhci_hcd vhci_hcd.0: disconnect device [ 118.082825][ T7201] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 118.409830][ T7206] netlink: 456 bytes leftover after parsing attributes in process `syz.2.248'. [ 118.982545][ T7213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.988585][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.250'. [ 119.423429][ T7222] syzkaller1: entered promiscuous mode [ 119.425802][ T7222] syzkaller1: entered allmulticast mode [ 119.594274][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.423253][ T7240] comedi comedi2: reset error (fatal) [ 121.661324][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 121.811727][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 122.227487][ T7274] syzkaller1: entered promiscuous mode [ 122.229561][ T7274] syzkaller1: entered allmulticast mode [ 122.236147][ T7276] bond0: entered promiscuous mode [ 122.237939][ T7276] bond_slave_0: entered promiscuous mode [ 122.240015][ T7276] bond_slave_1: entered promiscuous mode [ 122.242920][ T7276] batadv0: entered promiscuous mode [ 122.245274][ T7276] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 122.248095][ T7276] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 122.252452][ T7276] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.253673][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.259585][ T7276] bond0: left promiscuous mode [ 122.259586][ T54] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 122.259608][ T54] usb 6-1: can't read configurations, error -71 [ 122.271335][ T7276] bond_slave_0: left promiscuous mode [ 122.273047][ T7276] bond_slave_1: left promiscuous mode [ 122.289235][ T7276] batadv0: left promiscuous mode [ 122.740834][ T142] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 122.882892][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 122.885768][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 122.888687][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 122.897154][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.918496][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.272190][ T7325] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 123.385455][ T7328] syzkaller1: entered promiscuous mode [ 123.388377][ T7328] syzkaller1: entered allmulticast mode [ 123.979094][ T7345] fuse: Bad value for 'user_id' [ 123.991721][ T7345] fuse: Bad value for 'user_id' [ 124.029267][ T7352] netlink: 'syz.1.281': attribute type 9 has an invalid length. [ 124.040184][ T7352] netlink: 'syz.1.281': attribute type 11 has an invalid length. [ 124.048816][ T7352] netlink: 'syz.1.281': attribute type 12 has an invalid length. [ 124.055262][ T7352] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.281'. [ 124.065070][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 124.120697][ T7359] 8021q: VLANs not supported on caif0 [ 124.223322][ T7365] syzkaller1: entered promiscuous mode [ 124.225811][ T7365] syzkaller1: entered allmulticast mode [ 124.284575][ T7366] geneve1: entered allmulticast mode [ 124.339447][ T7368] geneve2: entered promiscuous mode [ 124.361695][ T142] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 124.512001][ T142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.516358][ T142] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.519374][ T142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.529518][ T142] usb 8-1: config 0 descriptor?? [ 124.756708][ T142] usbhid 8-1:0.0: can't add hid device: -71 [ 124.761950][ T142] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 124.772032][ T142] usb 8-1: USB disconnect, device number 7 [ 125.227602][ T7384] x_tables: duplicate underflow at hook 2 [ 125.289639][ T142] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 125.370946][ T7386] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 125.373027][ T7386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.376122][ T7386] vhci_hcd vhci_hcd.0: Device attached [ 125.430401][ T7387] vhci_hcd: connection closed [ 125.434920][ T6128] vhci_hcd vhci_hcd.2: stop threads [ 125.439144][ T6128] vhci_hcd vhci_hcd.2: release socket [ 125.449468][ T142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.451185][ T6128] vhci_hcd vhci_hcd.2: disconnect device [ 125.460388][ T142] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.479397][ T142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.489196][ T142] usb 8-1: config 0 descriptor?? [ 125.580712][ T1243] Bluetooth: (null): Invalid header checksum [ 125.762569][ T12] Bluetooth: (null): Invalid header checksum [ 125.830951][ T6128] Bluetooth: (null): Invalid header checksum [ 125.845908][ T142] usbhid 8-1:0.0: can't add hid device: -71 [ 125.848381][ T142] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 125.855044][ T142] usb 8-1: USB disconnect, device number 8 [ 125.891580][ T12] Bluetooth: (null): Invalid header checksum [ 125.999640][ T1243] Bluetooth: (null): Invalid header checksum [ 126.109468][ T1243] Bluetooth: (null): Invalid header checksum [ 126.137472][ T7400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.143578][ T7400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.147395][ T7400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.230498][ T1243] Bluetooth: (null): Invalid header checksum [ 126.344027][ T1180] Bluetooth: (null): Invalid header checksum [ 126.804559][ T7425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 126.807288][ T7425] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.813732][ T7425] vhci_hcd vhci_hcd.0: Device attached [ 126.901718][ T7428] netlink: 'syz.2.301': attribute type 4 has an invalid length. [ 127.058647][ T7426] vhci_hcd: connection closed [ 127.058935][ T6109] vhci_hcd vhci_hcd.3: stop threads [ 127.065170][ T6109] vhci_hcd vhci_hcd.3: release socket [ 127.067924][ T6109] vhci_hcd vhci_hcd.3: disconnect device [ 127.088631][ T54] usb 44-1: enqueue for inactive port 0 [ 127.598916][ T54] usb usb44-port1: attempt power cycle [ 127.626968][ T7437] netlink: 112 bytes leftover after parsing attributes in process `syz.2.303'. [ 127.770116][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 127.913506][ T7448] mkiss: ax0: crc mode is auto. [ 128.028060][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.188039][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.188087][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.198773][ T54] usb usb44-port1: unable to enumerate USB device [ 128.445260][ T7460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.448793][ T7460] IPv6: NLM_F_CREATE should be set when creating new route [ 128.496060][ T7457] syz.3.308 (7457): drop_caches: 2 [ 129.039558][ T7475] 9p: Could not find request transport: v [ 129.322301][ T7485] netlink: 752 bytes leftover after parsing attributes in process `syz.0.317'. [ 129.408295][ T7486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.981680][ T7504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 129.983755][ T7504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.986299][ T7504] vhci_hcd vhci_hcd.0: Device attached [ 130.217395][ T142] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 130.481019][ T7508] vhci_hcd: connection reset by peer [ 130.502543][ T1180] vhci_hcd vhci_hcd.2: stop threads [ 130.515248][ T1180] vhci_hcd vhci_hcd.2: release socket [ 130.525654][ T1180] vhci_hcd vhci_hcd.2: disconnect device [ 130.786998][ T6036] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 131.014981][ T6036] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.020052][ T6036] usb 8-1: config 0 has no interface number 0 [ 131.023142][ T6036] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 131.038553][ T6036] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 131.043701][ T6036] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.051847][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.075447][ T6036] usb 8-1: config 0 descriptor?? [ 131.079810][ T7518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.149448][ T6036] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 131.657815][ T7529] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 131.660771][ T7529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.664913][ T7529] vhci_hcd vhci_hcd.0: Device attached [ 131.702908][ T7529] tmpfs: Unknown parameter 'q­ota [ 131.702908][ T7529] ' [ 131.721870][ T7529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.956145][ T6354] usb 40-1: SetAddress Request (6) to port 0 [ 131.961191][ T6354] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 132.285658][ T7530] vhci_hcd: connection reset by peer [ 132.287931][ T6109] vhci_hcd vhci_hcd.1: stop threads [ 132.289826][ T6109] vhci_hcd vhci_hcd.1: release socket [ 132.292213][ T6109] vhci_hcd vhci_hcd.1: disconnect device [ 133.125602][ T6036] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 133.275482][ T6036] usb 5-1: Using ep0 maxpacket: 8 [ 133.376972][ T1024] usb 8-1: USB disconnect, device number 9 [ 133.422371][ T7548] pim6reg1: entered promiscuous mode [ 133.425230][ T7548] pim6reg1: entered allmulticast mode [ 133.772464][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.794645][ T7552] bond0: (slave rose0): Enslaving as an active interface with an up link [ 133.846795][ T6036] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.060808][ T6036] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 134.065087][ T6036] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.070354][ T6036] usb 5-1: config 1 interface 0 has no altsetting 0 [ 134.079156][ T6036] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.083008][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.095918][ T6036] usb 5-1: Product: syz [ 134.097718][ T6036] usb 5-1: Manufacturer: 핡喱슭鮻Šî¿î•ƒç½¤ïƒ¦èŒî·Œá¸Šâ¨ã¦®ä¾ä¸„⧈徰徒ꨅ踾럓ᆷ嫡ê±ï¼„틓俷⩀刉ì’㣚⿜ìîžäƒ¸ë—‡å„¯ëž‡ä’‚͸ಳç¶ê¨œç„·é‰žá¸‰ç®¸ì©·èƒ¿é·”â¶æˆšìŸºç¼ì“Ÿè‘šâºä©›ë¹â°†ëµ’蟲녺掌à­Ú–狇⻙䢧혂蔘å‚⫅켑䦦箞ퟰ롲ｾ튈ᮈ倲ऌU颟醼좌莾ᮒ࿔⬮ [ 134.113815][ T6036] usb 5-1: SerialNumber: syz [ 134.119732][ T7534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 134.122877][ T7534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 134.341297][ T7573] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 134.614956][ T6036] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 134.646863][ T6036] usb 5-1: USB disconnect, device number 13 [ 134.969224][ T7589] netlink: 'syz.2.339': attribute type 6 has an invalid length. [ 135.038250][ T7592] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 135.041096][ T7592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.044142][ T7592] vhci_hcd vhci_hcd.0: Device attached [ 135.062253][ T7592] random: crng reseeded on system resumption [ 135.072544][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.205128][ T7595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 135.207337][ T7595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.236845][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 135.240277][ T7597] nbd: must specify a size in bytes for the device [ 135.287388][ T7595] vhci_hcd vhci_hcd.0: Device attached [ 135.294595][ T142] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 135.460547][ T7603] syzkaller0: entered promiscuous mode [ 135.462523][ T7603] syzkaller0: entered allmulticast mode [ 135.462564][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 135.562841][ T7598] vhci_hcd: connection closed [ 135.564174][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 135.568225][ T1243] vhci_hcd vhci_hcd.1: release socket [ 135.570242][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 135.986317][ T7593] vhci_hcd: connection closed [ 135.987339][ T1180] vhci_hcd vhci_hcd.2: stop threads [ 135.992839][ T1180] vhci_hcd vhci_hcd.2: release socket [ 136.003202][ T1180] vhci_hcd vhci_hcd.2: disconnect device [ 136.192210][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 136.215424][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.348'. [ 136.219285][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.348'. [ 136.402700][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 136.584635][ T54] usb usb42-port1: attempt power cycle [ 136.995257][ T6354] usb 40-1: device descriptor read/8, error -110 [ 137.165904][ T54] usb usb42-port1: unable to enumerate USB device [ 137.489237][ T6354] usb usb40-port1: attempt power cycle [ 137.547007][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.549227][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.064369][ T6354] usb usb40-port1: unable to enumerate USB device [ 138.628188][ T7656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.639996][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.356'. [ 139.104835][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.108360][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.110793][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.115549][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.118511][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.122123][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.126193][ T7662] binder: 7659:7662 ioctl c0306201 800004c0 returned -14 [ 139.129505][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.131985][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.135169][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.138007][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.141380][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.152047][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.154739][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.164422][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.168212][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.173341][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.177244][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.180872][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.184548][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.187974][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.193367][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.197005][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.199844][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.203877][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.208507][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.214748][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.217751][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.220407][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.224453][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.229162][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.235332][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.242795][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.246880][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.254239][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.263773][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.273825][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.273913][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.276340][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.281746][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.284149][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.284287][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.312793][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.315557][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.321923][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.332900][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.338162][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.351130][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.361069][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.363649][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.368352][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.376590][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.378359][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.389378][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.395938][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.398951][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.401839][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.409657][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.413200][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.415337][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.415870][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.424203][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.428710][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.438499][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.446369][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.457391][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.459874][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.460204][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.465871][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.474955][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.479925][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.489868][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.495197][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.501561][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.505125][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.508046][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.508436][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.521437][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.527084][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.543795][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.548424][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.554014][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.557082][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.557100][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.559667][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.567562][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.578389][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.582610][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.586330][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.591141][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.595593][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.606110][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.609505][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.612053][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.620488][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.632315][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.632711][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.635084][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.638684][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.641702][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.646521][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.655303][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.655508][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.663310][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.666515][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.669251][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.671500][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.674898][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.677530][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.679998][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.683907][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.692486][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.695093][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.697455][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.701340][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.704498][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.707331][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.707823][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.710192][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.717032][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.720232][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.722525][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.724703][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.730676][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.733029][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.737359][ T7660] binder: 7659:7660 ioctl c0306201 80000300 returned -14 [ 139.741402][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.749380][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.758357][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.766181][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.775300][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.786422][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.796802][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.804036][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.812251][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.818784][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.825705][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.829951][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.839298][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.845005][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.849438][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.857062][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.864131][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.888468][ T7661] binder: 7659:7661 ioctl 4018620d 80000080 returned -16 [ 139.943206][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 140.210312][ T7692] random: crng reseeded on system resumption [ 140.222390][ T7692] Restarting kernel threads ... [ 140.224768][ T7692] Done restarting kernel threads. [ 140.308314][ T7707] syzkaller1: entered promiscuous mode [ 140.310623][ T7707] syzkaller1: entered allmulticast mode [ 140.393208][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 140.412011][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.534111][ T54] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 140.572017][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 140.582156][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 140.582871][ T55] usb 5-1: config 0 has no interfaces? [ 140.595132][ T55] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.601251][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.610286][ T55] usb 5-1: Product: syz [ 140.619174][ T55] usb 5-1: Manufacturer: syz [ 140.622032][ T55] usb 5-1: SerialNumber: syz [ 140.640211][ T55] usb 5-1: config 0 descriptor?? [ 140.682015][ T54] usb 6-1: Invalid ep0 maxpacket: 64 [ 140.814327][ T54] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 140.889084][ T6208] usb 5-1: USB disconnect, device number 14 [ 140.961646][ T54] usb 6-1: Invalid ep0 maxpacket: 64 [ 140.966270][ T54] usb usb6-port1: attempt power cycle [ 141.035066][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 141.039963][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 141.043650][ T9] usb 7-1: can't read configurations, error -71 [ 141.315937][ T54] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 141.342092][ T54] usb 6-1: Invalid ep0 maxpacket: 64 [ 141.471444][ T54] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 141.492162][ T54] usb 6-1: Invalid ep0 maxpacket: 64 [ 141.501445][ T54] usb usb6-port1: unable to enumerate USB device [ 142.052921][ T7752] lo speed is unknown, defaulting to 1000 [ 142.055019][ T7752] lo speed is unknown, defaulting to 1000 [ 142.057739][ T7752] lo speed is unknown, defaulting to 1000 [ 142.061772][ T7752] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.068242][ T7752] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 142.089516][ T7752] lo speed is unknown, defaulting to 1000 [ 142.099591][ T7752] lo speed is unknown, defaulting to 1000 [ 142.103584][ T7752] lo speed is unknown, defaulting to 1000 [ 142.107991][ T7752] lo speed is unknown, defaulting to 1000 [ 142.587688][ T7760] can0: slcan on ttyS3. [ 142.680902][ T7760] can0 (unregistered): slcan off ttyS3. [ 142.797125][ T7760] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 143.203448][ T7778] netlink: 'syz.3.378': attribute type 13 has an invalid length. [ 143.421722][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.426363][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.434188][ T7778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.441735][ T142] lo speed is unknown, defaulting to 1000 [ 143.444766][ T142] syz: Port: 1 Link ACTIVE [ 143.523325][ C2] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 143.526756][ C2] sr 2:0:0:0: [sr0] tag#10 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 143.556334][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 143.607940][ T7794] evm: overlay not supported [ 145.193099][ T7828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.394'. [ 145.196295][ T7828] netlink: 31 bytes leftover after parsing attributes in process `syz.1.394'. [ 145.199267][ T7828] netlink: 'syz.1.394': attribute type 6 has an invalid length. [ 145.203015][ T7828] netlink: 'syz.1.394': attribute type 5 has an invalid length. [ 145.205826][ T7828] netlink: 31 bytes leftover after parsing attributes in process `syz.1.394'. [ 145.236730][ T7817] tc_dump_action: action bad kind [ 145.293755][ T7829] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 145.300052][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 145.311141][ T7829] netlink: 'syz.3.392': attribute type 5 has an invalid length. [ 145.320045][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.392'. [ 145.328143][ T7829] geneve2: entered promiscuous mode [ 145.341258][ T7835] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 145.344056][ T7835] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.348010][ T7835] vhci_hcd vhci_hcd.0: Device attached [ 145.348082][ T7829] geneve2: entered allmulticast mode [ 145.358083][ T4725] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 145.363789][ T4725] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 145.366512][ T4725] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 145.369220][ T4725] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 145.380995][ T7835] random: crng reseeded on system resumption [ 145.385357][ T7839] netlink: 92 bytes leftover after parsing attributes in process `syz.1.396'. [ 145.424440][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.629360][ T54] usb 42-1: SetAddress Request (10) to port 0 [ 145.632241][ T54] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 146.039170][ T6036] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 146.189020][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 146.361337][ T7837] vhci_hcd: connection reset by peer [ 146.366669][ T12] vhci_hcd vhci_hcd.2: stop threads [ 146.368906][ T12] vhci_hcd vhci_hcd.2: release socket [ 146.379484][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 146.511689][ T6036] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.514875][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 146.521532][ T6036] usb 6-1: can't read configurations, error -71 [ 146.588406][ T7882] overlayfs: failed to resolve './file0': -2 [ 146.656379][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 146.664665][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 147.098705][ T142] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 147.185035][ T7911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 147.187299][ T7911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.191684][ T7911] vhci_hcd vhci_hcd.0: Device attached [ 147.259020][ T142] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 147.262487][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.265530][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.278637][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.282886][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.286763][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.291353][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.294509][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.298856][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.303113][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.307042][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.312223][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.317283][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.322549][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.325868][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.330308][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.334707][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.339015][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.343998][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.347727][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.351946][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.356210][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.360375][ T142] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 147.363852][ T142] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.369020][ T142] usb 7-1: config 64 interface 0 has no altsetting 0 [ 147.373403][ T142] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.376588][ T142] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.379466][ T142] usb 7-1: Product: syz [ 147.380929][ T142] usb 7-1: Manufacturer: syz [ 147.382706][ T142] usb 7-1: SerialNumber: syz [ 147.391674][ T142] yurex 7-1:64.0: USB YUREX device now attached to Yurex #0 [ 147.468380][ T55] usb 44-1: SetAddress Request (10) to port 0 [ 147.471491][ T55] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 147.515346][ T7915] netlink: 456 bytes leftover after parsing attributes in process `syz.1.411'. [ 147.896771][ T6354] usb 7-1: USB disconnect, device number 8 [ 147.902704][ T7913] vhci_hcd: connection reset by peer [ 147.913541][ T4725] vhci_hcd vhci_hcd.3: stop threads [ 147.914679][ T6354] yurex 7-1:64.0: USB YUREX #0 now disconnected [ 147.915912][ T4725] vhci_hcd vhci_hcd.3: release socket [ 147.938233][ T4725] vhci_hcd vhci_hcd.3: disconnect device [ 148.128124][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.279757][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.283536][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.288098][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.292561][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 148.297041][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 148.303420][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.307363][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.311072][ T9] usb 5-1: Product: syz [ 148.312919][ T9] usb 5-1: Manufacturer: syz [ 148.321618][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 148.323931][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 148.329483][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 148.331880][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 148.650798][ T6036] usb 5-1: USB disconnect, device number 15 [ 148.837743][ T6208] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 149.007685][ T6208] usb 7-1: Using ep0 maxpacket: 32 [ 149.347573][ T76] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 149.519545][ T6208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.526295][ T6208] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 149.531559][ T7969] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 149.531684][ T76] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.534461][ T7969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.540783][ T6208] usb 7-1: can't read configurations, error -71 [ 149.542427][ T7969] vhci_hcd vhci_hcd.0: Device attached [ 149.557513][ T76] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.563054][ T76] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.567784][ T76] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 149.572479][ T76] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 149.589218][ T76] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.593335][ T76] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.596846][ T76] usb 5-1: Product: syz [ 149.607283][ T76] usb 5-1: Manufacturer: syz [ 149.615632][ T76] cdc_wdm 5-1:1.0: skipping garbage [ 149.617595][ T76] cdc_wdm 5-1:1.0: skipping garbage [ 149.627552][ T76] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 149.630104][ T76] cdc_wdm 5-1:1.0: Unknown control protocol [ 149.645371][ T7969] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 149.732600][ T7973] bond1: (slave geneve2): making interface the new active one [ 149.733940][ T76] IPVS: starting estimator thread 0... [ 149.736840][ T7973] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.742191][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.745377][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.757494][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.761164][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.817368][ T6036] usb 40-1: SetAddress Request (10) to port 0 [ 149.824159][ T6036] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 149.837591][ T7975] IPVS: using max 45 ests per chain, 108000 per kthread [ 150.077508][ T7988] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 150.153253][ T7970] vhci_hcd: connection reset by peer [ 150.155687][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 150.159186][ T1243] vhci_hcd vhci_hcd.1: release socket [ 150.162568][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 150.168754][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.171871][ C0] cdc_wdm 5-1:1.0: Cannot schedule work [ 150.175978][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.179125][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.181845][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.184164][ C0] cdc_wdm 5-1:1.0: Cannot schedule work [ 150.187026][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.189623][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.191993][ C0] cdc_wdm 5-1:1.0: Cannot schedule work [ 150.194499][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.194872][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 150.194890][ T40] audit: type=1326 audit(1767813540.577:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.197194][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.200689][ T40] audit: type=1326 audit(1767813540.587:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.208744][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.208954][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.224378][ C0] cdc_wdm 5-1:1.0: Cannot schedule work [ 150.226952][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.229485][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.232150][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.234662][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.237233][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.239594][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.241669][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.243814][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.245908][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.246459][ T40] audit: type=1326 audit(1767813540.587:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.247920][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.255532][ T40] audit: type=1326 audit(1767813540.587:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.257818][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.258012][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.265973][ T40] audit: type=1326 audit(1767813540.587:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.267656][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.280562][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.282957][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.285351][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.287740][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.290155][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.292613][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.295103][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.297650][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.300075][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.302455][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.304859][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.307318][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.309771][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.312411][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.314533][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.316518][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.318729][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.320949][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.323401][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.325822][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.328123][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.330259][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.332341][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.334461][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.336474][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.338269][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.340681][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.343223][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.345188][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.347193][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.349148][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.351141][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.353104][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.355053][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.357171][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.359357][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.361604][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.363648][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.365635][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.367592][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.369947][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.372443][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.374563][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.376496][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.378511][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.380716][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.382784][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.384840][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.386823][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.388772][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.390818][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.392836][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.394808][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.396808][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.398884][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.401073][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.403063][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.404999][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.406984][ C0] cdc_wdm 5-1:1.0: Stall on int endpoint [ 150.409139][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 150.433096][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 150.435876][ T9] usb 5-1: USB disconnect, device number 16 [ 150.656839][ T54] usb 42-1: device descriptor read/8, error -110 [ 151.057553][ T54] usb usb42-port1: attempt power cycle [ 151.222872][ T8016] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 151.225992][ T8016] netlink: 224 bytes leftover after parsing attributes in process `syz.0.428'. [ 151.243141][ T8016] (syz.0.428,8016,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 151.246296][ T8016] (syz.0.428,8016,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 151.248819][ T8016] (syz.0.428,8016,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 151.251825][ T8016] (syz.0.428,8016,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 151.379917][ T8020] netlink: 56 bytes leftover after parsing attributes in process `'. [ 151.567205][ T8035] overlayfs: failed to resolve './file1': -2 [ 151.641856][ T54] usb usb42-port1: unable to enumerate USB device [ 152.448784][ T8049] sp0: Synchronizing with TNC [ 152.498476][ T55] usb 44-1: device descriptor read/8, error -110 [ 152.787722][ T8058] trusted_key: encrypted_key: insufficient parameters specified [ 152.792884][ T8058] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 152.799409][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.442'. [ 152.804309][ T8058] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.857231][ T8064] netlink: 72 bytes leftover after parsing attributes in process `syz.3.444'. [ 152.936115][ T55] usb usb44-port1: attempt power cycle [ 152.937610][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 152.955731][ T142] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 153.105513][ T142] usb 5-1: Invalid ep0 maxpacket: 32 [ 153.235526][ T142] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 153.385452][ T142] usb 5-1: Invalid ep0 maxpacket: 32 [ 153.389010][ T142] usb usb5-port1: attempt power cycle [ 153.519096][ T55] usb usb44-port1: unable to enumerate USB device [ 153.725373][ T142] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 153.746043][ T142] usb 5-1: Invalid ep0 maxpacket: 32 [ 153.875248][ T142] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 153.895579][ T142] usb 5-1: Invalid ep0 maxpacket: 32 [ 153.898099][ T142] usb usb5-port1: unable to enumerate USB device [ 154.362277][ T8094] syzkaller0: entered promiscuous mode [ 154.364980][ T8094] syzkaller0: entered allmulticast mode [ 154.463750][ T8097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.612925][ T8097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.782435][ T8097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.857993][ T8097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.895638][ T6036] usb 40-1: device descriptor read/8, error -110 [ 154.936287][ T1143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.955499][ T4725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.969793][ T4725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.980951][ T4725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.118096][ T8111] netlink: 'syz.3.456': attribute type 23 has an invalid length. [ 155.285246][ T6036] usb usb40-port1: attempt power cycle [ 155.844997][ T6036] usb usb40-port1: unable to enumerate USB device [ 156.331622][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.343556][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'. [ 157.216952][ T8161] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 157.220076][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.234225][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 157.423474][ T8162] vhci_hcd: connection closed [ 157.423946][ T4725] vhci_hcd vhci_hcd.3: stop threads [ 157.428737][ T4725] vhci_hcd vhci_hcd.3: release socket [ 157.431334][ T4725] vhci_hcd vhci_hcd.3: disconnect device [ 157.601467][ T8176] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 157.759628][ T55] libceph: connect (1)[c::]:6789 error -101 [ 157.762419][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 157.807714][ T8180] ceph: No mds server is up or the cluster is laggy [ 157.904487][ T6208] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.054100][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 158.059213][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 158.063366][ T6208] usb 5-1: Using ep0 maxpacket: 32 [ 158.071241][ T6208] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.075206][ T6208] usb 5-1: config 0 has no interface number 0 [ 158.080443][ T6208] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 158.085236][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.088563][ T6208] usb 5-1: Product: syz [ 158.090446][ T6208] usb 5-1: Manufacturer: syz [ 158.092430][ T6208] usb 5-1: SerialNumber: syz [ 158.097262][ T6208] usb 5-1: config 0 descriptor?? [ 158.107317][ T6208] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 158.111360][ T6208] usb 5-1: selecting invalid altsetting 1 [ 158.114904][ T6208] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 158.127096][ T6208] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.131854][ T6208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 158.139208][ T6208] usb 5-1: media controller created [ 158.164424][ T6208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.336555][ T8194] 9p: Bad value for 'rfdno' [ 158.386498][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.476'. [ 158.870173][ T8209] bridge_slave_0: left allmulticast mode [ 158.872269][ T8209] bridge_slave_0: left promiscuous mode [ 158.874699][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.293248][ T6208] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 159.296845][ T6208] zl10353_read_register: readreg error (reg=127, ret==-110) [ 159.653935][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 159.661229][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 159.832191][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 160.276572][ T8245] netlink: 'syz.2.493': attribute type 4 has an invalid length. [ 160.677945][ T6036] usb 5-1: USB disconnect, device number 21 [ 160.873563][ T40] audit: type=1326 audit(1767813551.261:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.881110][ T40] audit: type=1326 audit(1767813551.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.888948][ T40] audit: type=1326 audit(1767813551.261:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.923265][ T40] audit: type=1326 audit(1767813551.261:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.930595][ T40] audit: type=1326 audit(1767813551.261:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.939399][ T8274] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:0 [ 160.941980][ T40] audit: type=1326 audit(1767813551.271:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 160.956417][ T40] audit: type=1326 audit(1767813551.271:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 161.778084][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 161.845386][ T8304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 161.848995][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.855523][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 161.898111][ T8304] sp0: Synchronizing with TNC [ 162.133705][ T8315] xt_HMARK: proto mask must be zero with L3 mode [ 162.163208][ T9] usb 40-1: SetAddress Request (14) to port 0 [ 162.165307][ T9] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 162.244270][ T8305] vhci_hcd: connection reset by peer [ 162.246388][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 162.248660][ T1243] vhci_hcd vhci_hcd.1: release socket [ 162.251198][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 163.332234][ T8348] syzkaller1: entered promiscuous mode [ 163.334235][ T8348] syzkaller1: entered allmulticast mode [ 163.721354][ T8352] netlink: 'syz.1.519': attribute type 12 has an invalid length. [ 163.808623][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 163.958900][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 164.096240][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 164.100126][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 164.105316][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 164.136188][ T8370] syzkaller0: entered promiscuous mode [ 164.138377][ T8370] syzkaller0: entered allmulticast mode [ 164.400166][ T8378] fuse: Bad value for 'fd' [ 164.495334][ T8378] input: syz0 as /devices/virtual/input/input8 [ 165.018286][ T8400] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 165.051427][ T8400] lo speed is unknown, defaulting to 1000 [ 165.552552][ T8405] syzkaller0: entered promiscuous mode [ 165.563018][ T8405] syzkaller0: entered allmulticast mode [ 166.126043][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 166.229493][ T8436] xt_TCPMSS: Only works on TCP SYN packets [ 166.288196][ T8438] tipc: Enabling of bearer rejected, failed to enable media [ 166.303050][ T5986] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 166.463256][ T5986] usb 7-1: Using ep0 maxpacket: 32 [ 166.467005][ T5986] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 166.469613][ T5986] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.473637][ T5986] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.477163][ T5986] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.481460][ T5986] usb 7-1: config 0 interface 0 has no altsetting 0 [ 166.486747][ T5986] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 166.490027][ T5986] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 166.492793][ T5986] usb 7-1: Product: syz [ 166.494938][ T5986] usb 7-1: Manufacturer: syz [ 166.496683][ T5986] usb 7-1: SerialNumber: syz [ 166.545828][ T5986] usb 7-1: config 0 descriptor?? [ 166.551442][ T5986] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.557038][ T5986] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 168.003659][ T9] usb 40-1: device descriptor read/8, error -110 [ 168.042058][ T8452] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 168.045717][ T8452] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 168.448962][ T9] usb usb40-port1: attempt power cycle [ 168.924308][ T8467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.054155][ T76] usb 7-1: USB disconnect, device number 11 [ 169.061741][ T76] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 169.074626][ T9] usb usb40-port1: unable to enumerate USB device [ 169.744507][ T40] audit: type=1326 audit(1767813560.131:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.802331][ T8487] cgroup: Unknown subsys name 'measure' [ 169.810586][ T40] audit: type=1326 audit(1767813560.131:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.820618][ T40] audit: type=1326 audit(1767813560.131:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.829646][ T8487] lo speed is unknown, defaulting to 1000 [ 169.837272][ T40] audit: type=1326 audit(1767813560.201:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.851799][ T40] audit: type=1326 audit(1767813560.201:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.893596][ T40] audit: type=1326 audit(1767813560.281:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.901746][ T40] audit: type=1326 audit(1767813560.281:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.909427][ T40] audit: type=1326 audit(1767813560.281:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.921676][ T40] audit: type=1326 audit(1767813560.281:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 169.930439][ T8489] syzkaller0: entered promiscuous mode [ 169.932363][ T8489] syzkaller0: entered allmulticast mode [ 169.941691][ T40] audit: type=1326 audit(1767813560.281:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 170.057102][ T8493] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.560843][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 170.564997][ T8506] block nbd0: Unsupported socket: should be TCP or UNIX. [ 170.640267][ T8507] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.558'. [ 170.646423][ T8505] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.558'. [ 170.651449][ T8508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 170.654149][ T8508] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.658917][ T8508] vhci_hcd vhci_hcd.0: Device attached [ 170.843172][ T6354] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 170.903831][ T6354] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 171.189741][ T8509] vhci_hcd: connection reset by peer [ 171.192419][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 171.194917][ T1146] vhci_hcd vhci_hcd.2: release socket [ 171.197267][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 171.282623][ T5957] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 171.559359][ T8544] lo speed is unknown, defaulting to 1000 [ 172.062993][ T6036] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 172.213074][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 172.260315][ T6036] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.272562][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 172.276647][ T6036] usb 6-1: can't read configurations, error -71 [ 172.661525][ T8569] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 172.664296][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.674850][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 173.295148][ T8570] vhci_hcd: connection closed [ 173.296542][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 173.303025][ T1146] vhci_hcd vhci_hcd.2: release socket [ 173.307413][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 173.653130][ T6208] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.805706][ T6208] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.810372][ T6208] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.818058][ T6208] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.822626][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.826798][ T6208] usb 5-1: Product: syz [ 173.828728][ T6208] usb 5-1: Manufacturer: syz [ 173.830752][ T6208] usb 5-1: SerialNumber: syz [ 173.836767][ T6208] usb 5-1: config 0 descriptor?? [ 173.850936][ T6208] usb 5-1: selecting invalid altsetting 0 [ 173.970029][ T8595] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.056724][ T8600] 9p: Bad value for 'rfdno' [ 174.186506][ T6036] usb 5-1: USB disconnect, device number 22 [ 174.298939][ T8612] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 174.581212][ T8625] syzkaller0: entered promiscuous mode [ 174.583817][ T8625] syzkaller0: entered allmulticast mode [ 174.770100][ T8630] lo: entered promiscuous mode [ 175.569823][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz.0.592'. [ 175.627669][ T8655] lo speed is unknown, defaulting to 1000 [ 175.638003][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 175.662403][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'. [ 175.780779][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 175.804149][ T8658] nbd: device at index 64 is going down [ 175.807437][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 175.818843][ T8662] nbd: device at index 64 is going down [ 175.972794][ T8671] syzkaller0: entered promiscuous mode [ 175.975948][ T8671] syzkaller0: entered allmulticast mode [ 176.234177][ T8633] syz.3.587 (8633) used greatest stack depth: 19080 bytes left [ 176.244446][ T8673] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 176.246794][ T8673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.251123][ T8673] vhci_hcd vhci_hcd.0: Device attached [ 176.257948][ T8674] vhci_hcd: connection closed [ 176.258144][ T8426] vhci_hcd vhci_hcd.0: stop threads [ 176.261881][ T8426] vhci_hcd vhci_hcd.0: release socket [ 176.267478][ T8426] vhci_hcd vhci_hcd.0: disconnect device [ 176.363254][ T6354] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 176.595619][ T8684] autofs: Unknown parameter '' [ 176.797640][ T8688] binder: 8682:8688 ioctl 0 80000040 returned -22 [ 178.653124][ T5955] Bluetooth: hci4: command 0xfc11 tx timeout [ 178.653178][ T5957] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 178.858536][ T8718] fuse: Unknown parameter 'ž' [ 179.262224][ T8724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.075776][ T8731] syzkaller1: entered promiscuous mode [ 180.078403][ T8731] syzkaller1: entered allmulticast mode [ 180.516561][ T8738] tipc: Started in network mode [ 180.518832][ T8738] tipc: Node identity ac14140f, cluster identity 4711 [ 180.524508][ T8738] tipc: New replicast peer: 255.255.255.255 [ 180.527116][ T8738] tipc: Enabled bearer , priority 10 [ 180.666627][ T916] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 180.687017][ T8738] could not allocate digest TFM handle cryptd(blake2b-160) [ 180.691566][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 180.691579][ T40] audit: type=1326 audit(1767813571.071:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.702514][ T40] audit: type=1326 audit(1767813571.071:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.711595][ T40] audit: type=1326 audit(1767813571.081:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.718693][ T40] audit: type=1326 audit(1767813571.081:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.725557][ T40] audit: type=1326 audit(1767813571.091:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.732282][ T40] audit: type=1326 audit(1767813571.091:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.742125][ T40] audit: type=1326 audit(1767813571.091:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.749076][ T40] audit: type=1326 audit(1767813571.091:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.756034][ T40] audit: type=1326 audit(1767813571.091:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.763381][ T40] audit: type=1326 audit(1767813571.091:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.1.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 180.982652][ T8759] 9p: Bad value for 'wfdno' [ 180.983915][ T8760] 9p: Bad value for 'wfdno' [ 181.106309][ T916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 181.117646][ T916] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.120569][ T916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.123528][ T916] usb 8-1: Product: syz [ 181.127646][ T916] usb 8-1: Manufacturer: syz [ 181.129251][ T916] usb 8-1: SerialNumber: syz [ 181.135470][ T916] usb 8-1: config 0 descriptor?? [ 181.337754][ T8772] overlay: Unknown parameter 'uid<00000000000000000000' [ 181.493657][ T142] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 181.611685][ T55] tipc: Node number set to 2886997007 [ 181.693267][ T76] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 181.696827][ T916] usb 8-1: USB disconnect, device number 10 [ 181.863022][ T76] usb 6-1: Using ep0 maxpacket: 32 [ 182.338129][ T8796] netlink: 72 bytes leftover after parsing attributes in process `syz.3.622'. [ 182.471163][ T8783] input: syz1 as /devices/virtual/input/input11 [ 182.814917][ T76] usb 6-1: unable to get BOS descriptor or descriptor too short [ 182.821933][ T76] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 182.829972][ T76] usb 6-1: can't read configurations, error -71 [ 182.931590][ T8823] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 182.946903][ T8823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.977334][ T8823] bond1: (slave veth0_to_bond): making interface the new active one [ 182.980839][ T8823] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.304773][ T8838] sctp: [Deprecated]: syz.2.627 (pid 8838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.304773][ T8838] Use struct sctp_sack_info instead [ 183.563209][ T6208] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 183.723007][ T6208] usb 7-1: Using ep0 maxpacket: 8 [ 183.726433][ T6208] usb 7-1: config 4 has an invalid interface number: 138 but max is 3 [ 183.728918][ T6208] usb 7-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 183.732229][ T6208] usb 7-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 183.735190][ T6208] usb 7-1: config 4 has no interface number 0 [ 183.737212][ T6208] usb 7-1: config 4 interface 138 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 183.740825][ T6208] usb 7-1: config 4 interface 138 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1024 [ 183.745028][ T6208] usb 7-1: config 4 interface 138 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 183.748560][ T6208] usb 7-1: config 4 interface 138 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 183.752087][ T6208] usb 7-1: config 4 interface 138 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1023 [ 183.755391][ T6208] usb 7-1: config 4 interface 138 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 183.759216][ T6208] usb 7-1: config 4 interface 138 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 183.763938][ T6208] usb 7-1: config 4 interface 138 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 183.768292][ T6208] usb 7-1: config 4 interface 138 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 183.772243][ T6208] usb 7-1: config 4 interface 138 altsetting 3 has 11 endpoint descriptors, different from the interface descriptor's value: 16 [ 183.777471][ T6208] usb 7-1: config 4 interface 138 has no altsetting 0 [ 183.782194][ T6208] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=eb.8b [ 183.786130][ T6208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.788856][ T6208] usb 7-1: Product: syz [ 183.790540][ T6208] usb 7-1: Manufacturer: syz [ 183.792313][ T6208] usb 7-1: SerialNumber: syz [ 183.813002][ T6208] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 183.816263][ T6208] usb 7-1: no configuration chosen from 1 choice [ 185.067089][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 185.070424][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 185.073399][ T8861] netlink: 'syz.1.632': attribute type 13 has an invalid length. [ 185.075895][ T8861] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 185.281724][ T8866] ./file0: Can't open blockdev [ 185.319002][ T8868] netlink: 'syz.3.635': attribute type 64 has an invalid length. [ 185.323280][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 185.713129][ T142] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 185.862989][ T142] usb 8-1: Using ep0 maxpacket: 32 [ 186.304897][ T8861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 186.359625][ T6036] usb 7-1: USB disconnect, device number 12 [ 186.377017][ T142] usb 8-1: unable to get BOS descriptor or descriptor too short [ 186.393468][ T142] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 186.407621][ T142] usb 8-1: can't read configurations, error -71 [ 186.817744][ T8907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.852695][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.864423][ T8908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.639'. [ 187.109164][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 187.109187][ T40] audit: type=1326 audit(1767813577.491:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.642" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 187.232252][ T8913] bridge_slave_0: left allmulticast mode [ 187.235191][ T8913] bridge_slave_0: left promiscuous mode [ 187.237851][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.244057][ T8913] bridge_slave_1: left allmulticast mode [ 187.247209][ T8913] bridge_slave_1: left promiscuous mode [ 187.250057][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.258556][ T8913] bond0: (slave bond_slave_0): Releasing backup interface [ 187.264882][ T8913] bond0: (slave bond_slave_1): Releasing backup interface [ 187.274391][ T8913] team0: Port device team_slave_0 removed [ 187.279946][ T8913] team0: Port device team_slave_1 removed [ 187.286868][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.291933][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.298826][ T8913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.312114][ T8914] team0: Mode changed to "loadbalance" [ 187.321658][ T8913] vlan0: entered promiscuous mode [ 187.329112][ T8913] tipc: Started in network mode [ 187.331336][ T8913] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 187.335346][ T8913] tipc: Enabled bearer , priority 0 [ 188.109327][ T8918] overlay: ./bus is not a directory [ 188.473707][ T6208] tipc: Node number set to 11578026 [ 188.764069][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 188.967916][ T8948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.710329][ T8956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.653'. [ 189.799188][ T8955] netlink: 88 bytes leftover after parsing attributes in process `syz.0.652'. [ 189.806255][ T8962] netlink: 'syz.0.652': attribute type 21 has an invalid length. [ 189.808638][ T8962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.652'. [ 189.811839][ T8962] netlink: 'syz.0.652': attribute type 4 has an invalid length. [ 189.814293][ T8962] netlink: 3 bytes leftover after parsing attributes in process `syz.0.652'. [ 189.858513][ T8965] syzkaller1: entered promiscuous mode [ 189.860372][ T8965] syzkaller1: entered allmulticast mode [ 189.961646][ T40] audit: type=1326 audit(1767813580.341:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 189.970741][ T40] audit: type=1326 audit(1767813580.341:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 189.979347][ T40] audit: type=1326 audit(1767813580.341:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 189.988731][ T40] audit: type=1326 audit(1767813580.351:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 189.997515][ T40] audit: type=1326 audit(1767813580.351:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 190.006712][ T40] audit: type=1326 audit(1767813580.351:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 190.017522][ T40] audit: type=1326 audit(1767813580.371:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 190.028958][ T40] audit: type=1326 audit(1767813580.411:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 190.037955][ T40] audit: type=1326 audit(1767813580.411:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 190.065583][ T8969] netlink: 120 bytes leftover after parsing attributes in process `syz.2.657'. [ 190.073051][ T8966] netlink: 'syz.1.655': attribute type 21 has an invalid length. [ 190.075913][ T8966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.655'. [ 190.078823][ T8966] netlink: 'syz.1.655': attribute type 4 has an invalid length. [ 190.081293][ T8966] netlink: 'syz.1.655': attribute type 3 has an invalid length. [ 190.085247][ T8966] netlink: 3 bytes leftover after parsing attributes in process `syz.1.655'. [ 190.622557][ T8984] netlink: 'syz.0.663': attribute type 12 has an invalid length. [ 190.625267][ T8984] netlink: 'syz.0.663': attribute type 29 has an invalid length. [ 190.627840][ T8984] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 190.630428][ T8984] netlink: 'syz.0.663': attribute type 2 has an invalid length. [ 190.633036][ T8984] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 190.635662][ T8984] netlink: 228 bytes leftover after parsing attributes in process `syz.0.663'. [ 190.874630][ T8991] lo speed is unknown, defaulting to 1000 [ 191.212679][ T9001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 191.215500][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 191.233234][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 191.467138][ T8984] syz.0.663 (8984) used greatest stack depth: 18648 bytes left [ 191.503077][ T6208] usb 40-1: SetAddress Request (18) to port 0 [ 191.505832][ T6208] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 192.453975][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 192.457321][ T9027] syzkaller1: entered allmulticast mode [ 192.459651][ T9027] program syz.0.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.034171][ T9033] lo speed is unknown, defaulting to 1000 [ 193.039043][ T9002] vhci_hcd: connection reset by peer [ 193.041499][ T4725] vhci_hcd vhci_hcd.1: stop threads [ 193.043413][ T4725] vhci_hcd vhci_hcd.1: release socket [ 193.045376][ T4725] vhci_hcd vhci_hcd.1: disconnect device [ 193.973692][ T9048] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 194.630294][ T142] kernel read not supported for file 628/task/629/cmdline (pid: 142 comm: kworker/2:2) [ 195.151481][ T9097] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 195.310752][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 195.310771][ T40] audit: type=1326 audit(1767813585.691:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.334333][ T40] audit: type=1326 audit(1767813585.691:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.342806][ T40] audit: type=1326 audit(1767813585.691:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.351289][ T40] audit: type=1326 audit(1767813585.701:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.387013][ T40] audit: type=1326 audit(1767813585.701:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.412196][ T40] audit: type=1326 audit(1767813585.701:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.433260][ T40] audit: type=1326 audit(1767813585.701:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.443358][ T40] audit: type=1326 audit(1767813585.701:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.453504][ T40] audit: type=1326 audit(1767813585.701:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.460762][ T40] audit: type=1326 audit(1767813585.701:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.687" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 195.683050][ T54] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 195.823039][ T54] usb 7-1: device descriptor read/64, error -71 [ 196.073257][ T54] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 196.473018][ T54] usb 7-1: device descriptor read/64, error -71 [ 196.573921][ T6208] usb 40-1: device descriptor read/8, error -110 [ 196.583494][ T54] usb usb7-port1: attempt power cycle [ 196.660284][ T9130] syzkaller1: entered promiscuous mode [ 196.663190][ T9130] syzkaller1: entered allmulticast mode [ 196.943051][ T54] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 196.977791][ T6208] usb usb40-port1: attempt power cycle [ 196.982686][ T54] usb 7-1: device descriptor read/8, error -71 [ 197.224911][ T54] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 197.251301][ T54] usb 7-1: device descriptor read/8, error -71 [ 197.374525][ T54] usb usb7-port1: unable to enumerate USB device [ 197.575659][ T6208] usb usb40-port1: unable to enumerate USB device [ 197.661567][ T9143] __nla_validate_parse: 1 callbacks suppressed [ 197.661585][ T9143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.699'. [ 197.673231][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 197.933217][ T9156] netlink: 72 bytes leftover after parsing attributes in process `syz.0.702'. [ 198.015447][ T9157] netlink: 72 bytes leftover after parsing attributes in process `syz.0.702'. [ 198.979003][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.988403][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 199.061149][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.527029][ T5982] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 200.073071][ T5982] usb 7-1: Using ep0 maxpacket: 32 [ 200.316435][ T9225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.333315][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'. [ 200.384231][ T5982] usb 7-1: unable to get BOS descriptor or descriptor too short [ 200.388776][ T5982] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 200.393074][ T5982] usb 7-1: can't read configurations, error -71 [ 201.013411][ T9250] 9p: Bad value for 'wfdno' [ 201.016956][ T9250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.021627][ T9250] overlayfs: missing 'lowerdir' [ 201.028815][ T9250] program syz.2.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.411447][ T9252] xt_NFQUEUE: number of total queues is 0 [ 201.422514][ T9252] xt_NFQUEUE: number of total queues is 0 [ 201.735126][ T9263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.726'. [ 203.697562][ T9271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.706146][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.727'. [ 203.805948][ T9273] lo speed is unknown, defaulting to 1000 [ 203.808021][ T9273] lo speed is unknown, defaulting to 1000 [ 203.810521][ T9273] lo speed is unknown, defaulting to 1000 [ 203.817573][ T9273] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.830673][ T9273] lo speed is unknown, defaulting to 1000 [ 203.833834][ T9273] lo speed is unknown, defaulting to 1000 [ 203.836614][ T9273] lo speed is unknown, defaulting to 1000 [ 203.839245][ T9273] lo speed is unknown, defaulting to 1000 [ 203.975033][ T9281] syz.0.730 (9281): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.423149][ T54] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 204.583084][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 204.662575][ T9300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.669596][ T9300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.731'. [ 204.920561][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.925705][ T54] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 204.928981][ T54] usb 6-1: can't read configurations, error -71 [ 206.873079][ T6036] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 207.024391][ T6036] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.027931][ T6036] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.034626][ T6036] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 207.038863][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.042494][ T6036] usb 7-1: Product: syz [ 207.044557][ T6036] usb 7-1: Manufacturer: syz [ 207.046819][ T6036] usb 7-1: SerialNumber: syz [ 207.063392][ T6036] usb 7-1: config 0 descriptor?? [ 207.360496][ T54] usb 7-1: USB disconnect, device number 19 [ 207.773132][ T5955] ================================================================== [ 207.776847][ T5955] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x5b/0x390 [ 207.780614][ T5955] Write of size 4 at addr ffff888073c40010 by task kworker/u33:4/5955 [ 207.786078][ T5955] [ 207.787231][ T5955] CPU: 3 UID: 0 PID: 5955 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.787260][ T5955] Tainted: [L]=SOFTLOCKUP [ 207.787266][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.787280][ T5955] Workqueue: hci2 hci_cmd_sync_work [ 207.787316][ T5955] Call Trace: [ 207.787326][ T5955] [ 207.787335][ T5955] dump_stack_lvl+0x116/0x1f0 [ 207.787366][ T5955] print_report+0xcd/0x630 [ 207.787393][ T5955] ? __virt_addr_valid+0x81/0x610 [ 207.787420][ T5955] ? __phys_addr+0xe8/0x180 [ 207.787449][ T5955] ? le_read_features_complete+0x5b/0x390 [ 207.787473][ T5955] kasan_report+0xe0/0x110 [ 207.787501][ T5955] ? le_read_features_complete+0x5b/0x390 [ 207.787518][ T5955] kasan_check_range+0x100/0x1b0 [ 207.787536][ T5955] le_read_features_complete+0x5b/0x390 [ 207.787556][ T5955] hci_cmd_sync_work+0x1ff/0x470 [ 207.787585][ T5955] ? __pfx_le_read_features_complete+0x10/0x10 [ 207.787606][ T5955] process_one_work+0x9ba/0x1b20 [ 207.787632][ T5955] ? __pfx_process_one_work+0x10/0x10 [ 207.787655][ T5955] ? assign_work+0x1a0/0x250 [ 207.787672][ T5955] worker_thread+0x6c8/0xf10 [ 207.787697][ T5955] ? __pfx_worker_thread+0x10/0x10 [ 207.787719][ T5955] kthread+0x3c5/0x780 [ 207.787740][ T5955] ? __pfx_kthread+0x10/0x10 [ 207.787760][ T5955] ? rcu_is_watching+0x12/0xc0 [ 207.787788][ T5955] ? __pfx_kthread+0x10/0x10 [ 207.787805][ T5955] ret_from_fork+0x983/0xb10 [ 207.787822][ T5955] ? __pfx_ret_from_fork+0x10/0x10 [ 207.787843][ T5955] ? __switch_to+0x7af/0x10d0 [ 207.787870][ T5955] ? __pfx_kthread+0x10/0x10 [ 207.787890][ T5955] ret_from_fork_asm+0x1a/0x30 [ 207.787927][ T5955] [ 207.787934][ T5955] [ 207.862988][ T5955] Allocated by task 5957: [ 207.864840][ T5955] kasan_save_stack+0x33/0x60 [ 207.867113][ T5955] kasan_save_track+0x14/0x30 [ 207.869271][ T5955] __kasan_kmalloc+0xaa/0xb0 [ 207.871335][ T5955] __hci_conn_add+0xf8/0x1cc0 [ 207.873420][ T5955] hci_conn_add_unset+0x76/0x130 [ 207.875719][ T5955] le_conn_complete_evt+0x639/0x1fa0 [ 207.878260][ T5955] hci_le_conn_complete_evt+0x23c/0x3a0 [ 207.880783][ T5955] hci_le_meta_evt+0x357/0x610 [ 207.882937][ T5955] hci_event_packet+0x685/0x1210 [ 207.885360][ T5955] hci_rx_work+0x2c9/0x1020 [ 207.887724][ T5955] process_one_work+0x9ba/0x1b20 [ 207.890065][ T5955] worker_thread+0x6c8/0xf10 [ 207.892681][ T5955] kthread+0x3c5/0x780 [ 207.894764][ T5955] ret_from_fork+0x983/0xb10 [ 207.896819][ T5955] ret_from_fork_asm+0x1a/0x30 [ 207.898883][ T5955] [ 207.900008][ T5955] Freed by task 5957: [ 207.901765][ T5955] kasan_save_stack+0x33/0x60 [ 207.903773][ T5955] kasan_save_track+0x14/0x30 [ 207.905820][ T5955] kasan_save_free_info+0x3b/0x60 [ 207.908061][ T5955] __kasan_slab_free+0x5f/0x80 [ 207.910344][ T5955] kfree+0x2f8/0x6e0 [ 207.912155][ T5955] device_release+0xa4/0x240 [ 207.914308][ T5955] kobject_put+0x1ef/0x6f0 [ 207.916265][ T5955] device_unregister+0x2f/0xe0 [ 207.918301][ T5955] hci_conn_del_sysfs+0xdd/0x1a0 [ 207.920661][ T5955] hci_conn_del+0x680/0x11d0 [ 207.922568][ T5955] hci_disconn_complete_evt+0x410/0xa30 [ 207.924906][ T5955] hci_event_packet+0xa39/0x1210 [ 207.927052][ T5955] hci_rx_work+0x2c9/0x1020 [ 207.929489][ T5955] process_one_work+0x9ba/0x1b20 [ 207.932045][ T5955] worker_thread+0x6c8/0xf10 [ 207.934370][ T5955] kthread+0x3c5/0x780 [ 207.936335][ T5955] ret_from_fork+0x983/0xb10 [ 207.938332][ T5955] ret_from_fork_asm+0x1a/0x30 [ 207.940470][ T5955] [ 207.941539][ T5955] The buggy address belongs to the object at ffff888073c40000 [ 207.941539][ T5955] which belongs to the cache kmalloc-8k of size 8192 [ 207.948200][ T5955] The buggy address is located 16 bytes inside of [ 207.948200][ T5955] freed 8192-byte region [ffff888073c40000, ffff888073c42000) [ 207.954628][ T5955] [ 207.955677][ T5955] The buggy address belongs to the physical page: [ 207.958444][ T5955] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73c40 [ 207.962749][ T5955] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 207.966374][ T5955] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 207.970158][ T5955] page_type: f5(slab) [ 207.971991][ T5955] raw: 04fff00000000040 ffff88801b443180 ffffea0000928c00 0000000000000004 [ 207.976054][ T5955] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 207.979854][ T5955] head: 04fff00000000040 ffff88801b443180 ffffea0000928c00 0000000000000004 [ 207.983764][ T5955] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 207.988026][ T5955] head: 04fff00000000003 ffffea0001cf1001 00000000ffffffff 00000000ffffffff [ 207.991779][ T5955] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 207.995592][ T5955] page dumped because: kasan: bad access detected [ 207.998366][ T5955] page_owner tracks the page as allocated [ 208.000816][ T5955] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9128, tgid 9127 (syz.3.694), ts 196580555096, free_ts 195353781196 [ 208.010902][ T5955] post_alloc_hook+0x1af/0x220 [ 208.013715][ T5955] get_page_from_freelist+0xd0b/0x31a0 [ 208.016166][ T5955] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 208.018603][ T5955] alloc_pages_mpol+0x1fb/0x550 [ 208.020762][ T5955] new_slab+0x2c3/0x430 [ 208.022510][ T5955] ___slab_alloc+0xe18/0x1c90 [ 208.024616][ T5955] __slab_alloc.constprop.0+0x63/0x110 [ 208.026860][ T5955] __kmalloc_noprof+0x4fc/0x910 [ 208.028985][ T5955] snd_seq_oss_readq_new+0x96/0x2c0 [ 208.031214][ T5955] snd_seq_oss_open+0x54b/0xa40 [ 208.033454][ T5955] odev_open+0x79/0xc0 [ 208.035292][ T5955] soundcore_open+0x40c/0x580 [ 208.037533][ T5955] chrdev_open+0x234/0x6a0 [ 208.039542][ T5955] do_dentry_open+0x748/0x1590 [ 208.041616][ T5955] vfs_open+0x82/0x3f0 [ 208.043376][ T5955] path_openat+0x2078/0x3140 [ 208.045651][ T5955] page last free pid 54 tgid 54 stack trace: [ 208.048676][ T5955] __free_frozen_pages+0x7df/0x1170 [ 208.050996][ T5955] __put_partials+0x130/0x170 [ 208.053168][ T5955] qlist_free_all+0x4c/0xf0 [ 208.055560][ T5955] kasan_quarantine_reduce+0x195/0x1e0 [ 208.058043][ T5955] __kasan_slab_alloc+0x69/0x90 [ 208.060186][ T5955] kmem_cache_alloc_node_noprof+0x298/0x800 [ 208.062695][ T5955] __alloc_skb+0x156/0x410 [ 208.064799][ T5955] mld_newpack.isra.0+0x18e/0xa20 [ 208.067617][ T5955] add_grhead+0x299/0x340 [ 208.069651][ T5955] add_grec+0x11b5/0x1720 [ 208.071597][ T5955] mld_ifc_work+0x5f7/0xbf0 [ 208.074066][ T5955] process_one_work+0x9ba/0x1b20 [ 208.076580][ T5955] worker_thread+0x6c8/0xf10 [ 208.078641][ T5955] kthread+0x3c5/0x780 [ 208.080474][ T5955] ret_from_fork+0x983/0xb10 [ 208.082520][ T5955] ret_from_fork_asm+0x1a/0x30 [ 208.084834][ T5955] [ 208.085867][ T5955] Memory state around the buggy address: [ 208.088213][ T5955] ffff888073c3ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.091884][ T5955] ffff888073c3ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.095755][ T5955] >ffff888073c40000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.099562][ T5955] ^ [ 208.101556][ T5955] ffff888073c40080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.104924][ T5955] ffff888073c40100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.108626][ T5955] ================================================================== [ 208.113212][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.122964][ T5955] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.126627][ T5955] CPU: 3 UID: 0 PID: 5955 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.132208][ T5955] Tainted: [L]=SOFTLOCKUP [ 208.134434][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.139141][ T5955] Workqueue: hci2 hci_cmd_sync_work [ 208.141405][ T5955] Call Trace: [ 208.142842][ T5955] [ 208.144111][ T5955] dump_stack_lvl+0x3d/0x1f0 [ 208.146137][ T5955] vpanic+0x640/0x6f0 [ 208.148046][ T5955] panic+0xca/0xd0 [ 208.149825][ T5955] ? __pfx_panic+0x10/0x10 [ 208.151768][ T5955] ? le_read_features_complete+0x5b/0x390 [ 208.154285][ T5955] ? preempt_schedule_common+0x44/0xc0 [ 208.157057][ T5955] ? preempt_schedule_thunk+0x16/0x30 [ 208.159759][ T5955] ? check_panic_on_warn+0x1f/0xb0 [ 208.162011][ T5955] check_panic_on_warn+0xab/0xb0 [ 208.164139][ T5955] end_report+0x107/0x160 [ 208.166113][ T5955] kasan_report+0xee/0x110 [ 208.168230][ T5955] ? le_read_features_complete+0x5b/0x390 [ 208.171061][ T5955] kasan_check_range+0x100/0x1b0 [ 208.173425][ T5955] le_read_features_complete+0x5b/0x390 [ 208.175991][ T5955] hci_cmd_sync_work+0x1ff/0x470 [ 208.178158][ T5955] ? __pfx_le_read_features_complete+0x10/0x10 [ 208.180927][ T5955] process_one_work+0x9ba/0x1b20 [ 208.183301][ T5955] ? __pfx_process_one_work+0x10/0x10 [ 208.185666][ T5955] ? assign_work+0x1a0/0x250 [ 208.187724][ T5955] worker_thread+0x6c8/0xf10 [ 208.189843][ T5955] ? __pfx_worker_thread+0x10/0x10 [ 208.192033][ T5955] kthread+0x3c5/0x780 [ 208.193882][ T5955] ? __pfx_kthread+0x10/0x10 [ 208.195922][ T5955] ? rcu_is_watching+0x12/0xc0 [ 208.198039][ T5955] ? __pfx_kthread+0x10/0x10 [ 208.200259][ T5955] ret_from_fork+0x983/0xb10 [ 208.202698][ T5955] ? __pfx_ret_from_fork+0x10/0x10 [ 208.205149][ T5955] ? __switch_to+0x7af/0x10d0 [ 208.207345][ T5955] ? __pfx_kthread+0x10/0x10 [ 208.209599][ T5955] ret_from_fork_asm+0x1a/0x30 [ 208.211792][ T5955] [ 208.214139][ T5955] Kernel Offset: disabled [ 208.216066][ T5955] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:15:42 Registers: info registers vcpu 0 CPU#0 RAX=000000000065a2f7 RBX=0000000000000000 RCX=ffffffff8b7596d9 RDX=0000000000000000 RSI=ffffffff8dacaa85 RDI=ffffffff8bf2b500 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088ebd0 R15=0000000000000000 RIP=ffffffff8b757dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c9154 CR3=0000000058180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc9000c2afb80 RCX=ffffffff84a9546a RDX=ffff8880425624c0 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000c2af9a0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffff888042562ff0 R12=0000000000000000 R13=ffffc9000c2afb80 R14=0000000000000001 R15=ffffc9000c2afb88 RIP=ffffffff81be6402 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73c8f64 CR3=0000000050cce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b542ea0 RCX=ffffffff81b213d1 RDX=ffff8880219f24c0 RSI=ffffffff81b213ab RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000493f808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff8880219f2ff0 R12=dffffc0000000000 R13=ffffed10056a85d5 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b213ad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f509f117 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000003 DR1=00000000000001f8 DR2=000000000000008a DR3=000000000000057a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85302df5 RDI=ffffffff9aed92a0 RBP=ffffffff9aed9260 RSP=ffffc9000442f588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6333373038387257 R12=0000000000000000 R13=000000000000002f R14=ffffffff9aed9260 R15=ffffffff85302d90 RIP=ffffffff85302e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73307d8 CR3=0000000050cce000 CR4=00352ef0 DR0=0000000000000003 DR1=00000000000001f8 DR2=000000000000008a DR3=000000000000057a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000